California Consumer Privacy Act
HANYS Privacy Policy for residents of California
CALIFORNIA PRIVACY RIGHTS ADDENDUM
Applicability. This section applies only to California consumers. For purposes of this section "Personal Information" has the meaning given in the California Consumer Privacy Act (CCPA). It describes how we collect, use and share California consumers' Personal Information in our role as a business and the rights applicable to such residents.
If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us at privacy@hanys.org and we will arrange to supply you with the information you need in an alternative format that you can access.
How we collect, use and disclose your Personal Information. If you have accessed our Website, we may have collected the following statutory categories of Personal Information in the past twelve (12) months:
(i) Identifiers, such as name, email address, mailing address and phone number. We collect this information directly from you or from third-party sources.
(ii) Internet or network information, such as browsing and search history. We collect this information directly from your device.
(iii) Geolocation data, such as IP address. We collect this information from your device.
(iv) Professional data, such as your job title and company.
(v) Other Personal Data, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels, participation in customer surveys or contests, or in providing service.
The business and commercial purposes for which we collect this information are described in the Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in the “How We Share Personal Data” section of the Privacy Policy. The time period for which we retain this information is described in the “How We Store and Secure Personal Data” section of this Privacy Policy.
In the preceding 12 months, we may have “shared” (as defined under the CCPA) certain information with our partners or affiliates.
Your California rights. You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute and there may be cases when we decline your request as permitted by law. These rights include:
(i) The right of access means that you have the right to request that we disclose what Personal Information we have collected and maintained about you in the past 12 months.
(ii) The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
(iii) The right of correction means that you have the right to request that we correct any inaccurate Personal Information that we maintain about you.
(iv) The right to request information concerning the categories of Personal Information (if any) that we disclose to third parties or affiliates for their direct marketing purposes.
(v) The right to limit the use of sensitive personal information (e.g. Social Security Number, racial or biometric data) means that you have the right to direct businesses to only use your sensitive personal information for limited purposes. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
(vi) The right to appeal means that you can appeal any decision by us to deny your privacy rights under applicable laws.
(vii) The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.
We respond to all appeal requests as soon as we reasonably can, and no later than legally required.
How to exercise your California rights. You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. Depending on your request, we will ask for information such as your name and your email address. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your Personal Information. We may deny a request from an agent that does not submit proof that they have been authorized to act on your behalf.
We will respond within the timeframe permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.
Please use the contact details below if you would like to:
(i) access this policy in an alternative format;
(ii) exercise any of your rights described above;
(iii) learn more about your rights or our privacy practices; or
(iv) designate an authorized agent to make a request on your behalf.
We may also "share" your Personal Data, as defined under the CCPA, with third-party partners.
If you’d like your information to be removed from our database, or would like to opt out from the "sharing" of your Personal Data for our advertising and marketing activities, please fill out this form or contact us at:
HANYS
One Empire Drive
Rensselaer, NY 12144
Attn: Privacy Officer
or
We do not knowingly collect, “sell” or “share” Personal Data of children under 18 years of age.
We will respond to your request to change, correct or delete your data within a reasonable timeframe and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.
Effective: Aug. 21, 2025