Illinois Health and Hospital Association
Privacy Policy

Effective March, 2021
 
The Illinois Health and Hospital Association (“IHA”) is a trade association for Illinois hospitals (its “Members”).  IHA is committed to protecting the privacy of Members and their staff and public users (collectively “Visitors”) of IHA’s websites, including team-iha.org, ipcgrouppurchasing.com, alliance4ptsafety.org, ihainsurancesolutions.com, and compdatainfo.com (collectively the “Websites”). 
 
This Privacy Policy describes IHA’s practices regarding past and ongoing collection, use, and disclosure of Visitor’s personal information on IHA’s Websites.  This Privacy Policy applies to all of IHA’s Websites and, by visiting and/or using a Website, you accept the practices described in this Privacy Policy.
 
The term “Affiliated Entities” as used herein means any other entity that is now or hereafter, directly or indirectly, owned or controlled by, controlling, or under common ownership or control with, managed by, under an affiliation contract (such as a joint venture or partnership) with IHA or any other Affiliated Entity. 
 
Collecting Information
IHA collects information from several sources accessible to Visitors through the Website, including, but not limited to, membership enrollment, conference, webinar, distance learning, and other event registration, Website visits, newsletter subscriptions, product sales, and third party websites.  The information collected depends on how you choose to use IHA’s services and Websites, as detailed below:
 
Cookies
Often when you visit a website, the site asks your browser to store a small piece of data (text file) called a “cookie” on your device in order to remember information about you.  IHA does not use session cookies, which are cookies that are deleted when you leave an IHA Website, or persistent cookies, which are cookies that remain after you leave an IHA Website so that you are recognized when you return. 
 
IHA utilizes Google LLC’s Google Analytics (“Google”) to collect information about Visitor traffic and behavior on the Websites.  Google uses its own cookies to perform this function, and the information Google gathers is governed by Google’s privacy policy, which may be found at https://policies.google.com/privacy.  IHA cannot control and is not responsible for Google’s use of information.  Google allows individuals to opt out of these analytics tracking services.  To do so, visit https://tools.google.com/dlpage/gaoptout. 

 
IHA, through Google, may collect or store the following Visitor information:

• The name of the domain and host from which the Visitor accesses the internet (e.g., google.com);

• The internet protocol (“IP”) address of the computer used by the Visitor;

• The name of the browser software and operating system used by the Visitor;

• The date and time of Visitor’s access to an IHA Website; or

• The internet address of the website from which the Visitor linked directly to an IHA Website.

IHA may share, without restriction, the information collected by Google Analytics.  Some web browsers can block third-party cookies, and it is the responsibility of the individual Visitor to decline those cookies if they wish.  Certain features of the Website may require cookies in order to function properly and declining cookies may affect performance of the Website.
 
IHA may use the information collected by Google to:

• Administer the Websites;

• Better manage content;

• Improve Visitor experience on IHA Websites and/or delivery of IHA Website webpages to Visitors;

• Help diagnose problems with IHA’s web servers;

• Analyze trends;

• Investigate security incidents;

• Gather broad demographic information for aggregate use in order for IHA to improve the Websites;

• Deliver customized content;

• Track Visitor’s movement; and

• Conduct web traffic analyses through which IHA tracks statistics, such as which pages are visited in what order, where Visitors come from, how long Visitors spend on the Websites, and which sections of the Websites receive the most Visitors.

 
Information You Provide IHA
In some situations, you may provide your information to IHA (or an Affiliated Entity) through an IHA Website.  Depending upon your relationship with IHA and/or the services you utilize on the Websites, IHA may request or require you to create an account and/or to provide personal information to obtain certain services, including, but not limited to:          
 

• Biographical information such as your name, age, and gender;

• Contact information such as your email address, mailing address, phone number, and fax number; and

• Professional information such as your job title, position, professional title, and information about your company or business.

 
Examples of when you might provide us with your personal information, include, but are not limited to, when you:

• Register for a user profile to access the “Members Only” portion of the IHA Website;

• Register to attend an IHA or Affiliated Entity event;

• Make a contribution to the IHA Political Action Committee (“IHA PAC”);

• Make a purchase from IHA;

• Submit a contact form on an IHA Website;

• Complete a survey or questionnaire that IHA sent you or invited you to complete;

• Subscribe to email notifications or newsletters; or

• Contact us by any other means, such as phone or email.

 
In order to provide you with a service or product you may be requested or required to provide payment through a credit card or debit card.  Such credit card or debit card information, including payment card number, goes directly to IHA’s or its Affiliated Entities’ vendor and/or contractor.  IHA and its Affiliated Entities do not store, process, or transmit any cardholder data.  Transactions processed on behalf of the IHA and its Affiliated Entities are fully outsourced to PCI compliant third party solutions (e.g., PayPal, Cvent, or Square).  IHA and its Affiliated Entities are not subject to the Payment Card Industry Data Security Standards.
 
Cvent
IHA utilizes Cvent, Inc. to allow Visitors to register and pay for educational events (including, but not limited to, conferences, webinars, and other events) and to purchase publications and other products and services.  Through Cvent, Inc., IHA collects and receives certain personal information in connection these transactions, including, but not limited to, biographical information, contact information, professional information, and credit card or debit card information.  The information Cvent, Inc. gathers is governed by Cvent, Inc.’s privacy policy, which may be found at https://www.cvent.com/en/cvent-global-privacy-policy.
 
How IHA Uses Your Information Collected Through the Websites
How and Why IHA Uses Your Personal Information
IHA may use your personal information to:

• Provide services to you, or value to the services provided to you;

• Respond to your inquiries, requests for access to certain portions of the Websites, and/or other requests or questions;

• Create a member profile account;

• Determine whether you are entitled to access the Members Only portion of the IHA Website;

• Facilitate your registration and participation in events  and/or purchase of products or services, including, but not limited to, the use of addresses for shipping and credit card information for payment;

• Contact you regarding your registration and/or purchase, including, but not limited to, sending you information and updates related to your purchase or sending a confirmation email;

• Collect payments from you and send you invoices;

• Deliver products or services purchased through an IHA Website or over the phone;

• Send you marketing communications related to products and services that IHA or an Affiliated Entity think may be of interest to you, including, but not limited to, recommending products;

• Collect online donations or IHA PAC contributions;

• Compile (either hardcopy or electronic) a membership directory, list of persons registered to attend to an event, or IHA PAC contributors, which may be shared with third parties, including, but not limited to, other members within a group;

• Send you email notifications or newsletters which you have specifically requested;

• Send you email messages containing company news and product or service information;

• Administer and monitor usage of Websites;

• Investigate and mediate disputes and complaints you file;

• Enforce IHA and Affiliated Entity copyrights, tradenames, trademarks, service marks, logos, domain names, and other distinctive brand features or legal rights;

• Comply with the Illinois State Board of Elections reporting requirements;

• Carry out internal operations, including, but not limited to internal record keeping; and

• Assist and/or carry out legal compliance, including, but not limited to, responding to a subpoena and fulfilling information collection requirements under a government contract or grant.

 
IHA may also use your personal information for other purposes that are compatible with these purposes listed above and/or as otherwise specified at the time of collection.  IHA may combine the information collected from you or by Google with information collected from your use of other IHA services, collected by IHA affiliated or sponsored organizations, or obtained from third parties.  The combined information may be used for purposes that are compatible with the purposes set forth herein.
 
Some or all of the information IHA collects from you as part of registrations for accounts, membership, events, or certain productions may be maintained in a user account.  Copies of data or information that you have updated, modified, or deleted may remain viewable in cached and archived pages of a Website.
 
IHA may select and post testimonials on a Website with your prior consent.  These submissions may contain personal information.  If you provide consent for IHA to post such content, it will be publicly available to other Visitors of the Website and IHA cannot prevent such data from being used in a manner that may violate this Privacy Policy or applicable law.  If you would like us to remove or delete your testimonial from a Website, you can contact IHA’s Privacy Officer using the information in the Contact Us section of this Privacy Policy and IHA will undertake all reasonable effects to delete this information.  IHA is not responsible and has no control over other websites.
 
Disclosure of Your Information
In addition to any disclosures permitted by this Privacy Policy, IHA may disclose your personal information including in identifiable, de-identified, anonymized, aggregated, or pseudonymized form:

• To Affiliated Entities, joint venture partners, and third parties that are affiliated, sponsored, or endorsed by IHA or an Affiliated Entity;

• To the extent required by law;

• To respond to governmental official, law enforcement, or private party requests which required by applicable laws, court orders, warrants, subpoenas (whether civil, criminal, or administrative), or governmental regulations;

• For Contracts, Grants, and Cooperative Agreement application, administration, compliance, and reporting;

• In situations involving a serious and imminent threat to the safety of a person;

• As necessary for legal or contractual compliance purposes;

• As necessary to enforce IHA’s or Affiliated Entities’ rights in connection with the Websites;

• If IHA or an Affiliated Entity sells or transfers all or a portion of a respective company’s business interest, assets, or both, or in connection with a corporate merger, consolidation, restructuring, or other company change;

• To IHA’s and/or Affiliated Entity’s vendors and contractors if necessary in order to provide you with a service and/or product and/or to administer the Websites;  

• As specified at the time of collection (e.g., as described in survey materials); and

• To third parties in connection with the transaction (e.g., a list of registrants provided with program materials).

 
IHA may use third party vendors to perform certain services on IHA’s behalf, including, but not limited to, hosting the Websites and/or IHA’s email server, processing your payments, maintaining, enhancing, or adding functionality to a Website, operating Website features, fulfilling and processing orders, collecting web analytics data, and enabling IHA to send you emails.  IHA may share your personal information with these third party vendors solely to enable them to perform such services for IHA.  IHA requires that those third party vendors maintain at least the same level of protection that IHA maintains for such data.  Some vendors may process your data outside of the United States.
 
IHA reserves the right to use, transfer, sell, and share aggregated data, which does not include personal information, about Website Visitors as a group for any legal business purpose, including, but not limited to, analyzing usage trends.  IHA does not provide your personal information to parties unconnected with the products and/or services IHA receives or that IHA or an Affiliated Entity provides.  IHA will not disclose your personal information to third parties except in accordance with this Privacy Policy.
 
IHA is not responsible for the processing of your personal information or any of your personal information by any third party except those third parties acting as IHA’s subcontractors to process the data on IHA’s behalf. 
 
How to Change or Update Your Information
You can access, change, or update personal information you have provided and your preference regarding information you receive from IHA by contacting IHA’s Privacy Officer using the information in the Contact Us section of this Privacy Policy.  IHA will implement any requested changes as soon as reasonably possible, subject to reasonable limitations, including, but not limited to, the need to verify your identity.  When you edit your personal information, the data and personal information you remove may remain in IHA’s databases or backup media because it is not always possible to completely remove or delete data from those locations.
 
You have a right to request updates or changes to your preferences regarding receiving future promotional or informational messages from IHA.  To exercise this right, please send your request to IHA’s Privacy Officer using the information in the Contact Us section of this Privacy Policy.  Please note that if you opt out of receiving promotional or marketing emails, you may still receive certain communications from IHA or its Affiliated Entities, including, but not limited to, administrative and services announcements and messages about your account.
 
Security
IHA has implemented and maintains commercially reasonable, generally accepted industry security standards to protect against unauthorized access by third parties to the information transmitted or provided to IHA via the internet or otherwise.  Data transmission over the internet is never one hundred percent secure; IHA cannot guarantee the security of any data or personal information you transmit or provide to IHA or from IHA’s Websites; therefore, you use the Websites and you communicate with IHA at your own risk.
 
If you have a user account through a Website, you are responsible for protecting the security of your username and password.  You are responsible for any transaction made using your username and password.
 
All credit card data, passwords, and contact forms you submit via a Website are encrypted prior to transit over the internet using Transport Layer Security (formerly known as “SSL”). 
 
Links to Other Websites
The Websites contain links to third party content and websites that IHA does not control.  This includes links to clients, sponsors, and partners.  In addition, IHA and Affiliated Entities may maintain a presence on third party websites, such as Facebook® or LinkedIn®.  If you click on these links and/or choose to access the third party websites, those third parties may use, view, edit, or set their own cookies to collect your data and you are subject to the privacy notice of such third parties websites.  You should read the third parties’ privacy notices to learn how they will collect and use your data as their policies may differ from IHA’s and will apply to your use of their websites.  IHA is not responsible for the privacy notice, policies, or practices or the content of third party websites, nor is IHA or any Affiliated Entity responsible for any third party website’s collection or protection of your data or your personal information.
 
IHA Websites may contain functionality which enables you to import profile information or contacts from third party services (e.g., LinkedIn, Facebook, Twitter, Gmail, etc.) (collectively “Third Party Social Media Accounts”).  If you choose to do this, you may have to log into the applicable Third Party Social Media Account, using such account’s user name and password.  The copy of the information received by IHA shall be subject to this Privacy Policy.  However, any data maintained in Third Party Social Media Accounts and by such third party service and your use of that third party service will be subject to that third party’s terms of use and privacy policy.
 
Privacy of Children
The Children’s Online Privacy Protection Act governs the online collection of personal information from children less than 13 years of age.  The Websites are general audience websites that do not knowingly collect information from children younger than the age of 13 and IHA’s Websites are not directed at, or intended for use by, children under the age of 13.  If you believe your child may have provided IHA with personal information, you can contact IHA’s Privacy Officer using the information in the Contact Us section of this Privacy Policy and IHA will undertake all reasonable effects to delete this information.
 
Use of Website; Updates to the Privacy Policy
This Privacy Policy applies to and governs all Websites and supersedes any and all previous privacy notices governing the same.  IHA may update this Privacy Policy from time to time, at any time, without notice to Visitors by posting a new version to IHA’s Website.  Visitors should visit this page periodically to review any changes to this Privacy Policy and ensure you agree with any such changes.  If IHA makes any changes to this Privacy Policy, IHA will post the revised Privacy Policy to the Website and update the effective date above to reflect the date of the changes.  By continuing to use the Websites after any such changes, you accept the Privacy Policy as modified.  IHA will keep prior versions of this Privacy Policy in an archive for your review.
 
If for any reason, IHA would like to use or disclose your information for substantially different purposes other than those outlined at the time the information was originally collected, IHA will affirmatively request permission from you to use such information for those substantially different purposes prior to using or disclosing the information.
 
If you choose to visit or use a Website, your visit, use, or dispute over privacy is subject to this Privacy Policy and IHA’s Terms of Use.
 
Contact Us
If you have a complaint, dispute, or any questions about this Privacy Policy, please contact IHA’s Privacy Officer at:  
 
Illinois Health and Hospital Association
Attn: Privacy Officer
1151 E Warrenville Road
Naperville, IL 60566
 
Email: legal@team-iha.org
Telephone: 630-276-5506
 
You may also contact IHA’s Website administrator (a) by U.S. postal mail at the same mailing address listed above for the Privacy Officer, (b) by emailing webmaster@team-iha.org, or (c) by calling 630-276-5400.
 
IHA will respond to your complaint, dispute, question, or other inquiry within thirty (30) days of receipt.