City University of Seattle (CityU) is an affiliate of the National University System (NUS), established in 2001 to meet the emerging demands and challenges for education in the a1st century. The nonprofit system is comprised of university and education-related affiliates that, together, endeavor to provide an exceptional student experience to lifelong learners. In addition to City University of Seattle, NUS affiliates include National University, John F. Kennedy University, National University Virtual High School, and National University Academy.

City University of Seattle owns and operates its website and is strongly committed to protecting the privacy of its user community. The intent of this Privacy Policy is to detail the information City University of Seattle may gather about individuals who visit its website, how that information is used, and City University of Seattle disclosure practices. Please note that this policy applies only to its website and not to the websites of other companies or organizations to which we provide links or to any software that may be downloaded from City University of Seattle website.

Our postal address and phone contacts are:
521 Wall Street, Suite 100
Seattle, WA 98121
Toll Free: (800) 426-5596

Website

What We Collect and Why

City University of Seattle collects some anonymous information each time you visit its website, so it can improve the overall quality of your online experience. It collects your IP address, referral data, and browser and platform type. You do not have to register with City University of Seattle before we can collect this anonymous information.

City University of Seattle’s website does not require you to share information that identifies you personally, such as your name or e-mail address, for you to use the website. The City University of Seattle website may assign an anonymous ID number to your request(s) and links the following additional data to that number: the date and time you visited the website, your search terms, and the links upon which you choose to click. Like most standard website servers, we use log files to collect and store this anonymous user information. City University of Seattle analyzes the information to examine trends, administer the site, track user’s movement in the aggregate, and gather broad demographic information for aggregate use.

From time-to-time the City University of Seattle website requests information from you that may identify you personally in addition to the anonymous information described above. The requested information typically includes contact information (such as name, e-mail address, shipping address, and zip code), and demographic information (such as age, gender, occupation, and household income). City University of Seattle will not use or disclose your individual user information except as described in this privacy policy and without first obtaining your consent.

Online Forms

By submitting a form on our website, you confirm that the information provided on the form is accurate and complete and agree to receive email communications, phone calls, and SMS/Text Messages – using automated technology – about educational opportunities from City University of Seattle, the National University System and/or its affiliates. You may withdraw your consent at any time.

If you submit personal data from outside of the United States, you consent to the transfer of that personal data to, and its storage in, the United States, and understand that your personal data will be subject to processing in accordance with U.S. laws. You may contact us for more details at dataprotection@cityu.edu if this page does not address your privacy questions.

Cookies

City University of Seattle may set and access City University of Seattle or partner cookies on your computer. A cookie is a small data file that a website may send to your browser and which may then be stored on your system. We may occasionally use both session cookies and persistent cookies. For the session cookie, once you close the browser, the cookie simply terminates. A persistent cookie is a small text file stored on your hard drive for an extended period of time. Persistent cookies can be removed by following Internet browser help file directions.

We use cookie and web beacon technology to track which pages on the City University of Seattle websites our visitors view and which web browsers our visitors use. We may also use cookies to help us provide personalized features and preferences to you within various City University of Seattle websites in a way that may be linked to individual user information that you elect to share with us. We may also use “action tags” to assist in delivering the cookie. These action tags allow us to compile statistics and other data about our customers on an aggregate basis, by embedding a random identifying number on each user’s browser. Then we track where that number shows up on our site.

Special Notification with respect to Children’s Privacy (Users under the age of 13)

In response to concerns about protecting children’s privacy online, Congress enacted the Children’s Online Privacy Protection Act of 1998 (“COPPA”), which sets forth rules and procedures governing the ways in which websites may collect, use and disclose any personal information for children under the age of 13. In accordance with City University of Seattle policy and COPPA regulations, we DO NOT:

• Request or knowingly collect personally identifiable information online or offline contact information from users under 13 years of age; or knowingly use or share personal information from users under 13 years of age with third parties.

It is possible that by fraud or deception we may receive information given to us or pertaining to children under 13. If we are notified of this, as soon as we verify the information, we will immediately delete the information from our servers.

Choice/Opt-out

We desire to keep you in control of the personal information you provide to us. Accordingly, you can review, correct, change or remove the personal registration information you provide to City University of Seattle and that City University of Seattle controls.

If you do not want to receive e-mail from us in the future, please let us know by sending us email at the above address optout@cityu.edu.

If you supply us with your postal address online you may receive periodic mailings from us with information on new products and services or upcoming events. If you do not wish to receive such mailings, please let us know by calling us at (800) 426-5596.

Persons who supply us with their telephone numbers online will only receive telephone contact from us with information regarding orders they have placed online. If you would not like to be contacted, please provide us with your name and phone number to ensure that we remove the correct person from the list.

Sharing

City University of Seattle will make every effort to preserve your privacy. City University of Seattle may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a criminal investigation, a court order, or legal process served on our website. We may also share your personal information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of City University of Seattle or such City University of Seattle websites’ terms of use, or as otherwise required by law.

Legal Notice

Notwithstanding any language to the contrary, nothing contained herein constitutes nor is intended to constitute an offer, inducement, promise, or contract of any kind. The data contained herein is for informational purposes only and is not represented to be error free. Any links to information not owned by City University of Seattle are provided as a courtesy. They are not intended to, nor do they constitute an endorsement by City University of Seattle of the linked materials, products, services, or information contained therein. City University of Seattle does not have any control over the privacy practices of these websites or information, and all visitors of these websites should read and understand the policies and privacy practices for external sites.

Copyright Infringement

City University of Seattle is committed to complying with U.S. copyright law and respecting the rights of copyright holders, while simultaneously defending the academic freedom of faculty and providing the optimal learning experience for students. Faculty and staff will make a good faith effort to only use or distribute third-party copyrighted materials as allowed by purchase, license, fair use, or other legal provision. Anyone who participates in the unauthorized distribution of copyrighted material may be subject to civil and criminal liabilities, in addition to sanctions imposed by City University of Seattle. For more information, please see the website of the US Copyright Office at www.copyright.gov, and the related frequently asked questions at www.copyright.gov/help/faq. Pursuant to 17 U.S.C. Sec. 512(c)(2), notice of claims of copyright infringement should be directed to library@cityu.edu. For additional copyright-related information, please send an email to library@cityu.edu

European Union General Data Protection Regulation (GDPR) Privacy Notice

Lawful Basis for Collecting and Processing of Personal Data

In order for educational institutions to educate their students both in class and on-line, it is essential and necessary that they have lawful bases to collect, process, use, and maintain data for its student, employees, applicants, and others involved in its educational programs. The lawful bases include, without limitation, admission, registration, delivery of classroom, on-line, and study abroad education, grades, communications, employment, program analysis for improvements, and records retention. Examples of data that City University of Seattle may need to collect in connection with the lawful bases are: name, email address, IP address, physical address or other location identifier, as well as some sensitive personal data obtained with prior consent. For more information regarding the EU GDPR, please review the National University System and City University of Seattle EU General Data Protection Regulation Privacy Policy.

Most of the collection and processing of personal data will include:

• Processing necessary for the purposes of the legitimate interests pursued by City University of Seattle or third parties in providing educational opportunities and employment.
• Processing necessary for the performance of a contract to which the subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing necessary for compliance with a legal obligation to which City University of Seattle is subject.
• The data subject has given consent to the processing of his or her personal data for one or more specific purposes. This lawful basis pertains primarily but not exclusively to the protection of research subjects.

There will be some instances where the collection and processing of personal data will be pursuant to other lawful bases.

Types of Personal Data Collected and Why

City University of Seattle collects a variety of personal and sensitive data to meet one of its lawful bases, as referenced above. Most often the data is used for admission, registration, delivery of classroom, on-line, and study abroad education, grades, communications, employment, program analysis for improvements, and records retention. If you have specific questions regarding the collection and use of your personal data, please contact dataprotection@cityu.edu or the National University System Office of Information Technology Information Security Office at dataprotection@nu.edu.

If a data subject refuses to provide personal data that is required, such refusal may make it impossible for City University of Seattle to provide education, employment, research or other requested services.

Personal data typically includes, but is not limited to:

Data Type

First name, last name, address, and any other contact information that can directly or indirectly identify the data subject.

Source

Collected directly from you, the data subject, through: application forms, online forms, emails, phone calls, chats, SMS, shared files.

Individual Rights of the Data Subject under the EU GDPR

Individual data subjects covered by the National University System EU General Data Protection Regulation Privacy Policy will be afforded the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organization.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review – in the event that National University refuses your request under rights of access, we will provide you with a reason as to why.
• Right to complain – in the event that you wish to make a complaint about how your personal data is being processed by National University.

All personal data and sensitive personal data collected or processed by City University of Seattle under the scope of the National University System EU General Data Protection Regulation Privacy Policy must comply with the security controls and safeguards of FERPA, GLBA, and PCI as set forth in the National University System Global Information, Security, and Privacy Program.

Additional info regarding the California Consumer Privacy Act (CCPA)

The CCPA applies to any for-profit entity that does business in California, collects the information of California consumers and satisfies any one of the following three criteria: (1) has more than $25 million in annual revenue; (2) collects the information or 50,000 or more consumers, households or devices; or (3) derives more than half of its income from the sale of consumers’ personal information. The National University System and National University are not-for-profit higher-education organizations that fall outside the authority of the CCPA, however, the university will never sell your personal information.

Retention Period

City University of Seattle will process and store personal data for no longer than it is necessary for the specified above purpose(s).

Policy Updates

City University of Seattle  reserves the right to modify this privacy policy at any time. We encourage visitors to frequently check this page for any changes to this Privacy Policy. If we make changes we will post an updated effective date below. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change. This policy has been updated on May 28, 2018.

Contacts:

Our Data Protection Officer can be contacted directly here:
City University of Seattle
521 Wall Street, Suite 100
Seattle, WA 98121
dataprotection@cityu.edu

National University System
Office of Information Technology, Information Security Office
11355 N Torrey Pines Rd
La Jolla, CA 92037
dataprotection@nu.edu