Privacy Policy

Privacy Policy

Overview

Protecting your privacy is important to Niswonger Foundation. We strive to keep your personal information confidential, to the extent that such information is not provided on the public areas of our website and/or pursuant to our Terms and Conditions as found on our STEM FLEX website [www.STEMFlex.org.] By ensuring that you are aware of and understand the Niswonger Foundation Privacy Policy, we can provide you with better service and a more complete understanding of the information we collect. Please take a moment to read the following policy to learn how we handle your personal information.

This Privacy Policy statement explains the data processing practices of STEM FLEX. If you have any requests concerning your personal information or any questions about these practices, please contact support@stemflex.org.

The privacy of STEM FLEX users is important, and we are committed to safeguarding your privacy while providing a personalized and valuable service.

This Privacy Policy describes how we use, share, and protect information that we collect from you and your child, who may be under the age of 13, through the platform (STEM FLEX). We strongly urge all parents to participate in their children's exploration of the Internet and any online services, and to teach their children about protecting their personal information while online. Please check your local jurisdiction regarding the minimum age required to access websites which collect personally identifiable information from users, which can vary from jurisdiction to jurisdiction. It is your responsibility to know the law in your jurisdiction. Users that are under the age of 18 are forbidden from providing any information on our website without parental or guardian (as the case may be) consent and authorization.

STEM FLEX uses Personally Identifiable Information only for providing use of the online platform. By using the online platform, you agree to the collection and use of information in accordance with this policy.

We comply with the Children’s Online Privacy Protection Act (COPPA) which can be found on the Federal Trade Commission website at https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa.

This document informs you of various policies regarding the collection, use, and disclosure of Personal Information we receive from users of our platform.

Any changes to the Privacy Policy, Terms and Conditions of Use or changes in ownership will be posted on the STEM FLEX website and you will be required to confirm your agreement to such changes when you log onto the website next.

The Niswonger Foundation Privacy Policy is subject to change at any time. We encourage you to review the privacy policy regularly for any changes.

Privacy Policy

This privacy policy applies to all the tools accessed on the STEM FLEX website and includes all of the hereinbefore listed information. Once a user leaves the website via links to providers, this policy no longer applies and the policies, terms and conditions of such third party website shall apply. Users should check the privacy policies and terms and conditions of those external websites prior to disclosing any information on them. By accessing or using STEM FLEX, you agree to the terms of this Privacy Policy.

Like many websites, the STEM FLEX website uses ‘cookie’ technology. When you first connect to our site, the cookie identifies your browser with a unique, random number. The cookies we use do not reveal any personal information about you, except perhaps your first name and last initial so we can welcome you on your next visit. Cookies help us understand which parts of our websites are the most popular, where our visitors are going, and how long they spend there. We use cookies to study traffic patterns on our site so we can make the site even better.

We may use a ‘click-through URL.’ When you click one of these URLs, you pass through our web server before arriving at the website that is your destination. We may track click-throughs to help us determine your interest in particular topics and measure the effectiveness of our communications and services.

The STEM FLEX website contains links to other sites. Niswonger Foundation does not share your personal information with those websites and is not responsible for their privacy practices. We encourage you to learn about the privacy policies of those companies, schools, and institutions.

Niswonger Foundation may have the capacity to reset your password and will not ask for that information from any user or provider. As a User, you will have the ability to reset your password if you forgot it or if you suspect that someone else has access to such password. If someone requests your username, your password or any other private information from you, please change your password and contact the Niswonger Foundation immediately to advise them of this breach in protocol so that the Niswonger Foundation can make sure that its personnel is not asking for such information or that someone outside of the Niswonger Foundation is trying to access the platform.

Any information which is uploaded by you as part of your use of the STEM FLEX platform is discoverable, viewable, and usable by those parties authorized to have access to such information, which includes, but is not limited to, various contractors, agents, and employees of the Niswonger Foundation.

Definitions

For purposes of this policy, we will use the following definitions:

Personally Identifiable Information (PII) is information that can identify a user of the platform, including his or her email, first name/last initial, and school grade and location. It also includes PII combined with non-PII.

Deidentified information is information from which personal identifiable components have been removed and a reasonable determination made that an individual is not identifiable.

Information Collection and Use

Niswonger Foundation does collect confidential personally identifiable information of users of STEM FLEX, known as “CPII”. CPII is collected on portions of the website(s) which include, but is not limited to, if https:// as part of the website address and/or are required to have a password to enter; otherwise, it is assumed that portion of the website(s) is an unsecure or publicly available portion of the website(s). CPII is included in “personally identifiable information.”

Users on our site may browse the site as guests; however, to achieve a more personalized experience, registration is required. At registration, we will ask for information that can be used to contact or identify you. The elements of your data that we may collect and hold include the following:

• First Name
• Last Initial
• Email Address
• Grade Level
• Birth month and year
• STEM-related Interests
• STEM Career Interests
• Role: Student, Parent, Teacher, Administrator
• Student Event Ratings
• Student Reflections
• Goal Progression and Related Badges

We limit the data collected from students or children to only that which is necessary to meet the educational purposes of the platform. We do not collect sensitive data like student education records, biometric or health data, or behavioral data. We do not use student PII for commercial use. We do not disclose PII to third parties for non-educational commercial purposes. We do not use student or children’s personal information for advertising purposes, including targeted advertising, nor do we rent or sell student data. We will not ask for your social security number or any payment information from any student and/or User at any time. We currently do not charge for any services, so currently, we would not ask for any taxpayer identification number or payment information for any Provider.

Niswonger Foundation safeguards the security of the data you send us with physical, electronic, and managerial procedures. We urge you to take every precaution to protect your personal data when you are on the Internet. Change your passwords often, use a combination of letters and numbers, and make sure you use a secure browser. You are responsible for the security and upkeep of your password to third parties outside of our Services.

We store CPII and PII indefinitely, or until a request is put in to have these data deleted by a customer or at STEM FLEX’s discretion. Requests to delete data must be submitted in writing to support@stemflex.org or Niswonger Foundation, 223 North Main Street, Greeneville, TN 37745.

Student Accounts

Upon registration, the student creates an account that can be used to access the site for personalized STEM activity recommendations as well as the ability to rate experiences and create a portfolio that is private to the student unless he/she elects to share the portfolio with a parent or teacher. Students may also store written reflections they have created in their portfolios. Any student (also known as “User”) is subject to all terms and conditions listed on or in the STEM FLEX platform.

Provider Data

Any provider of STEM activity listings on the STEM FLEX platform is also subject to all terms and conditions STEM FLEX platform. The Niswonger Foundation does not warrant or otherwise endorse the activities listed by the Provider and all registration for such activity will occur upon the Provider’s or a designated third-party’s website. These privacy provisions do not apply to any such Provider’s or third-party’s website and any use of such site is at the User’s sole risk.

Log Data

Like many site operators, we collect information that your browser sends whenever you visit our site (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Communications

We may use PII to notify you of upcoming STEM events or opportunities that may interest you based on your stated STEM-related interests and STEM career interests. Outside of these communications on the site itself or through “push” notifications, we do not communicate with students. Students cannot otherwise communicate with others on this platform, except as such students may be directed to a third-party site for events and/or opportunities. Other guests or registered users of the platform, including other students, teachers, administrators, parents, or event providers cannot use the platform to communicate with students.

When we disclose personal information

We do not sell our mailing list. At times we may be required by law or legal process to disclose your personal information.

We restrict access to personal information to Niswonger Foundation employees, contractors and agents or parties who may need to know that information in order to operate, develop or improve our services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

Use of Cookies and Other Tracking Devices

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer’s hard drive. Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept recommended cookies, you will not be able to use some very relevant portions of our site.

Niswonger Foundation safeguards the security of the data you send us with physical, electronic, and managerial procedures. We urge you to take every precaution to protect your personal data when you are on the Internet. Change your passwords often, use a combination of letters and numbers, and make sure you use a secure browser. You are responsible for the security and upkeep of your password to third parties outside of our Services.

Security

We strive to maintain security policies and procedures that are designed to protect your information. Our servers are located in a secured, locked, and monitored environment to prevent unauthorized entry or theft, and are protected by a firewall. The servers are located in a data center in the United States and backed up daily to a secure, U.S.-based off-site data center.

We apply a Secure Sockets Layer (SSI or HTTPS) encrypting technology to encrypt PII data in transit between the server and the browser in certain areas of the STEM FLEX platform. Prior to entering any PII, make sure that encrypting technology is present by revising the current web address for “HTTPS” or other similar security designations.

Governance policies and access controls are in place to ensure that the information of each district, school, or other subscriber is separated, and all subscribers can only access their own data. Only limited STEM FLEX personnel and/or contractors have access to the database, and personnel only access it when necessary to provide services.

We follow standardized and documented procedures for coding, configuration management, patch installation, and change management for all applicable servers.

While we strive to maintain industry-standard privacy and security practices, it should be noted that no industry system is fail proof, and we are not responsible for security incidents not reasonably foreseeable or reasonably within our control.

In the event of unauthorized access to Personally Identifiable Information, we will notify the affected subscriber(s) in accordance with applicable law, and as appropriate, coordinate with the subscriber to support notification of affected individuals, students, and families.

Data Breach Protocol

In the event of an unauthorized release, disclosure, or acquisition of private Student Data that compromises the security, confidentiality, or integrity of the Student Data maintained by STEM FLEX, we attempt will provide notification to all users within seventy-two (72) hours of confirmation of the incident, unless notification within this time limit would disrupt investigation of the incident by law enforcement. In such an event, notification shall be made within a reasonable timeframe

Within a reasonable time after the incident. We will follow the following process:

1. The security breach notification described above shall include, at a minimum, the following information to the extent known:
   1. The name and contact information;
   2. A list of the types of personal information that were or are reasonably believed to have been the subject of a breach;
   3. If the information is possible to determine at the time the notice is provided, then either (1) the date of the breach, (2) the estimated date of the breach, or (3) the date range within which the breach occurred. The notification shall also include the date of the notice and if police in a particular jurisdiction were notified;
   4. Whether the notification was delayed as a result of law enforcement investigation, if that information is possible to determine at the time the notice is provided; and
   5. A general description of the breach incident, if that information is possible to determine at the time the notice is provided.
2. We agree to adhere to all federal and state requirements with respect to a data breach related to the Student Data, including, when appropriate or required, the required responsibilities and procedures for notification and mitigation of any such data breach.
3. We have a written incident response plan that reflects best practices and is consistent with industry standards and federal and state law for responding to a data breach, breach of security, privacy incident, or unauthorized acquisition or use of Student Data or any portion thereof, including personally identifiable information and agrees to provide upon request, with a summary of said written incident response plan.

Such provisions related to Student Data shall also be applicable to any private Provider data which may have been similarly exposed.

To Exercise Your Rights

You may exercise your rights as a user with respect to personal information by:

• Emailing us at support@stemflex.org
• Or mailing us at Niswonger Foundation, 223 North Main Street, Greeneville, TN 37745

Your exercise of the above rights is subject to certain exemptions to safeguard the public interest and our interests. Requests to exercise these rights may be granted in whole, in part, or not at all, depending on the scope and nature of the request and the applicable law.

DISCLAIMER REGARDING THIRD PARTY WEBSITES

Throughout the STEM FLEX website, we include links to information on other websites. We provide these links provided by Providers solely to help users find additional information as a courtesy. Niswonger Foundation does not warrant the safety of such sites or the content of the same. If you leave the STEM FLEX platform for another site, you assume the risk for the same.

When you leave the STEM FLEX website, you will be subject to the privacy and security policies of the owners/sponsors of the outside website. We cannot guarantee or endorse the content, information, security, or any other matter related to such third-party website.

We cannot guarantee that outside websites comply with Section 508 (Accessibility Requirements) of the Rehabilitation Act.

We cannot control or guarantee that the owners of other websites will protect your privacy. You should read their privacy policies when visiting other sites.

We cannot control or guarantee the completeness, accuracy, relevance or timeliness of information contained on a linked website.

We do not endorse the organizations sponsoring linked websites, and we do not endorse the views they express or the products/services they offer.

You hereby hold the Niswonger Foundation harmless for any matter related to a third-party website you visit or event and/or opportunity you participate, even if such website, opportunity, or event is provided by or listed on the STEM FLEX platform.