The Digital Due Process Clinic is committed to respecting and protecting personal privacy. We are also committed to conducting our work in as open and transparent a process as possible. Almost all of our content is publicly accessible, including email addresses and other information supplied by participants in online forums. Those users who do not wish to expose any personal information should not provide it, or should consider using anonymizing services where possible.
When you browse, read or download information on our website, we only collect limited, anonymous data. For instance, our web server may record the numerical Internet Protocol (IP) address of the computer you are using; information about your browser and operating system; date and time of access; and the internet address and page which linked (referred) you to our site.
We collect the IP addresses of visitors, time of access, browser type, and web pages visited. We collect this information on an aggregate basis only. For example, we track which pages are most popular among visitors as a whole. We do not track information on which pages an individual user visits. We do not collect any other information without your knowledge and permission. If you search the site, your search requests may be logged. We use this information to measure the number of visitors to different sections of the site, diagnose and correct system errors, perform research, and improve the usability of the site.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
With whom we share your information
Information we gather may also be shared with campus constituents to improve programs, outreach, and other campus initiatives. Additionally, metrics may be shared with vendors to improve communications related to these activities. However, we will not sell this data to third-parties for their use in direct marketing, advertising, or for the promotion of their products and services.
In the event that we are required by law (including a court order) to disclose the information you submit, we will provide you with notice (unless we are prohibited) that a request for your information has been made so that you may object to the disclosure. We will send this notice by email to the address you have given us. We prefer to independently object to over-broad requests for access to information about users of our site, but we cannot assure you that we will be able to do this in all cases. If you do not challenge the disclosure request yourself, we may be legally required to turn over your information.
Protecting your information
No method of transmitting over the internet or storing electronic data is 100% secure, but this site has measures in place to help protect against the loss, misuse, or alteration of the information that is under our control.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Marketing emails you may receive from the clinic contain options to unsubscribe.
Social media presence
If you share our content through social media, such as liking us on Facebook or tweeting about us on Twitter, those social networks will record that you have done so and may set a cookie for this purpose.
If you wish to opt-out of any of these social interactions please refer to the specific social media platform for instructions on how to do so.
Links to independent websites
Pages hosted by the Digital Due Process Clinic website may link to independently-run web sites outside of the sts.cornell.edu domain. Cornell is not responsible for the privacy practices, content, or web accessibility needs on such web sites.
Digital Due Process Clinic website content is intended for adults and we will not knowingly collect personal information from children under 13 years old. If you are a parent or legal guardian of a child under age 13 who you believe has submitted personal information to a site hosted by the Digital Due Process Clinic, please contact us immediately.
Special notice for EU residents
If you are located within the European Economic Area (European Union, Norway, Liechtenstein, and Iceland), we acknowledge the rights granted to you under the General Data Protection Regulation (GDPR).
These rights may include:
- Right to access your information held by us
- Right to correct inaccurate or incorrect information about you
- Right to the erasure of your information when it is no longer necessary for us to retain it
- Right to restrict processing of your personal information in specific situations
- Right to object to processing your information, including sending you communications that may be considered direct-marketing materials
- Right to object to automated decision-making and profiling, where applicable
- Right to complain to a supervisory authority in your jurisdiction within the EU
Please contact us with any questions, concerns, or if you wish to exercise any of these rights: firstname.lastname@example.org
Changes to this policy
Digital Due Process Clinic @ Cornell University
Morrill Hall, Room 407
Ithaca, NY 14853
United States of America