This privacy policy (this “Policy”) describes the policies and procedures of the Peter G. Peterson Foundation  ("we," "our," “us”) with respect to personal data collected, held, used or processed by, or on behalf of, us, our affiliates, grantees, vendors and/or other representatives, including when you use our website at www.pgpf.org (the “Site”), any website that is controlled by us and where this Policy is linked, and the websites of our affiliates or programs (collectively, the “Related Sites”).  This Policy also applies when you interact with our programs and the programs of our grantees, affiliates, collaborators, and/or partner organizations when they collect or process personal data on our behalf (collectively, the “Programs”).  For more information about our Programs, please visit our Site at https://www.pgpf.org/programs-and-projects/.  The Site, the Related Sites, and the Program websites are referred to collectively as the “Sites.”  This Policy also covers the measures taken to protect the confidentiality, integrity and security of that personal data, and your rights regarding such personal data.

By visiting the Sites, you acknowledge that you have read this Policy, which we may update at any time. If we update this Policy, we will post the updated version here. Any such changes will be effective as to you when you first access the Sites after we post the changes here. If we make any material changes in the way we collect, hold, use, process or share your personal data, we will endeavor to provide you with appropriate notice.

The terms which govern the use of the Sites can be found here.

This Policy sets out:

• the types of personal data that we collect from individuals when they use the Sites, or apply for, or participate in, the Programs;
• the purposes and legal basis for our processing and use of individuals’ personal data;
• how we may disclose or use personal data;
• how we transfer personal data outside of the European Economic Area (“EEA”) or United Kingdom (“UK”); and
• individuals’ rights with respect to our use or disclosure of their personal data.

Queries regarding how (1) our policies may apply to your personal data; (2) to exercise your right to question or object to our use of your personal data, in accordance with applicable laws; or (3) to access, correct, or delete your personal data, should be sent to us using the contact information set forth below.

Who Controls the Data We Collect

We are a data controller with respect to your personal data. We ‘control’ the data you submit to the Sites, or provide when you apply for, or participate in, the Programs, and we make certain decisions as to how to use and protect it, but only to the extent that we have informed you about such use or as otherwise permitted by applicable law.

What Personal Data Do We Collect

We do not request or require, or provide opportunities for you to submit, personal data on the Sites, nor do we collect personal data by means of the Sites, other than as set forth below or as otherwise specified on the Sites from time to time.

We provide you with the opportunity to submit your email address to sign up for our newsletter. If you do so, we will use your email address for the purpose of providing you with our newsletters and/or other information that we believe you will find relevant.

We may also collect personal data that you may choose to provide when you apply for and participate in the Programs.  The categories of personal data we collect vary by Program, and may include: first and last name, birthdate, contact details (such as phone number, email address, or mailing address); educational information (such as name of university, campus, major/minor, or graduation year, level of education); LinkedIn information; demographic information (such as race, ethnicity, gender/gender identity, nationality, country of birth, or pronouns); financial information, dietary restrictions, and other information you choose to provide in Program applications.  Some of this information, including demographic information, can be considered “sensitive” personal data.

We may provide opportunities for you to communicate with U.S. legislators regarding the national debt or other concerns. To take advantage of this opportunity, you will need to provide your email address and home address. We use a third party service provider, currently VoterVoice, which will use this information solely to provide this service. Accordingly, this information will be available both to us and to such provider for the purpose of determining the identity of your legislator(s) and emailing your message to such legislator(s). It will also be furnished to the recipient of your message so that the legislator(s) know who sent it.

We may record details of visits to the Sites, such as traffic data, IP addresses, location data, weblog information about the computer or other device you use to interact with the Sites, the type of operating system and browser you use, access times, pages viewed, URLs clicked on, and the pages visited before navigating to the Sites, using cookies or other technologies, as set forth below.

Cookies are small text files stored by your browser on your computer or other device when you visit websites, which allow for the collection of certain information about your use of the websites. Some of these cookies are essential, but you have the choice to refuse the use of all non-essential cookies by clicking on the options on the Site. To find out more about cookies please visit: www.allaboutcookies.org or www.youronlinechoices.eu.

We work with third parties, which may place cookies on your web browser to enable us to have targeted advertising served to you based on your prior visits to the Sites, when you visit other websites in the advertising networks of those third parties.

Why We Collect and Process Personal Data

We may process the personal data described in this Policy for the following purposes, as detailed in this Policy:

• to provide service and support or address complaints relating to the Sites;
• to provide you with our newsletters or other information;
• to communicate with you directly about the Programs, including the Programs of our grantees, affiliates, collaborators, and/or partner organizations;
• to allow you to communicate with legislators;
• to monitor, improve and safeguard use of the Sites;
• where you give us consent;
• to provide targeted advertisements to you in connection with your use of the Sites;
• in connection with legal claims, and to comply with applicable laws, regulations, subpoenas, legal process, governmental investigations, regulatory requests or inquiries, including cooperating with government or law enforcement authorities conducting an investigation; and
• as otherwise described in this Policy.

How and With Whom Do We Share Personal Data

We may share your personal data as set forth below:

• among our grantees, affiliates, collaborators, and/or partner organizations in connection with the Programs
• to disseminate information about the Programs, including the Programs of our grantees, affiliates, collaborators, and/or partner organizations;
• with service providers, suppliers and subcontractors for the purpose of providing the Sites and the services accessible on the Sites;
• with our customer relationship management (CRM) vendor;
• with analytics and search engine providers, such as Google Analytics, that use such information to help improve and optimize the Sites (to learn more about Google Analytics and how Google collects and processes data, see www.google.com/policies/privacy/partners);
• with our third-party advertising partners;
• if we transfer or acquire any businesses or assets or merge any business or operations into or with those of another person or entity, in which case we may disclose your personal data to the prospective counterparty in such transaction and such data may be one of the assets transferred in such transaction;
• to comply with applicable laws, regulations, subpoenas, legal process, governmental investigations, regulatory requests or inquiries, to cooperate with law enforcement, to assert or defend against legal claims, to protect our and others’ rights, property, or safety, and for the purposes of crime and fraud prevention and remediation;
• as required to conduct our operations and pursue our legitimate interests; or
• to any other party with your consent.

Transfers of Personal Data Outside the EEA or UK

In some cases, disclosure of personal data to other persons will involve transferring personal data from a country in the EEA or UK to a country which has been held not to provide a level of protection of personal data equivalent to that provided in the EEA or UK. In particular, personal data from the EEA or UK, if any, will be transferred to, stored in and processed in the United States. If we transfer your personal data out of the EEA or UK to a country not deemed to provide an adequate level of personal data protection for purposes of applicable data protection laws such that additional safeguards are required, the transfer will be performed only with your consent, to pursue our legitimate business interests, or as otherwise permitted by applicable laws.

Your Rights

You have various rights with respect to our use, processing and sharing of your personal data, as described below. We make these rights available to all users, regardless of whether you reside in a jurisdiction that expressly provides for a particular right. There may be exceptions to these rights under applicable law. If you wish to contact us to exercise any of these rights, or if you wish to appeal a decision concerning any of these rights, please email us at [email protected].

We will not deny you services, charge you a different price, provide a different level or quality of services or otherwise discriminate against you just because you exercised any of these rights; however, if you decline to provide your personal data or ask us to delete it or stop disclosing it, we may be unable to provide you with certain services.

Only you, or a person whom you authorize to act on your behalf, may make a request related to your personal data. The request must:

• provide sufficient information for us to reasonably verify you are the person about whom we collected personal data or an authorized representative of such person; and
• describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal data if you do not take the foregoing actions. Making a request does not require you to create an account with us. We will use personal data provided in a request only to verify your identity or authority to make the request.

• Access: You may request a copy of the personal data that we have collected, used, or shared about you, and why we collected, used or shared that personal data, including the categories of personal data collected, the specific items of personal data collected, the categories of sources from which we collected personal data, the purposes for which we use the personal data, the categories of third parties with whom we share the personal data, and the categories of personal data that we disclose to third parties.
• Accuracy/Correction: We aim to keep your personal data accurate, current, and complete. You may contact us to let us know if any of your personal data is not accurate or changes.
• Opt-out of Targeted Advertising or the Sale of Personal Data: You have the right to opt-out of the processing of your personal data for the purposes of targeted advertising or the sale of your personal data.
• Objecting/Deletion: You have the right to object to processing of your personal data and to ask us to block, delete or restrict your personal data, subject to certain exceptions. Once we receive your request and verify your identity, we will delete your personal data from our records and direct our service providers to delete your personal data from their records, unless an exception applies under applicable law.
• Portability: You have the right to request that your personal data be provided to you, or to another data controller, in a commonly used, machine-readable format.
• Complaints: If you believe that your data protection rights may have been breached, you have the right to lodge a complaint with the applicable supervisory authority.

How Long We Keep Your Personal Data

We will retain personal data for as long as we deem necessary in connection with the purposes described in this Policy or as otherwise permitted under applicable law.

Protection of Personal Data

We endeavor to keep your personal data secure. Please be aware though that there is no such thing as perfect security on the internet, and third parties may unlawfully intercept or access transmissions or private communications. To the fullest extent permitted by law, we will not be responsible or liable for any damages, losses or causes of action arising out of or in connection with the inadvertent or unauthorized disclosure of your personal data.

Do Not Track

We do not respond to Do Not Track (“DNT”) browser settings.

Contact Information

If you have any questions or comments about this Policy, you may email us at [email protected].