Introduction

The Privacy Policy describes the types of Personal Data we collect through Noah ES. The Policy details our commitment to protecting the privacy of individuals who:

• Visit our Websites, as "Website Visitors"

• Businesses who register to use Noah ES, which we market for subscription (available at www.noah-es.com (the "Service(s)") hereafter referred to as “Customers”

This policy also describes how we use Personal Data, with whom we share it, your rights and choices, and how you can contact us about our privacy practices.

Scope Of This Policy

When this Policy applies:

The policy applies to:

• www.himsa.com / HIMSA’s web site used to provide product and training information for Noah ES

• www.noahes-com / The Website used by Customers to sign up for Noah ES, manage their Account and users, providing authentication services, and provide the secure backend end processing for the Noah ES client application and other Noah ES compatible applications provided by HIMSA member companies.

• himsanoah.atlassian.net / The technical support portal used by Customers and HIMSA to communicate about product issues and questions.

When this Policy does not apply – Third party websites:

Our Websites may contain links to other websites or other Websites may link to ours. The information practices and the content of such other websites are governed by the privacy statements of such other websites. We encourage you to review the privacy statements of any such other websites to understand their information practices.

When this Policy does not apply – Patient Data:

This policy does not apply to hearing care business customers hereafter referred to as"Patients". Customers to our Services are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations, relating to the collection of personal information in connection with the use of our Services for Patients.

We collect information under the direction of our Customers and have no direct relationship with Patients whose personal information we process in connection with our Customer's use of our Services. If you are a Patient who interacts with a Customer using our Services and would either like to amend your personal information or no longer wish to be contacted by one of our Customers that use our Services, please contact the Customer that you interact with directly.

Personal Data We Collect and Use for Noah ES Services

These security and privacy practices, including how we protect, collect, and use electronic data, text, messages, communications, or other materials submitted to and stored within the Services by You ("Business Data"), are detailed below, or such other applicable agreement between you and HIMSA relating to Your access to and Your use of such Services (collectively referred to as the "Terms of Use").

Account and Registration Information:

We ask for and collect personal information about you such as your name, address, phone number, email address, and credit card information, as well as certain related information like your company name and website name,

When you register to access or utilize one or more of our Services (an "Account") we also ask for and collect personal information such as an email address and a name or alias from any individual that you authorize to log into and utilize our Services in connection with Your Account.

We refer to any information described above as "Account Information" for the purposes of this Policy. By voluntarily providing us with Account Information, you represent that you are the owner of such personal information or otherwise have the requisite consent to provide it to us.

Information That We Collect From You on our Websites

Other Submissions:

We ask for and may collect personal information from you when you submit web forms on our Websites or as you use interactive features of the Websites, including participation in surveys, , promotions, requesting customer support, or otherwise communicating with us.

Event or Training Attendee Information:

We ask for and may collect personal information such as your name, address, phone number, and email address when you register for or attend an event or training at which HIMSA participates.

Cookies and Other Tracking Technologies:

We and our authorized partners may use cookies and other information-gathering technologies for a variety of purposes. These technologies may provide us with personal information, information about devices and networks you utilize to access our Websites, and other information regarding your interactions with our Websites. For detailed information about the use of cookies on the Websites, please read and review our Cookie Policy found here.

Web beacons, tags, and scripts may be used on our Websites or in email or other electronic communications we send to you. These assist us in delivering cookies, counting visits to our Websites, understanding usage and campaign effectiveness, and determining whether an email has been opened and acted upon.

Logs

As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Services. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information.

Web Site Analytics

We collect analytics information when you use the Websites to help us improve them, including through the use of cookies.

How We Use Personal Data

General Uses

We may use the information we collect about you (including personal information, to the extent applicable) for a variety of necessary purposes, including to

• Provide, operate, plan for necessary capacity, maintain, improve the Websites and the Services

• Enable you to access and use the Websites and the Services

• Process and complete transactions, and send you related information, including purchase confirmations and invoices

• Send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages

• Investigate and prevent fraudulent transactions, unauthorized access to the Websites and the Services, and other illegal activities

• Personalize the Websites and Service features that are available to you that you have signed up for.

• For other purposes for which we obtain your consent.  For example, you may opt-in to receive different newsletters and survey opportunities that HIMSA offers

What we will not use your personal data for

• send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners (you can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications)

• process and deliver contest or sweepstakes entries and rewards

• monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes
  

How we protect information

Please see Noah ES Data Protection and Security for further details.

Legal basis for processing (EEA visitors only)

If you are a visitor from the European Economic Area, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only where we need the personal information to perform a contract with you (e.g. to provide you with our Services), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we have your consent. In some cases, we may also have a legal obligation to collect personal information from you.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time why we need to use your personal information. If we process personal information in reliance on your consent, you may withdraw your consent at any time.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at essupport.himsa.com

How We Disclose Personal Data

Third-Party Service Providers

We share information, including personal information, with our third-party service providers that we use to provide payment processing, notification/communication, and other services for us. These third-party service providers may have access to or process your personal information for the purpose of providing these specific services for us. We do not permit our third-party service providers to use the personal information that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us.

Compliance with Laws and Law Enforcement Requests; Protection of Our Rights

In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Use, or as otherwise required by law.

Testimonials

From time to time, we may post testimonials on the Websites that may contain personal information. We obtain your consent to post Your name along with Your testimonial.

Community Forums:

The Websites may offer publicly accessible blogs, community forums, comments sections, discussion forums, or other interactive features ("Interactive Areas"). You should be aware that any information that you post in an Interactive Area might be read, collected, and used by others who access it.

Your Rights and Choices

You have choices regarding our use and disclosure of your Personal Data:e

• View or change your Personal Data / If You would like to review, correct, or update Personal Data that you have previously disclosed to us, you may do so by signing in to your Noah ES Account.

• You have the following rights with regard to the Personal Data we control about you:

  • The right to request confirmation of whether HIMSA processes Personal Data relating to you and, if so, to request a copy of that Personal Data;

  • The right to request that HIMSA rectifies or updates your Personal Data that is inaccurate, incomplete, or outdated;

  • The right to request that HIMSA erase your Personal Data in certain circumstances provided by law;

  • The right to request that HIMSA restrict the use of your Personal Data in certain circumstances

Please contact us via essupport.himsa.com if you have questions or requests.

Security and Retention

Where HIMSA is the data controller of personal information then we retain the personal information we collect where we have an ongoing legitimate business need to do so (for example, to provide you with our Services, to enable your participation in an event, and to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
If your personal information is processed within a Customer's Business Data, we will process the personal information for as long as we are instructed to do so by the relevant Customer that is the data controller of the Business Data.

International Data Transfers

We store personal information about Website Visitors and Customers within the EEA, and the United States. To facilitate our global operations, we may transfer and access such personal information from around the world.

We will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests, including through the use of standard contractual clauses. Additionally, we use a limited number of third-party service providers to assist us in providing our services to customers. These third parties may access, process, or store Personal Data in the course of providing their services. We obtain contractual commitments from them to protect your Personal Data.

Updates To this Privacy Policy

This Policy may be updated from time to time to reflect changing legal, regulatory, or operational requirements. We encourage you to periodically review this page for the latest information on our privacy practices.
If there are any material changes to this Policy, you will be notified by our posting of a prominent notice on the Websites prior to the change becoming effective. If we are required by law to do so, we will seek your consent prior to those material changes becoming effective.

If you do not accept any changes made to this Policy, please discontinue use of the Websites and the Services.