Your Privacy Rights

This Privacy Policy describes how the ISACA Mumbai Chapter(“hereinafter referred as Mumbai Chapter”) collects, uses, shares, and retains personally identifiable information you provide to us by way of your relevant forms for attending Review Classes / Chapter Meetings / Workshops / Conference or any other event. The Policy is effective as of Jan 1, 2020. This Privacy Policy applies only to information collected by ISACA Mumbai Chapter ("we" or "us") atwww.isacamumbai.orgIt does not apply to information collected or used by ISACA International ("ISACA") web sites, includingwww.isaca.orgor to websites of other ISACA chapters. Please visitwww.isaca.orgto know the ISACA International Privacy Policy and Your Privacy Rights. This Privacy Policy also does not cover the practices of ISACA Chapter business partners (such as vendors, sponsors, or advertisers which are separate legal entities), nor does it apply to personally identifiable information that we collect from or about our employees, consultants, contractors, vendors, sponsors, or advertisers.

Modifications to this Policy

From time to time, ISACA Mumbai Chapter may need to update or modify this Privacy Policy, including, to address new issues or to reflect changes on our web sites and mobile application. To the extent required by law, ISACA Mumbai Chapter will notify you of material changes to this Privacy Policy, including, by posting the most recent version of the Privacy Policy and information about the changes from the previous version on ISACA Mumbai Chapter web site(www.isacamumbai.org)and mobile application.

International Visitors

If you are providing personally identifiable information and are not a resident of India, your country's laws governing data collection and use may differ from those in India, in particular, India may not provide the same level of protection as those in your own country. By providing information to ISACA Mumbai Chapter, you are transferring your personal data to India, and you provide your consent to the transfer to, retention of and processing of your data in India.

Collection of Personally Identifiable Information

ISACA.org collects data of members, which is then used by the chapter as per Privacy policy of ISACA.org. Mumbai chapter may collect data of Non-Members, Past members registering at Chapter Events and Co-hosted events.

Data collected is only used for providing services under the domain of CPE events, surveys, member related services. Data is not shared with any outside companies or partners etc.

ISACA Mumbai Chapter may also maintain information about you that you do not directly provide, whether it is information received from third parties, such as business partners who provide exam administration services, or information ISACA Mumbai Chapter collects about your activities. For example, ISACA Mumbai Chapter keeps track of which events you have attended (meeting, workshops and conferences), which boards and committees you have served on, and which chapter offices you have held. Should you fail to provide some of these information, ISACA Mumbai Chapter reserves its rights to deny such CPE hours accrued to the member by virtue of attending meetings, workshops and/or conferences.

Passive Online Data Collection

ISACA Mumbai Chapter also collects certain information passively, such as collecting online, non-identifying information through the use of cookies technology and/or Internet Protocol (IP) address tracking. Non-personal identification information might include the browser used by you, the type of computer, the operating systems, Internet service providers, and other similar information. The ISACA Mumbai Chapter system also automatically gathers information about the areas you visit on the Site and about the links you may select from within the Site to other sites. Most browsers are set to accept cookies. You can set yours to refuse cookies, or to alert you when cookies are being sent; however, if you disable cookies, the full functionality of our sites may not be available to you.

On the ISACA Mumbai Chapter Site, there may be certain third-party advertisers whose advertisements contain cookies that collect data from you. Some of those cookies may contain tracking mechanisms that observe your behaviour across multiple Sites. ISACA Mumbai Chapter does not control the use of cookies by advertisers or third parties displaying data on the Site or on the sites you visit using links from the Site.

Use, Sharing and Retention of Personally Identifiable Information

ISACA Mumbai Chapter uses personally identifiable information for the purposes described at the time of collection or as otherwise described to you; to process your requests; to report to others about whether you are certified or not; as permitted by law to provide you with information about ISACA Mumbai Chapter, our products and services or other products and services in which we believe you may be interested; or for other legitimate ISACA Mumbai Chapter business purposes, including order processing, processing of certification or membership applications, or registering you for event or training programs. We may also use your personally identifiable information to tailor your experience at our sites, to compile and display content and information that we think you might be interested in, and to provide you with content according to such preferences. ISACA Mumbai Chapter also publishes the names, titles, business affiliations of officers, committee members and others who have assisted with initiatives or projects.

ISACA Mumbai Chapter may share personally identifiable information with third parties for legitimate business purposes, including for the following reasons or in the following circumstances: -

• 1. To vendors or third-parties who deliver or provide goods and services or otherwise act on behalf of or at the direction of ISACA Mumbai Chapter, which third parties include, for example, exam testing agencies and training providers and partners, product-fulfilment companies, third-party event hosts, third party websites or applications which are used for carrying out ISACA activities such as feedback forms, social member groups etc and other third parties who may provide services on web sites that are accessible from links on one of our Site and mobile application, and credit card companies processing payment;
• 2. To ISACA Mumbai Chapter volunteers and board members;
• 3. To ISACA and other ISACA Chapters, the IT Governance Institute, and if you participate in our "Enterprise Participation Program,"your information will be shared with your organization's program coordinator;
• 4. If you are an event attendee, speaker, or sponsor, certain of your information will be included in the event roster, which roster will be publicly disclosed, and may also be shared with third-party event sponsors and exhibitors;
• 5. To investigate potentially fraudulent or questionable activities;
• 6. In anticipation of and in the course of an actual or potential sale, reorganization, consolidation, merger, or amalgamation of all or part of our business or operations; and
• 7. When we believe it is necessary to cooperate with law enforcement or in response to a government request, including if specifically requested or required, as otherwise permitted by law, and for other valid ISACA Mumbai Chapter business purposes.

ISACA Mumbai Chapter also may use your profile information on an aggregate basis – without personal identifiers – to provide third parties with information, such as to help us develop new features and content for the Site, and to provide Sponsors and others with aggregate information about our users and the usage patterns of the Site.

ISACA Mumbai Chapter retains personally identifiable information for as long as necessary for its legitimate business purposes, and as otherwise permitted by applicable law.

Security

ISACA Mumbai Chapter uses reasonable measures to safeguard sensitive personally identifiable information, which measures are appropriate to the type of information maintained, and follows applicable laws regarding safeguarding any such information under our control. In addition, in some areas of our Site, ISACA Mumbai Chapter may use Secure Socket Layer (SSL) or Transport Layer Security (TLS) encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information under ISACA Mumbai Chapter control.

ISACA Mumbai Chapter cannot guarantee, however, that your information will remain secure. The Internet by its nature is a public forum, and ISACA Mumbai Chapter encourages you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online. You are responsible for protecting your username and password from third party access, and for selecting passwords that are secure.

Links to Third-Party Sites

From time to time, ISACA Mumbai Chapter will provide links to third-party web sites, or advertisements will contain links to third-party sites. For example, ISACA Mumbai Chapter may link to a third party who is assisting in or is providing online training services. These links are provided as a service to you. These sites are operated by independent entities that have their own privacy policies. ISACA Mumbai Chapter's Privacy Policy does not apply to such other sites or to the use that those entities make of your information. ISACA Mumbai Chapter has no control over the content displayed on such sites, nor over the measures, if any, that are taken by such sites to protect the privacy of your information.

Your Privacy Rights Relating to Certain Information Disclosures

If you have an established business relationship with us, you may request from us a list of the categories of personal information which we have disclosed to third parties for those third parties' marketing purposes, and a list of all third parties to whom we have shared that information. We will include in that list the names and addresses of the third parties who received the information and used it (or who we believe may have used it) for their own marketing purposes.

How to Contact ISACA Mumbai Chapter and Modify Your Information or Preferences

To exercise your rights, you may make one request each year by: Using the email IDs provided in the Contact section. Indicate in your letter that you are making a "Shine the Light" inquiry. Responses to requests sent to this email address will be provided within 30 days.

Questions regarding this Privacy Policy should be directed to ISACA Mumbai by emailing to the President listed below this policy. If you would like to modify the types of marketing email messages you receive from ISACA Mumbai Chapter, you may do so by following the instructions within the body of any email message that you receive from us.

Children

ISACA Mumbai Chapter does not believe its Site is appealing to children, nor is it directed to children under 13. ISACA Mumbai Chapter does not knowingly collect personally identifiable data from persons under the age of 13, and strives to comply with the provisions of COPPA (The Children's Online Privacy Protection Act). If you are a parent of a child under 13, and you believe that your child has provided us with information about him or herself, please email us at email IDs provided in the Contact section.

Photography Policy

Photographs and Videos taken at the ISACA-Mumbai Chapter events shall be used in ISACA-Mumbai Chapter Website, mobile application and Youtube Channel and other marketing materials.

13. This Privacy Notice is intended to provide you with information about what personal data Mumbai Chapter collects about you and how it is used.

If you wish to confirm that Mumbai Chapter is processing your personal data, or to have access to the personal data ISACA may have about you, or have other questions, please contact us via privacy@isacamumbai.org.

You may also request information through our Data Subject Access Portal about the purpose of the processing; the categories of personal data concerned; who else outside Mumbai Chapter might have received the data from ISACA; what the source of the information was (if you did not provide it directly to ISACA); where the personal data is stored and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Mumbai Chapter if it is inaccurate. You may request that Mumbai Chapter erase that data or cease processing it, subject to certain exceptions. You may also ask Mumbai Chapter for your personal data to be supplemented or updated, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons.

You may withdraw your consent for the processing of personal data or the further processing of personal data by Mumbai Chapter at any time.,YOU MAY ALSO REQUEST THAT MUMBAI CHAPTER CEASE USING YOUR DATA FOR DIRECT MARKETING PURPOSES BY EMAILING PRIVACY@ISACAMUMBAI.ORG.In many countries (including EEA countries), you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Mumbai Chapter processes your personal data. When technically feasible, Mumbai Chapter will at your request, provide your personal data to you or transmit it directly to another controller. You have the right to receive your personal information in a structured and standard format.

In addition to the information contained in this Privacy Notice, you may be provided with additional and contextual information concerning particular services or the collection and processing of your personal data upon request.

Reasonable access to your personal data will be provided at no cost to ISACA and Mumbai Chapter members, conference attendees and others upon request made to Mumbai Chapter via privacy@isaca.org. If access cannot be provided within a reasonable time frame, Mumbai Chapter will provide you with a date when the information will be provided. If for some reason access is denied, Mumbai Chapter will provide an explanation as to why access has been denied.