NYS INFORMATION TECHNOLOGY POLICIES, STANDARDS & GUIDELINES
Technology Policy #ITS-Sec-901
Issue Date: June 17, 2002
Publication Date: September 2, 2002
Information Collected Automatically When You Visit This Website
Information Collected When You Email This Website Or Complete A Transaction
Information and Choice
Disclosure Of Information Collected Through This Website
Retention Of Information Collected Through This Website
Access To And Correction Of Personal Information Collected Through This Website
Confidentiality And Integrity Of Personal Information Collected Through This Website
The following definitions apply to, and appear in italics, in this policy:
Personal Information shall have the meaning set forth in subdivision 5 of section 202 of the State Technology Law.
State Agency Website shall have the meaning set forth in subdivision 7 of section 202 of the State Technology Law.
User shall have the meaning set forth in subdivision 8 of section 202 of the State Technology Law.
Thank you for visiting the Fashion Institute of Technology website. This website is designed to make it easier and more efficient for individuals and businesses to interact with the Fashion Institute of Technology. The Fashion Institute of Technology recognizes that it is critical individuals and businesses be confident that their privacy is protected when they visit the Fashion Institute of Technology website.
For purposes of this policy, “personal information” means any information concerning a natural person, which, because of name, number, symbol, mark, or other identifier, can be used to identify that natural person. The Fashion Institute of Technology does not collect any personal information about you unless you provide that information voluntarily by sending an email, responding to a survey, or completing an online transaction.
When visiting this website the Fashion Institute of Technology automatically collects and stores the following information about your visit:
(iii) HTTP header, “referrer.” The referrer specifies the web page from which the user accessed the current web page.
(iv) System date. The date and time of the user’s request.
(v) Full request. The exact request the user made.
(vi) Status. The status code the server returned to the user.
(vii) Content length. The content length, in bytes, of any document sent to the user.
(viii) Method. The request method used.
(ix) Universal Resource Identifier (URI). The location of a resource on the server.
(x) Query string of the URI. Anything after the question mark in a URI.
(xi) Protocol. The transport protocol and the version used.
None of the foregoing information is deemed to constitute personal information.
The information that is collected automatically is used to improve this website's content and to help the Fashion Institute of Technology understand how users are interacting with the website. This information is collected for statistical analysis, to determine what information is of most and least interest to our users, and to improve the utility of the material available on the website. The information is not collected for commercial marketing purposes and the Fashion Institute of Technology is not authorized to sell or otherwise disclose the information collected from the website for commercial marketing purposes.
If you wish, you may complete a registration to personalize this website and permit a “persistent cookie” to be stored on your computer’s hard drive. This persistent cookie will allow the website to recognize you when you visit again and tailor the information presented to you based on your needs and interests. The Fashion Institute of Technology uses persistent cookies only with your permission.
The software or hardware you use to access the website allows you to refuse new cookies or delete existing cookies. Refusing or deleting these cookies may limit your ability to take advantage of some features of this website.
During your visit to this website you may send an email to the Fashion Institute of Technology. Your email address and the contents of your message will be collected. The information collected is not limited to text characters and may include audio, video, and graphic information formats included in the message. Your email address and the information included in your message will be used to respond to you, to address issues you identify, to improve this website, or to forward your message to another state agency for appropriate action. Your email address is not collected for commercial purposes and the Fashion Institute of Technology is not authorized to sell or otherwise disclose your email address for commercial purposes.
During your visit to this website you may complete a transaction such as a survey, registration, or order form. The information, including personal information, volunteered by you in completing the transaction is used by the Fashion Institute of Technology to operate Fashion Institute of Technology programs, which include the provision of goods, services, and information. The information collected by the Fashion Institute of Technology may be disclosed by the Fashion Institute of Technology for those purposes that may be reasonably ascertained from the nature and terms of the transaction in which the information was submitted.
The Fashion Institute of Technology does not knowingly collect personal information from children or create profiles of children through this website. Users are cautioned, however, that the collection of personal information submitted in an email will be treated as though it was submitted by an adult, and may, unless exempted from access by federal or state law, be subject to public access. The Fashion Institute of Technology strongly encourages parents and teachers to be involved in children’s Internet activities and to provide guidance whenever children are asked to provide personal information online.
As noted above, the Fashion Institute of Technology does not collect any personal information about you unless you provide that information voluntarily by sending an email, responding to a survey, or completing an online form. You may choose not to send us an email, respond to a survey, or complete an online form. While your choice not to participate in these activities may limit your ability to receive specific services or products through this website, it will not normally have an impact on your ability to take advantage of other features of the website, including browsing or downloading information.
The collection of information through this website and the disclosure of that information are subject to the provisions of the Internet Security and Privacy Act. The Fashion Institute of Technology will collect personal information through this website or disclose personal information collected through this website only if the user has consented to the collection or disclosure of such personal information. The voluntary disclosure of personal information to the Fashion Institute of Technology by the user, whether solicited or unsolicited, constitutes consent to the collection and disclosure of the information by the Fashion Institute of Technology for the purposes for which the user disclosed the information to the Fashion Institute of Technology, as was reasonably ascertainable from the nature and terms of the disclosure.
However, the Fashion Institute of Technology may collect or disclose personal information without consent if the collection or disclosure is: (1) necessary to perform the statutory duties of Fashion Institute of Technology, or necessary for the Fashion Institute of Technology to operate a program authorized by law, or authorized by state or federal statute or regulation; (2) made pursuant to a court order or by law; (3) for the purpose of validating the identity of the user; or (4) of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person.
Further, the disclosure of information, including personal information, collected through this website is subject to the provisions of the Freedom of Information Law and the Personal Privacy Protection Law.
The Fashion Institute of Technology may disclose personal information to federal or state law enforcement authorities to enforce its rights against unauthorized access or attempted unauthorized access to the Fashion Institute of Technology’s information technology assets.
Any user may submit a request to the Fashion Institute of Technology privacy compliance officer to determine whether personal information pertaining to that user has been collected through this website. Any such request shall be made in writing and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or similar appropriate identification. The address of the privacy compliance officer is:
Privacy Compliance Officer
The privacy compliance officer shall, within five (5) business days of the receipt of a proper request, provide access to the personal information; deny access in writing, explaining the reasons therefore; or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty (30) days from the date of the acknowledgment.
In the event that the Fashion Institute of Technology has collected personal information pertaining to a user through the Fashion Institute of Technology website and that information is to be provided to the user pursuant to the user’s request, the privacy compliance officer shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in section 95 of the Public Officers Law.
The Fashion Institute of Technology is strongly committed to protecting personal information collected through this website against unauthorized access, use or disclosure. Consequently, the Fashion Institute of Technology limits employee access to personal information collected through this website to only those employees who need access to the information in the performance of their official duties. Employees who have access to this information follow appropriate procedures in connection with any disclosures of personal information.
For website security purposes and to maintain the availability of the website for all users, the Agency employs software to monitor traffic to identify unauthorized attempts to upload or change information or otherwise damage this website.