Institute of hotel security management

Why Do We Collect Information and Data?

We rely on a wide variety of information to run our association. In some instances, this information may include data that could be used to identify a particular individual, otherwise referred to as Personal Information. In this Notice, we will provide multiple examples of how Personal Information we collect may be used and why it is important. For example, when a consumer purchases one of our products we must collect their name, email address, and payment information to complete the transaction. Some of the reasons that we collect Personal Information include to:

Allow you to be a member, receive news and services;
Investigate, respond to, and manage inquiries or events;
Work with and respond to law enforcement and regulators; and
Research matters relating such as security threats.

What Kinds of Personal Information Do We Collect?

The following are examples of the type of Personal Information that may be collected. The specific kind of information collected will depend on the Services used:

Contact information (such as name, email address, mailing address, and phone number,);
Payment information (including payment card numbers, billing address, and bank account information);
Account log-in credentials;
Your location;
Photographs, images, video, and related hash values;

In addition to the above, we may also collect other information related to user interactions with or use of our Services (“Usage Data”). Much of this Usage Data, for example, clickstream data and aggregate usage statistics, is generally not personally identifying. On the other hand, some of this Usage Data either alone or when combined or linked with your Personal Information, may allow your identity to be discovered. In such cases, we treat the combined data as Personal Information. In many cases, Usage Data is gathered automatically by systems or technology such as cookies (see more information about Information Collected Automatically below).

The following are examples of the type of Usage Data that may be collected by us / google analytics from your web browser or related to your interactions with our products and services:

Details about your computers, devices, applications, and networks (including IP address, browser characteristics, device ID, operating system, and language preferences);
Activities on our websites and usage patterns of products and services (including referring URLs, dates and times of website visits, and clickstream data);
Details about Internet, App, or network usage (including URLs or domain names of websites you visit, information about applications that attempt to access your network, or traffic data);
Data about files and communications, (which may include computer files, emails and attachments, email addresses, metadata, and traffic data, or portions or hashes—a hash file is a file that has been converted into a numerical string by a mathematical algorithm—of any of this information).

How Do We Collect Information?

We collect information directly from you, as well as automatically through your use of our website and, in some cases, from third parties.

Information That You Give Us: Typically the information we collect directly from you are your contact details, payment or billing data, and relationship information like the content of emails and news submitted by you. You decide how much information to share with us in most cases, but not sharing required information may limit your ability to engage in certain activities.

Information Collected Automatically: When you use or interact with our Site and Services, we receive and store information generated by your activity, like Usage Data, and other information automatically collected from your browser or mobile device. This information may include your IP address; browser type and version; preferred language; geographic location using IP address; operating system and computer platform; the full Uniform Resource Locator (URL) used to, through, and from our Site, including date and time; news you viewed or searched for; and areas of our Site that you visited. We also may log the length of time of your visit and the number of times you visit and purchase or use the Services. We may assign you one or more unique identifiers to help keep track of your future visits.

In most cases, this information is generated by various tracking technologies. Tracking technologies may include “cookies”. You can read about how we use cookies and other tracking technologies here and also learn about the choices you can make to limit their use.

Please see our Cookie Notice for more information about the cookies and other similar technologies that we use.

Information from Other Sources: If we receive any information about you from other sources, we may add it to the information we already have about you.
Examples of information we may receive from other sources includes updated personal information or payment information which we use to correct our records, or enrollment information, page view, or identity information which we use to help prevent and detect fraud.

How Do We Use Personal Information?

Security and Threat Detection. By collecting and processing data, including Personal Information, we may use your information to:

Participate in threat intelligence networks and conduct research and analysis,
Rrespond to new threats.

Membership Uses. In addition, we may use Personal Information for other purposes, including to:

Analyze users’ behavior when using our website to customize preferences;
Establish and manage user accounts;
Collect and process payments and complete transactions;
Manage subscriptions, and respond to requests, questions, and comments;
Communicate about, and administer participation in, meetings, special events;
Enable posting and other communications;
Customize, measure, and improve our websites, products, services, and advertising;
Perform accounting, auditing, billing, reconciliation, and collection activities;
Prevent, detect, identify, investigate, respond, and protect against potential or actual claims, liabilities, prohibited behavior, and criminal activity;
Comply with and enforce applicable legal requirements, agreements, and policies; and
Perform other activities consistent with this Notice.

We respect the importance of privacy. Other than as provided in this privacy policy, we do not sell your Personal Information, nor do we share it with unaffiliated third parties for their own marketing use, unless we have your consent or we are required by law to do so.
Generally, we may disclose the information we collect, including Personal Information, in order to facilitate our provision of the Services or communications with members (e.g., to service providers who perform functions like email on our behalf), as required by law, or with your consent.

We may share Personal Information in the following ways:

Current and future members of the IHSM for the purposes described in this Notice, such as to:
(i) provide services and content;
(ii) help detect and prevent illegal acts and violations;
and (iii) guide our decisions about our insiture, services, and communications;
Other members where you have chosen to share such information, or where you have posted news;
Authorized service providers who perform services for us (including cloud services, data storage, email).
Our contracts with our service providers include commitments that they agree to limit their use of Personal Information and to comply with privacy and security standards at least as stringent as the terms of this Privacy Notice. Remember that if you provide Personal Information directly to a third party, such as through a link on the Institute website, the processing is typically based on their standards (which may not be the same as ours);
If we believe disclosure is necessary and appropriate to prevent physical, financial, or other harm, injury, or loss, including to protect against fraud or credit risk.
To legal, governmental, or judicial authorities, as instructed or required by those authorities or applicable laws, or in relation to a legal activity, such as in response to a subpoena or investigating suspected illicit activity (including identifying those who use our services for illegal activities). We reserve the right to report to law enforcement agencies activities that we in good faith believe to be illegal.
In connection with, or during negotiations of, an acquisition, merger, asset sale, or other similar business transfer that involves substantially all of our assets or functions where Personal Information is transferred or shared as part of the business assets (provided that such party agrees to use such Personal Information in a manner that is consistent with this Notice).
With others only after obtaining your consent. If we want to share Personal Information other than as permitted or described above, we will provide you with a choice to opt in to such sharing and you may choose to instruct us not to share the information.

IHSM does not share your Personal Information with non-affiliated third parties for their own marketing use

Third-Party Advertising

We do not deal with third party advertisers

See our Cookie Notice to learn more about how IHSM uses tracking technologies like cookies and how you can opt out of such technologies and advertising. This Notice does not cover the use of cookies or other tracking system.

Do Not Track Disclosure: Our Site does not respond to Do Not Track signals. You may, however, disable certain tracking as discussed above (e.g., by disabling cookies).

What Security Measures Do We Have?

We use administrative, organizational, technical, and physical safeguards to protect the Personal Information we collect and process. Our security controls are designed to maintain an appropriate level of data confidentiality, integrity, and availability. We regularly test our website, data centers, systems, and other assets for security vulnerabilities.

We use SSL encryption for transmission of data on our website.

What Choices Do You Have About Your Personal Information?

We offer certain choices about how we communicate with our members and what Personal Information we obtain about them.
To remove your Personal Information from the website, please contact the data controller.

How you can access and correct inaccuracies

You can access and correct the Personal Information in your profile by visiting My Profile. Alternatively, you may request access or changes to, or removal of, your Personal Information in accordance with applicable laws by contacting us as indicated below.

Data Retention

The time periods for which we retain your Personal Information depend on the purposes for which we use it. We will keep your Personal Information for as long as you are a registered member or for as long as we have another legal and legitimate purpose to do so and, thereafter, for no longer than is required or permitted by law, or our Records Retention Policy, reasonably necessary for internal reporting and reconciliation purposes, or to provide you with feedback or information you might request. The information we collect may be stored and processed in servers in the United States and wherever our service providers have facilities around the globe.

Children’s Privacy
We have no members under the age of 13.

Data Transfers

IHSM is locaterd in the UK. Our data centre is located in Belgium. Google servers (email) are cloud based
We have agreements that any data transfered outside the EU is used via a system registered with PrivacyShield. If you are located in the European Economic Area or Switzerland, we provide adequate protection for the transfer of Personal Information to countries outside of the EEA or Switzerland through a series of intercompany agreements based on the Standard Contractual Clauses authorized under the EU Data Protection Directive 95/46/EC.

Links to Other Websites

Our Site may contain links to other websites for your convenience and information. These websites may be operated by companies not affiliated with IHSM Linked websites may have their own privacy policies or notices, which we strongly suggest you review if you visit those websites. We are not responsible for the content, privacy practices, or use of any websites that are not affiliated with IHSM