Last revised: April 2018

The ISIC application, website isic.org  and mobile website m.isic.org (together: the “application”) are operated by ISIC Global Office BV (“we”, “our”, “us”). We are committed to protecting and respecting your privacy in accordance with the applicable privacy legislation, including national implementations of EC Directives 95/46/EC and 2002/58/EC, and any amendments or future relevant legislation, in particular the General Data Protection Regulation 2016/679. This Privacy Policy sets out how we collect, use and share information that identifies you or is associated with you (“personal data”).

You should be aware that we use cookies to store and access information whilst providing access to our application. You can find out more about our use of cookies in our section on cookies below. We are responsible for providing this application and for the processing of your personal data in relation to this.

Note that the individual discounts are generally offered by and the responsibility of the companies and local ISIC partners. A small number of global discounts (as indicated in the application) are provided by us in combination with the respective companies offering the products and/or services.

For your other rights and obligations using our application, please see our Terms of Use.

1. PERSONAL DATA WE HOLD ABOUT YOU

1.1 We collect personal data from you when you voluntarily submit information directly to us or our application. This can include information you provide when you register to use the application, login to the application, complete a form, correspond with us, use discounts via our application or subscribe to our email lists.

1.2 We collect personal data indirectly from you, such as information about the pages you look at on the application and the device you connect to the application with.

1.3 We may also collect personal data about you from third parties such as ISIC partners and ISIC members.  This may be combined with other information you provide to us, as described above. Each ISIC Member is responsible for providing notice to its cardholders concerning the purpose for which it collects Personal Data and how this Personal Data is processed.

1.4 We describe the categories of personal data we collect in more detail below:

(a) Contact details: such as your name, your email address and your telephone number associated with your account.

(b) Account information: such as your contact details (as above), your picture and other any information you share when creating an account with our application.

(c) Your preferences: choices you make such as notification and messaging preferences or choices about how the application is set up.

(d) Information about how you use and connect to the application:

(i) We collect information about how you use the application such as the pages and links you access, the discounts you have selected, the time you access the application and duration you are on it, the website you come to the application from or go to after leaving the application and selections and choices you make when using the application.

(ii) We also collect information about the computer or other electronic devices you use to connect to the application such as details about the type of device (which can include unique device identifying numbers), its operating system, browser and applications connected to the application through the device, your Internet service provider or mobile network, your IP address and your device’s telephone number (if it has one).

(e) Information about your location: subject to your consent, we may collect your location or an approximation thereof.

(f) Information provided by other organizations: Other organizations may provide information that we associate with you where they are lawfully permitted to share it, such as contact details, demographic data, or Internet navigation information.

2.YOUR RIGHTS

2.1 We respect your privacy rights and provide you with reasonable access to the Personal Data that you have provided through your use of the application. You can:

(a) update, correct, or delete your Account information and preferences at any time by accessing your Account settings page in the application. Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so

(b) access or amend any Personal Data we hold about you, or request that we delete or transfer any information about you that we have obtained from third parties.

(c) decline to share certain Personal Data with us, in which case we may not be able to provide to you some or all features and functionality of the application.

(d) object to the processing of your Personal Data, on legitimate grounds, except if otherwise permitted by applicable law. If you believe your right to privacy granted by applicable data protection laws has been infringed upon, please contact us using the contact details set out in the “Contact us” section below. You also have the right to lodge a complaint with data protection authorities.

(e) request to rectify or erase all Personal Data we hold about you at any time in cases envisaged in Article 17 General Data Protection Regulation (‘right to be forgotten’). Data is retained for 19 months after last activity, after which it is automatically shredded.

2.2. If there is information you would like to access, update, correct or delete, or if you would like to object to us processing your personal data, please contact us using the contact details set out in the “Contacting us” section below. Please provide as much information as you can about the information you are looking for and we will be happy to try and help you find it.

3. HOW WE USE YOUR INFORMATION

3.1 We will use your personal data for the purposes specifically described below:

(a) Contact details: we will use your contact details so we can communicate with you directly about our organization discounts, about your contact form requests, direct queries, issues or concerns you or other users have.

(b) Account information: we use your account information to verify your identity, provide our service to you, process renewal requests, and ensure that you are able to interact with the application as permitted by the functionality of the application and your preferences.

(c) Your preferences: we will use your preference settings for the purpose of providing notifications, messages, displaying the application and following other choices you are able to make about how the application is displayed to you.

(d) Information about discounts you have looked at: we use this information to send you reminders and to determine discounts that may be of interest to you.

(e) Information about how you use and connect to the application: we use this information to present the application to you on your device. We will also use this information to determine products and services that may be of interest to you.

(f) Information about your location: we may use your location or an approximation thereof to ensure the content and deals on the application are relevant to the city, state or country you are using the application in. We will not collect or track your exact location without your consent.

(g) All personal data: we use all the personal data we collect to:

(i) monitor and improve the application and our procedures and processes; and

(ii) to help us develop new products and services. Our use of your personal data in this way will not result in information that was not previously publicly available on the application.

3.2 We may anonymize and aggregate any of the information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the application, developing new products and features or displaying information about the discounts used via our application such as the most popular discounts or discounts based on an approximate location.

4. INFORMATION WE SHARE WITH THIRD PARTIES

4.1 We may share your personal data with the following parties:

(a) Companies and organizations that are subsidiaries of our organization and with the ISIC Association: these companies and this organization will only use your personal data in the same way as we can under this Privacy Policy.

(b) Companies and organizations that are ISIC partners or ISIC members under contract with our organization may receive aggregated statistics on the metrics and use of the deals.

(c) Service providers, partners and advisors: third parties who provide a service to us, partner with us on marketing and other business activities, advise us or that we work with in other business capacities. For example, we use a third party for the hosting of the application and your personal data. These third parties will only be allowed to use your personal data in accordance with our instructions or your marketing preferences (where applicable) and will be required to keep your information secure.

(d) Law enforcement, regulators and other parties for legal reasons: third parties who we are under a legal obligation to disclose your personal data to or who we need to disclose your personal data to protect our rights, property or safety or the rights, property or safety of others, detection and investigation of illegal activities and breaches of any agreement we have with you.

4.2 We may provide third parties with aggregate statistical information and analytics about users of the application but we will make sure no one can be identified from this information before we disclose it.

5. MARKETING

5.1 From time to time we may contact you by email with information about our organization and our activities, products and services. If you do not want us to send you email marketing, you can unsubscribe from our emails by clicking on the unsubscribe link (where available) in the emails we send to you.

5.2 We may send (push-)notifications directly to your device, for example to inform you about a nearby discount. If you do not want to get these notifications, you can generally disable this through the settings on your device and/or your preferences in the application.

5.3 You may also be subscribed to local newsletters and similar messages as provided by ISIC partners or ISIC members. Please refer to the aforementioned parties if you wish to unsubscribe from such messages, as these messages are not sent by us.

6. COOKIES

6.1 We may store information (which may include personal data) locally on your device using cookies and other browser and application storage methods. Cookies can be seen as text files, containing small amounts of information, which are downloaded to your browsing device (such as a computer or smartphone) when you visit a website or use an application. Cookies can be recognized by the website that downloaded them — or other websites that use the same cookies. This helps websites know if the browsing device has visited them before.

6.2 The types of cookies used on our site can generally be put into the categories described in the section below.

(a) Strictly Necessary Cookies: These cookies are essential to make our website work. They enable you to move around the site and use its features. Without these cookies, services that are necessary for you to be able to use our site such as accessing secure areas cannot be provided.

(b) Analytics Cookies: These cookies collect anonymized information about how people are using our website, for example which pages are visited the most often, how people are moving from one link to another and if they get error messages from certain pages. These cookies don’t gather information that identifies you. All information these cookies collect is grouped together with information from other people’s use of our site on an anonymous basis. Overall, these cookies provide us with analytical information about how our site is performing and how we can improve it.

(c) Functionality Cookies: These cookies allow us to remember choices you make and tailor our site to provide enhanced features and content to you. For example, these cookies can be used to remember your login details, language choice or country selection, they can also be used to remember changes you’ve made to preferences and other parts of pages that you can customize.

6.3 “First party cookies” are cookies that belong to us and that we place on your device. “Third-party cookies” are cookies that another party places on your browsing device when you visit our site. Third parties setting cookies from our website will be providing a service to us or a function of the site, but we do not always control how third-party cookies are used. You should check the third party’s website for more information about how they use cookies.

6.4 You can usually use the browser that you are viewing this website through to enable, disable or delete cookies. To do this, follow the instructions provided by your browser (usually located within the “Help”, “Tools” or “Edit” settings). Please note that if you set your browser to disable cookies, you may not be able to access secure areas of the application and other parts of the application may also not work properly. You can find out more information about how to change your browser cookie settings at www.allaboutcookies.org

7. TRANSFERRING YOUR PERSONAL DATA

7.1 International Transfers of your personal data: the personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in, including, in particular, outside the European Union. Some of these jurisdictions offer differing levels of protection in respect of personal data and may, in certain instances, be less protective than the jurisdiction you are typically resident in. We will take all reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy.

8. LINKS TO THIRD PARTY SITES

8.1 The application may, from time to time, contain links to and from third party websites, including our partners, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information or subject yourself to those websites.

9. CHANGES TO THIS POLICY

9.1 We may update this Privacy Policy from time to time and so you should review this policy periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the top of this Privacy Policy. Changes to this privacy policy are effective when they are posted on this page.

10. CONTACTING US

10.1 Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to info@isic.org or ISIC Global Office BV, Keizersgracht 174, Amsterdam, 1016 DW, The Netherlands, Attn: Data Protection Officer.