Source: https://www.nejmgroup.org/legal/privacy-policy.htm
Timestamp: 2020-08-06 16:43:12
Document Index: 783145691

Matched Legal Cases: ['Art. 27', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 6', '§ 1798']

NEJM Group is a division of the Massachusetts Medical Society (“MMS”). We take privacy issues seriously and are committed to protecting your personal information. Please take a moment to review our privacy policy.
This policy explains how the information we collect when you use an NEJM Group website, mobile or tablet application, or other online service (each a “Service” and collectively “Services”) that links or refers to this policy will be used and shared.
We will collect information from you if you register, establish a personal profile to gain access to certain content or services, if you ask to be notified by email about online content, if you participate in surveys we conduct, or otherwise interact with the Services. This requires the input of information that identifies you or your device, directly or indirectly, whether used on its own or combined with other information (“Personal Information”).
Personal Information we collect includes, but is not limited to, identifiers such as your name, username and password, address (postal and email), telephone number, professional background and educational information, certain legally protected demographic information, such as your age, and inferences that can be drawn from that information.
If you request paid content or services, including subscriptions, we will also ask for credit card and other billing information. We also retain records of what products and services you obtain from us and collect information that you provide when you comment on our content, register to participate in events (either in-person or online), and when you submit material to a Service.
NEJM CareerCenter users — In addition to the above information, we also collect your CV.
NEJM Knowledge+ users — In addition to the above information, we also collect information about your professional board membership and certifications.
If you choose to register and sign in using a third party social media account, the authentication of your login is handled by the third-party account and the Services may collect your name, profile photograph, email address, and any other information from your third-party account that you agree to share at the time you give permission to link your third-party account with the Services. By doing this, you are authorizing us to collect, store, and use the data they send us.
In addition to the information that you provide to us directly, we may collect information about your Internet Activity and use of the Services to help us measure and analyze traffic and usage. This helps us to enhance and improve the Services. For example, we may collect:
Device Information — such as your hardware model, IP address, other unique identifiers, operating system version, browser type and settings, and the settings of the device you use to access a Service.
Usage Information — such as information about the Services you use, the date and time, the duration of your usage, the files downloaded or viewed, and other information about your interaction with content offered through a Service.
Geo-Location Information — such as the general location of your device in order to provide you with more relevant content and ads for where you are in the world when you use certain Services.
We may also collect other information about you, your device, or your use of the Services in ways that we describe to you at the point of collection or otherwise with your consent. You may choose not to provide us with certain types of information but doing so may affect your ability to use the Services.
We use cookies to collect information and help personalize your user experience. We store minimal personally identifying information in cookies and protect this information. Cookies allow us to recognize you when you return to use a Service and help us to personalize your user experience and track usage. We do not store complete records or credit card numbers in cookies. You can find out more about how we use cookies at our Cookie Information page.
We also may use cookies and other tracking technology to facilitate the delivery of relevant ads to you through the Services.
Most web browsers automatically accept cookies but can be configured not to or to notify you when a cookie is being sent. If you wish to disable cookies, refer to your browser help menu to learn how. If you disable cookies, doing so may interfere with or prevent the proper function of a Service.
In some cases, we also work with third-party vendors to help deliver advertisements on our behalf across the Internet. These vendors may use cookies to collect information about your use of the Services (i.e., the pages you have visited) in order to help deliver particular ads that they believe you would find most relevant. You can opt out of third-party vendor use of cookies to tailor advertising to you by visiting http://www.networkadvertising.org/managing/opt_out.asp. If you choose to opt out, doing so may interfere with or prevent the proper function of a Service.
We may also use clear gifs, which are tiny graphics with unique identifiers that function similarly to cookies to help us to track activity. We do not use these to collect personally identifying information.
Information that you provide to us is used for several business purposes, including to process, fulfill, and deliver your requests for content and services and, where applicable, report points and credits to credentialing organizations. This includes, for example, processing your subscription, sending you content and updates (including by email) and enabling you to participate in the features provided by the Services. Through such features, we are able to bring you information and content tailored to your individual interests and needs. We also may contact you periodically with information, surveys, and offers relating to the Services, unless you have indicated you do not wish to receive such further information. You may unsubscribe from our email services at any time. For additional information on how to unsubscribe from our email services, please refer to the How to Make Changes to Your Information section of this Privacy Policy.
Information collected automatically is used to monitor users’ interests and usage patterns in order to help us enhance and improve our service offerings.
We may share information with certain third parties, including vendors providing contracted services to us, such as hosting vendors, advertising service providers, data analytics and customer support providers, IT service providers, and list managers. We share your information, including your payment information, as appropriate to process your payment for a Service or to complete a transaction. When requested by you, we may also share your information with medical credentialing and accreditation organizations in connection with our continuing medical education and maintenance of certification offerings. These providers and organizations are obligated to maintain your personal information as confidential and have access to your personal information only as necessary to perform their requested function on your behalf.
We may also report aggregate information about usage to third parties, including our service providers and advertisers.
We may share your information within NEJM Group or otherwise use your information with your consent or at your direction.
For NEJM Catalyst users, we may share your information with sponsors or other third parties to provide them with an opportunity to offer products and services that may be of interest to you. If so, we will notify you and obtain your consent at the time of download or registration.
For NEJM Knowledge+ users, if your access is purchased for you through a residency program, we may share with your residency program administrators your personal information and certain usage and performance data, including your progress and time spent in various modules, your practice exam scores, and your metacognitive scores.
For NEJM Resident 360 users, the profile information you provide (including your profile photo, bio, professional specialty, employer, and the school you attend) may be made public. We may also use your profile information if you invite others to join or connect with you. You may be invited to participate in discussions, post comments, or otherwise engage in networking activities. MMS does not control what users post to these forums or social networks. You should carefully consider whether you wish to submit personal information to these forums or social networks and tailor any content you submit appropriately.
For NEJM CareerCenter users, CVs and cover letters uploaded to our site are not shared or forwarded, except at the option of the jobseeker. Jobseekers are not required to create a physician profile to apply for an open position but are encouraged to do so. The contact information included in the physician profile is controlled by and may be limited by the jobseeker and you have the option to hide your profile so that it is not available to prospective employers.
Advertisers and Use of Personal Information
From time to time, we rent our print subscriber list, which includes personal identifiers such as subscriber names and postal addresses, to third parties that have products or services that we believe will be of interest to our customers. Even if we share our mailing lists with these other companies, however, please be assured we do not share your email address or credit card information. If you do not want us to rent your postal address information, contact us at DPO@mms.org.
Third party advertisements may link to websites not under our control. These third-party advertisers may use cookie technology or similar means to measure the effectiveness of their ads or may otherwise collect personally identifying information from you when you leave the Services. We are not responsible or liable for any content, advertising, products or other materials offered from such advertisers and their agents. Transactions that occur between you and the third-party advertisers are strictly between you and the third-party and are not our responsibility. You should review the privacy policy of any third-party advertiser and its agent, as their policies may differ from ours.
Advertisement Servers and Third-Party Tracking
Some of the advertisements included on the Services are delivered or served by third parties that may collect anonymous information. These third parties may place or recognize cookies, pixel tags, web beacons or other technology to track anonymous information, in part, to measure and analyze the efficacy of the advertising they place at the Services. These third parties also may have the ability to link the information they collect when you use the Services, such as the identifier for the device you are using, with other information they collect elsewhere on the Internet to gain additional insights into their target audience.
We endeavor to keep your personal information confidential and protected against unauthorized access, misuse or alteration with commercially reasonable physical, technical, and administrative measures. However, as effective as these measures are, no security system is impenetrable. We cannot guarantee the security of electronic data nor can we guarantee that the information you supply will not be intercepted.
Once you have created an account at one of our Sites, you can update your personal information at any time. You may also choose to stop receiving offer information from us about content or services by updating your account preferences or using the “unsubscribe” or other means provided within the communications you receive from us. You may also contact our Customer Service Department by the following:
Telephone: 800-843-6356 or +1 781-434-7888 (outside the United States and Canada)
Email: nejmcust@mms.org
Mail: Customer Service, NEJM Group, 860 Winter Street, Waltham, MA 02451-1413, USA.
Any data or personal information that you submit to us as user-generated content becomes public and may be used by the MMS in connection with the Services and other NEJM Group and MMS publications and offerings in any and all media.
We may disclose personally identifying information if we are required to do so by law or we in good faith believe that such action is necessary to (1) comply with the law or legal process; (2) protect our rights and property; (3) protect against misuse or the unauthorized use of a Service; or (4) protect the personal safety or property of our employees, users, or the public.
The Services are headquartered in the United States. Your personal information may be transferred outside of your country of residence to the United States or another country for processing. By using a Service, you consent to the collection, international transfer, storage, and processing of your information outside of your country of residence, in which case the personal data protection rules may differ from the rules in your country.
The Services are not intended for children under 16 years of age. We do not knowingly collect or store any personal information from children under 16.
This privacy policy may be periodically updated. We will post a notice that this policy has been amended by revising the “Last updated” date at the top of this page. Use of a Service constitutes consent to any policy then in effect.
Please direct any questions regarding this privacy policy to nejmcust@mms.org or contact our Data Protection Officer at DPO@mms.org.
We can also be contacted by telephone at 800-834-6356 or +1 781-434-7888 (outside the United States and Canada)
NEJM Group offices are located at 860 Winter Street, Waltham, MA 02451, USA.
Additional Privacy Information for Users in the EU
For our users in the European Union we are providing some additional information below as required by the EU General Data Protection Regulation (“GDPR”).
The data controller for the Services is: Massachusetts Medical Society, 860 Winter Street, Waltham, MA 02451 USA
You can contact our Data Protection Officer at: Attn: Data Protection Officer, Massachusetts Medical Society, 860 Winter Street, Waltham, MA 02451 USA
Email: DPO@mms.org.
3. Representative in the EU
MMS’s representative in the EU (Art. 27 GDPR) is: Dr. Stefan Freytag, Straßer Ventroni Deubzer Freytag & Jäger Rechtsanwälte, Oberanger 30, 80331 München, Germany
Email: stefan.freytag@svdfj.de
4. Additional Information about Processing of Personal Data
MMS will process your personal data only as it is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (Art. 6 (1) (b) GDPR), on the basis of your express and voluntary consent (Art. 6 (1) (a) GDPR), in order to comply with a legal obligation to which MMS is subject (Art. 6 (1) (c) GDPR); see e.g. the “Compliance with Legal Process” section of our general privacy policy) or as otherwise permitted by applicable law.
4.1 Processing for or Prior to Entering into a Contract
In most cases processing of your personal data will be on this legal basis. For details on which categories of personal data, from which sources and for which purposes your information may be collected and used in relation to which services or products offered by MMS, please refer to the general privacy policy above.
4.2 Processing on the Basis of Your Consent
In some situations, and for some Services or application we may ask you to provide express, voluntary consent as a basis for processing your personal information. For details on which categories of personal data, from which sources and for which purposes your information may be collected and used in relation to which services or products offered by MMS, please refer to the information in the respective consent declaration and to the general privacy policy above.
You may at any time revoke a consent granted hereunder in accordance with GDPR. In case of revocation, MMS will not process the personal data subject to this consent any longer unless legally required to do so. However, any revocation of your consent has by law no effect on past processing of personal data by MMS up to the point in time of your revocation. Furthermore, if your use of a Service, requires your consent, MMS will no longer able to provide the relevant Service to you after your revocation.
4.3 In Order to Comply with a Legal Obligation
In some cases, we have to process data to comply with a legal obligation to which we are subjected (see e.g., the “Compliance with Legal Process” section of our general privacy policy). In such cases our processing of such data will be restricted to what is required to fulfil our legal obligations.
4.4 Aggregated Anonymous or Pseudonymous Use of Data
In order to maintain or improve the quality or a Service or to delivery targeted online advertisements we are using data without personally identifying you, but in an aggregated, statistical, anonymous or pseudonymous format. Please see the general privacy policy above and our cookie policy for more detailed information.
4.5 Duration of Processing of Personal Data
Where MMS is processing and using your personal data as permitted by law (including in the context of a contract with you) or under your consent, MMS will store your personal data (i) only for as long as is required to fulfill the respective purposes or (ii) until you revoke your consent. However, where MMS is required by mandatory law to retain your personal data longer or where your personal data is required for MMS to assert or defend against legal claims, MMS will retain your personal data, in accordance with applicable law, until the end of the relevant retention period or until the claims in question have been settled.
4.6 Where will my personal data be processed?
MMS is a U.S. based, internationally operating organization. Consequently, whenever MMS is using or otherwise processing your personal data for the purposes set out in its privacy policies, your data may be collected from, processed, or transferred to a country outside of the EU or European Economic Area (“EEA”).
4.7 No Decisions Based Solely on Automated Processing (Art. 22 GDPR)
Our processing of your personal data does not involve decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affects you.
5. Data Subject’s Rights under GDPR
5.1 Data Access, Correction, and Deletion Right
You can request from MMS at any time information about which personal data MMS processes about you and the correction or deletion of such personal data.
Please note that MMS can delete your personal data only if there is no legal or contractual obligation or prevailing right of MMS to retain it. Please also note that if you request that MMS delete your personal data, you will not be able to continue to use a Service that requires MMS’s use of your personal data.
If MMS uses your personal data based on your consent or to perform a contract with you, you may further request from MMS a copy of the personal data that you have provided to MMS. In this case, please contact MMS’s Data Protection Officer and specify the information or processing activities to which your request relates, the format in which you would like this information, and whether the personal data is to be sent to you or another recipient. Please also provide reasonable information and evidence that permits MMS that the request originates from you as the data subject entitled to receive such personal information and that no one else is abusively trying to access your personal data by requesting a copy of it from MMS.
Furthermore, you can request from MMS that MMS restrict your personal data from any further processing in any of the following events: (i) you state that the personal data MMS has about you is incorrect, (but only for as long as MMS requires to check the accuracy of the relevant personal data), (ii) there is no legal basis for MMS processing your personal data and you demand that MMS restricts your personal data from further processing, (iii) MMS no longer requires your personal data, but you claim that you require MMS to retain such data in order to claim or exercise legal rights or to defend against third party claims or (iv) in case you object to the processing of your personal data by MMS (based on MMS’s legitimate interest as further set out in Art. 6 (1) (f) GDPR) for as long as it is required to review as to whether MMS has a prevailing interest or legal obligation in processing your personal data.
5.2 Right to Lodge a Complaint
If you believe that MMS is not processing your personal data in accordance with applicable EU/EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EU/EEA member state in which you live or with the data protection authority of the country or state in which MMS has its registered seat.
We are a not for profit entity and therefore, we are not required to comply with the California Consumer Privacy Act of 2018 (“CCPA”). We do however take privacy issues seriously and while we may choose to offer you some rights regarding your Personal Information, those rights are not offered pursuant to CCPA and may be rescinded by us at any time.
Access to Specific Information:
You may request that MMS disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:
You may request that MMS delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to comply with a business or legal obligation.
Emailing us at DPO@mms.org
Contact us at 800-834-6356
You may request that we do not sell your Personal Information at any time (the “Right to Opt-Out”).
To exercise the Right to Opt-Out, you (or your authorized representative) may submit a request to us at DPO@mms.org.
Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales. However, you may change your mind and opt back in to Personal Information sales at any time by contacting MMS at the email address or phone number provided in this notice.
California Shine the Light Rights
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us at DPO@mms.org.
Nevada Senate Bill 220 provides consumers (Nevada residents) with specific rights regarding their Personal Information. This section describes your Nevada privacy rights and explains how to exercise those rights.
We endeavor to respond to a verifiable consumer request within sixty days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.