Your Consumer Rights

Know What Personal Data We Have

You have the right to know whether we are processing your personal data, what personal data is being collected about you, whether it is disclosed and to whom (as provided in the Policy).

Access and Data Portability of Your Personal Data

You can request access to your personal data. This enables you to receive a copy of the personal data we hold about you. We may request specific information from you to enable us to verify your identity. Your right to access your personal data is not absolute. If we cannot provide you with access to your personal data, we will inform you of the reasons, subject to any legal restrictions.

Correct Your Personal Data

The Foundation aims to ensure the personal data we possess is accurate. If you believe personal data about you is incorrect, incomplete or outdated, you may request the correction or an update of that information. We will use reasonable efforts to revise it.

Delete Your Personal Data

You may ask us to delete or remove personal data where there is no legal reason for us to continue using it.

Your Opt-Out Right

Under OCPA, the “sale” of personal data includes both traditional sales for monetary consideration and disclosures of personal data for other valuable consideration. We engage in both types of “sales” as defined by the OCPA. This includes (1) the sale of personal data to third parties in exchange for monetary payments (e.g., to provide you certain benefits or opportunities) and (2) the disclosure of personal data to third parties (e.g., advertising networks and analytics providers like Google Analytics) where those third parties may use your personal data for their own purposes beyond providing services directly to us. You have the right to opt-out of these “sales” of your personal data. You also have the right to opt-out of our processing of your personal data in connection with targeted advertising. To exercise either or both of these opt-out rights, please click here.

Withdraw Consent

You have the right to withdraw any consent you have previously given us at any time. If you withdraw your consent, this will not affect the lawfulness of our collecting and processing of your personal data up to the point in time that you withdraw your consent. Even if you withdraw your consent, we may still use your information, provided it has been fully deidentified and does not personally identify you.

Exercising Your Privacy Rights

If you wish to contact us in connection with the above, please email us at privacy@osufoundation.org. Include your name, address, email, phone number and the specific request you would like to make. Parents and legal guardians may contact us on behalf of their minor children.

To use an authorized agent to make a request on your behalf, we may need the authorized agent to provide proof that you gave the authorized agent signed permission to submit the request on your behalf. We may also require you to verify your identity directly with us.

We will respond to your written request without undue delay. We may require additional information to authenticate your request. If we are not able to honor any part of your request, we will notify you and, in our response, we will you with an explanation as to why we cannot do so.

Appeal Our Decision

If we deny your request to exercise your privacy rights as described above, you may appeal our decision by writing to us at the address from which our response was sent within 45 days of the date of our response. Please provide any additional, relevant information you believe we should consider in evaluating your appeal.

If you are an Oregon resident, and, after you appeal our decision, we again refuse your request, you may have the right to file a complaint with the Consumer Justice Division of the Oregon Department of Justice.

You may contact the Oregon Attorney General more information. Please visit https://www.doj.state.or.us.

Nondiscrimination

We do not discriminate against individuals who exercise their privacy rights.

Personal Data Retention

For personal data retention information, please see our Personal Data Retention Practices section.

Notice of Financial Incentive Program

We have third-party reward programs, including Alumni Association membership benefits (collectively, with all other such programs, the “Rewards Program”), which provide you with rewards (e.g., discounts, coupons or other price reductions) for eligible purchases. To administer the Rewards Program, we utilize certain identifiers that you provide to us (e.g., name, email address, phone number, as applicable) and your order history. To enroll in the Rewards Program, you will be asked to either create an account, provide certain personal data through an online form, or both.

You may opt-out of any of the Rewards Program at any time. To opt-out of the Rewards Program, please submit a request to us at privacy@osufoundation.org.

We do not assign a monetary value to the personal data that we collect from you and only use that personal data to further our business in accordance with this Policy. To the extent we are required to assign a monetary value to the personal data collected through the Rewards Program, the method for calculating the value would be based on the donations or sales generated by the program less the costs associated with facilitating and managing the program. Based on our reasonable estimate, the value of this personal data is equal to the value of the discount or financial incentive that we provide to you. We also have benefits programs for enhanced opportunities to participants in connection with the Foundation and OSU programs.

How to Contact Us for Privacy Inquiries

To ask questions or comment about this Oregon Privacy Addendum, our Policy and privacy practices, or to exercise your rights hereunder, please see contact us at the information provided in our Who We Are and How to Contact Us section.