PIPL Privacy Notice

We define terms applicable to this privacy notice in following way:

• "Anonymization" means the process of processing personal information to make it impossible to identify a specific natural person and impossible to restore.
• "Automated Decision Making" means the activities of automatically analyzing and evaluating personal behaviors, hobbies, or economic, health, and credit status, among others, through computer programs, and making decisions.
• “China” means the continental landmass under the direct control of the People’s Republic of China. This includes the islands of Hainan Province and five major autonomous regions (i.e., Tibet, Inner Mongolia, Xinjiang, Ningxia, and Guangxi), but excludes the Hong Kong Special Autonomous Region (SAR), Macao SAR, and Taiwan.
• “Handle” or “handling” means the collection, storage, use, processing, transmission, provision, publication, and erasure of personal information.
• “Handler” means “Weber State University” who determines the purpose and means of handling your personal information. Weber State University includes its agents, employees, trustees, volunteers, centers, institutions, foundation, subsidiaries, or affiliates. Weber State University is referred to in this privacy notice as “we,” “our,” or “us.”
• “Natural person,” means “you” as the reader of this privacy policy if you are an actual human being and not a corporation, partnership, or other legal organization. You are referred to in this privacy notice as “you” or “your.”
• “Personal information” means any information relating to an identified or identifiable individual.

This privacy notice applies if:

• We handle your personal information;
• Your personal information is not anonymized; and
• One of the following occurs:
  • We are physically in China; or
  • We are not physically in China, but you are physically in China. And one of the following occurs:
    • We provide you products or services;
    • We analyze or assess your activities in China; or
    • China passes laws and regulations that include other circumstances when the PIPL applies.

Within the scope of this privacy notice, our products and services are not made for children who are under the age of 14. On our information systems, we do not knowingly collect or otherwise handle personal information from children under the age of 14.

If you are under the age of 14, you and your parents or guardians are cautioned that your personal information will be treated the same as information given by an adult. That is until we become aware that you are under the age of 14. If we learn that you are under the age of 14 and provided us your personal information without parental consent, we will promptly remove your personal information from our files.

We may collect the following categories of personal information:

Sensitive Personal Information: We will only collect your sensitive personal information if: 

Please do not provide us your sensitive personal information unless we request it. If you provide us your sensitive personal information and we do not request it, you agree to the following:

• Names like given names, middle names, family names (e.g. paternal names, maiden names, married names, etc.) and preferred names;
• Contact Information like addresses to where you live, where you are from, or post office boxes; fax numbers; pager numbers; telephone numbers; SMS device numbers; URLs, and email addresses;
• Location Information like geographic subdivisions including state, street address, city, county, precinct, ZIP code, and their equivalent geocodes;
• Identification Numbers like social security numbers, account numbers, insurance numbers, resident identity cards, driver’s license numbers, student identification numbers, license plate numbers, device identifiers and serial numbers, and vehicle identification numbers, and other personal identification numbers;
• Digital Information like usernames, passwords, browser histories, IP addresses, browser type and settings, device type and settings, operating systems, mobile network information, application version numbers, the interaction of your apps, browsers, and devices with our services, crash reports, system activity, and the date, software and device usage, network connections, and metadata;
• Demographic Information like birth dates, birth place, death dates, place of death, ethnicities, race, work histories, family members, and military service;
• Education Records like education history, library activity, transcripts, entrance exam scores, admission dates, enrollment dates, graduation dates, background check information; applications, enrollment, personal references, coursework, correspondence, evaluations, student-athlete records, disciplinary complaints, student conduct hearings and dispositions, investigations, other records, and files maintained by us as part of the educational process;
• Financial Information like credit and debit card numbers, tax information, tax identification numbers, financial aid information, transaction histories, and business information;
• Immigration Information like passports, visas, SEVIS records, immigration filings;
• Research Information like answers to surveys, interviews, ethnographic information, field notes, interventions, quality improvement projects, research journals, photographs, video and audio records;
• Alumni Information like graduation date, correspondence, attendance to events, and donation histories;
• Employment or Volunteer Information like applications, written interviews, job titles, work hours, personnel files, work history, background checks, personal references, communications, requests for accommodations or leave, disciplinary complaints, conduct hearings and dispositions, and investigations;
• Sensitive Personal Information like personal information that, once leaked or illegally used, may easily harm your dignity or cause grave harm to your personal or property security, including biometric characteristics, religious beliefs, specially-designated status, medical health-related information, financial accounts, individual location tracking, and personal information concerning children under the age of 14; and
• Other Information like information used to perform our mission as a public university or the mission of our subsidiaries or affiliates.
• We have your consent or your parents’ consent if you are under the age of 14;
• We have a specific purpose and a need to fulfill;
• We maintain strict protection measures;
• We use our special handling rules for your information if you are under the age of 14;
• We notify you why we need the information and what impact it may have on your rights unless prohibited by law; and
• We follow rules and receive required licenses to handle your information.
• You consent that we may handle your sensitive personal information;
• Our specific purpose and need to handle your sensitive personal information relate to the reason you provided it to us;
• Our strict protection measures are sufficient;
• We hereby notify you that we need your personal information because you provided it to us and the impact on your rights is correlated with the sensitivity of the information you provide us; and
• We are following the rules and licenses to handle your information in the State of Utah in the United States of America.

In general, we handle your personal information to perform:

Our purposes for handling your personal information may include:

• Our mission as a public university; or
• Our subsidiaries or affiliates’ missions.
• IT Management: We may handle your personal information to manage our IT resources. For example, we may handle your personal information to:
  • Provide you our IT services which may include networking, access to our information systems, and our help desk services;
  • Implement our cybersecurity and privacy controls which may require that we monitor, log, respond to, recover from, and learn from your digital activities;
  • Collect and track your activities on our webpages for data analytics purposes;
  • Enforce and implement our IT management policies and procedures;
• Education and Community Services: We may handle your personal information to provide education and community services. For example, we may handle your personal information to:
  • Recruit you, evaluate your application, and admit and register you in our school, courses, programs or other events;
  • Evaluate your applications for financial aid and to administer the financial aid;
  • Conduct in-person and distance education, field trips, and study abroad programs;
  • Provide ticketing to events;
  • Grant degrees, certificates, and licensure;
  • Provide career or intern placement;
  • Enable you to transfer or enroll in another school;
  • Provide due process, resolve disputes, and address student conduct issues;
  • Provide academic adjustments; and
  • Enforce and implement our education and community services policies and procedures;
• Outreach and Engagement: We may handle your personal information for outreach and engagement purposes. For example, we may handle your personal information to:
  • Learn about your likes and interests;
  • Improve your experiences on our webpages and information systems;
  • Communicate with you, provide you with information, and respond to your requests for information;
  • Promote economic development and community engagement;
  • Enhance our marketing efforts, interact with you as an alumnus, and fundraise; and
  • Enforce and implement our outreach and engagement policies and procedures;
• Research and Commercialization: We may handle your personal information for research and commercialization purposes. For example, we may handle your personal information to:
  • Review proposed research, enable research, and respond to research concerns;
  • Apply for, receive, and manage grants;
  • Develop technology, protect it through intellectual property laws, and commercialize it;
  • Collaborate with industry and government to develop technologies or perform projects; and
  • Enforce and implement our research and commercialization policies and procedures;
• Human Resources Management: We may handle your personal information for human resources (HR) management. For example, we may handle your personal information to:
  • screen, interview, rank, background check, hire, pay, provide benefits to, manage, and end relationships with our potential employees and our employees;
  • enroll and manage our volunteers;
  • provide due process, resolve disputes, and address employee conduct issues;
  • provide reasonable accommodations;
  • manage vacation and sick leave; and
  • enforce and implement our HR policies;
• Business Operations: We may handle your personal information for business operations. For example, we may handle your personal information to:
  • create, file, and manage immigration documentation;
  • perform our legal, administrative, and financial functions;
  • provide housing, parking, and food services;
  • secure and use services from a separate service provider
  • make or receive payments.
  • review, negotiate, enter into, manage and end contracts.
  • perform quality improvement and evaluation activities.
  • comply with laws including required disclosures
  • protect our school community with environmental safety, fire and police services;
  • provide facility management services;
  • manage and reserve facilities and equipment;
  • provide medical care and medical billing; and
  • enforce and implement our business operations’ policies and procedures; and

• Other Activities: We are a public university and have a broad mission. The listed activities above are examples and not an exhaustive list. It is possible that we may handle your personal information for purposes of performing services, activities, and functions not described above.

We may handle your personal information if:

• Consent: You provide us with your voluntary, clear, and full consent;
• News: We reasonably handle your personal information for news reporting, media supervision, and other similar activities conducted in the public interest;
• Public: You have already publicly disclosed your personal information or your personal information has otherwise been lawfully disclosed;
• Other: Other circumstances as provided by laws or administrative regulations; or
• Needed: The handling is needed:
  • to enter into and perform a contract with you;
  • for human resource management;
  • to comply with the law; and
  • to respond to public health emergencies or emergencies threatening life, or health, or property.

From You: You may provide us with your personal information in a number of different ways. For example, you may provide us with your personal information when:

From Others: We may receive your personal information from others in a number of different ways. For example, we may receive your personal information from:

From Automatic Means: We may receive your personal information from a number of automatic means. For example, we may receive your person information from:

• You visit our websites;
• You communicate with us;
• You create accounts or use our information systems;
• You apply for, enroll in, and take our in-person or distance education;
• You pay us or we pay you;
• You enter into agreements with us;
• You apply for and use financial aid, food services, or our housing;
• You participate in quality improvement projects and research projects;
• You apply to work and work for us;
• You participate in career services and intern placement;
• You enroll and attend events sponsored by us; or
• You otherwise interact with us.
• Other universities;
• College entrance exam scores received from testing agencies;
• College applications received from organizations that provide university admissions applications (e.g., the Common Application, Inc.);
• Online course registration information received from others that administer online courses (e.g., Coursera, Inc.);
• Financial aid information from government agencies or commercial financial institutions;
• Background information received from companies conducting export control screening or checks to support working with minors or employment with us; and
• Other companies and partner institutions that provide services or goods to us.
• Cookies, beacons, and similar technologies; and
• Social media tools, widgets, or plug-ins to connect you to your social media accounts.

When You Share: Many of our services and information systems let you share your personal information with other people. You have control over what and how you share your personal information. For example, you can share your personal information with other people by:

Our Personnel: Our employees, volunteers, trustees or other agents may handle your personal information for our business purposes as a public university.

Our Subsidiaries and Affiliates: We may share your personal information with our subsidiaries and affiliates to perform their missions. These include the Weber State University Research Foundation and the Weber State University Development Foundation.

When We Share with Others: We do not share your personal information with outside companies, organizations, or individuals except:

• Using the email system that we manage;
• Posting messages on learning management systems that we manage; and
• Sharing electronic folders and files in digital storage systems that we manage.
• With your consent: We share your personal information when have your consent;
• For Outside Handling: We share your personal information with services providers and volunteers who have obligations to not further share your information except with their sub-contractors. For example, we use service providers to provide data centers, software as a service, deliver our products and services, improve our internal business processes, and offer additional support to our students and community; and
• For Legal Reasons: We will share your personal information to others if we have a good-faith belief that access, use, preservation, or disclosure of your personal information necessary to:
  • Meet any applicable law, regulation, legal process, or enforceable governmental request;
  • Enforce our policies and procedures including investigation of potential violations;
  • Detect, prevent, or otherwise address fraud, security, or technical issues; and
  • Protect against harm to the rights, property or safety of our school, school officials, students and community as required or permitted by law.

We retain your personal information for different periods of time depending on what it is and how we use it. Many of our record retention schedules can be found at the Utah Division of Archives and Record Services’ website. Here is a direct link to our retention schedules.

Here is a direct link to the retention schedules for the State of Utah which apply if we do not have a retention schedule for the type of records in our retention schedules.

Your Rights: You may exercise your rights under the PIPL by contacting us as described in the section below. Under the PIPL, you have the right to:

Your Rights Under Consent: If we received consent from you to handle your personal information, the following rights and obligations apply:

Your Rights Under Automated Decision Making: If we use automated decision making and this decision making may significantly impact your rights and interests, you have the right to:

• Be Informed and Make Decisions: you have the right to know and make decisions about the handling of your personal information;
• Restriction: you have the right to restrict or refuse the handling of your personal information unless laws or regulations state otherwise;
• Access and Request Copies: you have the right to timely access your personal information and request the right to timely receive a copy of your personal information unless prohibited by law;
• Transfer: you have the right to transfer your personal information to another organization;
• Request Correction: you have the right to request that we correct, supplement, or complete your personal information;
• Request Deletion: you have the right to request the deletion of your personal information;
• Request Explanation: you have the right to request that we explain the handling rules for personal information; and
• Manage Your Deceased Next of Kin’s Rights: If we have handled your deceased next-of-kin’s personal information, you may exercise the rights listed above on their behalf unless your next-of-kin has arranged otherwise before their death.
• Reconsent: We must notify you and ask you to consent to changes to:
  • The purpose or method of handling your personal information;
  • The type of your personal information handled; or
  • The type of people or organizations who have access to your personal information;
• Withdraw Consent: You may withdraw your consent to the handling. Then we will stop handling your personal information going forward unless the handling is permitted or required by law. But we may still retain your personal information that we collected before you withdrew your consent; and
• Refuse Goods and Services: Most of the time, we may not refuse to provide our goods and services to you if you do not consent or withdraw your consent to our handling of your personal information. But we can refuse to provide our goods and services, if your consent is necessary to provide them.
• Request clarification about the handling of your personal information; and
• Require that we make the decision not only through the automated decision making.

If you would like to contact us about this privacy notice, you may do so in the following ways:

When you contact us, you will need to:

• Email: security@weber.edu
• Telephone: 801-626-6982
• Address:
  Weber State University
  Information Security Office
  1465 Edvalson Dept. 2405
  Ogden, UT 84408-2405
• Identify yourself (e.g. your name, IP address, email address, ID number, etc.);
• Show that the PIPL applies to you;
• Identify the type of personal information that you are concerned about;
• State what questions you have or rights you wish to exercise; and
• Identify where the personal information was collected if known (e.g. website).

我们按以下方式定义适用于本隐私声明的术语：

• “匿名化”是指对个人信息进行处理，使其无法识别特定自然人身份且无法复原的过程。
• “自动决策”是指通过计算机程序自动分析和评估个人行为、爱好或经济、健康、信用状况等，并做出决策的活动。
• “中国”是指中华人民共和国直接控制下的大陆。这包括海南省的岛屿和五个主要自治区（即西藏、内蒙古、新疆、宁夏和广西），但不包括香港特别行政区（SAR）、澳门特别行政区和台湾。
• “处理”或“处理”是指收集、存储、使用、处理、传输、提供、发布和删除个人信息。
• “处理者”是指决定处理您的个人信息的目的和方式的“韦伯州立大学”。韦伯州立大学包括其代理人、雇员、受托人、志愿者、中心、机构、基金会、子公司或附属机构。韦伯州立大学在本隐私声明中被称为“我们”、“我们的”或“我们（宾语）“。
• “自然人”是指作为本隐私政策的读者的“您”，如果您是一个真实的人，而不是公司、合伙企业或其他合法组织。您在本隐私声明中被称为“您”或“您的”。
• “个人信息”是指与已识别或可识别个人相关的任何信息。

本隐私声明适用于：

我们处理您的个人信息； 您的个人信息未匿名化；和 发生以下情况之一：

• 我们身在中国；要么
• 我们不在中国，但您在中国。并发生以下情况之一：
  • 我们为您提供产品或服务；
  • 我们分析或评估您在中国的活动；要么
  • 中国通过了包含适用 PIPL 的其他情况的法律法规。

在本隐私声明的范围内，我们的产品和服务不针对 14 岁以下的儿童。在我们的信息系统中，我们不会有意收集或以其他方式处理 14 岁以下儿童的个人信息。

如果您未满 14 岁，您和您的父母或监护人会被提醒您的个人信息将被视为与成年人提供的信息相同，直到我们意识到您未满 14 岁。如果我们得知您未满 14 岁并在未经父母同意的情况下向我们提供了您的个人信息，我们将立即从我们的文件中删除您的个人信息。

我们可能会收集以下类别的个人信息:

名字，如名字、中间名、姓氏（例如父名、娘家姓、婚后姓等）和首选名字； 联系信息，例如您居住地、来自哪里或邮政信箱的地址；传真号码；寻呼机号码；电话号码;短信设备号码；网址和电子邮件地址； 位置信息，如地理分区，包括省，州，市，县，辖区，街道地址，邮政编码及其等效地理编码； 社会安全号码、帐号、保险号码、居民身份证、驾驶执照号码、学生证号码、车牌号码、设备标识符和序列号、车辆识别号码以及其他个人身份号码等身份号码；

除非我们要求，否则请不要向我们提供您的敏感个人信息。如果您向我们提供您的敏感个人信息而我们没有要求，则您同意以下内容：

您同意我们可以处理您的敏感个人信息； 我们处理您的敏感个人信息的具体目的和需要与您提供给我们的原因有关； 我们有足够和严格的保护措施； 我们特此通知您，我们需要您的个人信息，因为您向我们提供了这些信息，并且对您权利的影响与您提供给我们的信息的敏感性相关；和 我们遵守美国犹他州的规则和许可来处理您的信息。

敏感个人信息：我们只会在以下情况下收集您的敏感个人信息：

如果您未满 14 岁，我们会征得您或您父母的同意； 我们有特定的目的和切实的需要； 我们有严格的保护措施； 如果您未满 14 岁，我们将对您的信息使用我们的特殊处理规则； 我们会通知您我们需要这些信息的原因以及它可能对您的权利产生什么影响，除非法律禁止；和 我们遵守规则并获得必要的许可来处理您的信息。

• 数字信息，例如用户名、密码、浏览器历史记录、IP 地址、浏览器类型和设置、设备类型和设置、操作系统、移动网络信息、应用程序版本号、您的应用程序、浏览器和设备与我们服务的交互、崩溃报告、系统活动和日期、软件和设备使用情况、网络连接和元数据；
• 人口统计信息，如出生日期、出生地、死亡日期、死亡地点、民族、种族、工作经历、家庭成员和兵役；
• 教育记录，如教育历史、图书馆活动、成绩单、入学考试成绩、入学日期、注册日期、毕业日期、背景调查信息；申请、注册、个人推荐信、课程作业、通信、评估、学生运动员记录、纪律投诉、学生行为听证会和处置、调查、其他记录以及我们作为教育过程的一部分保存的文件；
• 财务信息，如信用卡和借记卡号码、税务信息、税务识别号码、财务援助信息、交易历史和商业信息；
• 移民信息，如护照、签证、SEVIS 记录、移民文件；
• 研究信息，如调查答案、访谈、人种学信息、现场笔记、干预、质量改进项目、研究期刊、照片、视频和音频记录；
• 校友信息，如毕业日期、通信、参加活动和捐赠历史；
• 就业或志愿者信息，如申请、书面面试、职称、工作时间、人事档案、工作经历、背景调查、个人推荐信、通讯、住宿或休假请求、纪律处分投诉、进行听证会和处置以及调查；
• 敏感个人信息，如一旦泄露或被非法使用，极易损害您的尊严或对您的人身或财产安全造成严重危害的个人信息，包括生物特征、宗教信仰、特殊身份、医疗健康相关信息、财务信息等。 14 岁以下儿童的帐户、个人位置跟踪和个人信息；和
• 其他信息，例如用于执行我们作为公立大学的使命或我们的子公司或附属机构的使命的信息。

一般而言，我们处理您的个人信息是为了：

我们作为一所公立大学的使命；要么 我们的子公司或关联公司的使命。

我们处理您的个人信息的目的可能包括：

信息技术 管理：我们可能会处理您的个人信息以管理我们的 信息技术 资源。例如，我们可能会出于以下目的处理您的个人信息：

• 为您提供我们的 信息技术服务，其中可能包括联网、访问我们的信息系统和我们的服务台服务；
• 实施我们的网络安全和隐私控制，这可能要求我们监控、记录、响应、恢复并从您的数字活动中学习；
• 收集和跟踪您在我们网页上的活动以进行数据分析；
• 执行和实施我们的 信息技术 管理政策和程序；

教育和社区服务：我们可能会处理您的个人信息以提供教育和社区服务。例如，我们可能会出于以下目的处理您的个人信息：

• 招募您，评估您的申请，并在我们的学校、课程、计划或其他活动中录取和注册您；
• 评估您的经济援助申请并管理经济援助；
• 进行面对面和远程教育、实地考察和出国留学计划；
• 提供活动票务；
• 授予学位、证书和执照；
• 提供职业或实习安置；
• 使您能够转学或注册到另一所学校；
• 提供正当程序、解决争议并解决学生行为问题；
• 提供学业调整；和
• 执行和实施我们的教育和社区服务政策和程序；

外展和参与：我们可能出于外展和参与目的处理您的个人信息。例如，我们可能会出于以下目的处理您的个人信息：

• 了解您的喜好和兴趣；
• 改善您在我们的网页和信息系统上的体验；
• 与您沟通，向您提供信息，并响应您的信息请求；
• 促进经济发展和社区参与；
• 加强我们的营销工作，以校友身份与您互动，并筹款；和
• 执行和实施我们的对外拓展和参与的政策和程序；

研究和商业化：我们可能出于研究和商业化目的处理您的个人信息。例如，我们可能会出于以下目的处理您的个人信息：

• 审查提议的研究，启用研究，并对研究问题做出回应；
• 申请、接受和管理拨款；
• 开发技术，通过知识产权法保护它，并将其商业化；
• 与行业和政府合作开发技术或执行项目；和
• 执行和实施我们的研究和商业化政策和程序；

人力资源管理: 我们可能会出于人力资源 管理的目的处理您的个人信息。例如，我们可能会出于以下目的处理您的个人信息：

• 筛选、面试、排名、背景调查、雇用、支付、提供福利、管理和终止与我们的潜在员工和我们的员工的关系；
• 注册和管理我们的志愿者；
• 提供正当程序、解决纠纷并解决员工行为问题；
• 提供合理便利；
• 管理休假和病假；和
• 执行和实施我们的人力资源政策；

业务运营：我们可能会为业务运营处理您的个人信息。例如，我们可能会出于以下目的处理您的个人信息：

• 创建、归档和管理移民文件；
• 履行我们的法律、行政和财务职能；
• 提供住房、停车和食品服务；
• 保护和使用来自独立服务提供商的服务;
• 付款或收款;
• 审查、谈判、签订、管理和终止合同;
• 执行质量改进和评估活动;
• 遵守法律，包括要求的披露;
• 通过环境安全、消防和警察服务保护我们的学校社区；
• 提供设施管理服务；
• 管理和储备设施和设备；
• 提供医疗护理和医疗账单；和
• 执行和实施我们业务运营的政策和程序；和

其他活动：我们是一所公立大学，肩负着广泛的使命。上面列出的活动只是示例，并非详尽无遗。我们可能会出于执行上述未描述的服务、活动和功能的目的处理您的个人信息。

如果出现以下情况，我们可能会处理您的个人信息：

同意：您自愿、明确和完全同意我们； 新闻：我们出于新闻报道、媒体监督等公益目的，合理处理您的个人信息； 公开：您已经公开披露您的个人信息或您的个人信息已被合法披露； 其他：法律、行政法规规定的其他情形；要么 需要：需要处理：

• 与您签订并履行合同；
• 人力资源管理；
• 遵守法律；和
• 应对突发公共卫生事件或威胁生命、健康或财产的紧急情况。

来自您：您可以通过多种不同方式向我们提供您的个人信息。例如，您可能会在以下情况下向我们提供您的个人信息：

您访问我们的网站； 您与我们沟通； 您创建帐户或使用我们的信息系统； 您申请、注册并参加我们的面授或远程教育；

来自自动方式：我们可能会通过多种自动方式接收您的个人信息。例如，我们可能会从以下渠道收到您的个人信息：

信息记录程序、信标和类似技术；和 将您连接到您的社交媒体帐户的社交媒体工具、小部件或插件。

来自他人：我们可能会通过多种不同方式从他人那里收到您的个人信息。例如，我们可能会从以下渠道收到您的个人信息：

其他大学； 从考试机构收到的高考成绩； 从提供大学入学申请的组织（例如 Common Application, Inc.）收到的大学申请； 从管理在线课程的其他方（例如 Coursera, Inc.）处收到的在线课程注册信息； 来自政府机构或商业金融机构的财政援助信息； 从进行出口管制筛选或检查以支持与未成年人合作或在我们这里就业的公司收到的背景信息；和 向我们提供服务或商品的其他公司和合作机构。

• 您支付给我们或我们支付给您；
• 您与我们签订协议；
• 您申请并使用财政援助、食品服务或我们的住房；
• 您参与质量改进项目和研究项目；
• 您申请工作并为我们工作；
• 您参与职业服务和实习安置；
• 您注册并参加我们赞助的活动；要么
• 您以其他方式与我们互动。

当您共享时：我们的许多服务和信息系统都允许您与其他人共享您的个人信息。您可以控制分享您的个人信息的内容和方式。例如，您可以通过以下方式与他人分享您的个人信息：

使用我们管理的电子邮件系统； 在我们管理的学习管理系统上发布消息；和 在我们管理的数字存储系统中共享电子文件夹和文件。

我们的子公司和关联公司：我们可能会与我们的子公司和关联公司共享您的个人信息以执行他们的任务。其中包括韦伯州立大学研究基金会和韦伯州立大学发展基金会。

当我们与他人共享时：我们不会与外部公司、组织或个人共享您的个人信息，除非：

征得您的同意：我们在征得您同意的情况下共享您的个人信息。 对于外部处理：我们与服务供应商和志愿者共享您的个人信息，他们有义务不进一步共享您的信息，除了他们的分包商。例如，我们使用服务提供商来提供数据中心、软件即服务、交付我们的产品和服务、改进我们的内部业务流程，并为我们的学生和社区提供额外的支持；和 出于法律原因：如果我们真诚地认为访问、使用、保存或披露您的个人信息对于

• 满足任何适用的法律、法规、法律程序或可强制执行的政府要求；
• 执行我们的政策和程序，包括调查潜在的违规行为；
• 检测、预防或以其他方式解决欺诈、安全或技术问题；和
• 根据法律要求或允许，保护我们学校、学校官员、学生和社区的权利、财产或安全免受损害。

我们的人员：我们的员工、志愿者、受托人或其他代理人可能会出于公立大学的商业目的处理您的个人信息。

我们会根据信息的内容和我们的使用方式将您的个人信息保留不同的时间。我们的许多记录保留时间表都可以在犹他州档案和记录服务部的网站上找到。这是我们保留时间表的直接链接： axaemarchives.utah.gov/cgi-bin/appxretcget.cgi?WEBINPUT_RUNWHAT=HTML_SERIES_LIST_OPEN&WEBINPUT_AGENCY_KEY=1334&A=B.

这是犹他州保留时间表的直接链接，如果我们在我们的保留时间表中没有记录类型的保留时间表 axaemarchives.utah.gov/solr/axaem/EntityGRSItem.

您的权利：您可以按照以下部分所述联系我们，行使您在 个人信息保护法 下的权利。根据 个人信息保护法，您有权：

知情并做出决定：您有权了解并做出有关您个人信息处理的决定； 限制：除法律法规另有规定外，您有权限制或拒绝处理您的个人信息； 访问和索取副本：除非法律禁止，否则您有权及时访问您的个人信息并请求及时收到您的个人信息副本的权利； 转让：您有权将您的个人信息转让给其他组织；

您在自动决策下的权利：如果我们使用自动决策，并且该决策可能会严重影响您的权益，您有权：

要求澄清有关您个人信息的处理；和 要求我们不仅仅通过自动化决策来做出决策。

您在同意下的权利：如果我们收到您的同意处理您的个人信息，则适用以下权利和义务：

重新同意：我们必须通知您并要求您同意更改

• 处理您个人信息的目的或方式；
• 处理的您的个人信息的类型；要么
• 有权访问您的个人信息的人员或组织的类型；

撤回同意：您可以撤回对处理的同意。除非法律允许或要求，否则我们将停止处理您的个人信息。但我们可能仍会保留在您撤回同意之前收集的您的个人信息；和 拒绝商品和服务：大多数情况下，如果您不同意或撤回您对我们处理您的个人信息的同意，我们可能不会拒绝向您提供我们的商品和服务。但如果需要您的同意才能提供我们的商品和服务，我们可以拒绝提供这些商品和服务。

• 要求更正：您有权要求我们更正、补充或完善您的个人信息；
• 请求删除：您有权要求删除您的个人信息；
• 要求说明：您有权要求我们对个人信息处理规则进行说明；和
• 管理您已故近亲的权利：如果我们处理了您已故近亲的个人信息，您可以代表他们行使上述权利，除非您的近亲在去世前另有安排。

如果您想就此隐私声明与我们联系，您可以通过以下方式进行：

电子邮件: security@weber.edu 电话: 801-626-6982

当您联系我们时，您需要：

表明您的身份（例如您的姓名、互联网协议地址、电子邮件地址、身份证号码等）； 表明个人信息保护法 适用于您； 确定您关注的个人信息类型； 说明您有什么问题或您希望行使什么权利；和 如果知道个人信息是从哪里收集的（例如网站），请注明。

• 地址:
  韦伯州立大学
  I信息安全办公室
  1465 Edvalson 部门 2405
  犹他州奥格登 84408-2405