INFOhio Open Space OER Commons  Platform Privacy Procedure 

Date last updated: 04/22/19

INFOhio collects limited personally identifiable information (“PII”) and non-personally  identifiable information in connection with your use of its Open Educational Resources (“OER”)  Commons Platform website and those OER Commons goods or services of INFOhio that interact  with it, including our API and mobile application (collectively, the “OERC Platform”). Please  read this Privacy Procedure carefully to obtain a clear understanding of how we collect, use,  protect, and otherwise handle your PII and non-personally identifiable information. We share  your PII only with your consent or as described in this procedure. If you do not agree to any part  of this procedure, please do not access the OERC Platform or provide us with your PII; by using  our OERC Platform, you consent to the practices described in this procedure. INFOhio reserves  the right to change this Privacy Procedure and will provide notice prior to doing so. If you have  comments, suggestions, questions, or concerns regarding our privacy procedure, please contact  us at central@infohio.org for fastest processing, please include the phrase “Privacy Procedure”  in the subject line and in the body of your message. 

Table of Contents 

1. Scope 

2. Consent to Collection & Processing in The United States 

3. How we collect Information 

o Information You Provide to Us 

o Other Information We Collect 

4. Removing or Correcting Your Information 

5. How we Use Information 

6. Disclosure of Information to Others 

7. Student Data and FERPA Compliance 

8. Security 

9. Your Personal Choice 

10. Updates to Our Privacy Procedure 

Scope 

This Privacy Procedure covers the treatment of PII and non-personally identifiable information  that we obtain when you interact with the OERC Platform. If you have participated in or used the  OERC Platform (for example, through contributing materials to the OERC Platform, adding comments, or creating a group), you will have provided PII and non-personally identifiable  information to INFOhio. PII means individually identifiable information about an individual user  collected online by INFOhio from that individual and maintained by INFOhio in an accessible  form, including your first name, last name, and email address. Information that we use internally 

to identify you as a user or Registered User of the OERC Platform (e.g., your User ID) is not  considered PII. 

This procedure does not cover the privacy practices of third parties, such as the practices of  third-party social networking services, or our partners and/or advertisers. In addition, our service  may contain links to the websites or services of third parties. Such third-party services and  websites operate independently of our OERC Platform and each has its own privacy and security  practices. We encourage you to review their policies before submitting any information to them. 

Consent to Collection & Processing in The United States

Our technology infrastructure is based in the United States. Accordingly, by using the OERC  Platform, you consent to having your information, including PII, transferred to and processed in  the United States. 

How we collect Information 

Information You Provide to Us

When you create a Registered User account we require that you provide your name and email  address. 

You may also choose to provide us with optional profile information, such as your country and  state of residence, website URL, social media account information, and the like. You are not  required to provide us with this optional information to use the OERC Platform. 

When you request assistance through or regarding the OERC Platform, you may also provide us  with additional information. For example, if you email us requesting a callback, you will provide  us with your telephone number. 

From time to time, we may contact you regarding a voluntary survey, to help us better tailor the  OERC Platform to the needs of our users. Such surveys may ask for additional PII or other  information from you. 

Other Information We Collect. 

Log Files & Analytics. Similar to many websites and internet services, we gather certain  information automatically and store it in web server log files. This information includes your  web request, Internet Protocol (“IP”) address information, unique device identifier (e.g., UDID,  MAC Address, etc.), browser type, referring / exit pages and URLs, number of clicks, domain  names, landing pages, pages viewed, web beacons, page activity, and other such information. We or entities with which we contract may analyze such data using our own analytics, Google  Analytics, or other similar third-party services. To learn more about how Google Analytics  collects and uses your data when you use this site, and how you can control the information sent  to Google Analytics, please review https://google.com/policies/privacy/partners. We use these 

log files and analytics to improve and administer the OERC Platform, to analyze trends, and to  gather information about our user base. 

Cookies. When you visit our website or use any part of our OERC Platform, one or more  cookies may be sent to your computer. A cookie is a small text file containing a string of  alphanumeric characters used to uniquely identify your browser, to help you log in faster, and to  enhance your navigation through a website. A cookie may also convey information to INFOhio about how you use our OERC Platform (e.g., the pages you view, the links you click and other  actions you take, etc.), and allow INFOhio to track your usage of our OERC Platform over time.  We use both session cookies and persistent cookies. A session cookie is temporary and  disappears after you close your browser. A persistent cookie remains on your hard drive after  you close your browser, to facilitate subsequent visits to our service. Both session cookies and  persistent cookies can be removed in the security or privacy settings of your web browser. You  can set your web browser to refuse all cookies or to indicate when a cookie is being sent,  however, some features of our OERC Platform may not function properly if cookies are disabled. 

Do Not Track (DNT). Because there is disagreement within the privacy industry about how to  interpret the DNT setting, the OERC Platform does not currently respond to DNT settings in web  browsers. 

Information Concerning Children. As explained further in our terms of use (available at  https://www.infohio.org/images/ZOO_DOCS/oer/TermsOfUseAgreementINFOhioOpenSpacePl atform2018.pdf ), you must be 18 years of age or older – or, if you are under the age of majority  in your jurisdiction, have the consent of your parent or legal guardian – to use the OERC  Platform. In accordance with the Federal Children’s Online Privacy Protection Act of 1998  (“COPPA”), we will never knowingly solicit or collect PII from those known to be under thirteen  (13) years of age. If you believe that we have information from or about anyone under thirteen  (13) years of age, please notify our Privacy Officer by email at central@infohio.org for fastest  processing, please include the phrase “COPPA Concern” in the subject line and in the body of  your message. 

Removing or Correcting Your Information. 

Via the OERC Platform. As a Registered User of our OERC Platform, you can login with your  email address and password to view and change your personal information at the URL  https://openspace.infohio.org//profile/edit. 

Contact Us. You may contact ISKME at any time, by emailing the support desk at  central@infohio.org to request that your PII be removed from the OERC Platform, or to request  that your Registered User account be permanently deleted; for fastest processing, please include  the phrase “PII Request” in the subject line and in the body of your message.

 

How we Use Information. 

To Provide You with the OERC Platform. We use your information for the purpose of  providing you with the OERC Platform. 

In Our Communications with You. We use email and/or prominent notifications on our  website as a primary means of informing our users of important OERC Platform and promotional  announcements. 

OERC Platform-Related Announcements. When you register to become a Registered User of  the OERC Platform, we use the email address provided during account creation (or any other  email address you may specify within your Registered User account) to deliver important OERC  Platform-related announcements to you. Examples of OERC Platform-related announcements  include email verification during registration, requests for password reset, important security or  server maintenance updates, upgrades, and new releases or procedure 

changes. These OERC Platform-related announcements are considered a fundamental part of the  OERC Platform; Registered Users cannot opt out of these email announcements. 

Promotional Announcements. In order to improve the experience for our Registered Users, we  may send updates from time to time. These communications are enhancements to our OERC  Platform and are entirely optional. We make it easy for you to unsubscribe from these  communications via a link in the footer of each such email you receive. If you are a Registered  User of the OERC Platform, you can also see and modify your email preferences at  https://openspace.infohio.org/profile/preferences. 

On Our Website. We may use the information we collect to calculate and publish anonymous,  non-personal, aggregate statistics that we believe our user base is interested in viewing. We  publish this data in aggregate form only, and do not publish any PII in connection with this use. 

For Internal Reporting and Analysis. As noted above, we use information gathered from log  files, cookies, and the like to improve the OERC Platform, analyze trends, administer the site,  track the movements of users around the site, and gather aggregate information about our  customers as a whole. 

Google Drive. If you choose to do so, you may import content to and/or export content from the  OERC Platform via your Google Drive account. You must authorize read access for your Google  Drive to import content from Google Drive; you must authorize write access to export content  from the OERC Platform to your Google Drive. With the exception of content that you import to  and/or export from the OERC Platform, INFOhio does not gain any additional information about  you from Google by virtue of your use of these features.

 

Disclosure of Information to Others. 

Our Commitment to Your Privacy. We are committed to responsibly handling the information  and data we collect. We share your information, including your PII, for the purpose of providing  you with the OERC Platform, and only as described in this procedure or with your express  consent. 

Sharing, Renting, & Selling Information We Collect. Except as provided herein, we will  neither rent nor sell your PII to any other third party not under our common ownership or  common corporate control. We may share aggregate information about our user base with  partners, and we may publish these aggregate usage statistics on our website for the interest of  our users. 

Services to Which We Provide Links via OERC. In some cases, we allow you to access or link  to other web services through our OERC Platform. For example, we allow you to follow us on  Twitter via a link contained in the OERC Platform. In such cases, those services may choose to  collect your personal information as they deem appropriate. As noted above, we are neither  responsible for nor in control of how third parties collect, use, or disclose information obtained  through these linked services. We encourage you to be aware when using these third-party  services and to review their policies before submitting any personal information to them. 

Third-Party Service Providers. We use other companies, agents, and/or contractors to perform  services on our behalf or to assist us with providing the OERC Platform to you. For example, we  may engage such service providers to provide marketing, communications, provide website  hosting infrastructure and IT services, personalize and optimize the OERC Platform, provide  customer service, and/or analyze and enhance data. In the course of providing such services to  us, these other companies may have access to your information. We do not authorize these  companies to use or disclose your PII, except in connection with providing the services we  request from them. 

Legal and Related disclosures. We reserve the right to disclose your information, including  your PII, when we have a good faith belief that access, use, preservation, or disclosure of such  information is necessary to (a) comply with any law, regulation, legal process, or enforceable  governmental request; (b) enforce our terms of use, including investigation of potential  violations of our terms of use; (c) detect, prevent, or otherwise address fraud, security, or  technical issues; or (d) protect against harm to our rights, property, or safety, or those of our  employees, users, or the public, as required or permitted by law. 

Infringing User Content. If we receive notice that User Content you have posted to or through  the OERC Platform may infringe the rights of thirds parties, including their intellectual property  rights, we reserve the right (in our sole discretion) to disclose information, including PII, about  you to those third parties, so that they can contact you directly regarding their concern. 

Acquisition. If we become involved in a merger, acquisition, reorganization, or any form of sale  of some or all of our assets, including bankruptcy, our assets, including Registered User account 

information and PII, may be transferred to a third party. At that time, your information may  become subject to that third-party’s privacy procedure. 

Student Data and FERPA Compliance. 

Student Data. The OERC Platform is neither intended nor designed to receive or house student  data submitted by students. Any student information submitted by educators on behalf of  students must keep the student identity anonymous. Any student information unknowingly  collected by INFOhio is provided by educators on behalf of students, or by students themselves. 

FERPA Compliance. If you are a school administrator or teacher in the United States and want  your students, who are over age thirteen (13), to use our OERC Platform, including in  conjunction with the establishment of an account for your school or a group of students at your  school, you are solely responsible for complying with the U.S. Family Educational Rights and  Privacy Act (“FERPA”). This means you must notify those students’ parents/guardians of the PII  you will collect and share with INFOhio and obtain parental/guardian consent before your  students establish accounts or use our OERC Platform. When obtaining such consent, you should  provide parents/guardians with a copy of our Terms of Use Agreement. You must keep all  consents on file and provide them to us if we request them. If you are located outside of the  United States, we will rely upon you to obtain any required consent or approval from the parent  or guardian of any student covered by similar laws and, as a condition to your and your students’  use of our OERC Platform, you will comply with such laws. 

Concerns. If you have a privacy concern with regard to students, please contact the INFOhio support team via this email address: central@infohio.org for fastest processing, please include  the phrase “Student Concern” in the subject line and in the body of your message. 

Security. 

The accounts of Registered Users are password protected. Please do not share your password  with anyone, and remember to change your password from time to time, to help keep your  account secure. Also, remember to sign off your account and close your browser window when  you have finished your visit to the OERC Platform. This is to help ensure that others cannot  access your account, especially if you are sharing a computer with someone else or are using a  computer in a public place such as a school computer lab, a library, or a cafe with an internet connection. 

Unfortunately, no data transmission over the internet and no data storage can be 100% secure.  Consequently, while we will use reasonable efforts to safeguard your information against  unauthorized access and disclosure, we do not warrant or guarantee the security of any  information you transmit.

Both we and our partners maintain standard physical and electronic procedural safeguards that  limit access to your PII and other data to employees (or people working on our behalf and  pursuant to confidentiality obligations) who, through the course of standard business activities or  provision of the OERC Platform, need to access your PII or other data. 

Your Personal Choices 

Accessing and Editing Your Personal Information. As noted above, Registered Users may  view, edit, and/or delete certain information they have submitted to the OERC Platform; that  information is available for editing via the link https://openspace.infohio.org//profile/edit. 

Receiving Communications. If you subscribe to an optional promotional communication  through the OERC Platform, you will be able to unsubscribe via a link in the footer of each such  email you receive, or via https://openspace.infohio.org/profile/preferences. 

Editing / Deleting Your Account. You may contact INFOhio at any time, by emailing the  support desk at central@infohio.org to request that your PII be removed from the OERC  Platform, or to request that your Registered User account be permanently deleted; for fastest  processing, please include the phrase “PII Request” in the subject line and in the body of your  message. 

Updates to Our Privacy Procedure. 

From time to time, we review and may make changes to our privacy procedure. If we make  material changes to the procedure, we will notify you that the procedure has changed either by  emailing you or by placing a notice on our website. The most recent version of our privacy  procedure is always available from a link on our homepage at 

https://www.infohio.org/images/ZOO_DOCS/oer/PrivacyProcedureINFOhioOpenSpace.pdf If you have any questions regarding our Privacy Procedure, please contact us at:  

INFOhio 

Attn: Privacy Procedure Request 

1500 W. Lane Ave. 

Columbus, OH 43221 

USA 

Tel: 614-947-7900 

Email: central@infohio.org