What information do we collect?
ARIS2 collects the following personal data in line with the use purposes explained in a subsequent section:
- Your name and contact details
- Date of birth
- Online profile data/usage
- Emergency contact information
- Social media profile information
- Copies of identification documents
- Education and professional information
- Purchasing and payment information
- Registration and participation in ARIS2 events and activities
- Subscription preferences
- Information about the device(s) you use
- Information about service usage
- Cookies
- Authentication data
- Location information
- Author and peer review information
- Other information you upload or provide to us
How do we use your information?
ARIS2 uses (and, where specified, shares) your personal information for the following purposes:
To process transactions. ARIS2 uses personal information such as name, physical address, telephone number, email address, and company/institution to engage in interactions with you, including contacting you about your order, donation, subscription, event participation, or membership. We use financial/credit card and payment information to process your order and may need to share some of this information with delivery services, credit card clearing houses, and other third parties to complete the transaction.
To provide support or other services. ARIS2 may use your personal information to provide you with support or other services that you have ordered or requested. ARIS2 may also use your personal information to respond directly to your requests for information, including registrations for newsletters, webinars, or other specific requests, or pass your contact information to the appropriate ARIS2 distributor or reseller for further follow-up related to your interests.
To provide information based on your needs and respond to your requests. ARIS2 may use your personal information to provide you with notices of new product releases and service developments.
To provide online forums and social networks. Some services available on the websites permit you to participate in interactive discussions, post comments, opportunities, or other content to a bulletin board or exchange, or otherwise engage in networking activities. Some of these services are moderated; all may be accessed for technical reasons (for example, for improvements or fixes). ARIS2 does not control the content that users post to these forums or social networks. You should carefully consider whether you wish to submit personal information to these forums or social networks and tailor any content you submit appropriately and in accordance with the relevant terms of use. You should also review any additional terms and conditions that may govern your use of these services, including terms related to sharing your personal information and receiving communications.
To administer products. ARIS2 may contact you if you purchase products to confirm certain information about your order (for example, that you did not experience problems in the download process). We may also use this information to confirm compliance with licensing and other terms of use and may share it with your company/institution.
To select content, improve quality, and facilitate the use of the websites. ARIS2 may use your personal information, including the information gathered as a result of site navigation and electronic protocols and cookies (including third-party cookies), to help create and personalize website content, improve website quality, track marketing campaign responsiveness, evaluate page response rates, conduct usability testing, and facilitate your use of the websites (for example, to facilitate navigation and the login process, avoid duplicate data entry, enhance security, keep track of shopping cart additions, and preserve order information between sessions).
To serve personalized advertising to you. We don't share your information with advertisers without your consent. We allow advertisers to choose the characteristics of Users who will see their advertisements, and we may use any of the non-personally identifiable attributes we have collected to select the appropriate audience for those advertisements. When you click on or otherwise interact with an advertisement, there is a possibility that the advertiser may place a cookie in your browser and that your attributes meet the criteria the advertiser selected.
To assess usage of ARIS2 products and services. ARIS2 may track your usage of ARIS2 products and services (e.g., ARIS2 Membership) to determine your usage level, and those usage statistics may be made available to ARIS2 content licensors and your company/institution.
To communicate with you about a meeting, conference, or event. We may communicate with you about a meeting, conference, or event hosted or co-sponsored by ARIS2 or one of our business associates. This may include information about the event's content, event logistics, payment, updates, and additional information related to the event. Information you provide when registering for or participating in a conference managed or co-sponsored by parties other than or in addition to ARIS2 may be shared with those parties, and the treatment of such information is further subject to the privacy policies of those parties. ARIS2 and its conference co-sponsors may contact you after the event about the event, subsequent iterations of the event, and related events. Please note that ARIS2 conference, meeting, or event organizers, co-sponsors, exhibitors, and other third parties may directly request your personal information at their conference booths or presentations. Providing your information to them is optional, and you should review their privacy policies to address your particular needs and concerns about how they will treat your personal information.
To consider you for a higher member grade or an ARIS2 award. ARIS2 may use personal information such as your name, education, work history, and volunteer activities to consider you for a higher member grade or for an ARIS2 award. ARIS2 may need to share this information with your nominators, references, judges, and other parties involved in evaluating your eligibility.
To document standards development participation. If you are a participant in ARIS2 standards development, ARIS2 uses your personal information to comply with policies and procedures, legal and accreditation requirements, and evaluation of patent claims by patent offices. ARIS2 must capture your personal data for these purposes and provide information about activities related to standards development groups in which you participate. ARIS2 standards development participation is documented through various methods, e.g., rosters, submission documents, email reflectors, records of meeting attendance, responses to ballots, publicly available participation lists, and declaration of affiliations.
To assist in your participation in ARIS2 activities. ARIS2 will communicate with you if you are participating in certain ARIS2 activities, such as ARIS2 conferences, authoring or reviewing an ARIS2 periodical article, or ARIS2 humanitarian activities. ARIS2 may send you information, such as newsletters related to those activities.
To update you on relevant ARIS2 benefits, programs, and opportunities. ARIS2 may communicate with you regarding relevant ARIS2 benefits, programs, and opportunities available to you through your membership(s) with ARIS2.
To engage with third parties. ARIS2 may share your personal data with third parties in connection with services that these individuals or entities perform for or with ARIS2. These third parties are restricted from using this data in any way other than to provide services for ARIS2 or for the collaboration in which they and ARIS2 are contractually engaged (for example, hosting an ARIS2 database or engaging in data processing on ARIS2 behalf or mailing you information that you requested). These third parties are carefully selected by ARIS2 and obligated to keep your data secure. From time to time, we may also share your information with third parties whom we think might provide content, products, or services of interest to you.
To protect ARIS2 content and services. We may use your information to prevent potentially illegal activities and to enforce our terms and conditions. We also use a variety of technological systems to detect and address anomalous activity and to screen content to prevent abuse, such as spam. These efforts may, on occasion, result in a temporary or permanent suspension or termination of some functions for some users.
To get feedback or input from you. In order to deliver products and services of most interest to our customers, from time to time, we may ask members, customers, volunteers, and website visitors to provide us input and feedback (for example, through surveys, usability studies, and focus groups).
To protect ARIS2 information assets as well as your own personal data. The ARIS2 Information Security Program protects the confidentiality, integrity, and availability of ARIS2 information assets by following a risk management approach based on policies, standards, guidelines, and procedures to meet security objectives while supporting business and operational goals.
How can you control your information?
You can control the information we have about you and how we use it in several ways.
Personal data about minors and children
ARIS2 does not knowingly collect data from or about children under 16 without the permission of parent(s)/guardian(s). If we learn that we have collected personal information from a child under 16, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under age 16, please contact us.
How will you know if the Privacy Policy is changed?
ARIS2 may update its Privacy Policy from time to time. If we make any material changes, we will notify you by email if you have an ARIS2 Account or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
Logging practices
ARIS2 automatically records the Internet Protocol (IP) addresses of visitors. The IP address is a unique number assigned to every computer on the internet. Generally, an IP address changes each time you connect to the internet (it is a "dynamic" address). Note, however, that if you have a broadband connection, depending on your individual circumstance, the IP address that we collect may contain information that could be deemed identifiable. This is because, with some broadband connections, your IP address doesn't change (it is "static") and could be associated with your personal computer.
As well as recording the IP addresses of users, ARIS2 may also keep track of sites that users visited immediately prior to visiting the ARIS2 website and the search terms they used to find them. We keep track of the pages visited on the ARIS2 website, the amount of time spent on those pages, and the types of searches done on them. Your searches remain confidential and anonymous. ARIS2 uses this information only for statistical purposes to find out which pages users find most useful and to improve the website.
ARIS2 also captures and stores information that you transmit. This may include:
External links behavior
Some ARIS2 websites link to other sites created and maintained by other public- and/or private-sector organizations. ARIS2 provides these links solely for your information and convenience. When you transfer to an outside website, you are leaving the ARIS2 domain, and ARIS2 information management policies no longer apply. ARIS2 encourages you to read the privacy statement of each external website that you visit before you provide any personal data.
Cookies and web beacons
Cookies and web beacons are electronic placeholders that are placed on your device by websites to track your individual movements on that website over time. ARIS2 uses both session-based cookies (which last only for the duration of the user's session) and persistent cookies (which remain on your device and provide information about the session you are in and wait for the next time you use that site again).
These cookies and web beacons provide useful information to ARIS2, enabling us to recognize repeat users, facilitate the user's access to and use of our sites, allow us to track usage behavior, and balance the usage of our websites on all ARIS2 web servers.
Tracking cookies, third-party cookies, and other technologies such as web beacons may be used to process additional information, enable non-core functionalities on the ARIS2 website, and enable third-party functions (such as a social media "share" link). We may also include web beacons and other similar technology in promotional email messages to determine whether the messages have been opened.
Do Not Track (DNT)
The online advertising industry has self-regulatory initiatives designed to provide consumers a choice in the types of ads they may see online and to conveniently opt-out from online behavioral ads served by some or all of the companies participating in these programs. Our websites do not respond to DNT consumer browser settings.
Collaboration with authorities
ARIS2 has appointed and mandated a Data Protection Officer by NRMC.PT represents the regulatory authorities inside the ARIS2 Journal and in return, represents the ARIS2 organization to regulatory authorities.
The ARIS2 Data Protection officer will ensure proper communication with the relevant regulatory authority for privacy. The privacy officer will lead investigative action, complaint handling, and data breach notification. The privacy officer will also monitor regulatory changes and consult the regulatory authority where implementation of a regulatory or technological change leads to doubt.
Transfer of information to other countries
As a global organization, ARIS2 engages in a number of international activities. In connection with the management of those activities, ARIS2 may transfer information to other countries. By submitting your information to ARIS2 via the websites, or in connection with your interactions with ARIS2 offline, you consent to such transfers and to the processing of this information in other countries.
Responses to legal requests
ARIS2 reserves the right to share your information to respond to duly authorized information requests of governmental authorities or where required by law.
In the event of bankruptcy, merger, acquisition, reorganization, or sale of assets, your information may be sold or transferred as part of that transaction. The promises in this privacy policy will apply to your information as transferred to the new entity.
Your data rights
ARIS2 complies with all applicable data privacy laws and regulations including, but not limited to, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Under these laws and regulations, you may have certain rights to your data. Should you wish to exercise any of these rights, please send an email request to dpo@nrmc.pt with "Data Privacy Request" in the subject line, and in the email, please identify the specific privacy right you request assistance with. Please note additional information may be requested prior to fulfilling a request and that ARIS2 reserves the right to charge a fee, where permitted, to cover the cost of certain requests.
How do I contact you if there is an issue?
If you have any questions or concerns about this Privacy Policy or about the use of your personal information, please feel free to contact us by email at dpo@nrmc.pt.
Date
15 March 2024
Version 1.3´4
Explore the latest research and advancements in cybersecurity within maritime, health, energy, and critical infrastructure sectors with ARIS - Advanced Research on Information Systems Security's Special Issue. Submit your contributions and be part of shaping the future of cybersecurity in vital societal domains.
New Deadline Extension! July 25, 2024
CALL FOR PAPERS
2nd Edition of Volume 4
Dear Colleague,
The ARIS2 cordially invites you to submit your scientific work to the second edition of Volume 4, to be closed on August 30th, 2024.
