New York Blood Center, Inc. (collectively, “NYBC, “NYBCe.” “us,” “we,” or “our”) is a New York not-for-profit corporation that serves local communities throughout the United States, including Connecticut, Delaware, Kansas, Maryland, Minnesota, Missouri, Nebraska, New York, New Jersey, Pennsylvania, Rhode Island, Virginia, western Wisconsin and Southern New England. We are committed to protecting your privacy in connection with your use of our websites, including www.nybc.org, www.nybce.org, www.delmarvablood.org, www.savealifenow.org, www.mbc.org, www.ncbb.org, www.ribc.org, www.ctblood.org, www.projectachieve.org and www.nybcventures.org (the “Sites”), and any other technologies, features, mobile applications, and content we offer (collectively, our “Services”).
This privacy policy (the “Privacy Policy” or the “Statement”) describes our commitment to protecting your privacy online, but NYBC wants to be sure you understand that this commitment cannot guarantee privacy and confidentiality. This Privacy Policy governs how NYBC collects, stores, and uses your personal information (as defined below), as well as other data and information arising out of or relating to you and your use of our Services. Please read the following carefully to understand our practices regarding your personal information and how we will collect, use and disclose your personal information.
We may collect, store, and use information that is linked or reasonably linkable to you and that identifies your past, present, or future health status or mental health status, as may be applicable (“consumer health data”).
Our Terms of Use incorporate this Privacy Policy by reference in its entirety. To keep things simple, we use the same capitalized terms as those set forth in our Terms of Use.
Our Services may change without notice. As a result, we may make changes to this Statement at any time. If we modify the Statement in the future, we will publish such modifications on this website and apply the modified practices to information collected online. Please review this Statement from time to time, and especially before you provide any personal information.
- Personal Information We May Collect, Use, and Disclose
We collect, use, and disclose information that may be used to uniquely identify you in various ways in accordance with applicable law. - Use of Personal Information
We may use your personal information for various purposes connected with your interest in our Site and Services, and to allow us to maintain and improve them. - Disclosure of Personal Information
We may share your personal information with certain third parties, including service providers and advertising partners. - Use by Children
Our Site is not intended for use by children under the age of 13. - Cookies and Tracking Technologies
We collect information about your use of the Service through cookies and other tracking technologies. - Data Security
We use reasonable and appropriate technical and organizational measures to protect your personal information. - Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. - Links to Other Websites
Our Site may contain links to other websites that are not operated by us and that are subject to third party privacy policies and other terms. - Your Privacy Rights and Choices
We provide additional disclosures and rights to residents of certain U.S. states. - European Privacy Notice
We provide additional disclosures and rights to European residents. - Changes to This Privacy Policy
Changes to this Privacy Policy will become effective on the date they are posted. - Contact Us
You may contact us for comments or questions in various ways.
1. Personal Information We May Collect, Use, and Disclose. As used in the Privacy Policy, “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual. Personal information includes “personal data” as that term is defined in applicable privacy laws. Personal information does not include publicly available information; lawfully obtained, truthful information that is a matter of public concern; information that has been de-identified, or aggregate consumer information. We may disclose non-personal information, such as aggregated user statistics, to third parties. Our use of aggregated, anonymized, and de-identified data is not subject to this Privacy Policy.
a. Information you provide us
• Contact information and identifiers. When you set up a donor account with us, we may ask you to provide certain contact information, including your first and last name, email address, phone number, date of birth, and username and password. We may also collect your social media identification number if you choose to access the Sites via a social media platform.
• Application information. When you apply to volunteer with us, we may ask you to provide certain contact information, including your first and last name, physical address, email address, phone number, emergency contact information, date of birth, gender, ethnicity, education information, and employment information.
• Communication information. When you send or respond to emails, messages, or other communications from us, we may collect your email address, name, and any other personal information you choose to include in the body content of your communications.
• Profile and demographic information. Through your donor account, you may have to opportunity to provide additional information about yourself.
• Financial information. When you support us through a financial donation, we may ask you to provide your first and last name, email address, donation amount, date of donation, phone number, gender, date of birth, and employment information.
b. Information we automatically collect
Our Sites use cookies and other tracking technologies such as pixels, web beacons, embedded scripts, and tags (“Cookies”), which collect information from you automatically as your use of our Sites. This information may include:
• Browser and device data, such as IP address, device identifier, device type, operating system and Internet browser type, screen resolution, operating system name and version, device manufacturer and model, language, plug-ins, add-ons, and the language version of the Sites you are visiting; and
• Usage data, such as geolocation data, browsing history, time spent on the Sites, pages visited, links clicked, language preferences, patterns of use, and the pages that led or referred you to our Sites.
We also collect information about your online activities on websites and connected devices over time and across third-party websites, devices, apps, and other online features and services. For example, we use Google Analytics on our Sites to help us analyze your use of our Sites and diagnose technical issues. Please review our Cookies and Tracking Technologies section below for more information about our use of these technologies.
c. Aggregate, Deidentified, or Anonymous Information. Under certain circumstances, NYBC may create aggregated, de-identified, or anonymous information from personal information by removing certain data components (such as your name, email address, or linkable tracking ID) that makes the data identifiable, or through aggregation, obfuscation or other means , and may provide such information to third parties. Subject to applicable law, our use of such aggregated, de-identified, or anonymized information is not personal information or subject to this Privacy Policy.
2. Sources of Personal Information.
We may collect personal information about you from the following categories of sources:
• Directly from you through your interactions with us, such as when you use the Sites or Services, create an account with us, complete electronic forms, or otherwise contact us via chat, email, phone, or text.
• Through cookies and tracking technologies, as discussed in more detail in our Cookies and Tracking Technologies section below.
• From third parties, including our third party service providers, business and marketing partners, affiliates, analytics providers, ad network providers, ad agencies, and advertisers.
• From government agencies or public records.
• From social media and other content platforms, such as Meta and Twitter, to which users post information and images. NYBC may, under certain circumstances, reproduce on its website such information or images posted by users to its social media accounts.
3. Disclosure of Personal Information.
We may disclose personal information that we collect, or you provide:
• Our affiliates. We may share personal information among our affiliates to provide our Services, and for internal administrative purposes.
• Our service providers. We share personal information with our service providers to provide services on our behalf, such as payment processing, analytics, advertising, hosting, marketing, customer and technical support, and other services. These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use the information for any other purpose.
• Third-party platform advertising. We may share your information with third-party platform providers who assist us in serving advertising regarding to others who may be interested. We also partner with third parties who use Cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location, and/or interests.
• Compliance. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities.
• Affiliate and business transfers and transactions. If we or our subsidiaries are involved in a merger, acquisition, asset sale, or other corporate combination, your personal information may be transferred to the acquiring or surviving entity.
4. Use by Children.
NYBC is committed to protecting children. The Information on this website is intended for persons 13 years of age and older. NYBC does not knowingly collect, use or disclose personal identifying information from a minor under the age of 13, without obtaining prior consent from a person with parental responsibility (e.g., a parent or guardian) through direct off-line contact consistent with applicable legal requirements. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.
5. Cookies And Tracking Technologies.
We use cookies and similar tracking technologies and analytics services to track activity on and gauge the effectiveness of the Site.
a. Cookies. A “cookie” is a piece of information that a computer that hosts a website may send to your computer (or web browser) when you access that website. These bits of information allow the user to access the website more rapidly in the future, but also allow the website operator to gather information about site usage and potentially other information. Most browsers are initially set up to accept cookies. If you do not want information collected through the use of cookies, you can reject cookies using a procedure available in most browsers. NYBC provides no assurances or guarantees about the use of cookies on other websites that you may visit as a result of information or links found on the NYBC website.
b. Analytics. We may use Google Analytics or other service providers for analytics services. These analytics services may use cookies and other tracking technologies to help us analyze how users use the Services. Information generated by these services (e.g., your IP address and other usage information) may be transmitted to and stored by Google Analytics and other service providers on servers in the U.S. (or elsewhere) and these service providers may use this information for purposes such as evaluating your use of the Service, compiling statistic reports on the Service’s activity, and providing other services relating to Service activity and other Internet usage. You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.
c. Third-Party Ad Networks. Certain companies may participate in the Digital Advertising Alliance (“DAA”) AdChoices Program and may display an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise certain choices regarding targeting. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices.
In addition, certain advertising networks and exchanges may participate in the Network Advertising Initiative (“NAI”). NAI has developed a tool that allows consumers to opt out of certain Interest-based Ads delivered by NAI members’ ad networks. To learn more about opting out of such targeted advertising or to use the NAI tool, see http://www.networkadvertising.org/choices/. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Ads, you will continue to receive non-targeted ads. Opting out of one or more NAI or DAA members only means that those selected members should no longer under the DAA / NAI rules deliver certain targeted ads to you. This will affect this and other services, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). If your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different device or web browser(s), or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Mobile device opt-outs will not affect browser-based Interest-based Ads even on the same device, and you must opt-out separately for each device. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.
6. Data Security.
NYBC uses a variety of security measures to protect your personal information from unauthorized access, loss, misuse, alteration, destruction or disclosure. NYBC uses general, recognized security standards, including the use of Secure Socket Layer (“SSL”) encryption when transmitting personal information over the Internet. Such transmissions are always subject to normal Internet security risks. Although NYBC has procedures in place to safeguard the information that we collect online, we cannot guarantee the transmission or disclosure of this information in a manner inconsistent with this Statement. No Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from this site may not be secure and you should therefore take special care in deciding what information you send to us.
7. Data Retention.
We will retain your personal information for as long as is necessary to provide you with our Services, to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will also retain certain personal information for internal analysis purposes. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.
8. Links to Other Websites.
This website may contain references or links to other websites not operated or controlled by NYBC. These third-party websites are not covered by this Statement or the policies and procedures which NYBC applies. Therefore, if you follow a link posted here to third-party websites, we provide no assurances or guarantees about these other websites, including their ability to safeguard your personal information, and NYBC accepts no liability for links from this website to others. NYBC can not endorse or guarantee any information you may find on links followed from NYBC’s site. We suggest that you contact those sites directly for information on their privacy, security, data collection and distribution policies, as well as their content. NYBC is also not responsible for any third-party websites that may contain links to this website.
9. Your Privacy Rights and Choices.
You may have certain rights and choices regarding our collection, use, and disclosure of your personal information, based on your location or place of residency.
a. Opting out of promotional electronic communications from us. There may be certain circumstances where NYBC will use personal identifying information obtained on the website to contact you (for example, responses to your e-mail inquiries or recruiting for blood donations). If at any time you wish not to receive communications from us, you may indicate so by using the procedures described under Contact Us below. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required in order to provide you with the Service or for other reasons disclosed in this Policy.
b. For California Residents. We do not disclose personal information to third parties for their own direct marketing purposes. However, California residents have the right to request information regarding such practices under California’s “Shine the Light” law. If you are a California resident and would like to inquire further, please email us at [email protected].
c. For Nevada Residents. We do not “sell” personal information as that term is defined under Nevada law, but Nevada residents have the right to request to opt out of any future sale of their personal information under Nevada SB 220. If you are a Nevada resident and would like to make such a request, please contact us at [email protected]. You must include your full name, email address, and postal address in your email or mail request so that we can verify your Nevada residence and respond. In the event we sell personal information after the receipt of your request, we will make reasonable efforts to comply with such request.
10. European Privacy Notice
This European Privacy Notice applies to any individuals located within the European Economic Area (“EEA”) or United Kingdom (“UK”) about whom we may have collected personal data from any source, including through your use of the Services. We provide this European Privacy Notice to comply with applicable privacy laws, including the General Data Protection Act (“GDPR”), the UK GDPR, and related laws, regulations, and guidance from the European Union and/or its member states.
European law provides individuals located in Europe with rights to receive certain disclosures regarding the collection, use, and sharing of personal data, as well as rights to be informed, access, rectification, erasure, restrict processing, data portability and to object with respect to collected personal data. For the purposes of this European Privacy Notice, “personal data” means any information relating to an identified or identifiable natural person.
a. Basis for processing your personal data. We rely on one or more legal bases to process your personal data under applicable law. We may process personal data (1) as necessary to perform our contractual obligations to you, including, but not limited to, those obligations in our terms of use; (2) as necessary to pursue our legitimate interests as further detailed below; (3) as necessary for our compliance with our legal obligations such as a request or order from courts, law enforcement or other government authorities; and/or (4) with your consent, including to send you marketing email messages and other information that may be of interest to you, which you may withdraw at any time.
b. Legitimate business interests. We may collect, process, and maintain personal data to pursue the legitimate business interests outlined below. To determine these legitimate interests, we balance our legitimate interests against the legitimate interests and rights of you and others and only process personal data in accordance with those interests where they are not overridden by your data-protection interests or fundamental rights and freedoms. While our legitimate interests are most extensively detailed in Personal Information We May Collect, Use, and Disclose, they generally include:
• Provide, improve, and develop our Sites and Services, including to deliver your requested services, send you messages and provide user support, customize the Services to better fit your needs as a user, develop new products and services, and perform internal analytics and research and development. This also includes sharing personal data with our trusted service providers that provide services on our behalf.
• Protect you and others and to create and maintain a trusted environment, such as to comply with our legal obligations, to ensure compliance our agreements with you and other third parties, to ensure safe, secure, and reliable Services, and to detect and prevent wrongdoing and crime, assure compliance with our policies, and protect and defend our rights, interests, and property. In connection with the activities above, we may conduct internal research and profiling based on your interactions on various websites, content you submit to the Sites, and information obtained from third parties.
• Provide, personalize, measure and improve our marketing, including to send you promotional messages and other information that may be of interest to you with your consent. We may also use personal data to understand our user base and the effectiveness of our marketing. This processing is done pursuant to our legitimate interest in undertaking marketing activities to offer products or services that may be of interest to you.
c. Your privacy rights. In certain circumstances, individuals located within the EEA and UK are entitled to the following data protection rights:
• Right to Access. You have the right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data.
• Right to Erasure. You have the right to request that we erase your personal data in certain circumstances provided by law.
• Right to Rectification. You have the right to request to have your personal data corrected or updated if that information is inaccurate, outdated, or incomplete.
• Right to Object to Processing. You have the right to object to our processing of your personal data.
• Right to Restrict Processing. You have the right to request that we restrict the processing of your personal data.
• Right to Data Portability. You have the right to request that we provide you with a copy of your personal data in a structured, machine-readable and commonly used format.
• Right to Withdraw Consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal data. Please note that we may ask you to verify your identity before responding to such requests, and we may not able to provide Service without some necessary data. You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the European Economic Area (EEA). .
d. How to exercise your rights. If you wish to exercise any of the rights listed above, please send your request(s) using one of the following methods:
• Email: [email protected]
• Mail: 310 east 67th Street, New York, NY 10065 (if after February 1, 2025, then to: 601 Midland Avenue, Rye, NY 10580)
We do not charge a fee to process or respond to your verifiable consumer request unless it’s excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. As described below, in some jurisdictions, an authorized agent may submit a request to exercise your rights on your behalf.
If you have an account with us, we will deliver our written response to that account or via electronic mail. If you do not have an account with us, we will deliver our written response by electronic mail.
However, we cannot respond to your request or provide you with personal data if we cannot verify or authenticate your identity or authority to make the request and confirm that the personal data relates to you. Generally, a rights request must include:
● Sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative, which must include, at a minimum, your first and last name and email address.
● Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.
You are not required to create an account with us to submit a verifiable or authenticated consumer request. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to personal data associated with that specific account. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent’s as applicable) identity or authority to make the request.
Depending on applicable law, you may be limited in how many verifiable or authenticated consumer requests you make within a twelve (12) month period. If we have collected information on your minor child, you may exercise the above rights on behalf of your minor child. Additionally, in some jurisdictions, you may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity.
You may also have the right to lodge a complaint about our data collection and processing actions with the appropriate supervisory authority. If you are in the EEA, you can view the contact information for your data protection authority here. If you are in the UK, please visit https://ico.org.uk/make-a-complaint/.
11. Updates To This Privacy Policy. We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Contact Us. If you have any questions or concerns about this Privacy Policy, please contact us by email at [email protected] or by mail at New York Blood Center, Inc., 310 East 67th Street, New York, NY 10065 Attn: Privacy Officer/Office of the General (if after February 1, 2025, then to: 601 Midland Avenue, Rye, NY 10580).
Last updated: November 22, 2024