Privacy Policy

Donor Privacy Policy

For privacy information related to financial and in-kind donors, read the CHEST Foundation Donor Privacy Policy.

Child Privacy

The CHEST Foundation does not knowingly collect or use any personal information from any person younger than 18 years of age. If you are younger than 18 years of age, please do not access or use CHEST Foundation websites. If CHEST Foundation becomes aware that our systems have collected any personal information from persons younger than 18 years of age, CHEST Foundation will delete that data from our systems.

Overview

CHEST Foundation is committed to protecting the privacy of its donors and constituents. CHEST Foundation maintains safeguards to store and secure information about all company and individual records in its possession. The safeguards may be physical, electronic, or procedural. This Privacy Policy (“policy”) describes: (1) how CHEST Foundation collects information from its websites and through other voluntary interactions with CHEST Foundation (eg, monetary or in-kind donation to the CHEST Foundation, subscription to a CHEST Foundation publication, purchase of a CHEST Foundation product, registration to a CHEST Foundation event, participation in a donor survey), and (2) how CHEST Foundation uses this information. With respect to websites, please note that this policy applies only to CHEST Foundation websites and not to the websites of unrelated third-party companies or organizations to which CHEST Foundation provides links or to any software that may be downloaded from CHEST Foundation websites.

What Information Does CHEST Foundation Collect?

CHEST Foundation collects two types of information: (1) nonpersonally identifiable information for everyone who visits its websites, and (2) personally identifiable information for donors, registered website users, and anyone who purchases products, events, and services, or requests information.

Nonpersonally Identifiable Information

CHEST Foundation collects nonpersonally identifiable information from users who are browsing the public areas of CHEST Foundation websites. Once a user submits personally identifiable information, subsequent visits to public areas of CHEST Foundation websites are no longer anonymous. When you visit any website, its server may generate a piece of text known as a “cookie” to place on your computer. The cookie allows the server to “remember” specific information about your visit while you are connected. The cookie makes it easier for you to use the dynamic features of web pages. CHEST Foundation employs cookies to collect information about all visitors to CHEST Foundation websites, including pages viewed and the order visited, terms used in searching CHEST Foundation websites, and products/events investigated or purchased. CHEST Foundation uses cookies to improve the website and to provide more personalized services both on this website and through other media, including helping determine which services are most important and to guide editorial and business decisions. Cookies from CHEST Foundation pages collect only information about your browser’s visit to the site. They do not collect personal information about you.

Users who do not desire the functionality offered by cookies may disable cookie functionality in their browsers or through settings on their devices; however, users who do so may not be able to use some features of CHEST Foundation websites. For example, a registered user must have cookies enabled in order to access the registered-user sections of CHEST Foundation websites.

CHEST Foundation may share aggregated or anonymous information that cannot identify you with third parties.

For system administration and troubleshooting, CHEST Foundation also logs the originating internet protocol (IP) address, the browser and operating system used, and information about individual use, such as time and date of visits, duration of sessions, and other similar usage or system data.

Personally Identifiable Information

In addition to the nonpersonally identifiable information listed above, CHEST Foundation records the user’s name and ID number for all registered users (ie, users who have logged into a password-protected area of a CHEST Foundation website). In the course of using CHEST Foundation websites, a user may be asked to provide personally identifiable information (eg, name, address, zip code, email address, telephone number, fax number, credit card payment information) to make a donation or register for an event, participate in a CHEST Foundation activity, subscribe to a publication, request information, or otherwise interact with CHEST Foundation. In addition, users may be asked to update their contact information.

The CHEST Foundation also collects email addresses voluntarily provided via donation forms, event registrations, donor surveys, downloads of certain materials, email communication sign-ups, and comments made in discussion threads on CHEST Foundation websites.

Important Note for CHEST Foundation Donors and Constituents: CHEST Foundation also maintains a customer relationship management database. The information in this database (eg, National Provider Identifier [NPI] numbers, demographic information [eg, education, specialty]) is drawn from donation payment forms, applications, product orders, continuing medical education reporting, public databases, donor surveys, and other correspondence between CHEST Foundation and its donors and constituents.

CHEST Foundation does not disclose the credit card account information or activity of its donors. When donors pay using credit cards, CHEST Foundation submits this information encrypted to obtain payment from the appropriate clearing house. Credit card numbers are never stored in CHEST Foundation databases. CHEST Foundation auto-pay via credit card uses token technology, and credit card numbers are not stored.

How Does CHEST Foundation Use Information Collected?

The CHEST Foundation uses the information it collects to better serve donors, constituents, and visitors to CHEST Foundation websites in the following ways.

CHEST Foundation Services and Products

CHEST Foundation uses information collected to improve its web content, to respond to visitor needs and preferences, and to develop new products and services. For example, the CHEST Foundation will combine nonpersonally identifiable information (eg, data stored in cookies, user’s IP address) with personally identifiable information (eg, user’s name, ID, email address) to offer content that may be of specific interest to the user.

Disclosure to Third Parties

If CHEST Foundation discloses personally identifiable information to contracted third parties, CHEST Foundation requires that these providers agree to keep confidential all such information and to use it only for the purposes designated by CHEST Foundation. CHEST Foundation will only disclose personally identifiable information to contracted third parties that provide sufficient guarantees in respect of the technical and organizational security measures governing the processing to be carried out and that demonstrate a commitment to compliance with those measures. The information used by any contracted third party will be preapproved by the CHEST Foundation.

CHEST Foundation may make personally identifiable information available to contracted third parties in connection with CHEST Foundation programs and events or for other purposes that might be of interest to you as a CHEST Foundation constituent.

CHEST Foundation may make personally identifiable information available to contracted third parties that offer their own products or services deemed of potential interest to donors and constituents of CHEST Foundation. For example:

• Mailing purposes to CHEST Foundation donors and members about the foundation
• Mailing invitation to CHEST Foundation donor-only event
• Contractors of CHEST Foundation who work on behalf of the foundation for donor engagement

CHEST Foundation may make personally identifiable information available to our partners and sponsors when you request access to their offerings, benefits, communications, or content.

CHEST Foundation may make personally identifiable information available to our third-party contractors and payment processors who perform services for us in connection with the websites, or to complete or confirm a transaction or series of transactions that you conduct with us.

CHEST Foundation may make personally identifiable information available to service providers or suppliers when the information enables that party to perform business, professional, or technical support for us.

CHEST Foundation may make personally identifiable information available about you to comply with the law, applicable regulations, governmental and quasigovernmental requests, court orders, or subpoenas. In addition, CHEST Foundation may disclose personally identifiable information about you in order to (a) enforce our Terms of Use or other agreements, or (b) protect our rights, property or safety or the rights, property, or safety of our users or others. CHEST Foundation reserves the right to release information to law enforcement or other government officials, as CHEST Foundation, in our sole and absolute discretion, deem necessary or appropriate.

Links to Other Websites and Social Media

CHEST Foundation websites may contain links to other websites. However, this Privacy Policy only addresses CHEST Foundation’s use and disclosure of your information collected on our websites, if any. CHEST Foundation is not responsible for the privacy practices of any third parties or the content of linked websites. CHEST Foundation directs users to read the applicable privacy policies and terms and conditions of third parties and their websites. CHEST Foundation makes every effort to link only to websites that align with CHEST Foundation data standards and respect for privacy.

CHEST Foundation websites include the ability to link to social media channels and social channel websites. As a result, CHEST Foundation receives information about users when they choose to post or otherwise share information about CHEST Foundation on these social platforms. CHEST Foundation may leverage that information in various ways, including enhance user experience with CHEST Foundation websites or to communicate with users about CHEST Foundation offerings and activities.

CHEST Foundation may use outside marketing companies to place and monitor advertisements or links on CHEST Foundation websites and on other websites. These companies may use nonpersonally identifiable information (eg, links clicked during a visit, browser type, time and date, subject of advertisements clicked or scrolled over) and personally identifiable information (eg, NPI number) during user visits to CHEST Foundation websites and other websites to provide advertisements about products and services likely to be of interest to users.

Protection of Your Data

CHEST Foundation has significant protections in place to ensure the privacy of your personal information. The CHEST Foundation donor database is implemented and designed to protect personal information. Individuals are asked to provide only the minimum information necessary when making a donation or registering for an event. Multiple layers of physical, administrative, and electronic protections are in place to protect all information from unauthorized use, access, or malicious activity. Personnel procedures and processes have been developed with an emphasis on privacy.

The CHEST Foundation system is audited by independent third parties. Effective donor privacy and security are top priorities as part of our overall mission to provide our services to constituents.

Email

Once someone voluntarily provides an email address, CHEST Foundation uses that information to email that person with questions, transaction follow-up, promotions, and communications. CHEST Foundation collects data to track the effectiveness of emails, enabling CHEST Foundation to better serve its audiences.

As noted earlier, there are instances in which CHEST Foundation will share email addresses of its donors or constituents with outside service providers who are under an obligation of confidentiality and restricted use. Release of email addresses is governed under strict contractual licensing guidelines and can only be used for specific purposes.

All CHEST Foundation marketing emails and those of third parties include a link for unsubscribing. CHEST Foundation will apply any unsubscribe request as quickly as possible. However, because there may be email campaigns already in progress, some messages may still be sent until the opt-out request can be fully processed. Once the opt-out is processed by CHEST Foundation and all of its partners, that email address will no longer receive marketing or promotional emails from CHEST Foundation. Email addresses are still used in support of specific transactions (eg, membership renewal notice, order confirmation).

Opt Out

Donors, constituents, and registered website users may choose not to have information released from CHEST Foundation. This is done by requesting that CHEST Foundation designate a record as “no contact.” The “no contact” status of a record ensures that information will not be licensed for purposes of marketing via email, mail, or phone. To opt-out via “no contact” designation, contact the CHEST Foundation Help Team by phone at +1 (800) 343‑2227 or email chestfoundation@chestnet.org.

Market Research Opt-Out

From time-to-time, CHEST Foundation users may be invited to participate in surveys, focus groups, and/or research panels. Participant contact information, including name, phone number, address, and email address, may be used by CHEST Foundation to carry out the survey or communicate about the survey, focus groups, and/or research panels and to provide incentives for participation. Participation in any type of research is completely voluntary. If you prefer not to be contacted to participate in future surveys, focus groups, panels, or other opportunities, call the CHEST Foundation Help Team by phone at +1 (800) 343-2227 or email chestfoundation@chestnet.org.

External Relationships

CHEST Foundation has agreements with other organizations that offer products and services through CHEST Foundation websites or third-party agreements. When the user interacts with these organizations on their organizations’ websites, whether as a result of following links from a CHEST Foundation website, within a CHEST Foundation email, or otherwise, different rules and privacy policies may apply. Since CHEST Foundation does not control the collection of information or the use of information collected via these other organization websites, CHEST Foundation is not responsible for their privacy practices, security, or content.

Visiting or Accessing CHEST Foundation Websites From Outside the United States

By visiting or accessing CHEST Foundation’s websites, becoming a donor, or otherwise voluntarily submitting information to CHEST Foundation from outside the United States, information that CHEST Foundation collects will be transferred to servers inside the United States that may involve the transfer of information out of countries located in the European Economic Area. By allowing CHEST Foundation to collect information about you, you consent to such transfer and processing of your data.

European Residents’ Privacy Rights

In regard to the European Union General Data Protection Regulation 2016/679 (“GDPR”), the “data controller” is the CHEST Foundation, registered in Illinois, USA, with a registered address at 2595 Patriot Boulevard, Glenview, IL 60026, USA.

Residents of the European Union and European Economic Area (collectively known as the “EU”)

You have the right to ask us not to process your personal information for marketing purposes. We will usually inform you (before collecting your personal information) if we intend to use your personal information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your personal information. You can also exercise the right by contacting us by one of the methods in the Contact Us section.

Under GDPR, in certain circumstances, you have the right to (a) request access to any personal information we hold about you and related information, (b) obtain without undue delay the rectification of any inaccurate personal information, (c) request that your personal information is deleted provided the personal information is not required by CHEST Foundation for compliance with a legal obligation under European or Member State law or for the establishment, exercise, or defense of a legal claim, (d) prevent or restrict processing of your personal information, except to the extent processing is required for the establishment, exercise, or defense of legal claims, and (e) request transfer of your personal information directly to a third party where this is technically feasible.

In addition, where you believe that CHEST Foundation has not complied with its obligation under this Privacy Policy or GDPR, you have the right to make a complaint to an EU Data Protection Authority.

Governing Law

By visiting or accessing CHEST Foundation’s websites, becoming a donor, or otherwise voluntarily submitting information to CHEST Foundation, you agree that any dispute over privacy or the terms contained in this Privacy Policy will be governed by the law of the state of Illinois. You also agree to abide by our Terms of Use or other agreement that we have with you.