Privacy Policy

We are staunchly committed to protecting and meticulously safeguarding your privacy and personal data through advanced protection protocols and comprehensive security measures across our entire platform.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for maintaining comprehensive oversight of how your personal information is collected, used, and protected throughout our systems.

We may process usage data (“usage data”), which comprehensively includes browser type and version, operating system details, page view timestamps, interaction patterns, feature utilization metrics, and session duration records. This information is collected through automated tracking systems, server logs, and user interaction monitoring and may include time spent on specific pages, navigation patterns, and feature preferences. The source of this data is our analytics tracking system and server monitoring tools. We process this information for several important purposes, including website optimization, user experience improvement, system performance monitoring, and security enhancement, which enables us to deliver better services, enhance platform functionality, and protect our users. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.

We may process account data (“account data”), which comprehensively includes name, email address, telephone number, postal address, and account security credentials. This information is collected through registration forms, account creation processes, and user profile updates and may include login timestamps, account preferences, and communication settings. The source of this data is direct user input during account creation and subsequent updates. We process this information for account management, service provision, security verification, and communication purposes, which enables us to maintain secure user accounts, deliver personalized services, and facilitate effective communication. The legal basis for this processing is the performance of a contract between you and us and proper administration of our website and business.

We may process profile data (“profile data”), which comprehensively includes professional interests, organizational affiliations, expertise areas, biographical information, and profile preferences. This information is collected through profile completion forms, user submissions, and preference settings and may include professional background, areas of interest, and collaboration preferences. The source of this data is user-provided information and profile updates. We process this information for community engagement, networking facilitation, content personalization, and service optimization, which enables us to deliver relevant content, facilitate meaningful connections, and enhance user experience. The legal basis for this processing is our legitimate interests in providing and improving our services.

User Rights:

You have the right to access your personal data, which means you can obtain confirmation about whether we process your personal data and receive a copy of that data in a structured format. This includes the ability to view all personal information we hold about you, understand how we use this information, and verify the lawfulness of processing. To exercise this right, you can submit a formal data access request through our dedicated privacy portal or contact our data protection officer directly. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.

You have the right to rectification, which means you can request the correction of inaccurate personal data or complete any incomplete personal data we hold about you. This includes the ability to update account information, correct profile details, and modify contact information. To exercise this right, you can use our account settings interface or submit a formal correction request through our support system. We will process your request within 15 days and may require account verification, supporting documentation, and specific correction details to process your request.

[Continued in next part due to length…]Data Processing and Security Measures

In our commitment to protecting your privacy, we carefully process various types of personal data while maintaining strict security standards:

Service Data
We process service data which includes account credentials, profile information, and platform preferences. This processing involves secure storage, encryption, and controlled access protocols, enabling us to provide personalized services and account management. For example, in the context of Business, this includes customized dashboard configurations and project collaboration settings. The legal basis for this processing is legitimate interest and contractual necessity, specifically to fulfill our service obligations and enhance user experience.

Technical Data
We process technical data which includes device information, IP addresses, browser types, and system logs. This processing involves automated collection, analysis, and storage, enabling us to optimize platform performance and ensure security. For example, in the context of Business, this includes monitoring system access patterns and detecting unusual activities. The legal basis for this processing is legitimate interest, specifically maintaining platform security and functionality.

Communication Data
We process communication data which includes email correspondence, support tickets, and platform notifications. This processing involves secure message handling, automated routing, and archival procedures, enabling us to provide effective support and maintain communication records. For example, in the context of Business, this includes tracking customer inquiries and maintaining service level agreements. The legal basis for this processing is contractual necessity and legitimate interest.

Transaction Data
We process transaction data which includes payment information, subscription details, and service usage records. This processing involves secure payment processing, transaction verification, and audit logging, enabling us to manage subscriptions and maintain financial records. For example, in the context of Business, this includes processing recurring payments and generating usage reports. The legal basis for this processing is contractual necessity and legal obligation.

Preference Data
We process preference data which includes user settings, notification preferences, and content customization choices. This processing involves preference storage, synchronization, and application, enabling us to deliver personalized experiences. For example, in the context of Business, this includes customized report formats and communication preferences. The legal basis for this processing is legitimate interest and user consent.

Security Implementation

Our security measures include:

Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.

We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.

Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.

Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.

We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.

All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.

International Data Transfers

We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Privacy Shield certification, and Binding Corporate Rules. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies

International transfers are protected by GDPR standards, ISO 27001 certification, and regional data protection regulations, ensuring compliance with international privacy laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures

Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

Account Information: Retained for the duration of active account plus 24 months for account recovery and security purposes
Usage Data: Stored for 12 months to support service optimization and trend analysis
Transaction Records: Maintained for 7 years to comply with financial regulations
Communication History: Kept for 36 months to ensure continuity of service and support
Technical Logs: Preserved for 6 months for security and performance analysis

These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences

Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for AFSLR.org

Essential cookies serve fundamental functions for core website operations. They process authentication tokens, security parameters, and session data to enable basic site functionality. In our Business context, these cookies maintain secure login states for users accessing educational resources and sustainability tools. Essential cookies specifically support user authentication, security measures, basic site operations, session management, and technical stability.

Functional cookies enhance your experience by remembering your preferences and customizations. They process user-selected settings and interface choices to enable personalized site interaction. For example, these cookies remember language preferences, display region-specific sustainability content, customize user interface elements, optimize feature delivery, and maintain personalized settings across sessions.

Analytics cookies help us understand how users interact with our educational and sustainability resources. They collect anonymized information about page interactions, navigation patterns, feature usage, session duration, and user preferences. This data helps us improve our content delivery and educational programming while maintaining user privacy.

Performance cookies assess and optimize website operation by monitoring technical metrics. They track site speed, identify potential technical issues, optimize content delivery systems, analyze user experience factors, and monitor overall system performance to ensure smooth access to our sustainability and learning resources.

Cookie Management

You can control your cookie preferences through browser settings, our cookie consent tool, privacy preferences center, and account settings. We respect user choice in cookie deployment and provide clear options for managing consent.

GDPR Compliance

For EU residents, we maintain strict data protection measures including explicit consent mechanisms, data minimization practices, purpose limitation protocols, defined storage limitations, and complete processing transparency.

CCPA Compliance

California residents are entitled to know about personal information collected, request data deletion, opt-out of data sales, receive non-discriminatory service, and access collected information. We honor these rights through our dedicated privacy management system.

COPPA Compliance

For users under 13, we implement strict age verification requirements, require parental consent, limit data collection, maintain special protection measures, and provide parental access rights to ensure child privacy protection.

Updates and Changes

Our policy maintenance includes regular review procedures, user notifications of significant changes, consent renewal requirements, clear documentation of updates, and continuous compliance monitoring to maintain current privacy standards.

Contact Information

For privacy-related inquiries:
Primary Contact: [email protected]
Response Time: Within 48 hours
Verification Required: For data-related requests
Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for afslr.org and covers all associated services within the Business industry.