Online Privacy Statement

Your privacy is important to GlobalPlatform (the "Company"). Our goal is to provide you with a personalized online experience that provides you with the information, resources, and services that are most relevant and helpful to you. This Privacy Statement has been written to describe the conditions under which this website is being made available to you. The Privacy Statement discusses, among other things, how data obtained during your visit to this website may be collected and used. We strongly recommend that you read the Privacy Statement carefully. By using this website, you agree to be bound by the terms of this Privacy Statement. If you do not accept the terms of the Privacy Statement, you are directed to discontinue accessing or otherwise using the website or any materials obtained from it. If you are dissatisfied with the website, by all means contact the GlobalPlatform Secretariat and please refrain from visiting the site in the future.

The process of maintaining a website is an evolving one, and the Company may decide at some point in the future, without advance notice, to modify the terms of this Privacy Statement. Your use of the website, or materials obtained from the website, indicates your assent to the Privacy Statement at the time of such use. The effective Privacy Statement will be posted on the website, and you should check upon every visit for any changes.

Sites Covered by this Privacy Statement

This Privacy Statement applies to all Company-maintained websites, domains, information portals, and registries.

Children's Privacy

The Company is committed to protecting the privacy needs of children, and we encourage parents and guardians to take an active role in their children's online activities and interests. The Company does not intentionally collect information from children under the age of 16, and the Company does not target its website to children.

Links to Non-Company Websites

The Company's website may provide links to third-party websites for the convenience of our users. If you access those links, you will leave the Company's website. The Company does not control these third-party websites and cannot represent that their policies and practices will be consistent with this Privacy Statement. For example, other websites may collect or use personal information about you in a manner different from that described in this document. Therefore, you should use other websites with caution, and you do so at your own risk. We encourage you to review the privacy policy of any website before submitting personal information.

TYPES OF INFORMATION WE COLLECT

Non-Personal Information

Non-personal information is data about usage and service operation that is not directly associated with a specific personal identity. The Company may collect and analyze non-personal information to evaluate how visitors use the Company website.

Aggregate Information

The Company may gather aggregate information, which refers to information your computer automatically provides to us and that cannot be tied back to you as a specific individual. Examples include referral data (the websites you visited just before and just after our site), the pages viewed, time spent at our website, and Internet Protocol (IP) addresses. An IP address is a number that is automatically assigned to your computer whenever you access the Internet.

For example, when you request a page from one of our sites, our servers log your IP address to create aggregate reports on user demographics and traffic patterns and for purposes of system administration.

Log Files 

Every time you request or download a file from the website, the Company may store data about these events and your IP address in a log file. The Company may use this information to analyze trends, administer the website, track users' movements, and gather broad demographic information for aggregate use or for other business purposes.

Cookies

Our site may use a feature of your browser to set a 'cookie' on your computer. Cookies are small packets of information that a website's computer stores on your computer. The Company's website can then read the cookies whenever you visit our site. We may use cookies in a number of ways, such as to save your password so you don't have to re-enter it each time you visit our site, to deliver content specific to your interests and to track the pages you've visited. These cookies allow us to use the information we collect to customize your experience so that your visit to our site is as relevant and as valuable to you as possible.

Most browser software can be set up to deal with cookies. You may modify your browser preference to provide you with choices relating to cookies. You have the choice to accept all cookies, to be notified when a cookie is set or to reject all cookies. If you choose to reject cookies, certain functions and conveniences of our website may not work properly, and you may be unable to use those Company services that require registration in order to participate, or you will have to re-register each time you visit our site. Most browsers offer instructions on how to reset the browser to reject cookies in the 'Help' section of the toolbar. We do not link non-personal information from cookies to personally identifiable information without your permission.

Web Beacons 

The Company's website may also use web beacons to collect non-personal information about your use of our website and the websites of selected sponsors and advertisers, your use of special promotions or newsletters and other activities. The information collected by web beacons allows us to statistically monitor how many people are using our website and selected sponsors' sites; how many people open our emails; and for what purposes these actions are being taken. Our web beacons are not used to track your activity outside of our website or those of our sponsors. The Company does not link non-personal information from web beacons to personally identifiable information without your permission.

Personal Information

Personal information is information that is associated with your name or personal identity. The Company uses personal information to better understand your needs and interests and to provide you with better service. On the website, we collect IP address, geolocation, operating system, browser type, phone type and other technical data tied to you or your computer, device or location.  This information is used in statistical / marketing reports and analysis regarding use of our site and how we can improve our site.  When downloading documents with a gating form (like specifications) or signing up for emails, we collect only what you provide, which may include your name, company, email address.  This is then used for statistical / marketing reports and analysis regarding use of our site.  In addition, we collect email addresses, which are added to our technical and marketing email distribution lists.  If you register for training/event or purchase something from our store, we collect only what you provide, which may include name, title, company, email address, address, phone number, and credit card information.  This information is used for registration/purchase of the relevant training/event/store item. In the case of events, information may be shared with GP’s membership and sponsors of the event.  You may always elect not to provide your personal data to us, but that will limit your ability to participate in these activities or benefit from these services.

Personal data will not be kept for longer than is necessary for the purpose(s) for which it was collected, and in general, we will not retain financial information after it is used.  In some cases, it is not possible for us to specify in advance the periods for which your personal data will be retained. Notwithstanding this, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another person.

Members-Only Website

The information you provide on the Company membership application is used to create a member profile, and some information may be shared with other Company individual member representatives and organizations. Member contact information may be provided to other members on a secure website to encourage and facilitate collaboration, research, and the free exchange of information among Company members. The Company's members are automatically added to Company-member mailing lists. From time to time, member information may be shared with event organizers and/or other organizations that provide additional benefits to Company members. By providing us with your personal information on the membership application, you expressly consent to our storing, processing, and distributing your information for these purposes.

Company Information

Company information is information that is associated with the name and address of member organizations and may include data about usage and service operation. The primary representative of any Company member organization may request usage reports to gauge the extent of their employees' involvement in consortium activities. You should be aware that information regarding your participation in technical committees or working groups, for example, may be made available to your company's primary representative and to Company staff members.

HOW WE USE YOUR INFORMATION

The Company may use non-personal data that is aggregated for reporting about Company website usability, performance, and effectiveness. It may be used to improve the experience, usability, and content of the site.

As noted above, the Company may use personal information to provide services that support the activities of Company members and their collaboration on company specifications. When accessing Company members-only web pages, your personal user information may be tracked by the Company in order to support collaboration, ensure authorized access, and enable communication between members.

Currently, all credit card payment processing services are provided by a third- party payment service, on a third-party website, and a management company external to the Company provides support for the Company's financial activities. Accordingly, the Company does not currently gather any credit card information from its website visitors. If the Company collects credit card information from visitors in the future, for example, to facilitate membership applications or to enable visitors to purchase products or services from our website, such information will not be kept longer than necessary for   providing the services requested, such information will be used only for processing payments and not for other purposes, and the Company may share your personal information with its partners to facilitate such payment transactions.

Information Sharing

The Company does not sell, rent, or lease any individual's personal information or lists of email addresses to anyone for marketing purposes, and we take commercially reasonable steps to maintain the security of this information. However, the Company reserves the right to supply any such information to any organization into which the Company may merge in the future or to which it may make any transfer in order to enable a third party to continue part or all of its mission. We also reserve the right to release personal information to the extent necessary protect our systems or business, when we reasonably believe you to be in violation of our Terms of Use or you to have initiated or participated in any illegal activity. In addition, please be aware that in certain circumstances, the Company may be obligated to release your personal information pursuant to judicial or other government subpoenas, warrants, or other orders.

In keeping with our open process, the Company may maintain publicly accessible archives for the vast majority of our activities. For example, posting an email to any Company-hosted mail list or discussion forum, subscribing to a Company newsletter or registering for one of our public meetings may result in your email address becoming part of the publicly accessible archives.

If you are a registered member of the Company, you should be aware that some items of your personal information may be visible to other Company members and to the public. The Company member database may retain information about your name, e-mail address, company affiliation (if an organizational member), and such other personal address and identifying data as you choose to supply. That data may be generally visible to other Company members and to the public. Your name, e-mail address, and other information you may supply also may be associated in the Company's publicly accessible records with the Company's various committees, working groups, and similar activities that you join, in various places, including:

1. the permanently-posted attendance and membership records of those activities
2. documents generated by the activity, which may be permanently archived
3. along with message content, in the permanent archives of the Company's e-mail lists, which also may be public

Please remember that any information (including personal information) that you disclose in public areas of our website, such as forums, message boards, and news groups, becomes public information that others may collect, circulate, and use. Because we cannot and do not control the acts of others, you should exercise caution when deciding to disclose information about yourself or others in public forums such as these.

Given the international scope of the Company, personal information may be visible to persons outside your country of residence, including persons in countries that your own country's privacy laws and regulations deem deficient in ensuring an adequate level of protection for such information. If you are unsure whether this privacy statement is in conflict with applicable local rules, you should not submit your information.

If you do not want your personal information collected and used by the Company, please do not submit this information to the Company's website or apply for membership.

Access to and Accuracy of Member Information

The Company is committed to keeping the personal information of our members accurate. All the information you have submitted to us can be verified and changed. In order to do this, please email us a request at the GlobalPlatform Secretariat. We may provide members with online access to their own personal profiles, enabling them to update or delete information at any time. To protect our members' privacy and security, we also may take reasonable steps to verify identity, such as a user ID and password, before granting access to modify personal profile data. Certain areas of the Company's websites may limit access to specific individuals through the use of passwords or other personal identifiers; a password prompt is your indication that a members-only resource is being accessed.

Security

The Company makes every effort to protect personal information by users of the website, including using firewalls and other security measures on its servers. No server, however, is 100% secure, and you should take this into account when submitting personal or confidential information about yourself on any website, including this one. Much of the personal information is used in conjunction with member services such as collaboration and discussion, so some types of personal information such as your name, company affiliation, and email address will be visible to other Company members and to the public. The Company assumes no liability for the interception, alteration, or misuse of the information you provide. You alone are responsible for maintaining the secrecy of your personal information. Please use care when accessing this website and providing personal information.

Opting Out

If you have subscribed to receive specification updates by email from the GlobalPlatform website home page, then you may, from time to time receive electronic newsletters, announcements, surveys or other information. If you prefer not to receive any or all of these communications, you may opt-out by following the directions provided within the electronic newsletters and announcements.

General Data Protection Regulation (GDPR) Compliance

If you are a resident of or are located in the European Economic Area (“EEA”), you may also have certain rights under the General Data Protection Regulation (“GDPR”).  Personal data you provide on the GlobalPlatform website is only collected with your consent and may be transmitted outside of the EEA to the Company (or computer servers maintained for the benefit of the Company) pursuant to that consent.

In general, under the GDPR you may:

• request access to your personal data
• have incomplete or incorrect data corrected
• have your personal data deleted
• suspend or restrict our use of your personal data, or withdraw your consent
• request a copy of your personal data
• complain to a supervisory authority if you believe your rights under the GDPR are not being respected

Should you request a copy of your personal data, we will supply to you a copy. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.  Should you request the deletion of your personal data, the Company will generally do so as soon as practicable, although your right to have your personal data deleted is subject to exceptions, such as, for example, compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.

Contact the GlobalPlatform Secretariat if you have concerns regarding your personal data, or wish to exercise any of these listed rights.

Note that, if you are in the EEA, we may transfer your personal data outside of the EEA, including to the United States.  By way of example, this may happen if your personal data is transferred to our servers located in a country outside of the EEA. These countries may not have similar data protection laws to the EEA. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.

Contacting Us 

Questions about this Privacy Statement can be directed to the GlobalPlatform Secretariat.