Privacy
Last updated: 01/26/2023
Welcome to https://www.savannahchamber.com/ (“Site”), a website owned and operated by Savannah Area Chamber of Commerce, a Georgia public benefit corporation, (“Savannah,” “we,” “us” or “our”). This Privacy Policyexplains how we collect, use, share and protect personal information processed in relation to the Site and the services, including newsletter subscriptions and free guides, that we offer (“Services”) (collectively, “Platform”) and other interactions (e.g., customer service inquiries, social media etc.) that you may have with Savannah. It also tells you about your choices with respect to our collection, use and disclosure use of your personal information.
We recommend that you read this Privacy Policy carefully as it provides important information about your personal information and your rights under the law.
IF YOU ARE AN INDIVIDUAL LOCATED IN THE EEA OR THE U.K.: If you are located in the European Economic Area (“EEA”) or the United Kingdom (“U.K.”), this entire Privacy Policy applies to you. However, please see the section titled Additional Information for Users in the EEA and the U.K., which provides more information about which rights you have regarding the processing of your personal data.
IF YOU ARE NEVADA RESIDENT: If you are a resident of Nevada, please see the section titled Additional Information for Nevada Residents below, which will inform you in detail about our information collection practices and your specific rights.
If you have any questions, comments, or concerns regarding this Privacy Policy, do not hesitate to contact us at info@savannahchamber.com or see our information below.
Who We Are and How to Contact Us
Savannah Area Chamber of Commerce is a Georgia public benefit corporation with the following contact information:
101 East Bay Street
Savannah, Georgia 31401
United States
(912) 644-6401
info@savannahchamber.com
Changes to This Privacy Policy
This Privacy Policy was last updated on the date indicated above. Our business and/or the Platform may change from time to time, and as a result, at times it may be necessary for Savannah to make changes to this Privacy Policy. Savannah reserves the right to update or modify this Privacy Policy at any time and from time to time without prior notice. However, if we make changes that we believe will materially impact this Privacy Policy or your rights, we will promptly notify you of those changes. We encourage you to review this Privacy Policy from time to time. Your continued use of the Platform after any changes or revisions to this Privacy Policy will indicate your agreement to the terms of any such revised Privacy Policy.
Children’s Privacy
Savannah does not knowingly collect information from children under the age of 16. If you are under the age of 16, please do not submit any personal data through the Platform. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal data on our Platform without their permission.
If you have reason to believe that a child under the age of 16 has provided personal data to Savannah through the Platform, please contact info@savannahchamber.com and we will endeavor to delete that information from our databases.
To Whom Does This Policy Apply
Throughout this Privacy Policy, “personal information” (or “personal data” as used interchangeably) refers to any information that is unique to an individual, such as name, address, email address, phone number, IP address and other information that can reasonably identify an individual. This Privacy Policy applies to personal information (that we collect, store, disclose or otherwise process) from or about:
- Site Visitors means visitors to our Site, including those who do or do not register or fill out a form with personal information.
- Customers means any individual who registers, fills out a form with personal information or otherwise contacts us in order to obtain information from the Services.
Personal Information That We Collect
What personal information we collect and process depends on a number of factors. As explained in more detail below, we process personal information that we receive directly from you when you provide it to us, such as when you sign up for our Services, or indirectly, such as through automated technologies (e.g., cookies) or from third parties.
We use the terms ‘controller’ and ‘processor’ or ‘service provider’ as they are commonly understood under applicable privacy laws. With respect to its collection and processing of personal information, Savannah generally acts as a ‘Data controller’ when it collects and processes personal information in order to provide you with the Platform.
Please note that how you exercise certain rights will depend on whether Savannah is processing your personal information as a ‘data controller’ or as a ‘data processor’ – as further explained throughout this Privacy Policy.
Information We Collect Directly From You
You can generally visit our Site without having to submit any personal information. However, if you wish to use our Services, you will be asked to provide information about yourself.
Contacting Us
If you contact us through our “Contact Us” form on the Site or otherwise send us an email, we process any personal information contained in those communications, including name, contact information and any other information that you submit to us.
Signing up for our Services
- First and last name
- Email address
- Phone number
- Mailing address
Information We Collect Indirectly
If you are browsing or interacting with the Site, we collect the same basic information that many other websites collect. Even if you do not have an account, we, or authorized third parties engaged by us, automatically collect information about your use of the Site, which consists of:
- Device Information – information about the devices and software you use to access the Site – primarily the internet browser or mobile device that you use, the website or source that linked or referred you to the Site, your IP address or device ID (or other persistent identifier that uniquely identifies your computer or mobile device on the Internet), the operating system of your computer or mobile device, device screen size and other similar hardware and software information, and language preference.
- Usage Information – information about your interactions with the Site, including access dates and times, device event information, log data, crash data, and cookie data. This information allows us to understand the screens that you view, how you’ve used the Site and/or our Services (which may include administrative and support communications with us), and other actions on the Site. We, or our authorized third parties, automatically collect log data when you access and use the Site for all Site Visitors, even if you have not created an account or logged in. We use this information to administer and improve the Services, analyze trends, track users’ use of the Site, and gather broad demographic information for aggregate use.
Google Analytics
We use third-party analytics services, such as Google Analytics, to generate and process statistical or demographic data. These third parties use cookies to compile reports on the Site’s activity and Site Visitors, and provide other services related to Site activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website. To learn more about how to opt-out tracking by Google Analytics, please click here.
We use social media plug-ins (e.g., Facebook, Twitter). These features may collect your IP address and/or other information as set forth in each social platform’s privacy policy, which page you are visiting on our Site, and may set a cookie to enable the feature to function properly. Savannah also has a presence on some social media platforms, including Twitter and LinkedIn. Through our accounts on social medial platforms, we may in some instances collect personal information when you interact with the Savannah accounts or otherwise communicate with us through those accounts. Any information that you post on social media is governed by each social platform’s privacy notices, and any personal information that we collect via our social media accounts will be processed in accordance with this Privacy Policy.
Additionally, if you use the #SavChamber hashtag, we will collect your photos and posts from social media and may include them on the Site.
More information as regards our legal relationship with some of those social media platforms is available below for users in the EEA and the U.K.
We use your personal information for a number of different reasons, as further explained below.
In addition, for users located in the EEA and the U.K., we must have a valid legal basis in order to process your personal data. Generally speaking, the main legal bases under the European Union’s General Data Protection Regulation (GDPR) that justify our collection and use of your personal data are:
- Performance of a contract – When your personal data is necessary to enter into or perform our contract with you.
- Consent – When you have consented to our use of your personal data via a consent form (online or offline).
- Legal obligation – When we need to use your personal information to comply with our legal obligations.
- Legal claims – When your personal information is necessary for us to defend, prosecute or make a claim.
- Legitimate interests – When we use your personal data to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights. For instance, our processing of personal information in connection with our Services is within our legitimate interests because the business nature of the information (while still personal information) is widely available and distributed across the internet and otherwise. The information does not concern any special categories of data nor does it include personal details about individuals’ private lives. Moreover, Savannah provides adequate notice, access and choice.
Below are the general purposes and corresponding legal bases (in brackets) for which we may use your personal information:
- Providing, updating and maintaining the Platform – In particular, we will use your data to ensure that the Site loads and works for you or provide you with notices regarding Services or other important information. Depending on the context, performance of a contract, legitimate interests, and in some cases, legal claims
- Responding to your queries and requests, including to respond to rights requests and customer support requests – In particular, if you contact our support team we may use the information that you provide to us in order to help us respond to your enquiry. Our use of your personal information in this way is necessary to perform our customer service obligations to you, under our Terms of Use. If you are a Site Visitor or are an individual using our Services, we may process your personal information for these purposes where it is in our legitimate interests to do so for customer services purposes. Depending on the context, performance of a contract, legitimate interests, and in some cases, legal claims
- To otherwise communicate directly with you – In particular, if you contact us or otherwise send as a communication, we may process your personal information. Depending on the context, performance of a contract, legitimate interests, and in some cases, legal claims
- Improving the content and general administration of the Platform, including to perform system maintenance and upgrades – In particular, we may use Device and Usage Information to make changes to certain features or improve the Site, or use other information derived from personal information to offer new Services or make upgrades to the Platform. Legitimate interests
- Detecting fraud, illegal activities or security breaches – In particular, we may use information such as your IP address to help us prevent abuse of the Platform and investigate any potential unauthorized use of the Platform or other security breaches. Legitimate Interests
- Interacting with individuals on social media via our social media accounts and marketing our Platform – This includes any data we collect when you interact with our social media handles, and any advertising or re-targeting that we may undertake as set forth in this Privacy Policy. Consent where required (e.g., third-party cookies) or legitimate interests
- Conducting statistical analyses and analytics by monitoring and analyzing trends, usage, and activities in connection with the Platform – In particular, we do this internally or via third parties such as Google Analytics, and other partners. Consent where required (e.g., third-party cookies) or legitimate interests
- Sending marketing communications, in line with your communication preferences. Consent (depending on location and relationship) or legitimate interests
- As required by applicable law, legal process or regulation – We may use your information to comply with valid court orders and similar legal or regulatory obligations which apply to us. This may include where we reasonably consider it is in our legitimate interests (or the legitimate interests of others) to comply, as well as where we are legally required to do so. Legal obligations or claims
We disclose your personal information as described below.
Savannah discloses users’ information to our third party agents, contractors or service providers who are hired to perform services on our behalf. These companies do things to help us provide the Platform, and in some cases collect information directly. Below is an illustrative list of functions for which we may use third-party service providers:
- Hosting and content delivery network services
- Analytics services
- Marketing and social media partners
- Customer support services
- Functionality and debugging services
Professional service providers, such as auditors, lawyers, consultants, accountants and insurers.
As we continue to grow, we may purchase websites, applications, subsidiaries, other businesses or business units. Alternatively, we may sell businesses or business units, merge with other entities and/or sell assets or stock, in some cases as part of a reorganization or liquidation in bankruptcy. In order to evaluate or as part of these transactions, we may transfer your personal information to a successor entity upon a merger, consolidation or other corporate reorganization in which Savannah participates, or to a purchaser or acquirer of all or a portion of Savannah’s assets, bankruptcy included.
We share aggregated, automatically-collected or otherwise non-personal information with third parties for various purposes, including (i) compliance with reporting obligations; (ii) for business or marketing purposes; (iii) to assist us and other parties in understanding our users’ interests, habits and usage patterns for certain programs, content, services, marketing and/or functionality available through the Platform. We do not share personal information about you in this case.
In addition, Savannah will preserve or disclose your personal information in limited circumstances (other than as set forth in this Privacy Policy), including: (i) with your consent; (ii) when we have a good faith belief it is required by law, such as pursuant to a subpoena, warrant or other judicial or administrative order (as further explained below); (iii) to protect the safety of any person and to protect the safety or security of our Platform or to prevent spam, abuse, or other malicious activity of actors with respect to the Platform; or (iv) to protect our rights or property, or the rights or property of those who use the Platform.
If we are required to disclose personal information by law, such as pursuant to a subpoena, warrant or other judicial or administrative order, our policy is to respond to requests that are properly issued by law enforcement within the United States or via mutual legal assistance mechanism (such as a treaty). However, if we receive information that provides us with a good faith belief that there is an exigent emergency involving the danger of death or serious physical injury to a person, we may provide information to law enforcement trying to prevent or mitigate the danger (if we have it), to be determined on a case-by-case basis.
This Privacy Policy applies only to the Platform. The Platform may contain content from third parties and links to other websites owned and operated by third parties – and therefore not controlled by Savannah (“Third Party Content”). For instance, we may post YouTube videos with information about our Services or about third party products and services available in Savannah. To the extent that Third Party Content collects any personal data when you click on any such Third Party Content or a link to their Third Party Content, they are responsible for informing you of their data collection and privacy practices, among other things. When you click on a link that takes you to a Third Party Content, we suggest reviewing their privacy policies to understand what information they collect and how they collect it.
We use social media plug-ins (e.g., Facebook, Twitter). These features may collect your IP address and/or other information as set forth in each social platform’s privacy policy, which page you are visiting on our Site, and may set a cookie to enable the feature to function properly. Savannah also has a presence on some social media platforms, including Twitter, Pinterest, and Facebook. Through our accounts on social medial platforms, we may in some instances collect personal information when you interact with the Savannah accounts or otherwise communicate with us through those accounts. Any information that you post on social media is governed by each social platform’s privacy notices, and any personal information that we collect via our social media accounts will be processed in accordance with this Privacy Policy.
More information as regards our legal relationship with some of those social media platforms is available below for users in the EEA and the U.K.
Savannah does not respond to Do Not Track (“DNT”) browser signals. For more information on DNT settings generally, please visit https://allaboutdnt.com.
To keep your information accurate, current, and complete, please contact us as specified below. We will take reasonable steps to update any information in our possession that you have previously submitted via the Platform. Note that you may also manage your communications preferences and the receipt of any commercial communication by clicking the “unsubscribe” link included at the bottom of all emails from Savannah. You may also send an email to info@savannahchamber.com.
You have choices about how to protect and limit the collection, use, and sharing of information about you. Note that in order to protect your privacy and security, we will also take reasonable steps to verify your identity before granting you access or enabling you to make corrections or delete your information.
You can access and change certain information by contacting us at info@savannahchamber.com.
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject first and third-party cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.
For users in the EEA and U.K., we provide opt-in mechanisms with respect to non-essential cookies. If you opt-in and subsequently change your mind, you may withdraw your consent at any time.
Some analytics providers we partner with may provide specific opt-out mechanisms. For example, you may manage the use and collection of certain information by Google Analytics via the Google Analytics Opt-out Browser Add-on.
As explained here, you may also generally opt-out of receiving personalized advertisements from certain third-party advertisers and ad networks. To learn more about these advertisements or to opt-out, please visit the sites of the Digital Advertising Alliance and the Network Advertising Initiative, or if you are a user in the European Economic Area, Your Online Choices.
For users in the EEA and U.K., we provide opt-in mechanisms with respect to non-essential cookies. If you opt-in and subsequently change your mind, you may withdraw your consent at any time.
You may opt-out of receiving promotional communications from Savannah by following the instructions/link contained in those communications. If you opt-out of promotional communications, we may still send you non-promotional communications, such as information about your account, or your use of the Services.
How Long Do We Keep Your Personal information?
We use the following criteria to determine our retention periods: the amount, nature and sensitivity of your information, the reasons for which we collect and process your personal data, the length of time we have an ongoing relationship with you and provide you with access to our Platform, and applicable legal requirements. We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax or accounting requirements). Additionally, we cannot delete information when it is needed for the establishment, exercise or defense of legal claims (also known as a “litigation hold”). In this case, the information must be retained as long as needed for exercising respective potential legal claims.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.
For any questions about data retention, please contact info@savannahchamber.com.
In some instances, we may choose to anonymize your personal data instead of deleting it, for statistical use, for instance. When we choose to anonymize, we make sure that there is no way that the personal data can be linked back to you or any specific user.
We take steps that are reasonably necessary to securely provide our Platform. We have put in place reasonably appropriate security measures designed to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We limit access to personal data only to those employees, agents, contractors and the third parties who have a business need-to-know.
We also have procedures in place to deal with any suspected data security breach. If required, we will notify you and any applicable regulator of a suspected data security breach. We also require those parties to whom we transfer your personal information to provide acceptable standards of security.
Notwithstanding our measures, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Platform may not be secure. Therefore, take special care in deciding what information you send to us via email. For any questions about the security of your information, please contact info@savannahchamber.com.
Notice to Nevada Consumers
We do not sell your personal information within the scope of, and according to the defined meaning of, a “sale” under NRS 603A.
We are located in the United States, and the personal information that we collect is stored on servers located in the United States. This means that your personal information will be collected, processed and stored in the United States, which may have data protection laws that are different from (and sometimes less protective than) the laws of your country or region, such as the GDPR.
We have implemented safeguards designed to ensure that the personal information we process remains protected in accordance with this Privacy Policy. Safeguards we may take in our discretion include, for instance, entering into standard contractual clauses in connection with any onward transfers of personal information. If you are an entity that is providing us with personal information regarding other individuals and we are acting as a data processor, then you may make a request from Savannah for standard contractual clauses. We may implement other mechanisms and take similar appropriate safeguards with our third-party service providers and partners. Further details can be provided upon request.
Additional Information for Users in the EEA and the U.K.
If you are in the EEA or the U.K., please read this section for more information.
- If you are in the EEA or the U.K., you have certain rights in relation to your personal data:
- The right to be informed – our obligation to inform you that we process your personal data (and that’s what we’re doing in this Privacy Policy);
- The right of access – your right to request a copy of the personal data we hold about you (also known as a ‘data subject access request’);
- The right to rectification – your right to request that we correct personal data about you if it is incomplete or inaccurate (though we generally recommend first making any changes in your account settings);
- The right to erasure (also known as the ‘right to be forgotten’) – under certain circumstances, you may ask us to delete the personal data we have about you (unless it remains necessary for us to continue processing your personal data for a legitimate business need or to comply with a legal obligation as permitted under the GDPR, in which case we will inform you).
- The right to restrict processing – your right, under certain circumstances, to ask us to suspend our processing of your personal data;
- The right to data portability – your right to ask us for a copy of your personal data in a common format (for example, a .csv file);
- The right to object – your right to object to us processing your personal data (for example, if you object to us processing your data for direct marketing); Rights in relation to automated decision-making and profiling – our obligation to be transparent about any profiling we do, or any automated decision-making; and
- The right to lodge a complaint at any time to the supervisory authority for data protection issues in your country of residence – however, we ask that you please contact us first so that we can first address your concerns.
These rights are subject to certain rules around when you can exercise them.
If you are located in the EEA or the U.K. and wish to exercise any of the rights set out above, you may contact us at info@savannahchamber.com. If you are in the EEA, you may contact our representative in the EU, as explained below.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights) unless your request is clearly unfounded, repetitive or excessive.
We will respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated as required by law.
Social Media and Joint Controllership for Individuals in the EEA
Sometimes, Savannah acts as a ‘joint controller’ with certain third parties, namely certain social media sites, such as LinkedIn. When Savannah and a partner act as joint controllers, you (as a data subject) may exercise your rights against Savannah and/or the third party. For a list of joint controller relationships, please contact us at info@savannahchamber.com.
In order to market our Platform and stay in touch with users, we maintain a Facebook page and use Facebook Pixel (“Facebook Products”). With respect to our use of these Facebook Products, we are jointly responsible with Facebook Ireland for the processing activities (“Joint Processing”):
Facebook Ireland Ltd.,
4 Grand Canal Square, Grand Canal Harbor
Dublin 2, Ireland
Information about the personal data that is collected from you by Facebook, as well as how and why it is processed by Facebook, can be found at https://www.facebook.com/about/privacy. Savannah and Facebook have entered into entered into an agreement in order to determine the respective responsibilities for compliance with our obligations in connection with the Joint Processing within the meaning of the GDPR. This joint controller agreement, which sets out the reciprocal obligations, is available here.
Please note that Facebook Ireland is responsible for enabling data subjects’ rights under Articles 15-20 of the GDPR with regard to the personal data stored by Facebook Ireland in connection with the Joint Processing, as further described in Facebook’s privacy policy. To exercise your rights, please go to your Facebook settings or contact Facebook as set forth in its privacy policy.
It cannot be excluded that some processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc.