The American Board of Imaging Informatics (“ABII”), 1255 Northland Drive, St. Paul, MN 55120-1155, operates this Privacy Policy (“Privacy Policy”), which describes how we collect, process, and share Personal Information, and provides information about your rights and your choices about how we handle your Personal Information. This Privacy Policy applies to your use of our website, online services, and in-person services (collectively, our “Service” or "Services").
Your Use of This Privacy Policy
Unless explicitly stated otherwise, any new features that augment or enhance the current Service shall be subject to this Privacy Policy.
Please review the Privacy Policy each time You use the Service. By using the Services, you agree to be bound by the most recent version of the privacy policy. If We materially change this Privacy Policy, We will update this page to reflect any changes to this Privacy Policy.
How we Collect Personal Information
The following describes the information We collect relating to identified or identifiable individuals (“Personal Information”). We collect Personal Information from You when You create a profile, use the Service, contact or interact with Us, fill out a form, and voluntarily provide Us with Your comments and other content in connection with using the Service. After You register for the Service, We collect data from You and from third- party institutions regarding Your qualifications, education, and professional records.
1
When You access and use the Service, We may collect certain Personal Information automatically. For example, we collect Personal Information relating to your device, browser, or application e.g. device identifiers, IP address, Your user name, roles/permissions for the Service, the domain name of Your Internet service provider, Your location, the Service features You use and the time of Your use, Your mobile device information (e.g., device model and operating system version) identifiers from cookies, session history, Service navigation metadata, and other data generated through applications and browsers, including via cookies, pixels, and similar technologies when you use our Service, access our Service, or when you open our communications. Additional information collected is described in the Analytics and Cookies and Other Tracking Technologies sections below.
We may collect Personal Information about You, such as educational background information, professional records, facial image, voice recording, and other information related to Your professional credentials, from third-party sources, such as employers, academic education
verifiers, other professional membership associations and societies, exam service providers, disability accommodation providers, and continuing education providers.
We may combine all of the information We collect from or about You and use it in the manner described in this Privacy Policy.
How We Use Your Information
We may use the Personal Information that We collect for several purposes, including:
To compile and maintain a database of professional and educational credentials and the professional record of those who obtain certification with Us or seek to obtain or maintain our certification, and to make available the data to the public and to various third parties, such as employers, other education organizations, continuing education providers, and state and regulatory authorities, consumers, and patients as a verification service;
The purposes for which You provided it;
To provide information and services to You;
To process and respond to Your inquiries and comments;
To send You information about Your relationship or transactions with Us;
To facilitate payment transactions (Your information will be used to submit Your payment information to our payment processor);
To administer, operate, and improve the Service or develop new services;
To personalize and enhance Your experience using the Service;
To send periodic emails. The email address You provided may be used to send You occasional news, reminders, updates, etc. Note: You can update Your email preferences, or unsubscribe from receiving future emails at any time;
To generate and review reports and data about our user base and Service usage patterns;
To analyze the accuracy, effectiveness, usability, or popularity of the Service;
To compile aggregate data for internal and external business purposes;
To prevent fraud and abuse of the Service and to otherwise protect users and visitors and our organization;
To assist law enforcement and respond to subpoenas; and
To perform other business activities as needed, or as described elsewhere in this Privacy Policy.
As explained elsewhere in this Privacy Policy, Personal Information We collect may be processed by our partners in providing services related to the Service (such as administration services, technical services relating to the maintenance, servicing, and upgrading of the products, software services, hosting services, customer service, data migration services, and analytical services, among others).
Please note that You may choose not to allow Us to use Your Personal Information for certain purposes as described in the Your Choices Regarding Your Personal Information section below.
How Your Personal Information is Disclosed
Your Personal Information may be disclosed to third parties in accordance with this Privacy Policy. Please note that a user may choose not to share certain information as described in Your Choices Regarding Your Personal Information below.
We may use third-party service providers and business partners to perform functions in connection with the Service and our other services, such as delivering announcements by email and renewal reminders by email and mail, developing, registering for, and delivering exams payment processing, certificate printing, facilitating volunteer activities, providing other activities to assist Imaging Informatics Professionals in maintaining their certification, website searching, analyzing and improving the Service usefulness, reliability, user experience, and operation, storing data, securing data, hosting data, migrating data, advertising, social sharing, providing users with services, and providing other services as described in this Privacy Policy. We may share Your Personal Information with these providers and partners for their marketing and promotional purposes and so they can provide services to You (where legally required, We will obtain Your express consent).
How to opt out of Google Analytics with the Opt-out Browser Add-on.
How to adjust the settings for Your Google account.
YouTube. We host videos on YouTube that are embedded in the Service. These are hosted on our account, viewable here. When You view the videos on the Service, YouTube may collect Your information, including Your username, other account information, and interactions with its site. For more information, please visit the YouTube privacy policy.
Because We are a healthcare profession credential provider, We may disclose Your Personal Information and certification status in connection with our credentialing and verification services. For example, We may disclose Your Personal Information with other continuing education providers, healthcare systems, healthcare services organizations, specialty professional societies (and their respective state affiliates), boards, associations, CE Approvers, CE sponsors, researchers, marketing agencies, and management consulting organizations. We may share Your Personal Information for their marketing and promotional purposes (where legally required, We will obtain Your express consent), for listing in their publications, and so they can provide services. In addition, the public may search for Your certification status on the Service.
We may disclose examination, credentialing information, maintenance of certification participation, and certification status to investigators, state medical boards, or to the public. We release individual examination scores and credential status to state agencies. A state agency may request Your information by entering Your Personal Information into our state entity website. If We have a record on You, We will release a
status report back to the registered state agency. We will disclose all relevant information in our possession for which We do not have claim of legal privilege in response to a lawful subpoena, court order, or an authorized request by a government or regulatory entity.
If We become involved in a merger, acquisition, sale of assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction, or if the ownership of all, or substantially all, of our organization otherwise changes, We may transfer Your Personal Information to a third party or parties in connection therewith.
We may also share Your Personal Information with our affiliates for purposes consistent with this Privacy Policy. Our affiliates will be required to maintain that Personal Information in accordance with this Privacy Policy.
We may also share Your Personal Information with researchers from time to time for upcoming research studies that are looking for participants. We may share Your email address with the research organization, or provide You with information about the study and ask if You would like to participate.
We may disclose your Personal Information to third parties if We believe that such disclosure is necessary to:
Comply with the law or guidance and cooperate with government or law enforcement officials or private parties;
Investigate, prevent, or take action regarding suspected illegal activities, suspected fraud, the rights, reputation, safety, and property of Us, users or others, or violations of our policies or other agreements with Us;
Respond to claims and legal process (for example, subpoenas); and/or
Protect against legal liability.
Cookies and Other Tracking Technologies
A "cookie" is a small text file that a website can place on your computer’s hard drive for record keeping or other administrative purposes. We may use temporary "session" cookies to measure the flow of visitor traffic in the aggregate and to make the site easy to use. Once you leave this site, the temporary cookie assigned by our server will expire and be deleted from your computer.
Most web browsers are designed to initially accept cookies. You can reset your browser to refuse all cookies or to alert you when a cookie is being sent to your computer. However, if you choose to disable cookies or refuse to accept a cookie, certain portions of this site may not function properly or efficiently.
We and authorized third parties may use cookies and similar technologies for the following purposes:
for “essential” purposes necessary for our Service to operate (such as maintaining user sessions, content delivery, and the like); and
for “functional” purposes, such as to enable certain features of our Service (for example, to allow a customer to maintain a logged-in session); and
for “analytics” purposes and to improve our Service, such as to analyze the traffic to and on our Service (for example, we can count how many people have looked at a specific page, or see how visitors move around the Service when they use it, to distinguish unique visits/visitors to our Service, and what website they visited prior to visiting our Service, and use this information to understand user behaviors and improve the design and functionality of the Service).
Security
We implement a variety of security measures to protect the safety of Your Personal Information when You enter, submit, or access Your Personal Information.
While We take reasonable measures to protect your Personal Information against loss, theft, and unauthorized use, disclosure, or modification, We cannot guarantee its absolute security. No Internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through the Service may not be secure. You should use caution whenever submitting Personal Information through the Service and take special care in deciding what Personal Information You provide us.
We cannot guarantee that transmissions of Your Personal Information will be fully secure and that third parties will never be able to defeat our security measures or the security measures of our partners. We assume no liability for disclosure of your information due to transmission errors, third-party access, or causes beyond our control.
Any Personal Information collected through the Service is stored and processed in the United States. If You use our Service outside of the United States, You consent to have Your Personal Information transferred to the United States.
Data Retention Policy, Managing Your Information
We will retain Your information for as long as You use the Service and for a reasonable time thereafter. We may maintain anonymized or aggregated data, including usage data, for analytics purposes. We may retain and use Your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and/or for the period required by laws in applicable jurisdictions. Please note that some or all of the information We have collected may be required for transactions on the Service to function properly.
Links to Other Websites or Applications
The Service may contain links to other websites or apps or may forward users to other websites or apps that We may not own or operate and to which this Privacy Policy does not apply. The links from the Service do not imply that We endorse or have reviewed these websites or apps. The policies and procedures We describe here do not apply to these websites or apps. We neither can control nor are responsible for the privacy practices or content of these websites or apps. We suggest contacting these websites or app providers directly for information on their privacy policies. Nonetheless, We seek to protect the integrity of our Service, and welcome any feedback about these linked websites and mobile applications.
Targeted Advertising
In some jurisdictions, ABII, and certain third parties operating on or through the Service, may engage in advertising targeted to your interests based on Personal Information that We or those third parties obtain or infer from your activities across non-affiliated websites, applications, or services to predict your preferences or interests (also known as “Targeted Advertising”). This form of advertising includes various third parties and service providers engaged in the processing of Personal Information in connection with advertising. These parties may be able to identify you across sites, devices, and over time.
The parties that control the processing of Personal Information for Targeted Advertising purposes may create or leverage information derived from automatic collection, third party collection, or collection from you. In some cases, these parties may also develop and assess aspects of your activity on the Service to determine whether you are a type of person to whom a company wants to advertise, and determine whether and how ads you see are effective. These third parties may augment your profile with demographic and other Personal Information, and may track whether you view, interact with, or how often you have seen an ad, and whether you purchased advertised goods or services or took an action.
We generally use Targeted Advertising for the purpose of marketing our Service and third-party goods and services, and to send marketing communications.
Your Choices Regarding Your Information
You have choices regarding our collection, processing, and sharing of your Personal Information.
By email at PrivacyRights@ABII.org, or
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
In the letter, as Us to review, update, or delete Your Personal Information. Provide information that is sufficient, in the ABII’s sole and absolute discretion, to verify that the Personal Information You are requesting to change is associated with You. However, We reserve the right to retain Personal Information as necessary for our business purposes and to comply with federal and state laws.
Withdrawing Consent - If You are an individual residing in the EU, and You provided Your consent for any particular processing of Your Personal Information, You have the right to withdraw Your consent to our processing of Your Personal Information any time by requesting that Your Personal Information be deleted. See further information in the EU Privacy Rights section below. This deletion is permanent, and Your Personal Information cannot be reinstated. You also agree that you are no longer authorized to use ABII’s intellectual property such as its certification mark and other designations. To proceed with this request, please contact Us:
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
Opt-Outs Available from Our Partners - Some of our partners allow users to opt out of their collection of Personal Information. You may opt out of third-party services directly via the third party. For example, to opt-out of Google’s analytic and marketing services, visit Google Analytics Terms of Use, the Google Policy, or Google Analytics Opt-out.
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
In some cases, you may be able to opt-out by submitting requests to third party partners, including for the vendors listed below:
Please note that to the extent advertising technology is integrated into the Service, You may still receive advertisements even if You opt out of tailored advertising. In that case, the ads will just not be tailored to Your interests. Also, We do not control any of the opt-out links above, and are not responsible for any choices You make using these mechanisms or the continued availability or accuracy of these mechanisms.
Verification of Rights Requests
If You submit a request, We typically must verify Your identity to ensure that You have the right to make that request, reduce fraud, and to ensure the security of Personal Information. If an agent is submitting the request on Your behalf, We reserve the right to validate the agent’s authority to act on Your behalf.
We may require that You match Personal Information we have on file in order to adequately verify Your identity. If You have an account, We may require that You log into the account to submit the request as part of the verification process. We may not grant access to certain Personal Information to You if prohibited by law.
Information Collected From Other Websites and Mobile Applications, and Do Not Track Policy
Your browser or device may offer You a “Do Not Track” option, which allows You to signal to operators of websites, web applications, mobile applications, and services (including behavioral advertising services) that You do not wish such operators to track certain of Your online activities over time and/or across different websites or applications. Our Service does not support Do Not Track requests at this time, which means that We, or our analytics providers or other third parties with which We are working, may collect Personal Information about Your online activity both during and after Your use of the Service.
Children
Our Service is not intended for children under 16 years of age. We do not knowingly collect Personal Information from an individual under age
16. If You are under the age of 16, please do not submit any Personal Information through the Service. If You have reason to believe that We may have accidentally received Personal Information from an individual under age 16, please contact Us:
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
Your California Privacy Rights
Section 1798.83 of the California Civil Code permits California residents to request from a business, with whom the California resident has an established business relationship:
Certain information about the types of Personal Information the business has shared with third parties for those third parties’ direct marketing purposes;
And the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year.
California residents may make one request each year by contacting Us:
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
Your Nevada Privacy Rights
The Nevada Revised Statutes (NRS 603A.300 et seq.) permit a Nevada consumer to direct an operator of an Internet website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by contacting Us:
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155. We will provide further information about how We verify the authenticity of the request and Your identity.
European Privacy Rights
This section applies only to individuals located in the EEA, UK, Switzerland, and other countries (excluding the US) where individuals have a right to the information or to exercise rights in Personal Information as specified below (“Non-U.S. Individuals”). Non-U.S. individuals may have the following rights. (Please review our verification requirements in the Verification of Rights Requests section below. Applicable law may provide exceptions and limitations to all rights.)
Restriction - You may request that We restrict the processing of Personal Information to what is necessary for a lawful basis.
for profiling purposes;
for direct marketing purposes (We will cease processing upon Your objection); and
involving automated decision-making with legal or similarly significant effects (if any).
Legal Bases for Processing Your Information (For Users in EU) Performance of a Contract
The use of Your Personal Information may be necessary to perform the agreement You have with Us to provide You with a certification, provide credential verification services to the public and to third parties, and to respond to Your requests.
We use Your Personal Information for Our legitimate interests. We rely on Our legitimate interest to obtain and maintain Personal Information about an individual’s professional and educational qualifications for those who wish to become certified and registered with Us; to deliver Our professional credentials verification services to third parties; to administer, analyze, and improve Our Services and the content on the Service; to operate Our business, including through the use of service providers and subcontractors (who may have access to Your data – see further information in the How Your Personal Information is Disclosed section above); to send You notifications about Our services; to archive, keep records, and perform statistical and analytical activities; or to use Your Personal Information for administrative, fraud detection, audit, training, security, or legal purposes.
Where other lawful bases are not available for the processing of Your Personal Information, We may rely on Your consent as the legal basis for the collection and use of Your personal data. You are free to withdraw Your consent at any time, subject to the Your Choices Regarding Your Personal Information section below and the preceding Legal Bases for Processing Your Personal Information in this Section. Information about Your health or medical condition will only be processed with Your consent.
We may use Your Personal Information to comply with legal obligations to which We are subject, including to comply with legal process such as a subpoena.
We use Your Personal Information to perform tasks in the public interest, namely to track and make publicly available certification status for professionals who obtained Our credentials, including information on credential revocation and professional sanctions against such individuals, and to provide verification of credentials information on individuals certified and registered with Us to regulatory and other public authorities and other educational and professional institutions.
Changes to Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this Privacy Policy periodically, and especially before You provide any Personal Information. This Privacy Policy was made effective on the date indicated at the top of this page.
How to Contact Us
For any enquiries or complaints relating to the use of Your Personal Information or this Privacy Policy, please feel free to contact Us:
By sending a letter through the U.S. Postal Service to: ABII, ATTN: Privacy Policy, 1255 Northland Drive, St. Paul, MN 55120-1155.
Personal Information that is linked (or reasonably linkable) to a consumer that identifies the consumer's past, present, or future physical or mental health status is considered “Consumer Health Data” as defined under Washington State’s My Health My Data Act (“MHMDA”) and similar laws.
Categories of Consumer Health Data we Collect
We collect the following categories of Consumer Health Data for the following purposes:
Biometric data, including facial photos, and voice recordings | Identity verification in connection with exams; social media sharing and connections; customer service; video and audio meeting recordings | We use facial photos to verify identity in connection with exams and share this information with our exam vendor. We operate social media accounts and share photos, text, and recordings as is typical for social media platforms. We occasionally ask consumers to share photos with Us for use on Our social media accounts. We use voice recordings for the purposes for which they are provided, such as responding to customer service requests. We record certain audio or video meetings for the purpose for which the meeting is occurring, including hearings regarding potential ethics violations. |
Any information that we or our respective processor processes to associate or identify You with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.” | Site Analytics | See How Your Personal Information is Disclosed section above. |
Sharing of Consumer Health Data
We may share the following categories of Consumer Health Data with third parties and specific affiliates:
Individual health conditions, treatment, diseases, or diagnosis
Social, psychological, behavioral, and medical interventions
Biometric data
Any information that we or our respective processor, processes to associate or identify you with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.”
Categories of Third Parties with Which we Share
We may share Consumer Health Data with the following categories of third-party recipients: See Third Party Service Providers and Business Partners list in How Your Personal Information is Disclosed section above.
Consumer Health Data Privacy Rights Your Rights
Under the Washington State MHMDA and similar laws, residents and natural persons whose Consumer Health Data is collected in certain states may have the following rights, subject to verification, exceptions, and limitations:
You may submit requests as follows (please review verification requirements below):
You may send an email to PrivacyRights@ABII.org with Your email address and phone number or address on file, along with Your request.
If You have any questions or wish to appeal any refusal to take action in response to a MHMDA rights request, contact Us at PrivacyRights@ABII.orgmailto:privacy@maverik.com. We will respond to any request to appeal within the period required by law.
If You submit a request, We typically must verify Your identity to ensure that: You have the right to make that request, reduce fraud, and to ensure the security of Consumer Health Data. If an agent is submitting the request on Your behalf, We reserve the right to validate the agent’s authority to act on Your behalf.
We may require that You match Consumer Health Data We have on file in order to adequately verify Your identity. If you have an account, We may require that you log into the account to submit the request as part of the verification process. We may not grant access to certain Consumer Health Data to You if prohibited by law.