As used in this policy, “personal information” means information that would allow a party to identify you such as, for example, your name, address or location, telephone number, or email address or information from which a person could deduce your identity.
2. Our Principles
- Privacy policies including provisions regarding data collection, processing and use, should be human readable, comprehensive, and easy to locate;
- Only the minimum amount of personal information reasonably necessary to provide you with services should be processed, collected and maintained, and only for so long as reasonably needed or required, consistent with the principles of proportionality; and
- Personal information you provide through our Services, or that we gather as a result of your use of our Services, should not be used for marketing or advertising purposes, nor should it be provided voluntarily (without your permission) to anyone else unless required.
3. Personal Information CC Collects
We may collect and process personal information through our Services, including without limitation:
- in connection with your selection of one of our licenses or legal tools including CC0 or the Public Domain Mark;
- when you provide us with your personal information such as by sending an email to us or signing up to receive updates from Creative Commons, including the CCGN;
- when you subscribe to one of our email discussion lists;
- when you donate money to us or purchase merchandise;
- when you apply for a funding opportunity or participation in one of our programs, such as applying for a scholarship to the CC global summit;
- when you create a CC Login Service account;
- when you apply for membership in the CC Global Network (the “CCGN”) or use the CCGN website;
- if you respond to a membership applicant’s request that you be a voucher for his, her or its membership application; and
- when you provide personal information in connection with your participation in any of the forums we make available through our Services.
Specifically, the following personal information at a minimum will be collected, processed and transferred as set forth below when you apply for membership in the CCGN:
- Email address;
- Brief bio (including links and references);
- Brief summary of why you want to be a member of CCGN;
- Areas of interest;
- Country in which you are located and/or with which you have voluntarily chosen to be associated;
- URLs and links to social media;
- A personal photo for your profile (if that feature is enabled and you voluntarily supply a photo);
- Whether you are currently or have previously been associated with a CC affiliate institution or are or have previously been an individual CC affiliate;
- Personal qualities that relate to your candidacy for membership; and
- Any other information that you elect to provide or that CC may request.
Some of this personal information (along with your new user ID) will be used to create your CCGN member profile if your application is approved. Some of that information will be public (user ID, name and photo (if the feature is enabled and you have voluntarily supplied it), and some of that information will only be accessible by other CCGN members (email address, brief biography, languages, country in which you are located and/or with which you have voluntarily chosen to be associated, URLs and social media, and similar)).
If you are designated as a voucher by an individual or an institution applying for membership in the CCGN, the following personal information may be collected about you as a voucher:
- Email address;
- Information on how you know the candidate and your opinion (deciding in favor of vouching, as to why your favor the candidate);
- Country in which you are located and/or with which you have voluntarily chosen to be associated;
- URLs and links to social media; and
- Any other information that the voucher elects to provide or that CC may request.
4. What CC Does with Personal Information
License/Tool Selection . We use the personal information you provide to us as part of your selection of one of our licenses/tools to provide you the RDF, html and the uniform resource locator that correspond to the license/tool you selected. Some older versions of the license chooser enable Creative Commons to send you this information via email. In those cases, your email address is expunged after this email has been sent. We may use all of this information to maintain license/tools usage data.
Emails and Newsletters . We use the personal information you provide to us when you send us emails or sign up to receive updates from Creative Commons in order to respond to your request – for example, to reply to your email or to send you communications about Creative Commons news and campaigns.
When you subscribe to updates from us, your email address is sent to and stored in a Customer Relationship Management (CRM) database (such as MailChimp, or CiviCRM) hosted on servers that can only be accessed by Creative Commons staff and contractors. CC may change CRM system(s) from time to time. When you subscribe to one of our email discussion lists, your name and email address is sent to and stored by (1) ibiblio.org ( http://www.ibiblio.org/), currently a collaboration between the Center for the Public Domain ( http://www.centerforthepublicdomain.org/) and the University of North Carolina – Chapel Hill ( http://www.unc.edu/), (2) Creative Commons, and/or (3) another service with which Creative Commons has engaged to provide email support (such as a CRM system as mentioned above). Personal information submitted as part of our email discussion lists is used for the purpose of managing the discussion lists. Your name and email address typically will be visible to other list participants when you correspond on the list and to the general public in the discussion archives. All emails sent to the discussions lists are publicly archived.
Events: If you sign up for an event hosted or supported by Creative Commons, we may share your personal information with vendors and third party contractors solely for the purpose of organizing and running the event. Additionally, if you sign up to participate in a CC-sponsored event, including without limitation a CC Global Summit, you may be asked to enter your name, address, and account information in connection with your payment for attendance. Currently, CC uses Stripe for payment, but CC may use additional methods for payment. You affirmatively consent and agree that CC may use and process your information in connection with the use and processing of your attendance with any such third party payment processors for purposes of processing your payment. Your information is subject to the privacy policies of such third party websites, and you affirmatively consent to the transfer of your information to those websites and service providers. CC is not be responsible for their handling, processing and use of your information.
Funding opportunities or participation in our programs. When you apply for a scholarship or grant from Creative Commons, or when you apply to be selected to participate in one of our programs, CC will collect certain personal information from you in order to evaluate your application. We will share that information with the people who are designated to select participants in those programs, which may include people not employed by Creative Commons.
Donations . When you donate money, goods or services to us, purchase merchandise via our support page, or pay for attendance at an event (including the CC Global Summits), your personal information will be handled depending on which option you choose.
If you purchase merchandise from the Creative Commons store ( http://store.creativecommons.org/), your personal information will be used for the purpose of sending you the items you purchased. If you sign up to receive updates from Creative Commons when you check out from the store, we will use your personal information to send you communications about Creative Commons news and campaigns.
5. ccNet Website
This service is no longer accepting new accounts, but if you previously created a ccNet account, you may still access and use it. When you joined ccNet, you provided personal information to create your account and establish a password and profile, and to create an OpenID. We use that personal information to establish and maintain your accounts, provide you with the features we provide for account holders, to act as your OpenID service provider, and for the purpose of contacting you about upcoming news and events relevant to Creative Commons.
6. CC Global Network (CCGN)
In connection with your application to the CCGN or use of the CCGN website, you will be required to provide certain personal information. We use and process that personal information to evaluate your application, establish and maintain your account, provide you with the features we provide for account holders, and for the purpose of contacting you about upcoming news and events relevant to Creative Commons and the CCGN. In connection with your application you will be required to have one or more members of the CCGN provide information about you in order to vouch for you as a potential member of the CCGN. You hereby consent to those individuals providing such information about you that we reasonably request. The personal information provided in connection with your application to the CCGN, whether by you or a member of the CCGN vouching as you voluntarily request on your behalf, will be used by the CCGN including its Membership Council (interim and/or permanent) and Creative Commons to evaluate your application.
If you are admitted to the CCGN you will be given a public profile page where you can voluntarily post personal information for public viewing. Certain personal information that you submit to or make available on your profile page, including your name, areas of interest, images and other content you upload may be used by anyone who views that information for any lawful purpose. Additional personal information that you submit to your profile page, including your biographical information, languages spoken, country of residence or country with which you wish to be associated or similar, social media account information or URL details may be viewed and used by other members of the CCGN. Further, if you are admitted, your information will be transferred to and from the various fora that further the CC mission and enable the CCGN, including chapters, the CCGN, platforms and working groups, HQ and the Membership Council for purposes of governance participation, activity interaction, and other purposes related to the mission, vision and activities of CC.
Whether your CCGN membership application is rejected or accepted, the personal information that was collected from you and from the voucher will be deleted after 21 days of CC’s sending out the decision, with the exception of the voucher’s decision (e.g., vouch for applicant / does not vouch for applicant) and your then-existing or prior affiliation(s) as or with a CC affiliate.
Information provided by vouchers related to your identity and decision (i.e., whether or not you (the voucher) vouched for the applicant) will be retained.
See sections 15 and 22 below for additional information.
7. Participating in the CCGN
Registered Users . When you register to obtain a user account on any of the Services (any such person, a “Registered User”), including but not limited to a CC Login Service or the CCGN website, you may be asked to provide personal information to create your account and establish a password and profile. We generally encourage you to use an alias or nickname if you are not comfortable providing your legal name. The name or nickname you provide in connection with your account may be used to attribute you in connection with any content you submit to any Service. We also use that personal information to establish and maintain your account, to provide you with the features we provide Registered Users, and to email you regarding changes to this policy or other applicable policies. If you sign up to receive updates from Creative Commons when you create your account, we will use your personal information to send you communications about Creative Commons news and campaigns.
8. Disclosures of Personal Information
In general, it is not Creative Commons’ practice to disclose personal information to third parties other than as made available on the Services. Except as otherwise set forth herein or for providing you with attribution using your CC Login Service name or nickname (as you have elected) in connection with your CC-licensed works, we may share your personal information in the following instances:
- First, Creative Commons may share personal information with our contractors and service providers in order to maintain, enhance, or add to the functionality of the Services, to organize and run an event you signed up to attend, to evaluate your application for funding and/or participation in a program run by Creative Commons, or to otherwise run any CC program or activity in which you have chosen to participate.
- Second, we may disclose your personal information you provide in connection with your application to the CCGN or use of the CCGN website, including to those individuals who you select to vouch for your acceptance as a member of the CCGN and those reviewing your application, and the Membership Counsel (interim and/or permanent) whose members are located in various countries (such as Colombia, El Salvador, Australia, Canada, Malaysia, Argentina, South Korea, Poland, Ghana, Brazil, United States, Japan, Netherlands, Chile, and Guatemala), for the purpose of making a decision about your application.
- Third, if you are a voucher, we may disclose your personal information to (a) the Membership Council (interim and/or permanent), for the purpose of confirming the voucher’s identity and for making a decision about the applicant, and (b) the applicant should the applicant decide to invoke his or her right of access and correction as discussed below in sections 21 and 22.
When personal information is directly transferred to an affiliate, member, Chapter or a third party provider located in a country including those listed above, that may not provide a level of protection equivalent to the laws in your jurisdiction, Creative Commons will exercise appropriate due diligence in the selection of such recipients, and require that these recipients maintain adequate technical and organizational security measures to safeguard the personal information and process the personal information only as instructed by Creative Commons and for no other purposes. See also section 20 below.
9. Security of Personal Information Collected via the Services
Creative Commons has implemented reasonable physical, technical, and organizational security measures for personal information that Creative Commons processes, transfers, stores and controls against accidental or unlawful destruction, or accidental loss, alteration, unauthorized disclosure or access, in compliance with applicable law. However, no website can fully eliminate security risks. Third parties may circumvent our security measures to unlawfully intercept or access transmissions or private communications. If any data breach occurs, we will post a reasonably prominent notice to the Websites and comply with all other applicable data privacy requirements including, when required, personal notice to you if you have provided and we have maintained an email address for you.
10. Information from Cookies and Similar Technologies
We and our service providers (for example, Google Analytics as described in section 1 above) may collect information using cookies or similar technologies for the purposes described above and below. Cookies are pieces of information that are stored by your browser on the hard drive or memory of your computer or other Internet access device. Cookies may enable us to personalize your experience on the Services, maintain a persistent session, passively collect demographic information about your computer, and monitor advertisements and other activities. The Websites may use different kinds of cookies and other types of local storage (such as browser-based or plugin-based local storage).
11. Non Personal Browsing and Site Usage Information We Process and Collect
12. No Linking
We do not intentionally link browsing information or information from our CC Login Services server logs to the personal information you submit to us. We use this information for internal purposes only, such as to help understand how the Services are being used, to improve our Services, and for systems administration purposes. CC may use a third party analytics provider (for example, Google Analytics as discussed in section 1 above) to help us collect and analyze non personal browsing and site usage information through operation of our Services for those same purposes.
In connection with your use of the Services, you may tag content, create lists of favorite content, and do other things to personalize your experience. You should not, however, tag other persons or post photographs or other images or likenesses without that other person’s express consent. This information will be retained by Creative Commons in connection with the relevant CC Login Service.
13. No Selling or Sharing
14. No Access; More about CC Login Services
As a provider of CC Login Services, CC could access your web-based account tied to such services, and could log in on behalf of any of Registered Users to any of the accounts they have accessed using the CC Login Services. Creative Commons will never use this technical login ability for any purpose except as required by law.
15. Data Retention
When a CCGN membership application is rejected or accepted, the personal information that was collected from the applicant and from the voucher will be deleted after 21 days of CC’s sending out the decision, with the exception of the voucher’ decision (e.g., vouch for applicant / does not vouch for applicant) and your then-existing or prior affiliation(s) as or with a CC affiliate. Personal information submitted by someone acting as a voucher and collected for the purpose of providing a voucher for an applicant that is rejected or accepted will be deleted after 21 days from the time CC sends out its decision, with the exception of the voucher’s actual decision (i.e., whether or not he or she vouched for the applicant, but none of the statement(s) that he or she may have provided).
17. Reorganization or Spin-Offs
The Services are not directed at children under the age of 13. Consistent with the U.S. federal Children’s Online Privacy Protection Act of 1998 (COPPA), we will never knowingly request personal information from anyone under the age of 13 without requiring parental consent. Our Master Terms specifically prohibit anyone using our Services from submitting any personally identifiable information about persons under 13 years of age. Any person who provides their personal information to CC through the Services represents that they are 13 years of age or older.
19. Third-Party Sites
20. Special Note to International Users
The personal information you provide to Creative Commons when you apply for CCGN membership will be shared with the members of the Membership Council (interim and/or permanent) for the purpose of making a decision on your application. These members may be located in countries other than the country in which the information was originally collected, for instance Colombia, El Salvador, Australia, Canada, Malaysia, Argentina, South Korea, Poland, Ghana, Brazil, United States, Japan, the Netherlands, Chile, and Guatemala. The data protection laws of such countries might not provide a level of protection equivalent to the laws in your jurisdiction. Creative Commons will exercise appropriate due diligence in the selection of such members, and require that these members maintain adequate technical and organizational security measures to safeguard the personal information and process the personal information only as instructed by Creative Commons and for no other purposes. Data transferred from the European Union to the United States or outside the European Union will be made on the grounds of a certification to the E.U./U.S. Privacy Shield regime and/or a data transfer agreement based on the Standard Contractual Clauses approved of by the European Commission respectively, consistent with applicable data privacy requirements.
21. Accuracy of Personal Information Collected
Creative Commons intends to keep personal information accurate and up-to-date. We also retain personal information no longer than is necessary to carry out the purposes described in section 3 above, or as required by law. If changes need to be made to your personal information, please notify us (as identified below, see the “Questions” section) right away. If you inform us of changes or we otherwise become aware of any factual inaccuracies in personal information, we will promptly make changes as appropriate. You also have the option to update some of your personal information yourself via your Creative Commons account or profile if you have one.
22. Access to Personal Information
Along with all other rights granted to you under applicable laws, you may at any time request to be informed of personal information that Creative Commons holds. If you wish to access such personal information, you should apply in writing to Creative Commons (as identified below, see the “Questions” section). You are generally entitled to access personal information that Creative Commons holds and to have inaccurate data corrected or removed to the extent CC still maintains it. In certain circumstances, you also may have the right to object for legitimate reasons to the processing or transfer of personal information.
If you applied for CCGN membership or acted as a voucher for an applicant, you are generally entitled to access the personal information that Creative Commons holds at the time of your request. However, with the exception of the voucher’ decision (e.g., vouch for applicant / does not vouch for applicant) and the applicant’s past affiliation(s) with a CC affiliate institution, please note that such data will only be retained by Creative Commons for 21 days of CC’s sending out the decision, as described in section 15 above. Thereafter, any other personal information related to the membership application process, including any vouchers’ personal statements or submissions, will be deleted.
Effective Date: 7 November 2017. For an archive of previous CC privacy policies, see here.