Last Modified May 24, 2018

Our Commitment to Privacy
This Privacy Policy describes how we collect, use, and protect personal information you, provide in using our website, www.mtac.org (the “Site”). By visiting and/or using this Site, you are accepting the practices described in this Privacy Policy.

Although we attempt to keep all information on this Site accurate, you assume the risk that information and materials on this Site could be incomplete, inaccurate, out of date, or may not meet your needs and requirements.

How We Collect and Use Information
Browsing Information. During your visit to our Site, our web server automatically gathers and stores certain information about the use of the Site. Information collected and stored includes: your IP address, URLs you visit on our site, browser type and language, the date and time of your visit, and any materials that you downloaded. We use this information to evaluate, maintain, protect, and improve our content and services, and to make the Site more useful to our users, and to comply with licensing requirements. We also use this information to diagnose issues with our server, to ensure the server operates smoothly, and to learn about the number of visitors to the Site. This information does not identify or track you personally.

Cookies. Cookies may be used to analyze website usage. Cookies created on your computer by using this Site do not contain personal information and do not compromise your privacy or security.

Personal Information. We do not collect any personal information about you unless you affirmatively choose to make that information available to us. For example, when you create a user account or purchase merchandise on the Site, you may provide your personal information such as name, email address, and credit card information. However, we do not save financial information on the Site. Financial information can be entered to purchase merchandise and renew membership but that information is passed directly to PayPal, Google Wallet, and/or MTAC’s other financial vendors solely for the purposes of facilitating and finalizing the transaction, and is not saved by MTAC. If you choose to send us an email that includes personal information, we will use the information provided to respond to your message and for no other purpose. Any personal information collected by the Site is not sold or rented.

Member Information. MTAC members have special access to a members-only portion of the Site that requires a member username and password. MTAC members may use the Site to register their students for MTAC programs, including but not limited to the Certificate of Merit® (CM), Composers Today, and VOCE. Registration procedures through the Site may ask the user to provide personal information such as name, address, e-mail address, and phone number. When a member registers a student for MTAC programs, the Site may request student information including name, school grade, date of birth, and program level, which members obtain only with parent consent. Members cannot access the personal information of students they do not teach, except those authorized by MTAC to administrate an MTAC program. Member and student information is used strictly for the administration of MTAC programs. Any member information collected by the Site is not sold or rented.

Publicly-Shared Information. We do not share personal information with individuals, companies, or organizations outside of MTAC and MTAC’s affiliated Branches unless:
• We have received your consent, including but not limited to directing us to share your personal information with third-party organizations, such as other music education programs that collaborate with MTAC to provide services, or posting your photo or statements on our website for MTAC’s promotional or educational purposes;

• You have chosen to publicly share the information in using one of our products or services that provides for sharing, in which case, please remember that when you share information publicly, it may be indexed by search engines;

• Selected companies perform services on our behalf, such as external technology administrators; however, these companies are prohibited from using your personal information for purposes other than those requested by us or required by law.

Children’s Online Privacy Policy. Our Site is not directed to persons under 13. If you become aware that your child has provided us with personal information without your consent, please contact us. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us personal information, we take steps to remove such information and terminate the child’s account.

Required by Law, Good Faith, or Exigent Circumstances. MTAC reserves the right to access, use, preserve, or disclose personal information as required by law, or in the good faith belief that such action is reasonably necessary to comply with the law or legal process served on the MTAC or the MTAC Site; protect and defend the rights, property, or interest of the MTAC; and to protect the personal safety of MTAC members or members of the general public.

Third-Party Links. This Site may contain links to third party websites that are not controlled by MTAC. These third-party links are provided as a convenience, and you agree to use these links at your own sole risk. MTAC is not responsible for the privacy policy or practices of third party websites linked to this Site.

Data Security

Transferring Personal Data from EU to US
MTAC’s principal place of business is in the United States. Information we collect from you will be processed in the United States only. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the General Data Protection Regulation (GDPR). MTAC relies on derogations for specific situations as set forth in Article 49 of the GDPR. In particular, MTAC collects and transfers to the United States personal data, only in the way set forth above in this Privacy Policy. MTAC endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with MTAC and the practices described in this Privacy Policy.

Data Subject Rights
This Privacy Policy is intended to provide you with information about what personal data MTAC collects about you and how it is used. If you have any questions, please contact us at dpo@mtac.org.

Restricted Access. The security, confidentiality, and integrity of your information are very important to us. Technical, security, and administrative measures have been implemented to protect your information from unauthorized access, disclosure, modification, and use. We periodically review our security protocols to consider appropriate new technology and methods. We restrict access to personal information to MTAC employees, contractors, and agents on a needs-only basis for performing work for us, and they are subject to contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

Encryption. We provide our users with a secure experience when they are ordering or renewing memberships, making a donation, or purchasing merchandise. Our technical security measures include using industry standard encryption to secure the transfer of data between your browser and our servers. When our forms ask users to enter personal information (such as a credit card number), that information is encrypted using SSL. Please be aware that despite our best efforts, no security measures are completely perfect or impenetrable.

User Accounts. All users are solely responsible for the use of the Site through your account and under your username and password. If you lose your username/password or suspect unauthorized use of your account, you must contact MTAC immediately. MTAC is not liable for any loss or damage resulting from your failure to safeguard your user account, username, and password information.

Your Controls and Choices
User input times are only open during certain times of year, depending on the registration periods for each program. During those times, you have the ability to correct, update, or delete your personal information by accessing your user account; however, please be aware that when registration closes for a particular program, you will no longer have access to your registration information. Parents may also request that personal information we hold about their child as a student in an MTAC program be amended or deleted, but if the registration period has closed, such changes will only take effect in the next registration period. Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain products and services to you, and some of our services may not be able to take into account your interests and preferences.

Changes to Privacy Policy
Our Privacy Policy may change from time to time as new or updated content and services are added to the Site. You are encouraged to check this document periodically to stay informed of current information, and privacy and security guidelines. Continued use of this Site following the posting of any changes to these terms will signify that you agree to and accept the changes.

Data Protection Officer
MTAC’s principal place of business is in California, United States. MTAC has appointed an internal data protection officer for you to contact if you have any questions or concerns about MTAC’s personal data policies or practices. The data protection officer’s name and contact information are as follows:

Rhonda Williams
833 Market Street Suite 900
San Francisco, CA 94103
dpo@mtac.org
(800) 834-3340 ext. 105