2. Personal Data and Special Categories of Data
For the purpose of performing AMPP’s information and related services with respect to surface preparation, coating selection, coating application, environmental regulations, and health and safety issues that affect the protective coatings industry (as further detailed below, the “Services”), we collect the types of personal information described below (“Personal Data”).
- Personal Information – The personal information we collect about you depends on how you choose to use our website and our services. As a result, we may collect personal details about you, including without limitation legal name, place of residence, telephone and fax numbers, email addresses, birthdate, age, employment-related information (including without limitation employer, position, time of service etc.), education-related information (including without limitation high school and college transcripts, majors, etc.), banking information (including without limitation credit card and checking information), other certification-related information and may include your IP address.
- Special Categories of Data (Consent) – We may ask our members and customers if they are members of any trade unions and such information shall be processed solely as described in Section 4(c) below. Additionally, we may collect the first name of the spouse of each of our Board Members as further detailed below. To the extent such spousal information reveals information about your sexual orientation, such Personal Data may constitute a special category of data under the GDPR.
- Cookies – Website usage information is collected using cookies.
3. How AMPP collects and uses Personal Information
We collect Personal Data in a variety of ways including, without limitation: via phone call, our website (including without limitation when you sign up for courses, apply for certification or a scholarship, purchase a product or service, register for a conference or event, register for training or other educational course, submit your name for a committee or board position or for other employment with us, etc.), information submitted via email, physical mail, online or physical questionnaires or forms, business cards collected by AMPP and/or our affiliates or service providers while at events, conferences, or otherwise, orally, or otherwise collected by us during our provision of services in the ordinary course of business. We may also collect Personal Data from third-party sources, with the understanding that we take steps to obtain assurances from such sources that you gave your consent to the sharing of such information when you provided such information to such third party.
Personal Data Processing, Use and Data Retention - Subject always to your rights as set forth in Section 9 below:
We process Personal Data in various ways depending upon your use of our websites. We process Personal Data on the following bases: (1) with your consent; (2) as necessary to perform a contract when you request services; and (3) as necessary for our legitimate interests in providing you with our products and services, enhancing our web services, conducting analytics and delivering relevant advertising.
- AMPP Services– “AMPP Services” hereunder include: AMPP membership services for individuals and entities who have registered and paid for AMPP membership, audits and certifications of contractors against specified standards, setting up, and operating, conferences and events for people in our industry under the AMPP banner, or for others, industry certifications for individuals and entities (including publishing a searchable, public directories of certified individuals and entities), and selling and offering industry-related online courses . We use Personal Data that we collect hereunder as necessary to provide the AMPP Services as requested by you, including without limitation processing applications and registrations to participate in AMPP Services (membership, certification, classes, conferences, etc.) communicating with you about the AMPP Services, and providing you with the benefits of AMPP Services.
- Directories– Certain aspects of AMPP Services will involve the publication of Personal Data in a directory format. In many cases, we view such publication as a necessary and integral part of providing you with the benefits of the AMPP Service you have requested. For example, one of the benefits of successfully completing a AMPP certification program, is that we will declare your certification publicly by adding your Personal Data (name, contact information, gender, company affiliation, position, educational experience and other certifications) to a public, searchable online directory so that individuals and companies seeking to engage the services of certified individuals and contractors can contact you. Similarly, when you become an AMPP member, we will include all of your relevant Personal Data for contacts in a restricted access membership directory (e.g., name, title, company affiliation, mailing address, email address and phone number) which can only be accessed through our website by other members. Also, when you register to participate as an exhibitor at one of our conferences or events, we will include you in a directory of exhibitors that may be published/made available through our website, other promotional materials promoting the conference or event and/or distributed or made available to attendees. In other instances, we may identify you by name, title, company affiliation, and/or mailing address when you join our Board, our Advisory Council or one of our SME Committees. In addition, Advisory Council directory publications may also include the email address and country information for Council members. In some cases we are required by applicable law to identify you (e.g., certain tax filings require listing of Board members) and in other cases we will do so when there is a legitimate interest that is addressed by such identification that is not overridden by your data protection rights as required by applicable law (e.g., publication of basic identifying information for participation in SME Committees to satisfy legitimate interests to establish credibility, accountability, transparency, etc.). In other cases, when required, we will ask for your express consent to our inclusion of your Personal Data in directories (for example, when required we will ask for you consent to include specified Personal Data in an attendee directory provided to interested exhibitors when you register to attend one of our conferences or other events).
- Union Membership (Consent) – We may collect information about you regarding your union membership status or affiliation. We process this information solely for purposes of determining union status so that we may offer you special union-member discounts, to verify your eligibility to participate in union-specific programming that we may offer, and to send you invitations and other marketing materials and communications in connection with the foregoing. We will only process such information for such purposes with your express consent.
- Accounting and Billing– We may use Personal Data for our own administrative, accounting, and business needs including billing, invoicing, internal accounting and record-keeping requirements as well as other related administrative and business purposes. Certain processing is undertaken as necessary to complete a contract for services (collecting payments, making payments for authorized transactions such as membership fees, registration fees, payment for services rendered, etc.). In other instances, our processing of Personal Data as described in this paragraph is required for us to fulfill legal obligations to which we are subject (e.g., record keeping mandated by applicable law).
- Scholarships – We may offer, from time to time, scholarships to pre-college, college and/or post-college students (“Scholarships”). We use Personal Data that we collect hereunder as necessary for purposes of our Scholarships as requested by you including without limitation, processing your application, contacting you regarding the Scholarship and otherwise as necessary in connection with the Scholarships. You acknowledge and agree that only AMPP members (or their children or grandchildren) are eligible for our Scholarships. Therefore, if you are applying for a Scholarship, you agree that you will either have satisfied the membership requirement before you apply for a Scholarship or, if not, then for your convenience and with your express consent, when we process your application for a Scholarship, we will use Personal Data that you provide as part of your application to enroll you in a free student membership with AMPP. We will ask for your express consent before using your Personal Data to enroll you in a free student membership as described above, and you are free to grant, or withhold, such consent. In the event that you withhold, refuse or withdraw your consent with respect to the foregoing, your scholarship application will still be processed and reviewed, but you must still meet all of the eligibility criteria to be considered.
- AMPP Service Roles – As part of the Services, we hire and/or locate instructors, teachers and speakers, seek and obtain candidates for our board, seek and obtain members for certain “subject matter expert” committees and advisory councils related to our industry, and grant certain people the right to our courses on our website for their own purposes (collectively, the “AMPP Service Roles”). We use Personal Data that we collect hereunder as necessary in connection with the AMPP Service Roles as may be requested by you from time to time, including without limitation communicating with you about the AMPP Service Roles, sharing your name and other Personal Data to identify you as a candidate for Board Membership on ballots, completing and processing applications for board, committee and/or council positions, paying you (if applicable) in connection with the AMPP Service Roles, and otherwise as necessary in connection with the AMPP Service Roles.
- Legitimate Interests – We may also use Personal Data collected hereunder in circumstances other than as expressly described above in connection with the services we provide and/or our own operations; provided, however that any such additional processing may only occur when there is a legitimate interest to do so that is not overridden by your data protection rights as required by applicable law. The types of processing/uses contemplated hereunder may include, without limitation, for our own administrative and business needs, audits and self-assessments for compliance with applicable laws, regulations, court order, and applicable firm or Employer policies, for information technology purposes including without limitation trouble shooting, business continuity, disaster recover, data backup and recovery.
- Personal Data Retention – We generally retain Personal Data in accordance with and for the time periods required by our document retention/filing polices and applicable retention requirements imposed on us by applicable law, rule, regulation or court order, unless there is reasonable basis for retaining such data for a longer period (including, without limitation, in connection with the establishment, exercise or defense of legal claims).
a. General Website Usage Information
To monitor site usage and improve the quality of our website, we gather general information about the use of our website. We use web server logs and industry-standard website statistics software to count the number of visitors to our website, the number of views of particular pages, and to track other general statistics. We do not track individual users on our website./p>
b. Information Collected to Process Payment Transactions
When users of our website or our internet services apply for or renew membership, order products, and register for courses, conferences or other events, they will be required to create a user profile where we will acquire Personal Information necessary to process the transaction. This may include your name, address, telephone and fax numbers, email address, and credit card number or other payment information. Payment information is only collected to process a transaction, using a secure transmission method, and it is stored in an encrypted format. Reasonable measures are taken while processing transactions to ensure that payment information is not vulnerable to theft or interception. AMPP will not store or distribute your payment information in any manner that is not necessary to process a transaction.
c. Email Addresses
When contacting AMPP at any of the email addresses used for member and non-member customer assistance, we may ask for certain Personal Information, such as your member ID number, name, email address, telephone number, or fax number. When collected for this purpose, the information is used to verify identity and to provide the assistance you are requesting. Users can update their Personal Information, change their passwords, and customize email delivery preferences by logging into their profile or emailing firstservice@AMPP.org.
d. User Information
AMPP offers member users certain features and services through restricted access to members-only content on our website. All users can access and update their User Profile, which consists of Personal Information we have collected from each user as part of their membership application, membership renewal, registration for an event, or subscription to an internet service. Users can update their Personal Information, change their passwords, and customize email delivery preferences. User Profiles are maintained for every user in our database. Users can elect to keep their profile information private from other users; and non-member users cannot view or access any User Profiles.
If a user has consented, we may use Personal Information to distribute marketing materials to users by mail, fax, or email. Users are always free to withdraw consent by contacting us at firstservice@AMPP.org. If you have received a marketing email, you may withdraw your consent at any time by clicking the unsubscribe link you will find in every email.
However, electing not to receive any of these communications may mean that you will not receive important notices about your membership, events, or services that may be useful to you.
AMPP provides its members with a Membership Directory. Members may request that their Personal Information not be included in the AMPP Membership Directory.
If you are a member and wish to elect to not be included in the Membership Directory, please contact us at firstservice@AMPP.org.
g. Information Collected to Secure Access to Members Only Content
AMPP requires a login and password for each member who wishes to access the members-only content online. We use the login and password to verify members’ identities and prevent unauthorized access to members’ Personal Information. Only a small number of AMPP employees have access to this information. This information is accessed only when necessary, to provide members with online account-related information, provide technical support to members, or diagnose or repair problems with members-only content, and is not otherwise disclosed to anyone, other than the member or his or her designee, unless compelled by law.
We also allow users to elect to have the website remember their login information between visits so they do not have to log in each time. This is done by checking a box labeled “Remember me” on the login page. This feature requires the placement of a small text file called a persistent cookie (see next section) on the member’s hard drive. The cookie tells the site that the member has logged in before. It does not actually contain the member’s password or other login information.
h. Cookies and Other Tracking Technologies
Most Web browsers have a setting to turn off the automatic acceptance of cookies. If you do not want to accept cookies from our website, use the internet Options or Preferences menu items in your browser to turn cookies off or receive warnings when cookies are sent to your computer. However, you should be aware that significant portions of our website will not function properly if you do not accept cookies.
i. Google Analytics
Optional Data Processing
In addition to processing Personal Data in the ways set forth above, you may also choose to allow us to use certain Personal Data at your direction and/or with your express consent, as detailed below. The types of data processing described in this Section 5 are not necessary or integral to the performance of AMPP Services and we will not use Personal Data for such optional purposes except as expressly set forth in this Section herein;
- Information Requested– If you request information about us or our products and/or services, you may elect to provide Personal Data. We will use such Personal Data to respond to your request.
- Marketing (Consent)– From time to time we may offer you the option of signing up, or having us sign you up, for various mailing lists, emailing list or other directory-related list used to send communications from us for purposes of keeping our members and prospective members updated with respect to developments in our Services, our industry, conferences that we or our service providers operate, or otherwise (“Marketing Updates”). In order to register you on such lists, we will ask for your Personal Data. We will specifically ask for your consent to use such Personal Data on an opt-in basis and contact you with such Marketing Updates from time to time.
- Information Provided by Non-Members– From time-to-time customers of our services or products and visitors to our websites, conferences and other programs (in each case who are not members of ours), may provide us with Personal Data, and we may keep such Personal Data and use it to market and communicate with such persons about our products and services; provided that we will ask for your express consent to use such Personal Data for such purposes.
4. Sharing of personal information
AMPP may share your Personal Information with third parties that we employ from time to time to assist us in processing memberships, processing certifications, processing payments, marketing, and managing events and classes. Those third parties will have access to certain Personal Information to the extent necessary to perform those services for us. We limit the use of all such Personal Information by these third parties to the performance of such services. We take reasonable steps to obligate these third parties to handle Personal Information appropriately and confidentially.
As explained above, if you are a AMPP member and have consented, AMPP may share your name and contact information with other AMPP members in our Membership Directory.
- Performance of Services – In order for us to perform Services we disclose Personal Data hereunder to third parties as we may be directed in the course of providing Services.
- Advisory Committees (Consent)– We may provide Personal Data to our international Advisory Committees for the purpose of allowing such committees to communicate with our members and customers about committee activities, participation and potential participation on Advisory Committees. We process Personal Data in this manner only with your express consent.
- International Licensees and Resellers (Consent)– We may provide Personal Data to our international resellers and licensees so that such resellers and licenses may market their respective products and services with respect to AMPP course content to you. We process Personal Data in this manner only with your express consent.
- Exigent Circumstances– In addition to the disclosures set forth above, we will disclose Personal Data about you: (1) if we are required to do so by law or legal process, (2) to law enforcement authorities or other government officials, (3) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss in connection with an investigation of suspected or actual illegal activity; or (4) if necessary, to protect the vital interests of any person.
5. Access to information and correction
Users can access and change their profiles by signing into their accounts. Users may also delete their account by selecting this setting in their profile.
At a user’s request, we will inform a user what Personal Information we have stored about the user and explain why that information is stored. If we have incorrect information about you, we will correct it promptly upon recognition or at your request. In these cases, please contact us at firstservice@AMPP.org.
At a user’s request, we will inform a user what Personal Information we have stored about the user and explain why that information is stored. If we have incorrect information about you, we will correct it promptly upon recognition or at your request. In these cases, please contact us at firstservice@AMPP.org. If deletion of your data is not possible for technical or legal reasons, we will block the respective data instead.
6. Retention of personal information
AMPP will retain the Personal Information for 12 years or indefinitely for certification holders.
7. Children under the age of 13
Our website is not intended for children. No one under age 13 may provide any Personal Information on our website. AMPP does not knowingly collect Personal Information from children under 13. If we learn we have collected or received Personal Information from a child under 13, we will delete that information. If you believe we might have information from or about a child under 13, please contact us at: firstservice@AMPP.org.
8. Links to other websites
The AMPP website and many of our print and electronic publications contain many links to other websites. Content and links to other internet sites should not be construed as an endorsement of the organizations, entities, views, or content contained therein. AMPP is not responsible for the content or links posted by others on these social media sites.
These other websites may send their own cookies to users, collect data, or solicit Personal Information. AMPP is not responsible for the privacy practices or the content of these other websites. Please check the other sites to access their privacy policies and determine how they may collect or use information.
9. Your Rights and Options
- Generally – If you have any questions or concerns about our privacy practices or the Personal Data we store and process about you, please contact us as outlined herein.
- Access and Confirmation – You have the right to ask us if we process Personal Data about you, and in some circumstances, to obtain a copy of your Personal Data.
- Deletion and Blocking – Under certain circumstances, you may have the right to have your Personal Data deleted or blocked without undue delay.
- Direct Marketing – You have the right to object to our processing of Personal Data for direct marketing purposes.
- Consent – To the extent we are processing Personal Data on the basis of your consent, you have the right to withdraw consent at any time.
- Data Portability – Under certain circumstances, to the extent we are processing your Personal Data on the basis of consent, or that it is necessary to perform a contract with you, and the processing is carried out by automated means, you have the right to receive the Personal Data in a structured, commonly used and machine-readable format.
If you are based in the European Economic Area (“EEA”) – You have rights under the GDPR to: (i) access your Personal Data by asking us in writing for a copy of your Personal Data; (ii) to review and correct inaccuracies in your Personal Data; (iii) delete Personal Data that is no longer necessary or relevant; (iv) restrict processing of your Personal Data; and (v) to receive a copy of your Personal Data in a structured machine-readable format. Additionally, you can object to the continued processing of your Personal Data hereunder in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement). Likewise, where we rely solely on your consent as our grounds for processing your Personal Data above, you may withdraw your consent at any time; subject to the limitations and disclosures set forth above regard the effect such demands, or withdrawals may have on our ability to continue providing the products and/or services in the manner originally requested.
To exercise those rights,
Right to Lodge a Complaint. You have the right to lodge a complaint about our data collection and processing actions with the supervisory authority in your country.
You may also object to processing that is described above as being based on our legitimate interests alone. In such instances, our business interests must be found to be compelling and to not jeopardize your individual rights before further processing may continue.
Your rights above are subject to certain limitations under the GDPR and the CCPA.
In order to meet our obligations under applicable law, we may take reasonable steps to verify your identity before responding to demands as set forth.
If you have unresolved concerns about the processing of your Personal Data, you may have the right to complain to a data protection authority where you reside, where you work or where you believe there has been an infringement of data protection laws, all in accordance with, and subject to, applicable local law.
9a. Your California Privacy Rights
If you are you are a resident of the State of California and AMPP has an established business relationship with you, then you have certain privacy rights pursuant to Section 1798.83 of the California Civil Code. You have the right to request the following at any time: (a) information from AMPP free of charge regarding the manner in which AMPP shares certain Personal Information collected through the website with third parties who use that information for direct marketing purposes; and (b) the discontinuation (or opt-out) of AMPP’s sharing of the information with those third parties. Please submit any requests (“California Privacy Rights Request”) to firstservice@AMPP.org. with a subject line of “Your California Privacy Rights.”
For each California Privacy Rights Request, please state “Your California Privacy Rights” in the email or letter subject line, and clearly state the following in the body:
a. the nature of your request;
b. that the request is related to “Your California Privacy Rights;”
c. your name, street address, city, state, zip code and email address; and
d. whether you prefer to receive a response to your request by mail or email.
AMPP is not responsible for a California Privacy Rights Request that is incomplete, incorrectly labeled or incorrectly sent.
10. Tracking and Traffic Data
In addition to Personal Data that we collect hereunder, we may, through our website, collect data generated automatically by traffic our website (“Traffic Data”). Traffic Data may include, without limitation, internet protocol address(es), operating system(s) and browser specifics of your device, device characteristics, geographic (geo-location) information, user ID(s), clickstream data, and specifics regarding your interactions with (i.e., the path you take through) the website. Traffic Data may also include your mobile device information (e.g., device model, operating system version, device date and time, unique device identifiers, mobile network information) and how you use the website. These types of information do not generally identify or relate to you as an individual; however, we may associate these types of information with you as an individual.
Our website may require you to accept session “cookies” to provide customer experience and efficiencies such as enabling you to login, personalizing your experience, and/or automatically filling in standard information on return visits. “Cookies” are small pieces of information that are stored locally on your device by your browser and passed back to the server whenever a request for a new page on the site is made. The session cookie is never saved or written to disk. It is discarded when the browser exits, when you log out of the website, or when you have not visited a page on the website for a given period of time, for example 60 minutes. Most web browsers automatically accept session cookies, but most browsers also allow you to configure your web browser to refuse them or to notify you before a cookie is set. You also can manually view (and delete) any cookies stored on your computer. If you do not allow session cookies to be set, you may not be able to use our website, access the full content otherwise available through our website and/or use the full features and functionality of our website.
Our website may use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies” to help the website analyze how users use and view the website. Any information generated by the cookie about your use of our website (including your IP address, and particulars about your browser and configuration as reported by your browser) may be transmitted to and stored by Google on servers in the United States. Please note any information collected by Google Analytics cookies do not include personalized identification information (such as names, e-mail addresses, and payment information). Google may use the information collected for the purpose of enabling us to evaluate your use of our website, certain aspects of your user experience thereon, compiling reports on activity for us and providing other services relating to our website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. More information on the Google Analytics cookies are available from Google at: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage..
Enables data collection for Display and Search Remarketing. This includes data from Google's signed-in users who have chosen to enable Google to associate their web and app browsing history with their Google account, and to use such information from their Google account to personalize ads. Google Analytics temporarily joins these identifiers to your Google Analytics data in order to support your audiences. When you enable this setting, you must adhere to the Google Analytics Advertising Features Policy, including rules around sensitive categories and the necessary privacy disclosures to your end users about the data you collect and share with Google.
Advertising Reporting Features
Enables Advertising Reporting features like Audience Demographics and Interests Reporting, DoubleClick Campaign Manager reporting, DoubleClick Bid Manager reporting, and Google Display Network Impression Reporting that help you better understand your users. Learn more
AMPP may use technology such as web beacons assist to help us determine whether a web page has been viewed and, if so, how many times. As an example, Facebook collects certain information via cookies and web beacons to determine which web pages are visited. Please note that any information collected by Facebook via cookies and web beacons is not linked to any customer's personal information collected by us.
Do Not Track
HOW TO CONTACT US
AMPP is the data controller of the Personal Information (also known as “Personal Data”) you provide on our websites.
Please contact us:
By email: firstservice@AMPP.org
By phone: 281-228-6200
By fax: 281-228-6300
Attn: Website Privacy
15835 Park Ten Place
Houston, TX 77084
11. Site and data security information
Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. Accordingly, and despite our efforts, AMPP cannot guarantee or warrant the security of any information you transmit to us, or to or from our online products or services.
12. Mergers, acquisitions, and other business transactions
AMPP may decide to sell, buy, merge, or otherwise reorganize its business. If that occurs, you will be notified via email or a prominent notice on our website of any ownership change and any changes in the use of your personal data. These types of transactions may involve the disclosure of personal data to prospective or actual purchasers, or receiving it from sellers. We seek appropriate protection for personal data in these types of transactions.