It is RH-ISAC’s policy to respect your privacy regarding any information we may collect while operating our website. This Privacy Policy applies to https://rhisac.org (hereinafter, “us”, “we”, or “rhisac.org”). We respect your privacy and are committed to protecting personally identifiable information you may provide us through the website. We have adopted this privacy policy (“Privacy Policy”) to explain what information may be collected on our website, how we use this information, and under what circumstances we may disclose the information to third parties. This policy applies only to information we collect through the website and does not apply to our collection of information from other sources

This privacy policy, together with the terms and conditions posted on our website, set forth the general rules and policies governing your use of our website. Depending on your activities when visiting our website, you may be required to agree to additional terms and conditions.

Contact us

If you have any questions about this privacy policy, please contact membership@rhisac.org.

RH-ISAC is located at:
2200 Pennsylvania Ave NW,
Suite 400 East,
Washington, DC 20037

Website visitors

Like most website operators, RH-ISAC collects non-personally identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. RH-ISAC’s purpose in collecting non-personally identifying information is to better understand how RH-ISAC’s visitors use its website. From time to time, RH-ISAC may release non-personally identifying information in the aggregate, e.g., by publishing an internal report on trends in the usage of its website.

RH-ISAC also collects potentially personally identifying information like internet protocol (IP) addresses for logged in users and for users leaving comments on https://rhisac.org blog posts. RH-ISAC only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally identifying information as described below.

Gathering of personally identifying information

Certain visitors to RH-ISAC’s websites choose to interact with RH-ISAC in ways that require RH-ISAC to gather personally identifying information. The amount and type of information that RH-ISAC gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://rhisac.org/blog to provide an email address.

Security

Certain visitors to RH-ISAC’s websites choose to interact with RH-ISAC in ways that require RH-ISAC to gather personally identifying information. The amount and type of information that RH-ISAC gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://rhisac.org/blog to provide an email address.

Advertisements

Ads appearing on our website may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This privacy policy covers the use of cookies by RH-ISAC and does not cover the use of cookies by any advertisers.

Links to external sites

Our service may contain links to external sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy and terms and conditions of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites, products or services.

rhisac.org uses Google AdWords for remarketing and Google Analytics

rhisac.org uses the remarketing services to advertise on third party websites (including Google) to previous visitors to our site. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits. Of course, any data collected will be used in accordance with our own privacy policy and Google’s privacy policy.

You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt-out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.

rhisac.org uses Google Analytics. To learn more about how Google Analytics works and how it collects and processes data, you can access: https://policies.google.com/technologies/partner-sites.

Protection of certain personally identifying Information

RH-ISAC discloses potentially personally identifying and personally identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on RH-ISAC’s behalf or to provide services available at RH-ISAC’s website, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using RH-ISAC’s website, you consent to the transfer of such information to them. RH-ISAC will not rent or sell potentially personally identifying and personally identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, RH-ISAC discloses potentially personally-identifying and personally identifying information only in response to a subpoena, court order or other governmental request, or when RH-ISAC believes in good faith that disclosure is reasonably necessary to protect the property or rights of RH-ISAC, third parties or the public at large.

If you are a registered user of https://rhisac.org and have supplied your email address, RH-ISAC may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with RH-ISAC and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. RH-ISAC takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally identifying and personally identifying information.

Third-parties and other information collectors

Except as otherwise expressly included in this privacy policy, this document only addresses the use and disclosure of information we collect from you or you provide to us in the course of using the RH-ISAC platform. To the extent that you disclose your information to other parties through our website, different rules may apply to their use, collection and disclosure of the personal information you disclose to them. Since we do not control the information use, collection, or disclosure policies of third-parties, you are subject to their privacy policies.

Our website may include links to third-party websites. Once you have used these links to leave our website, you should note that we do not have any control over third-party websites. We are not responsible for the content of such websites or the protection and privacy of any information which you provide while visiting such sites. Third-party websites are not governed by this privacy policy. You should exercise caution and look at the privacy policies applicable to the websites in question.

California residents: your California privacy rights

If you are a California resident, you may have the right to request and receive certain information about our disclosure of your personal information to third parties for their direct marketing purposes, and your choices with respect to such disclosures. Because it is our policy not to share your personal information with unaffiliated third parties for their own direct marketing purposes, we are exempt from having to meet this requirement

Users outside of the United States

The services are hosted in the United States and are governed by the laws of the United States. If you are using the services outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where RH-ISAC’s servers and databases are located. By using the sites, you consent to the transfer of information to countries outside your country of residence.

Transfer of personal information to countries outside the EEA (EEA individuals only)

RH-ISAC is established in Washington, DC, USA. If you are located in the European Economic Area (EEA), your personal data is therefore processed outside the EEA.

Some of the third-parties identified above may also be located outside the EU/EEA, in which case we will take all necessary steps required under applicable law in order for such transfer of information across borders to be compliant with applicable law. In cases where there is no adequacy decision by the Commission, this may for example include the use of EU model clauses (under Article 46.2 of the GDPR) or ensuring that the recipient is certified under the US-EU Privacy Shield Framework (under Article 45 of the GDPR). You may receive a copy of the relevant safeguards by contacting RH-ISAC using the contact details set forth above in this privacy policy.

Aggregated statistics

RH-ISAC may collect statistics about the behavior of visitors to its website. RH-ISAC may display this information publicly or provide it to others. However, RH-ISAC does not disclose your personally identifying information.

Affiliate disclosure

This site uses affiliate links and does earn a commission from certain links. This does not affect your purchases or the price you may pay.

Cookies

To enrich and perfect your online experience, RH-ISAC uses “cookies”, similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. RH-ISAC uses cookies to help RH-ISAC identify and track visitors, their usage of https://rhisac.org, and their website access preferences. RH-ISAC visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using RH-ISAC’s websites, with the drawback that certain features of RH-ISAC’s websites may not function properly without the aid of cookies.

By continuing to navigate our website without changing your cookie settings, you hereby acknowledge and agree to RH-ISAC’s use of cookies.

No rights of third parties

This privacy policy does not create rights enforceable by third parties or require disclosure of any personal information relating to users of the website.

Privacy policy changes

Although most changes are likely to be minor, RH-ISAC may change its privacy policy from time to time, and in RH-ISAC’s sole discretion. RH-ISAC encourages visitors to frequently check this page for any changes to its privacy policy. Your continued use of this site after any change in this privacy policy will constitute your acceptance of such change.

RH-ISAC is located at:

2200 Pennsylvania Ave NW
Suite 400 East
Washington, DC 20037

(202) 507-5710