Updated December 2022
COLSA Corporation and its affiliates (Collectively COLSA, “we”, “our”)) take our responsibility to protect information and privacy seriously. We are providing this Notice as part of our commitment to handling your personal information responsibly and transparently and in accordance with our obligations under applicable laws. This Privacy Policy explains how we collect, use, share, and protect the security of your personal information as a result of your use of our web sites, and our internal networks and systems. It applies to colsa.com and other COLSA websites and internal networks and systems that link to this notice (“Sites”). Certain sites may provide additional detail about privacy practices specific to those Sites.
Our Sites are designed for use by individuals, business, commercial, and government customers, prospects, applicants for employment, and employees. We do not purposefully collect information on individual consumers or individuals outside of their capacity as employees of a business partner or business prospect or as a potential job applicant or employee with our company. We will only collect, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this. COLSA DOES NOT SELL PERSONAL INFORMATION IT COLLECTS AND USES.
This Policy informs you of our practices for collection and use of personal information and your rights as outlined below:
- THE CATEGORIES AND SPECIFIC PERSONAL INFORMATION WE MAY COLLECT AND THE SOURCES
- THE PURPOSES FOR COLLECTING AND USING PERSONAL INFORMATION AND THIRD PARTIES WE MAY SHARE PERSONAL INFORMATION WITH
- COOKIES
- HOW WE PROTECT AND STORE YOUR INFORMATION
- CHANGES TO OUR PRIVACY POLICY
- YOUR RIGHTS
- CONTACT US
THE CATEGORIES AND SPECIFIC PERSONAL INFORMATION WE MAY COLLECT AND THE SOURCES
| CATEGORY OF PERSONAL INFORMATION | SPECIFIC INFORMATION ABOUT THE CATEGORY | SOURCES OF THE INFORMATION |
| Identifiers | Such as names, date of birth, social security number, addresses (including address history), email address, telephone numbers, user name, online screen name, security identifiers, codes, and passwords | You if you choose to provide it Affiliates Third parties (such as service providers who you have authorized) Events, such as conferences Public records data bases |
| Employment Information | Such as employment status, employment history, education history CV, security clearance information, where necessary, your current salary, and other personal information submitted by you | You if you choose to provide it U.S. Government Security Systems Public records data bases |
| Protected Information | Such as race, gender, sexual orientation, gender identity, marital status, military or veterans status, nationality or ethnicity | You if you choose to provide it |
| Financial Information | Such as payments, bank accounts, requests for employment verification, and benefits | You if you choose to provide it Third parties authorized by you (such as service providers and third parties confirming payments and transactions made on your behalf) Affiliates |
| Device Information and Identifiers | Such as IP address, browser type and language, operating system, platform type, software and hardware attributes, unique device and app identifiers, and approximate location information from where you access our website(s) | You through your device Cookies and tracking technologies Cybersecurity technologies |
| Internet, network, and electronic device information | Such as information about the files you access and download, domain names, landing pages, browsing activity, dates and times of access, pages viewed, forms you complete or partially complete, uploads and downloads, search terms, websites you visit using our systems, if you share our content to social media platforms and data logged to our web and internal servers, emails and data about emails, access times, error logs, and other similar information. | You through your device Cookies and tracking technologies Cybersecurity technologies |
| Biometric Information | Such as fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, or a minutiae template, can be extracted | You if you choose to provide it You through your device |
| Health Information | Such as information relating to infectious diseases, symptoms, recent diagnoses and relevant travel history | You if you choose to provide it |
THE PURPOSES FOR COLLECTING AND USING PERSONAL INFORMATION AND THIRD PARTIES WE MAY SHARE PERSONAL INFORMATION WITH
| CATEGORY OF PERSONAL INFORMATION | PURPOSES FOR COLLECTING AND USING PERSONAL INFORMATION | THIRD PARTIES WE MAY SHARE PERSONAL INFORMATION WITH |
| Identifiers | Recruiting and employment including such things as hiring, promotions, payments, benefits, and taxes Legal and regulatory compliance Government contract compliance Bug detection and error reporting Security and fraud prevention and detection Analyzing and improving our systems and services | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Employment Information | Recruiting and employment including such things as hiring, promotions, payments, benefits, and taxes Responding to third party requests you have authorized Legal and regulatory compliance Government contract compliance Security and fraud prevention and detection | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Protected Information | Legal and regulatory compliance Government contract compliance Such as performing data information analyses (including anonymization and aggregation of personal information) | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Financial Information | Payroll and benefits administration and services Responding to third party requests you have authorized Legal and regulatory compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Device Information and Identifiers | Providing services Analyzing, fixing and improving services and systems Bug detection and error reporting Security and fraud prevention and detection Legal and regulatory compliance Government contract compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Internet, network, and electronic device information | Providing services Analyzing, fixing and improving services and systems Bug detection and error reporting Security and fraud prevention and detection Legal and regulatory compliance Government contract compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Location Information | Providing services Analyzing, fixing and improving services and systems Bug detection and error reporting Security and fraud prevention and detection Legal and regulatory compliance Government contract compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Biometric Information | Providing services Security clearances and background investigations Security and fraud prevention and detection such as preventing unauthorized access Legal and regulatory compliance Government contract compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
| Health Information | Legal and regulatory compliance Government contract compliance | Affiliates Third party service providers to manage our business and for support of our systems and services who have agreed to confidentiality requirements to only use the information for the purpose of providing the contracted services to us Third parties at your request Third parties related to legal requests if required by law or if we believe in good faith that it is reasonably necessary |
We may place a text file called a cookie in the browser files of computers that visit this Site. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.
Cookies also allow your computer to utilize all the features on this Site. Our Site at colsa.com provides you with a “Cookie settings” in a banner at the bottom that allows you to decline non-necessary cookies. You may also decline cookies through your browser but some parts of our Sites may not work properly for you if you do so.
HOW WE PROTECT AND STORE YOUR INFORMATION
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately,
the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.
Storing your personal information
We will store your personal information for as long as is reasonably necessary for the purposes for which it was collected. In some circumstances we may store your personal information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, accounting, and contractual requirements.
In specific circumstances we may store your personal information so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your personal information or dealings until the possibility of any such complaint or challenge has passed.
CHANGES TO OUR PRIVACY POLICY
It is our policy to post any changes we make to the Policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you through a notice on the Website home page. The date the Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting our Website and this Policy to check for any changes.
YOUR RIGHTS
The right to access – You have the right to access and request copies of your personal information we have collected and maintain about you. Unless we are required by law to provide this for free, such as for California Consumers, we may where permitted by law charge you a small fee for this service.
The right to correction/rectification – You have the right to request that COLSA correct any information you believe is inaccurate. You also have the right to request that COLSA complete information you believe is incomplete. Upon verifying the validity of a request, we will use commercially reasonable efforts to correct your personal information as requested, considering the nature of the personal information and the purpose for maintaining it.
The right to deletion/erasure – You have the right to request that COLSA delete and erase your personal information, under certain conditions. We will not comply with a deletion request if it is necessary to maintain the personal information to:
- complete a transaction or comply with a contract;
- detect security incidents;
- identify and repair errors
- exercise free speech or another legal right;
- comply with federal or state electronic communications or privacy laws;
- comply with a legal obligation;
- otherwise use the personal information, internally, in a lawful manner.
Upon verifying the validity of a deletion request, we will delete your personal information from our records and direct any third-party service provider we engaged to delete the personal information from their records.
The right to information portability – You have the right to request that COLSA transfer the information that we have collected to another organization, or directly to you, under certain conditions.
The right to restrict processing – You have the right to request that COLSA restrict the processing of your personal information, under certain conditions, if you are a citizen or resident of the European union or United Kingdom, under the General Data Protection Regulations (GDPR).
The right to object to processing – You have the right to object to COLSA’s processing of your personal information, under certain conditions, if you are a citizen or resident of the European union or United Kingdom, under the GDPR.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: privacy@colsa.com.
CONTACT US
If you have any questions, concerns or complaints regarding our compliance with this notice and the information protection laws, or if you wish to exercise your rights, we encourage you to first contact us at:
COLSA Corporation
Attn: Corporate Communications/Privacy 6728 Odyssey Dr NW
Huntsville, AL 35806 or
COLSA Privacy Hot Line: 1-866-436-0163 or privacy@colsa.com.