ARRT PRIVACY POLICY
Last modified August, 2024
The Service
is operated by The American Registry of Radiologic Technologists (“ARRT”), 1255 Northland Drive, St. Paul,
MN 55120-1155 (“We,” “Us,” or “ARRT”). This Privacy Policy
(“Privacy Policy”) describes how we
collect, process, and share Personal Information, your rights, your choices,
and other important information about how we handle your Personal Information.
This Privacy Policy applies to your use of our website, online services, and
in-person services (collectively, our “Service”).
ATTENTION: PLEASE READ OUR PRIVACY POLICY CAREFULLY BEFORE
USING THE SERVICE. ACCESSING,
DOWNLOADING CONTENT FROM, OR USING THE SERVICE INDICATES THAT YOU ACCEPT AND Acknowledge THIS PRIVACY POLICY IN FULL. IF YOU DO NOT ACCEPT
THIS PRIVACY POLICY, DO NOT ACCESS OR USE THE SERVICE. You
acknowledge that You have read and understood this Privacy Policy.
Unless explicitly stated
otherwise, any new features that augment or enhance the current Service shall
be subject to this Privacy Policy.
Please
review the Privacy Policy each time You use the Service. BY USING THE SERVICES, YOU AGREE TO BE BOUND
BY THE MOST RECENT VERSION OF THE PRIVACY POLICY. If We materially change this Privacy Policy, We will update this page to reflect any changes to this
Privacy Policy.
The following describes the
information We collect relating to identified or identifiable individuals (“Personal Information”). We collect Personal
Information from You when You create a profile, use the Service, contact or
interact with Us, fill out a form, and voluntarily provide Us with Your
comments and other content in connection with using the Service. After You register for the Service, We collect data from You and from third-party institutions
regarding Your qualifications, education, and professional records.
When
You create a profile, We may collect Your name, gender, birthdate, social security
number, telephone number, email address, mailing address (from which We may
calculate Your congressional district), fax number, role (such as board member,
program director, staff member, etc.), Your state license information,
educational background (including education level), professional records and
other employment information, other professional qualifications, user ID,
password, account login security questions, information that allows Us to
determine through FEMA whether You have been affected by a disaster, such as a
hurricane or a fire, that impacts Your ability to complete Your continuing
education credits, and information related to Your other non-ARRT credentials.
When
You contact Us, We may collect Your name, email address, and any other
information that You provide to Us voluntarily.
When
You submit an ethics violation report, We
collect any information that You provide to Us voluntarily.
When
You apply for certification and registration,
We may collect Your facial photograph, , copies of and information from
diplomas, licenses, and other certificates, information about Your clinical
education and practice experience, Your didactic education, academic degree and
institution, potential violations of ARRT’s Rules of Ethics, payment
information, renewal information, reinstatement information, information about
Your credentials from other organizations (including the exam dates for those credentials,
the status of Your credentials from other organizations (including dropped credentials
and their dates), and credential valid dates), and information related to Your
continuing education credit information,
and discontinued credentials ).
When You submit an eligibility appeal request form, We
collect any Personal Information that You provide to Us voluntarily.
When
You make a payment through the Service, We may
collect Your name, address, credit card type, payment
submission date, payment settlement date, payment amount, payment response type
and code, payment status, transaction purpose (including renewal,
reinstatement, and probation), and other Personal Information sufficient for
our payment processors to process the transaction and provide fraud screening,
information security, and compliance.
When
you interact with ARRT through social media, We may collect your facial photograph, voice recording, and
any other information you provide.
When
you leave a voice message for ARRT or provide a written message through the
Message Center, We may collect your voice recording and
any information you provide in the message.
When
you participate in a video or audio meeting, We may collect your voice recording, facial image, and any
information you provide.
When You access and use the Service, We may collect certain Personal Information automatically. For example,
we collect Personal Information relating to your device, browser, or
application e.g. device identifiers, IP address, Your user
name, roles/permissions for the Service, the domain name of Your Internet
service provider, Your location, the Service features You use and the time of Your
use, Your mobile device information (e.g., device model and operating system
version) identifiers
from cookies, session history, Service navigation metadata, and other data
generated through applications and browsers, including via cookies, pixels, and
similar technologies when you use our Service, access our Service, or when you
open our communications. Additional information collected is described in the Analytics and Cookies and Other Tracking Technologies sections below.
We may collect Personal Information about You, such as educational
background information, professional records, disciplinary records, facial
image, voice recording, and other information related to Your professional
credentials, from third-party sources, such as program directors, clinical
experience verifiers, state licensing boards, other professional membership
associations and societies, exam service providers, disability accommodation
providers, and continuing education providers.
We may combine all of the information We collect from or about You and use
it in the manner described in this Privacy Policy.
We
may use the Personal Information that
We collect for several purposes, including:
·
To compile
and maintain a database of professional and educational credentials and the
professional record of those who obtain certification and registration with Us or
seek to obtain or maintain our certification and registration, and to make available
the data to the public and to various third parties, such as employers, other
education organizations, continuing education providers, and state and
regulatory authorities, consumers, and patients as a verification service;
·
The purposes
for which You provided it;
·
To provide information
and services to You;
·
To process
and respond to Your inquiries and comments;
·
To send You
information about Your relationship or transactions with Us;
·
To facilitate payment transactions (Your
information will be used to submit Your payment information to our payment
processor);
·
To administer,
operate, and improve the Service or develop new services;
·
To
personalize and enhance Your experience using the Service;
·
To send
periodic emails. If You choose the email
address You provide may be used to send You occasional news, reminders, updates,
etc. Note: If You would like to update Your email
preferences, or unsubscribe from receiving future emails at any time, We include detailed instructions at the bottom of each
email;
·
To generate
and review reports and data about our user base and Service usage patterns;
·
To analyze
the accuracy, effectiveness, usability, or popularity of the Service;
·
To compile
aggregate data for internal and external business purposes;
·
To prevent
fraud and abuse of the Service and to otherwise protect users and visitors and
our organization;
·
To assist law enforcement and respond to
subpoenas; and
·
To perform other business activities as needed,
or as described elsewhere in this Privacy Policy.
·
As explained
elsewhere in this Privacy Policy, Personal Information We collect may be processed by
our partners in providing services related to the Service (such as
administration services, technical services relating to the maintenance,
servicing, and upgrading of the products, software services, hosting services, customer
service, data migration services, and analytical services, among others).
Please note that You may choose not to allow Us to use Your Personal
Information for certain purposes as described in the Your Choices Regarding Your Personal Information section
below.
Your Personal Information may be disclosed to third parties in accordance with this Privacy
Policy. Please note that a user may
choose not to share certain information as described in Your Choices Regarding Your Personal Information below.
We may use third-party service
providers and business partners to perform functions in connection with the Service
and our other services, such as delivering announcements by email and renewal
reminders by email and mail, developing, registering for, and delivering exams payment
processing, certificate printing, providing self-assessments, providing other
activities to assist Registered Technologists in maintaining their
certification and registration, website searching, analyzing and improving the Service
usefulness, reliability, user experience, and operation, storing data, securing
data, hosting data, migrating data, advertising, social sharing, providing
users with services, and providing other services as described in this Privacy
Policy. We may share Your Personal
Information with these providers and partners
for their marketing and promotional purposes and so they can provide services
to You (where legally required, We will obtain Your
express consent).
·
Verisys.
We use Verisys for credential processing
services. Verisys may collect your name, birthdate,
ARRT-ID, credentials, CE biennium start and end dates, zip code, registration
information, and sanction and discipline information. For more information, please visit the Verisys
privacy policy at: https://verisys.com/privacy-policy/.
·
Brevo.
We use Brevo to send emails. Brevo
may collect Your name, email address, telephone number, address, device
information (including Your IP
address, operating system, browser ID, email client type, and other information
about Your system and connection), and usage data (including the dates and
times when You access emails and Your browsing activities, such as information
related to the pages You view and the emails You open), including through the
use of cookies and tracking technologies. For more information, please
visit the Brevo’s privacy policy at: https://www.brevo.com/legal/privacypolicy/.
·
CE
Broker. We have an agreement with CE Broker to access our credential
verification services. CE Broker may collect your ARRT-ID, first name, last
name, credentials, CE biennium start and end dates, zip code, registration
information, and sanction and discipline information. For more information, please visit the CE
Broker privacy policy at: https://secure.cebroker.com/public/pb_privacy_dtl.aspx.
·
CyberSource.
We use CyberSource for payment processing services. CyberSource
may collect your first name, last name, email address, phone number, mailing
address, order and payment information, IP address and information about the
device used to access the Service, how and which Service are used, information
provided though means such as social media or when you contact us through our
website, and enrollment numbers or demographic group information (which does
not identify individual users). For
more information, please visit the CyberSource privacy policy at: https://www.cybersource.com/privacy/.
·
Facebook. By clicking on the Facebook button on the Service,
You will be automatically transported to the official
Facebook Page for ARRT, https://www.facebook.com/americanregistryofradiologictechnologists/.
By Your posting to ARRT's Facebook page, ARRT may be able to collect Personal
Information about You related to Your Facebook account. For more details on the information that
Facebook collects or makes available, please visit Facebook's privacy policy: https://www.facebook.com/privacy/explanation.
·
Galaxy Digital. We use Galaxy Digital to accept and process
volunteer applications, and to store information about volunteers. Your name,
address, email address, qualifications, and related information may be shared
with Galaxy Digital if you volunteer with us. For more
details on the information that Galaxy Digital collects or makes available,
please visit Galaxy Digital's privacy policy: https://www.galaxydigital.com/privacy-policy/.
·
Google.
We use various Google products and
services to support ARRT, including:
o
Tag Manager. We use Google Tag Manager and Dynamic Remarketing to deploy
marketing tags and cookies. Google Tag Manager or Dynamic Remarketing may
collect information related to tag firing, information contained in standard
HTTP requests logs, and information related to online identifiers, such as
cookie identifiers and IP addresses. For more information, please visit Google’s privacy policy at: https://policies.google.com/privacy?hl=en-US.
o
APIs and Static. We may use Google APIs and Static to deliver
our website to You by deploying CDN headers and cookies. For more information,
please visit Google’s
privacy policy at: https://policies.google.com/privacy?hl=en-US.
o
Analytics. We use Google Analytics to analyze user activity on our Service
for remarketing and behavioral targeting. Google and other third parties may
use cookies, pixels, web beacons, and other storage technologies to collect
information from the Service and from other Internet websites,
and use that information for the purposes of targeting ads and providing
measurement services. Google may track Your activity over time and across
websites. Please see https://policies.google.com/technologies/partner-sites for information about how Google Analytics
uses this information, visit https://tools.google.com/dlpage/gaoptout for information about the Google Analytics
Opt-out Browser Add-on, and visit https://adssettings.google.com/anonymous?sig=ACi0TCj7uhv-tCCmTm2kssW4dWQRcnJdkvmymHHbR2Qy-pcpshjSyIBT5jgSJywNcxSfMtcLzbQOc-41X6bcydJyKP50OjD6Q1Sj1ix9DYoh62lw86Rj-RY&hl=en to
adjust the settings for Your Google account. Google may track Your activity
over time and across websites.
·
Instagram.
We use Instagram for marketing purposes. By clicking on the
Instagram button on the Service, You will be automatically transported to the
official Instagram Page for ARRT, https://www.instagram.com/theofficialarrt/,
and your Personal Information may be shared with Instagram.
·
LinkedIn.
We use LinkedIn for marketing purposes. By clicking on the LinkedIn button on
the Service, You will be automatically transported to the official Instagram
Page for ARRT, https://www.linkedin.com/company/american-registry-of-radiologic-technologists,
and your Personal Information may be shared with LinkedIn.
·
Paradigm
Testing. We use Paradigm Testing
to assist in evaluating requests for test accommodations in accordance with the
Americans with Disabilities Act (ADA).
If You require accommodations, You
will start by answering yes to the question about ADA accommodations on your
application for ARRT certification and registration. After we receive your ARRT
application, we’ll provide instructions on your payment confirmation page about
how to apply for accommodations. If you applied via a paper application, those
instructions will be mailed to you. When You then request ADA accommodations from
Paradigm, You will provide Personal Information, including Your contact
information, medical information related to the nature of Your mental or
physical impairment, and the ways in which it limits Your major life
activities, information related to the ways in which Your mental or physical
impairment impacts Your ability to examine
under standard conditions, information related to any treatments,
medications, devices, or auxiliary aids You commonly use, or plan to use, while
taking Your exam, information related to Your history with classroom,
workplace, and testing accommodations, and an explanation for the necessity of
the accommodations You are requesting, and their appropriateness relative to
Your impairment, to Paradigm Testing, which will make the recommendation as to
what, if any, special accommodations You should receive. After Paradigm Testing makes a
recommendation, it will transmit Your access code and the recommendation to
ARRT, which will make the final decision regarding which accommodations are
appropriate. All information that You
provide to Paradigm Testing is subject to its privacy policy, available at: https://paradigmtesting.com/privacy-policy/.
·
Paylocity.
We use Paylocity to host, process, and accept job applications. When you apply
for a job, you may
provide Paylocity with your Personal Information, including Your name, address,
email address, employment history, and related information. For more
information about Paylocity’s collection practices and privacy policies, please
visit: https://www.paylocity.com/who-we-are/protecting-our-clients/privacy-center/.
·
Pearson
VUE. We use Pearson VUE to
conduct our examinations. We may provide
Pearson VUE with Your Personal Information, including Your name, address, email
address, and other state licensure information, to facilitate
examinations. Pearson VUE may collect
other information from You, including Your driver's license information, credit
card information, date of birth, social security number, employment data,
education data, and biometric data, including Your photograph and palm vein
topography, to verify Your identity. For
more information on Pearson VUE's collection practices and privacy policies,
please visit: https://home.pearsonvue.com/privacy.
·
PrimaData. We use PrimaData to
deliver US mail notifications to individuals regarding Their certification and
registration. We may provide PrimaData with Your full name, ARRT-ID number, ARRT credential
string, and postal mailing address.
·
YouTube. We host videos on YouTube that are embedded
in the Service. These are hosted on our
account, viewable at: https://www.youtube.com/user/TheARRT. When You view the videos on the Service,
YouTube may collect Your information, including Your username, other account
information, and interactions with its site.
For more information, please visit the YouTube privacy policy at: https://policies.google.com/privacy?hl=en&gl=us.
·
X.
(formerly Twitter) We use X for marketing purposes. By clicking on the X button
on the Service, You will be automatically transported
to the official X Page for ARRT, https://twitter.com/TheOfficialARRT,
and your Personal Information may be shared with X.
Because
We are a healthcare profession credential provider, We
may disclose Your Personal Information and certification and registration status
in connection with our credentialing and verification services. For example, We may
disclose Your Personal Information to the program where You completed Your education,
and We may share Your Personal Information with other continuing education
providers, healthcare systems, healthcare services organizations, specialty professional
societies (and their respective state affiliates), boards, associations, CE
Approvers, CE sponsors, researchers, marketing agencies, and management
consulting organizations. We may share Your Personal Information for their
marketing and promotional purposes (where legally required, We
will obtain Your express consent), for listing in their publications, and so
they can provide services. In addition, the public may search for Your
certification and registration status on the Service.
We
may disclose examination, credentialing information, maintenance of
certification participation, and certification and registration status to investigators,
state medical boards, or to the public. We release individual examination
scores and credential status to state agencies.
A state agency may request Your information by entering Your Personal
Information into our state entity website.
If We have a record on You, We will release a
status report back to the registered state agency. We will disclose all relevant information in
our possession for which We do not have claim of legal privilege in response to
a lawful subpoena, court order, or an authorized request by a government or
regulatory entity.
If
We become involved in a merger, acquisition, sale of assets, joint venture,
securities offering, bankruptcy, reorganization, liquidation, dissolution, or
other transaction, or if the ownership of all, or substantially all, of our organization
otherwise changes, We may transfer Your Personal
Information to a third party or parties in
connection therewith.
We
may also share Your Personal Information with
our affiliates for purposes consistent with this Privacy Policy. Our affiliates will be required to maintain
that Personal Information in
accordance with this Privacy Policy.
We
may also share Your Personal Information with
researchers from time to time for upcoming research studies that are looking
for participants. We may share Your
email address with the research organization, or
provide You with information about the study and ask if You would like to
participate.
We may disclose your Personal Information to third parties if We believe that such disclosure is necessary
to:
·
Comply with the law or guidance and cooperate with government or
law enforcement officials or private parties;
·
Investigate, prevent, or take action regarding suspected illegal
activities, suspected fraud, the rights, reputation, safety, and property of
us, users or others, or violations of our policies or other agreements with Us;
·
Respond to claims and legal process (for example, subpoenas);
and/or
·
Protect against legal liability.
We use Personal Information in connection with our use of cookies,
pixels, and similar technologies on our Service. We and authorized third
parties may collect this data automatically.
We and authorized third parties may use cookies and similar
technologies for the following purposes:
·
for
“essential” purposes necessary for our Service to operate (such as maintaining
user sessions, content delivery, and the like);
·
for
“functional” purposes, such as to enable certain features of our Service (for
example, to allow a customer to maintain a logged-in session);
·
for
“analytics” purposes and to improve our Service, such as to analyze the traffic
to and on our Service (for example, we can count how many people have looked at
a specific page, or see how visitors move around the Service when they use it,
to distinguish unique visits/visitors to our Service, and what website they
visited prior to visiting our Service, and use this information to understand
user behaviors and improve the design and functionality of the Service); and
We implement a variety of security measures to protect the safety
of Your Personal Information when You enter, submit, or access Your Personal
Information.
While We take reasonable measures to protect your Personal Information
against loss, theft, and unauthorized use, disclosure, or modification, We cannot guarantee its absolute security. No Internet, email,
or mobile application transmission is ever fully secure or error free. Email or other messages sent through the Service
may not be secure. You should use caution whenever submitting Personal
Information through the Service and take special care in deciding what Personal
Information You provide us.
We cannot guarantee that transmissions of Your Personal Information
will be fully secure and that third parties will never be able to defeat our
security measures or the security measures of our partners. WE ASSUME NO LIABILITY FOR DISCLOSURE OF YOUR
INFORMATION DUE TO TRANSMISSION ERRORS, THIRD-PARTY ACCESS, OR CAUSES BEYOND
OUR CONTROL.
Any Personal
Information collected through the Service
is stored and processed in the United States. If You use our Service outside of
the United States, You consent to have Your Personal
Information transferred to the United
States.
We will
retain Your information for as long as You use the Service and for a reasonable
time thereafter. We may maintain
anonymized or aggregated data, including usage data, for analytics
purposes. We may retain and use Your
information as necessary to comply with our legal obligations, resolve
disputes, enforce our agreements, and/or for the period required by laws in
applicable jurisdictions. Please note
that some or all of the information We have collected
may be required for transactions on the Service to function properly.
The Service may contain links to other websites or apps or may
forward users to other websites or apps that We may not own or operate and to
which this Privacy Policy does not apply. The links from the Service do not
imply that We endorse or have reviewed these websites or apps. The policies and
procedures We describe here do not apply to these websites or apps. We neither
can control nor are responsible for the privacy practices or content of these websites
or apps. We suggest contacting these websites or app providers directly for
information on their privacy policies.
Nonetheless, We seek to protect the integrity
of our Service, and welcome any feedback about these linked websites and mobile
applications.
In some jurisdictions, ARRT, and
certain third parties operating on or through the Service, may engage in
advertising targeted to your interests based on Personal Information that We or
those third parties obtain or infer from your activities across non-affiliated
websites, applications, or services to predict your preferences or interests (“Targeted Advertising”). This form of
advertising includes various third parties and service providers engaged in the
processing of Personal Information in connection with advertising. These
parties may be able to identify you across sites, devices, and over time.
The parties that control the
processing of Personal Information for Targeted Advertising purposes may create
or leverage information derived from automatic collection, third party collection, or collection from you. In some cases, these parties may also
develop and assess aspects of your activity on the Service to determine whether
you are a type of person to whom a company wants to advertise,
and determine whether and how ads you see are effective. These third
parties may augment your profile with demographic and other Personal
Information, and may track whether you view, interact with, or how often you
have seen an ad, and whether you purchased advertised goods or services or took
an action.
We generally use Targeted
Advertising for the purpose of marketing our Service and third-party goods and
services, and to send marketing communications.
You have choices regarding our collection, processing, and sharing
of your Personal Information.
·
Changing Your
Information – You may request to review, update, or have deleted
any Personal Information collected from You through the Service. Please contact Us by emailing us
at PrivacyRights@arrt.org
or sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland
Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy” asking to review or
update Your Personal Information, or to have Us delete Your Personal
Information along with information which is sufficient, in the ARRT’s sole and
absolute discretion, to verify that the Personal Information that you are requesting to change is associated with you. However, We reserve
the right to retain Personal Information as necessary for our business purposes
and to comply with federal and state laws.
·
Withdrawing
Consent - If You are an individual residing in the EU,
and You provided Your consent for any particular processing of Your Personal
Information, You have the right to withdraw Your
consent to our processing of Your Personal Information any time by requesting that Your Personal
Information be deleted. See further information under the section EU Privacy Rights below. This deletion is permanent, and Your Personal
Information cannot be reinstated
and you agree that you are no longer authorized to use ARRT’s intellectual
property such as its certification mark and other designations. To proceed with this request, Please contact Us by emailing at PrivacyRights@arrt.org
or sending a letter through the
U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155
ATTN: Privacy Policy”.
- You may opt out or withdraw your consent to Targeted Advertising
by Contacting Us. In some cases, you may be able to opt-out by submitting requests
to third party partners, including for the vendors listed below:
·
Digital
Advertising Alliance’s opt-out
·
Network
Advertising Initiative opt-out
Please note that to the extent advertising technology is
integrated into the Service, You may still receive
advertisements even if You opt out of tailored advertising. In that case, the ads will just not be
tailored to Your interests. Also, We do not control any of the opt-out links above, and are
not responsible for any choices You make using these mechanisms or the
continued availability or accuracy of these mechanisms.
If you submit a request, we
typically must verify your identity to ensure that you have the right to make
that request, reduce fraud, and to ensure the security of Personal Information.
If an agent is submitting the request on your behalf, we reserve the right to
validate the agent’s authority to act on your behalf.
We may require that you match
Personal Information we have on file in order to
adequately verify your identity. If you have an account, we may require that
you log into the account to submit the request as part of the verification
process. We may not grant access to certain Personal Information to you if
prohibited by law.
Your browser
or device may offer You a “Do Not Track” option, which allows You to signal to
operators of websites, web applications, mobile applications, and services
(including behavioral advertising services) that You do not wish such operators
to track certain of Your online activities over time and/or across different
websites or applications. Our Service does not support Do Not Track requests at
this time, which means that We, or our analytics providers or other third
parties with which We are working, may collect Personal Information about Your
online activity both during and after Your use of the Service.
Our
Service is not intended for children under 16 years of age. We do not knowingly collect Personal
Information from an individual under age 16.
If You are under the age of 16, please do not submit any Personal
Information through the Service. If You
have reason to believe that We may have accidentally received Personal
Information from an individual under age 16, Please contact Us by emailing us
at PrivacyRights@arrt.org
or sending a letter through the
U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155
ATTN: Privacy Policy”.
We reserve the right to update or modify this Privacy Policy at
any time and from time to time without prior notice. Please review this Privacy Policy
periodically, and especially before You provide any Personal Information.
This Privacy Policy was made effective on the date indicated above.
For
any enquiries or complaints relating to the use of Your Personal Information or
this Privacy Policy, please feel free to contact Us by emailing us at PrivacyRights@arrt.org
or sending a letter through the
U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155
ATTN: Privacy Policy.”
Section
1798.83 of the California Civil Code permits California residents to request
from a business, with whom the California resident has an established business
relationship, certain information about the types of Personal Information the
business has shared with third parties for those third parties’ direct
marketing purposes, and the names and addresses of the third parties with whom
the business has shared such information during the immediately preceding
calendar year. California residents may
make one request each year by contacting Us by emailing us at PrivacyRights@arrt.org
or by sending a letter through the
U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155
ATTN: Privacy Policy.”
The Nevada Revised Statutes (NRS 603A.300 et seq.) permit a Nevada
consumer to direct an operator of an Internet website or online service to
refrain from making any sale of any covered information the operator has
collected or will collect about that consumer. You may submit a request
pursuant to this directive by emailing us at PrivacyRights@arrt.org
or by sending a letter through the
U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155
ATTN: Privacy Policy.” We will provide further
information about how We verify the authenticity of the request and Your
identity.
This section applies only to
individuals located in the EEA, UK, Switzerland, and other countries (excluding
the US) where individuals have a right to the information or to exercise rights
in Personal Information as specified below (“Non-US Individuals”). Non-US Individuals
may have the following rights. Please review our verification requirements. Applicable law may
provide exceptions and limitations to all rights.
·
Access - You may have a right to access the Personal Information we
process.
·
Rectification - You may correct any Personal Information that you believe is
inaccurate.
·
Deletion/Erasure - You may request that we delete your Personal Information. We may
delete your data entirely, or we may anonymize or aggregate your information
such that it no longer reasonably identifies you.
·
Data
Export/Portability - You may request that
we send you a copy of your Personal Information in a common portable format of
our choice.
·
Restriction - You may request that we restrict the processing of Personal Information to what is necessary for a lawful basis.
·
Objection - You may have the right under applicable law to
object to any processing of Personal Information based on our legitimate
interests. We may not cease or limit processing based
solely on that objection, and we may continue processing where our interests in
processing are appropriately balanced against individuals’ privacy interests.
In addition to the general objection right, you may have the right to object to
processing:
o for Profiling purposes;
o for direct marketing purposes (we will cease processing upon your
objection); and
o involving automated decision-making with legal or similarly
significant effects (if any).
·
Regulator Contact - You have the right to file a complaint with
regulators about our processing of Personal Information. To do so, please
contact your local data protection or consumer protection authority.
The use of Your Personal Information may be necessary to perform
the agreement You have with Us to provide You with certification and
registration, provide credential verification services to the public and to
third parties, and to respond to Your requests.
We use Your Personal Information for our legitimate
interests. We rely on our legitimate
interest to obtain and maintain Personal Information about an individual’s
professional and educational qualifications for those who wish to become
certified and registered with us, to deliver our professional credentials
verification services to third parties, to administer, analyze, and improve our
services and the content on the Service, to operate our business, including
through the use of service providers and subcontractors (who may have access to
Your data – see further information under the section How Your Personal Information is Disclosed), to send You
notifications about our services, to archive, keep records, and perform statistical
and analytical activities, or to use Your Personal Information for
administrative, fraud detection, audit, training, security, or legal purposes.
Where
other lawful bases are not available for the processing of Your Personal
Information, We may rely on Your consent as the legal
basis for the collection and use of Your personal data. You are free to withdraw Your consent at any
time, subject to the Your Choices
Regarding Your Personal Information section below and the preceding Legal Bases for Processing Your Personal
Information in this Section. Information about Your health or medical
condition will only be processed with Your consent.
We
may use Your Personal Information to comply with legal obligations to which We
are subject, including to comply with legal process such as a subpoena.
We
use Your Personal Information to perform tasks in the public interest, namely
to track and make publicly available certification and registration status for
professionals who obtained our credentials, including information on credential
revocation and professional sanctions against such individuals, and to provide
verification of credentials information on individuals certified and registered
with Us to regulatory and other public authorities and other educational and
professional institutions.
We
collect the following categories of Personal Information linked or reasonably
linkable to a consumer and that identify the consumer's past, present, or
future physical or mental health status (“Consumer
Health Data”) as defined under Washington State’s My Health My Data Act (“MHMDA”) and similar laws, for the
following purposes:
|
Categories
of Consumer Health Data Collected |
The
purposes of collecting, using and sharing |
How Consumer
Health Data will be used or processed |
|
Individual
health conditions, treatment, diseases, or diagnosis Social,
psychological, behavioral, and medical interventions |
We
use Paradigm Testing to assist in evaluating requests for test accommodations
in accordance with the Americans with Disabilities Act (ADA) |
If You require accommodations, You will send ARRT an application containing a request for ADA accommodations. We will then contact Paradigm to procure an identification code, which We will mail to You, in conjunction with a letter instructing You to create a Paradigm account, and to use the code which identifies You. When You then request ADA accommodations from Paradigm, You will provide Personal Information, including Your contact information, medical information related to the nature of Your mental or physical impairment, and the ways in which it limits Your major life activities, information related to the ways in which Your mental or physical impairment impacts Your ability to test under standard conditions, information related to any treatments, medications, devices, or auxiliary aids You commonly use, or plan to use, while taking Your exam, information related to Your history with classroom, workplace, and testing accommodations, and an explanation for the necessity of the accommodations You are requesting, and their appropriateness relative to Your impairment, to Paradigm Testing, which will make the recommendation as to what, if any, special accommodations You should receive. After Paradigm Testing makes a recommendation, it will transmit Your name and the recommendation to ARRT, which will make the final decision regarding which accommodations are appropriate. All information that You provide to Paradigm Testing is subject to its privacy policy, available at: https://paradigmtesting.com/privacy-policy/. |
|
Biometric
data, including facial photos, and voice recordings |
Identity
verification in connect with exams; social media sharing and connections;
customer service; video and audio meeting recordings |
We use facial photos to verify identity in connection with exams
and share this information with our exam vendor. We operate social media accounts and share photos, text, and
recordings as is typical for social media platforms. We occasionally ask consumers to share
photos with Us for use on our social media accounts. We use voice recordings for the purposes for which they are
provided, such as responding to customer service requests. We record certain audio or video meetings for the purpose for
which the meeting is occurring, including hearings regarding potential ethics
violations. |
|
Any
information that we or our respective processor, processes to associate or
identify you with data described above that is derived or extrapolated from
non-health information (such as proxy, derivative, inferred, or emergent data
by any means, including algorithms or machine learning), also referred to as
“Inference Data.” |
Site
Analytics |
See “How Your Personal Information is
Disclosed” section above. |
Sharing
of Consumer Health Data
Categories of Consumer Health Data
we Share
We may share the following
categories of Consumer Health Data with third parties and specific affiliates:
·
Individual health conditions, treatment, diseases, or diagnosis
·
Social, psychological, behavioral, and medical interventions
·
Biometric data
·
Any information that we or our respective processor, processes to
associate or identify you with data described above that is derived or
extrapolated from non-health information (such as proxy, derivative, inferred,
or emergent data by any means, including algorithms or machine learning), also
referred to as “Inference Data.”
Categories of Third Parties with Which
we Share
We may share Consumer Health Data
with the following categories of third-party recipients: Third Party Service Providers
and Business Partners.
Specific Affiliates with Which we
Share
We may share Consumer Health Data
with the following Affiliates: None.
Consumer
Health Data Privacy Rights
Your Rights
Under the Washington State MHMDA
and similar laws, residents and natural persons whose Consumer Health Data is
collected in certain states may have the following rights, subject to
verification, exceptions, and limitations:
Right to Confirm/Access/Know: Up to twice annually, you have the right to (a)
confirm whether we are collecting, sharing, or selling your Consumer Health
Data, and (b) access such data, including a list of all third parties and
affiliates with whom we have shared or sold the consumer health data and an
active email address or other online mechanism that you may use to contact
these third parties.
Right to Delete: You have the right to request
deletion of the Consumer Health Data held by us and our affiliates, processors,
contractors, and other third parties.
Right to Withdraw your Consent/Opt-Out:
You may withdraw any consent you have provided at any time. The consequence of
you withdrawing consent might be that we cannot perform certain services for
you, such as location-based services, personalizing or making relevant certain
types of advertising, or other services conditioned on your consent or choice
not to opt-out.
Right to Non-Discrimination: You
have the right to not to receive discriminatory treatment as
a result of your exercise of rights conferred by the MHMDA and similar
laws.
How to Exercise your Rights
You
may submit requests as follows (please our review verification requirements below).
·
You may send an email to PrivacyRights@arrt.org with
your email address, phone number or address on file, along with your request.
If
you have any questions or wish to appeal any refusal to take action in response
to a MHMDA rights request, contact us at PrivacyRights@arrt.org . We will respond to any request
to appeal within the period required by law.
Washington Residents:
If your appeal is unsuccessful, you can raise a concern or lodge a complaint
with the Washington State Attorney General here.
Nevada Residents:
If your appeal is unsuccessful, you can raise a concern or lodge a complaint
with the State of Nevada Attorney General here.
Verification
of Consumer Health Data Rights Requests
If
you submit a request, we typically must verify your identity to ensure that you
have the right to make that request, reduce fraud, and to ensure the security
of Consumer Health Data. If an agent is submitting the request on your behalf,
we reserve the right to validate the agent’s authority to act on your behalf.
We may require that you match Consumer Health Data we have on file
in order to adequately verify your identity. If you
have an account, we may require that you log into the account to submit the
request as part of the verification process. We may not grant access to certain
Consumer Health Data to you if prohibited by law.