Chanzuckerberg.com Website Privacy Policy

1. Acceptance of this Privacy Policy

This Privacy Policy applies to visitors to www.chanzuckerberg.com (the “Website”), the “Other Services” (as defined below), and any other products and projects of CZI that state that this Privacy Policy applies to our collection of personal information (the “Services”). This Privacy Policy does not apply to data collection as a job applicant or an employee of CZI, or to products, programs, or activities of CZI that do not incorporate this Privacy Policy by reference or that expressly refer to a separate privacy policy (for example, czid.org).

By accessing and using the Services, you are accepting the terms of this Privacy Policy, which may be updated and amended from time to time. By accepting this Privacy Policy, you agree that CZI is the “controller” of personal information which is provided to, collected by, or processed in connection with the Services. If you do not agree to be bound by the terms of this Privacy Policy, do not access or use this Website, the Services, or the Other Services.

2. Information We Collect About You

Website Visitors
When you visit the Website, we collect the following information (collectively, “Website Visitor Information”):

• 2.1. From You
  We collect certain information from you when you provide it to us directly. Specifically:
  • Mailing list sign-up. When you sign up to receive our newsletter, you choose to provide us with certain personal identifiers, such as your real name, first and last, and your email address. CZI collects this information so that we can send you updates via email. We may combine this information with your internet or other electronic network activity on the Website.
  • User Support. If you email any @chanzuckerberg.com email address, including those published on our Website, with a support request or comments, you may provide us with personal identifiers such as your real name, email address, contact information, and/or a description of the issue so that we can properly respond to the request or comment.
  • Surveys and Feedback. If you decide to respond to a survey or send us feedback, we may collect personal identifiers and information about your interests or preferences.

• 2.2. From Your browser or Device
  When you use online services, certain information routinely gets created and logged automatically; the same is true when you visit our Website. When you access our Website, we collect:
  • Log data. When you visit our Website (whether on your computer or on a mobile device), we gather certain internet or other electronic network activity information automatically and store it in log files. This information includes your IP addresses, your Internet Service Provider, referring/exit pages, date/time stamps, clickstream data, login/logout times, and duration of time spent on our Website. 
  • Device data. In addition to log data, we collect information about the device you’re using to access the Website; this includes the type of device, browser type, operating system, settings, unique device identifiers, and crash data.
  • Cookie Information. We also use cookies (small text files sent by your computer or device each time you visit our Website that are unique to your device or your browser) and similar technologies. These cookies share internet or other electronic network activity information and general geolocation data with certain third parties. For example, we use analytics services (e.g., Google Analytics) that place cookies that collect information that allows us to understand how often you use the Website, where you are accessing the Website from, and events that happen on the Website. We use certain cookies to inform our own marketing and digital content efforts, which help us tell people about the work we do. For example, if a LinkedIn or Facebook user visits the CZI website, LinkedIn and Facebook can then identify them as part of a group of CZI Website visitors in order to serve them with marketing and digital content messages about CZI and our work. See this FAQ for more information about the cookies we use, what companies receive information from these cookies, why we use them, and the choices you have to control them.

• 2.3. Job Applicants
  When you apply for a job with CZI, we collect information as part of our recruiting and hiring process. For more information about the data we collect, how we use and share that data, and your legal rights concerning information collected during the hiring process please see our Privacy Policy for Job Applicants.

• 2.4. Sensitive Personal Information
  Except as described in our Privacy Policy for Job Applicants (linked above), our workforce privacy policy (if you are employed by CZI), or policies of certain products, programs, or activities of CZI that state otherwise, we do not collect sensitive personal information about you, and thus we do not use or disclose your sensitive personal information.

• 2.5. Other Services
  We use certain third-party online services to provide information about CZI’s work (like Facebook and LinkedIn) (those services we refer to as, “Other Services”). When you follow, like, comment, or otherwise engage with us through these Other Services, we see the personal information that the Other Service generally makes available about its users (that information, “Other Service Information”). For example, when you comment on our post on an Other Service, that Other Service will commonly attribute your comment to you in a way that others can see (including us). You can check the privacy policy of any Other Service for more information on how it collects, uses, and shares data, including the Other Service Information that may be provided to us. We will not attempt to re-identify you from aggregated or de-identified information provided by Other Services.

3. Use of Your Data

CZI collects and uses your data for the following business purposes:

• 3.1. Website Visitor Information
  We use the data we collect about visitors to our Website as follows:
  • To provide and maintain the Website. We use the information we collect to provide or serve our Website, and maintain and improve the Website, including understanding the content that our visitors find valuable, troubleshooting errors, advancing information security, and understanding website traffic patterns.
  • To provide information you’ve requested. We will inform you – via the email address you provide us – of other initiatives, news, requests for applications, and job opportunities related to CZI.
  • To communicate with you. We may also use your information to directly communicate with you about your use of the Website or to respond to an email or submission from you.

• 3.2. Other Services Information
  We use information provided to us from Other Services to understand the particular materials or links we posted to those Other Services that users found most valuable and to inform our marketing efforts.

• 3.3. Advertising
  Our Website does not include advertisements for third-party goods and services.  However, we may use advertising, on our Website or on other third party websites, to promote the products, programs, and services that we provide and/or support. Subject to your settings, we may use your email address or cookies to direct ads for our own programs to you on third-party sites. We have used third-party cookies to inform our marketing and digital content efforts and to serve CZI Website visitors with marketing and digital content messages about CZI and our work in the past 12 months.

  Please review this FAQ to learn more about how we use third party cookies and to exercise your control and choice over their use, including advertising.

• 3.4. Notice of Right to Opt-Out of Sale/Sharing
  As stated in Section 3.3, we may use third-party advertising cookies on our Website, which collect internet or other electronic network activity information, in order to help us deliver advertising about services or issues that may be of interest to you. Under California law, this practice is considered to be “sharing” of personal information and may also be deemed a “sale” of such information. You can opt-out of this practice by clicking this Do Not Sell or Share My Personal Information link or the link provided in the footer of our homepage and turn off the toggle switch for Marketing and Social Media Cookies. You may also be able to opt-out by broadcasting the Global Privacy Control (“GPC”) signal from a supported browser (see Section 11.3 for more information).

4. Retention and Deletion

We will keep your information only for as long as we believe that we need it for the purpose we have collected it (as described above) or to meet legal obligations, resolve disputes, maintain security, prevent fraud and abuse, enforce our agreements with you, or fulfill your request to unsubscribe from further messages from us. When your information is no longer needed, we will destroy, de-identify, or aggregate it.

5. Disclosing Your Data

Except in the instances listed below, we will not disclose your personal information to others unless you consent to it:

• 5.1. Service Providers and Vendors
  CZI works with vendors, service providers, and other partners that help us provide the Website by providing services on our behalf. These services are, for example, sending emails, performing statistical analysis, database management services, database hosting, providing customer support software, survey providers, and security. In the course of providing these services, our service providers may have access to your information, including personal information.
• 5.2. Legal and Safety Reasons
  We may disclose information if we believe in good faith that it’s necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us; (c) to protect or defend our rights or property or users of our Services or others; and/or (d) to investigate or assist in preventing any violation of the law.
• 5.3. CZI Entities
  We may share your information with our affiliates, such as the Chan Zuckerberg Initiative Foundation, a 501(c)(3) nonprofit private foundation, and we will require them to honor this Privacy Policy. Affiliates does not include Meta for purposes of this policy; CZI and Meta are independent entities.
• 5.4. Reorganization, Sale or Merger
  We may disclose your information in connection with a merger, reorganization, or sale of all or a portion of our organization or assets related to CZI. In the event of a merger, reorganization or sale of assets, the buyer or other successor entity will continue to be bound by the terms of this Privacy Policy.

6. Choices and Rights over your Personal Information

• 6.1. Rights
  You have the following rights with respect to the personal information we have about you:
  • Delete data. You can ask us to erase or delete all or some of your personal information subject to our legal obligations and lawful exceptions.
  • Change or correct personal information. You can also ask us to change, update or fix inaccurate data in certain cases, subject to our legal obligations and lawful exceptions.
  • Object to, limit, or restrict use of personal information. You can ask us to stop using all or some of your personal information (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal information is inaccurate or unlawfully held). You can find more information about this right in Section 3.4 of this Privacy Policy.
  • Right to access and/or take your personal information. You can ask us for a copy of your personal information in machine readable form.
  • The right not to be discriminated against. CZI will not discriminate against you in any manner for exercising any of the above rights with respect to your personal information.
  • Right to notice. You have a right to receive notice of our personal information collection, use, retention, and disclosure practices at or before collection of personal information.

If you would like to exercise your right to any of the above, email us at privacy@chanzuckerberg.com. In the email, please provide us with your name, the country (and state if within the United States) in which you live, which of the above rights you would like to exercise, and sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information. If you would like an authorized agent to make a request for you, have that agent email privacy@chanzuckerberg.com with the above information along with additional information sufficient for us to verify that the authorized agent is acting on your behalf.

Please also let us know if you have questions or concerns related to exercising any rights you have under applicable law to control your personal information.

If you would like to appeal a CZI decision with respect to a request to exercise any of these rights, please email us at privacy@chanzuckerberg.com and explain the basis for your appeal.  

If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

• 6.2. Additional Controls
  You have choices available to you through the device you use to access the Website. For example, your browser may let you control cookies and other types of local data storage. Where we receive information about you from Other Services (as described in Section 2.5 above), those Other Services – like social media sites – may offer their own controls around the data you choose to share with us.

7. Data Transfer

CZI is based in the United States; when you engage with the Website, you are sending personal information into the United States which may have different data protection rules than those of your country. We process data both inside and outside of the United States.

8. Our Legal Bases

We will collect, use and disclose your personal information only where we have a legal right to do so. This Section explains our legal bases for processing personal information, including under GDPR.

• 8.1. Consent.
  We rely on consent to engage in certain data collection activities, such as when you sign up for our newsletter.
• 8.2. Legitimate Interests.
  We rely on legitimate interests to process the data we collect when you browse our Website. We process this data based on our legitimate interest in understanding how our Website is being used and what you find valuable, and your legitimate interest in accessing our Website.

  Where we rely on consent, you have the right to revoke your consent and where we rely on legitimate interests, you have the right to object by emailing us at privacy@chanzuckerberg.com. If you have any questions about the lawful bases on which we collect and use your personal information, please contact our Data Protection Officer via email atGDPR-REP@chanzuckerberg.com.

 
 

9. Additional Information for California Residents

The California Consumer Privacy Act (“CCPA”) requires certain businesses to give California residents a number of rights regarding their personal information. We are offering these rights to you, including the right to have your personal information deleted (subject to certain exceptions), the right to change or correct your personal information, the right to limit the use or disclosure of your sensitive personal information (if applicable), the right to access your personal information, the right to opt-out of the “selling” or “sharing” of personal information (if applicable), and the right not to be discriminated against for exercising these rights. 

These rights, and how to exercise them, are described in more detail in Section 6 of this Policy Policy. In addition to these rights, we give you a right to request the following information about your personal information that we have collected in the past 12 months:

The Right to Know.
This right allows you to request the following information about the personal information that we’ve collected about you in the past 12 months:

• Information about Data Collection
  • The categories of personal information that have been collected.
  • The categories of sources from which we have collected personal information.
  • The business purpose for which we have collected personal information.

• Information about Data Disclosure
  • The categories of personal information, if any, that have been sold, shared, or disclosed for a business purpose to third parties.
  • The categories of third parties to whom personal information was sold, shared, or disclosed for a business purpose.
  • Identification of the specific business purpose for disclosing the personal information.

We have described in fuller detail in this Privacy Policy the personal information that we collect, how we use, and disclose it, but provide the following additional disclosure:

Information about Data Collection

• Information we collect. We have collected the following categories of personal information from consumers within the past 12 months: (1) identifiers; (2) internet or other electronic network activity; (3) geolocation data; and (4) inferences drawn from internet or other electronic network activity.
• Sources of information. We obtain these categories of personal information from the sources described in Section 2 of this Privacy Policy.
• Purposes of collection. We collect personal information for one or more of the business purposes described in the Section 3 of this Privacy Policy.

Information about Data Disclosure

• Information we disclose. We have disclosed the following categories of personal information within the past 12 months: (1) identifiers; (2) internet or other electronic network activity; (3) geolocation data; and (4) inferences drawn from internet or other electronic network activity.
• Third parties to whom we disclose. We have “shared” your internet or other electronic network activity for behavioral advertising purposes, which also may be deemed a “sale” of such information under CCPA, within the past 12 months to advertising and social network providers. We disclose the other categories of personal information to third parties as described in Section 5 of this Privacy Policy.
• Purposes of disclosure. We disclose the personal information we collect for one or more of the business purposes described in Section 3 of this Privacy Policy.

 
 

10. Additional Information for Residents of Virginia, Colorado, Connecticut, and Utah

Virginia, Colorado, Connecticut, and Utah also have adopted privacy laws that give consumers certain rights, including the right to confirm whether businesses are processing the consumer’s personal information, the right to access that data, the right to obtain a copy of that data, the right to correct inaccuracies in that data, and the right to delete that data.  As discussed above in Section 6, CZI provides these rights to all consumers, regardless of where they reside.

Additionally, these four states have adopted rights to opt-out of: (1) targeted advertising; (2) the sale of personal information; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. These laws define “sale” broadly such that our use of third-party advertising cookies could be considered a sale of personal information. You can opt-out of targeted advertising and the sale of personal information, by clicking the link in Section 3.4 or the Do Not Sell or Share My Personal Information link in the footer of the Website and turn off the toggle switch for Marketing and Social Media Cookies. You may also be able to opt-out by broadcasting the GPC signal from a supported browser (see Section 11.3 for more information). CZI does not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

 
 

11. Other Important Information

• 11.1. Security of Your Information
  Security of personal information is important to us. We implement security safeguards designed to protect your personal information, including reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and destruction. Despite these efforts, we cannot guarantee that your data may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or administrative safeguards. Please notify us immediately at security@chanzuckerberg.com if you become aware of any security issues relating to our Services.
• 11.2. Your Communications Preferences
  The personal information you voluntarily provide for our mailing lists allows us to keep you posted on our latest announcements, requests for applications, job opportunities, and upcoming events. If you no longer want to be on our mailing lists, you can opt-out anytime by updating your preferences. You may update your preferences or request to unsubscribe from our mailing lists by using the “Manage Preferences” link at the bottom of any email sent to a CZI mailing list. You may also send an email to privacy@chanzuckerberg.com requesting to unsubscribe.
• 11.3. Opt-Out Preference Signal
  Some browsers and browser extensions support the GPC or similar controls that can send a signal to a website you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal. 

• 11.4. Children
  The Services are not designed or intended for children under 16. We do not have actual knowledge that we have sold or shared the personal information of users under 16 years of age. If we become aware that we have the information of such children collected through the Services, we will promptly delete it.
• 11.5. Changes to This Privacy Policy
  We may modify this Privacy Policy from time to time, and you can see when the last update was by looking at the “Last Updated” date at the top of this Privacy Policy. If we make material changes to it, we’ll provide you notice through this Privacy Policy. If you object to any changes, you may stop accessing the Services or exercise other opt-outs or rights that we provide. Your continued use of the Services after we publish a notice about changes to this Privacy Policy means that you accept the updated Privacy Policy following the date it takes effect.
• 11.6. Contact Information
  If you have questions or complaints regarding this Privacy Policy, please contact us at privacy@chanzuckerberg.com. If you are looking to contact our representative for the European Union you may contact us at GDPR-REP@chanzuckerberg.com.