Privacy Policy - Hesston College

Protecting your private information is our priority. This Statement of Privacy applies to hesston.edu, hclarks.com and my.hesston.edu and Hesston College and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to Hesston College include hesston.edu, hclarks.com and my.hesston.edu. The Hesston College website is a higher education site. By using the Hesston College websites, you consent to the data practices described in this statement.

Collection of Your Personal Information

In order to better provide you with products and services offered, Hesston College may collect personally identifiable information, such as your:

first and last name
mailing address
email address
phone number

If you purchase Hesston College’s products and services, we collect billing and credit card information. This information is used to complete the purchase transaction.

Hesston College may also collect anonymous demographic information, which is not unique to you, such as your:

age
gender
race
religion

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include:

registering for an account;
entering a sweepstakes or contest sponsored by us or one of our partners;
signing up for special offers from selected third parties;
sending us an email message;
submitting your credit card or other payment information when ordering and purchasing products and services.

To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.

Use of Your Personal Information

Hesston College collects and uses your personal information to operate and deliver the services you have requested.

Hesston College may also use your personally identifiable information to inform you of other products or services available from Hesston College and its affiliates.

Sharing Information with Third Parties

Hesston College does not sell, rent or lease its customer lists to third parties.

Hesston College may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Hesston College, and they are required to maintain the confidentiality of your information.

Hesston College may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to:

conform to the edicts of the law or comply with legal process served on Hesston College or the site;
protect and defend the rights or property of Hesston College; and/or
act under exigent circumstances to protect the personal safety of users of Hesston College, or the public.

Tracking User Behavior

Hesston College may keep track of the websites and pages our users visit within Hesston College, in order to determine what Hesston College services are the most popular. This data is used to deliver customized content and advertising within Hesston College to customers whose behavior indicates that they are interested in a particular subject area.

Automatically Collected Information

Information about your computer hardware and software may be automatically collected by Hesston College. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain the quality of the service and to provide general statistics regarding use of the Hesston College website.

Use of Cookies

The Hesston College website may use “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Hesston College pages, or register with Hesston College site or services, a cookie helps Hesston College to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses and so on. When you return to the same Hesston College website, the information you previously provided can be retrieved, so you can easily use the Hesston College features that you customized.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Hesston College services or websites you visit.

Links

This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

Security of Your Personal Information

Hesston College secures your personal information from unauthorized access, use, or disclosure. Hesston College uses the following methods for this purpose:

SSL Protocol

When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.

We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) security, integrity and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

Delete your personal information from our records; and
Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
Detect security incidents; protect against malicious, deceptive, fraudulent or illegal activity; or prosecute those responsible for that activity;
Debug to identify and repair errors that impair existing intended functionality;
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech or exercise another right provided for by law;
Comply with the California Electronic Communications Privacy Act;
Engage in public or peer-reviewed scientific, historical or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
Comply with an existing legal obligation; or
Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Children Under Thirteen

Hesston College does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.

Email Communications

From time to time, Hesston College may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys and/or other general communication. In order to improve our services, we may receive a notification when you open an email from Hesston College or click on a link therein.

If you would like to stop receiving marketing or promotional communications via email from Hesston College, you may opt out of such communications by emailing admissions@hesston.edu and asking to be removed from future emails.

External Data Storage Sites

We may store your data on servers provided by third party hosting vendors with whom we have contracted.

Privacy Notice – E.U. Based

Hesston College seeks to comply with the requirements of the General Data Protection Regulation (“GDPR”) for persons residing or located in the European Union (“EU”). The GDPR requires organizations which process the personal data of EU-based individuals, such as Hesston College, to take measures to protect personal data and allow individuals to maintain control of their personal data.

This Privacy Notice outlines the collection, use and disclosure of personal data provided to the college by applicants, students, faculty and staff, alumni and other members of our community in the EU. When information is submitted to the college, or you use the college’s websites and other services, you consent to the collection, use and disclosure of that data as described in this Privacy Notice. To the extent any other college policy/procedure and this Privacy Notice conflict, this Privacy Notice controls for individuals located in the EU and/or under the GDPR.
For purposes of this Privacy Notice, “personal data” means any information which relates to or identifies you as an individual.

Purpose for the Collection and Use of Personal Data

Applicants for enrollment:
The college will use the details you provide on your application, including any completed application forms, references or transcripts, for the purposes of:

Identifying you,
Processing your application,
Verifying the information provided,
Immigration documentation/authorization;
Deciding whether to offer you a place and/or financial aid for the course or educational program you have applied for, and
Communicating that outcome (together with any feedback).

As well as circulating your application and related materials to the appropriate staff at the college, we will share your personal data for the above purposes as relevant and necessary to matriculate you as a student. This includes disclosures to third parties for financial aid, housing, immigration, and companies providing specific services to the college.

Students:

If you are accepted as a student, the college will keep a record of your application materials. The college will also maintain records about your studies at the college, your use of the academic and non-academic facilities and services the college offers (including student organizations and health-related resources), and student housing. This personal data will include data such as your name, home address, date of birth, course studies and/or educational program, financial aid, and information about your grades and student conduct.
The college will process your personal data for the purposes of providing you an education at Hesston College, including the following:

To deliver and administer your education, record the details of your studies (including any placements with external organizations), and determine/confirm your academic achievements;
To administer the financial aspects of your relationship with us, including financial aid;
To deliver information technology resources to you;
To deliver facilities and services to you (for example, athletics, libraries, accommodation and career support);
To enable your participation at events (for example, functions or graduation);
To communicate effectively with you by mail, email and phone, including the distribution of relevant newsletters and alerts;
To operate security, governance and disciplinary proceedings;
To support your medical, safety and religious requirements, as necessary;
To compile statistics and conduct surveys and research;
To enable us to contact others in the event of an emergency

Your personal data is shared with relevant administrators, faculty and staff at the college as required to facilitate these operations. We will share your personal data for the above purposes as relevant and necessary to third parties, including for financial aid, housing, immigration and companies providing specific services to the college.

Applicants for employment:

The college will use the details you provide on your application for employment, including any completed application forms, references, resumes/CVs, for the purposes of:

Identifying you,
Processing your application,
Verifying the information provided,
Immigration documentation/authorization;
Deciding whether to offer you employment, and
Communicating that outcome (together with any feedback)

If you are required to undergo certain additional recruitment checks or procedures as part of the job application and offer process (for example, criminal convictions checks or visa application procedures), you will be informed and we will follow the procedures below for “special information” as applicable.

Employees:

Once employed, the college will keep a record of the details you provided in your application materials, as well as interview and onboarding documentation. The college will maintain various administrative and financial records about your employment at the college, and about your use of the academic and non-academic facilities and services that we offer. The personal data collected and stored for employees includes contact information; financial information as necessary for payroll and benefit processing; employment contracts as applicable; performance reviews; wage and payroll records; disciplinary information; and any other information required to be compiled and retained under state and federal law.
The college will process your personal data for the purpose of employing you at the College, including the following:

To support you in implementing any disability-related accommodations or leave requests;
To administer payroll, benefits and other standard employment functions;
To administer HR-related processes, including those relating to performance/absence management, disciplinary issues and complaints/grievances;
To deliver information technology resources to you;
To deliver facilities, services and benefits to you, and where appropriate, to monitor your use of those facilities in accordance with college policies;
To communicate effectively with you by mail, email and phone;
To support your training, health, safety, welfare and religious requirements;
To compile statistics and conduct surveys and research;
To fulfill and monitor our responsibilities under state and federal law; and
To enable us to contact others in the event of an emergency.

Your personal data is shared with relevant administrators, faculty and staff at the college, as well as third parties, as required to facilitate these operations. However, please see the college’s policies on Employment Records in the Network Use Policy for specifics and safeguarding employee information.

Alumni and College Supporters:

The college stores information regarding alumni which was provided to the college during enrollment. Personal data retained on alumni includes the details of education (programs of study and graduation date), contact information, details of interactions with the college (including membership in student organizations), family details, communication preferences, financial information, careers and information on areas of interest. Supporters of the college who are not alumni may also voluntarily provide the same or similar personal data.
This personal data is used for alumni relations, supporter communications and fundraising, including specifically:

sending you publications (alumni magazines and updates about the college);
conducting surveys, including research on when and whether particular donations or funding appeals may be of interest to you;
providing services, including access to college facilities and alumni email accounts;
sending you tailored proposals, appeals and requests for donations;
sending you details of volunteering opportunities;
inviting you to alumni and other college events;
the promotion of other opportunities and services available to you;
wealth analysis and research in order to improve our understanding of our alumni and supporters, inform our fundraising strategy and target our communications more effectively;
internal record keeping, including the management of any feedback or complaints
administrative purposes, such as donation processing or event registration.

Your personal data is shared with relevant college staff, as well as third parties, as required to facilitate and carry out these functions. You have the right to object to the collection, processing, or use of your personal data, and may do so at any time.

Other Community Members

Any other individuals providing personal data to the college, such as family members of students and applicants, retirees, event patrons, customers, contractors and vendors and research subjects, also fall under this Privacy Notice as applicable. Any personal data collected, processed and used, will be for the purpose of furthering the college’s mission and provision of services as set forth above.

Storage and Transmission

Your personal data is created, stored and transmitted securely in a variety of paper and electronic formats, including some databases. Access to your personal data is limited to staff who have a legitimate interest in it for the purpose of carrying out their duties, and our use of your personal data will not be excessive.

“Sensitive” Categories of Information

In carrying out its functions as described above, the college may process some data about you that is classed as “sensitive” or “special category” personal data, and which requires additional protections. This includes information concerning your ethnicity, sexual orientation, religious beliefs or health/disability for planning and monitoring purposes, or in order to provide care, help or reasonable accommodations. For certain roles, other sensitive information may be processed, such as information about past criminal convictions, working with children or vulnerable adults, and your fitness to practice in certain regulated professions. Access to, and the sharing of, your “sensitive” personal data are controlled very carefully. You will normally be given further details about our use of any such data when we collect it from you.

Legitimate Bases for Collecting and Processing Personal Data

We consider the processing of your personal data for the above purposes to be either necessary for us to comply with a legal obligation (such as to administer visa applications); necessary for the performance of tasks we carry out in the public interest (such as admissions research); or as necessary for legitimate interests of the college or third parties in operating this institution and providing education, when it does not outweigh your rights to privacy. The college may also obtain specific, written consent as a legitimate basis for collecting and/or processing personal data. The college may also rely on any other legitimate basis for processing permitted under the GDPR, and will inform you as required.

Individual Rights of the Individuals under the GDPR

In addition to the right to receive the information provided in this Privacy Notice, individuals covered by this Privacy Notice have the right to:

Request personal data held about you by the college;
Request correction; erasure; or restriction of processing of personal data;
Object to processing of personal data;
Portability of personal data;
Where processing is based upon consent, to withdraw consent at any time, without affecting the college’s right to process personal data based upon consent before its withdrawal;
The right to file a complaint with a supervisory authority appointed by an EU member state for the purpose of receiving complaints;
Additional notice of the existence of automated decision-making, including profiling;
If the personal data is going to be further processed for a purpose other than that for which it was collected, then notice of the purpose and basis or bases for the further processing;
If personal data is collected for the college’s legitimate interests or for a task carried out in the public interest, then the individual has the right to object, on the grounds of his or her particular situation, to the processing of personal data concerning him or her (including profiling);
Where personal data is processed for direct marketing purposes, the right to object at any time to processing personal data concerning him or her for such marketing; and
Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her; provided, however, that this right does not apply if the decision is (a) necessary for entering into, or performance of, a contract between the individual and the college; or (b) is based upon the individual’s consent.

Note that some of these rights are qualified under the GDPR, and that many rights afford individuals a process but may not guarantee a particular outcome.

Any person who wishes to exercise any of the above-mentioned rights may do so by filing such request at Contact the Web Team.