Privacy Statement
 

Last update: December 18, 2019

The National Restaurant Association and its affiliates National Restaurant Solutions LLC, National Restaurant Association Education Foundation, National Registry of Food Safety Professionals,  Multicultural Foodservice and Hospitality Alliance, Restaurant Law Center, and National Restaurant Association Political Action Committee (collectively, the “Association,” “we” or “us”) understands that you care about how we collect, use, and share information when you interact with us through our websites, mobile applications, social media sites and handles, email, events, surveys, and research (our “Services”) and we value the trust you place in us. This Privacy Policy explains:

• the types of information we collect through our Services
• how we use and protect that information
• the types of information we may share with others and under what circumstances
• the choices you have regarding our collection, use, and sharing practices
• details regarding our use of third party cookies and other tracking technologies

We also include specific disclosures for residents of the European Economic Area and Switzerland as well as California.

This Policy applies to the Association and our Services. It also applies anywhere it is linked. It does not apply to non-Association websites and mobile applications that may link to the Services or be linked to from the Services; please review the privacy policies on those websites and applications directly to understand their privacy practices.

Information We Collect

Information you give us: Some of the Services may include features or services that permit you to enter contact information and other information about you. We collect and store any information you enter on our Services. This may include:

• Contact and demographic information when registering or using our Services.
• Payment information and associated contact information when engaging in a transaction on our site.
• Appointment bookings you carry out through our site.
• Email address information when subscribing to our email bulletins.
• Any information or data you provide by interacting in our online forums and chatrooms, or by commenting on content posted on our Services. Please note that these comments are also visible to other users of our Services.
• Information you provide when you complete a survey administered by us or a service provider acting on our behalf.
• If you contact us, we may keep a record of that correspondence and any contact information provided.
• Information you may submit to inquire about or apply for a job with us.
• Information you provide when you apply for a certification or purchase or take a course or an exam.
• Information submitted by or for our members, including employers or franchisors–which may include employees’ business and personal contact details, job titles, and membership details.

Information We Collect Automatically: When you interact with the Services, certain information about your use of our Services is automatically collected. Much of this information is collected through cookies, web beacons, and other tracking technologies, as well as through your web browser or device.  This may include:

• Details of your visits to our site and information generated in the course of the use of our site (including the timing, frequency and pattern of service use) including, but not limited to, traffic data, location data, weblogs and other communication data, the resources that you access, and how you reached our site.
• Details regarding the device you use to access our Services, including, but not limited to, your IP address, operating system and browser type.
• Information about how you interact with our ads and newsletters, including whether you open or click links in any correspondence.
• Information that you make available to us on a social media platform (such as by clicking on a social media icon linked from our Services), including your account ID or username and other information included in your posts.

Please see below for more information about how our automatic collection of information works.

How We Use and Protect Your Information

We may use the information we collect from you for the following purposes:

• To provide membership services, and to keep our membership contact information up-to-date.
• To provide you with our products and services, including to take steps to enter into a contract for sale or for services, process payments, fulfill orders, and send service communications.
• To provide you with information for our products and services that we believe may be of interest to you.
• To communicate exam results, pending expiration dates or other information regarding your certificate, certification or similar status.
• To provide information or other materials relating to an event you are currently or previously registered for, including information regarding speakers, sponsors, or other attendees.
• To enable additional features on our Services and to provide you with a personalized service.
• To create custom audiences on social media sites.
• To provide you with the best service and improve and grow our business, including understanding our customer base and purchasing trends and understanding the effectiveness of our marketing.
• To detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal, and to comply with legal requirements regarding the provision of products and services.

How We Secure the Information We Collect From or About You

We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services.  While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.

Our Sharing of Your Information

• Service Providers: We engage vendors to perform functions on our behalf such as: website hosting, software development, data storage, content management, database management, technical integration, marketing automation, analytics, site optimization, conducting customer surveys, shipping and payment processing and providing other business services.

There are limited circumstances in which the service provider collects data directly from you when their privacy policies may also apply.

• Social Media Platforms: Where you choose to interact with us through social media, your interaction with these programs typically allows the social media company to collect some information about you through digital cookies they place on your device and other tracking mechanisms. In some cases, the social media company may recognize you through its digital cookies even when you do not interact with their application. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and controls they make available to you.
• Third parties involved in advertising: We partner with third parties who assist us in serving advertising regarding the Services to others who may be interested in the Services. We also partner with third parties who use cookies to display interest-based advertising to you on the Services. These third parties may use tracking technologies on our website to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads. While the Association will not share information that identifies you by name with unaffiliated third parties for their own uses, such third parties may, with sufficient data from other sources, be able to personally identify you.
• Corporate Affiliates: We share data with other members of our group of companies.
• Business Partners: We share data with affiliates or clients with whom we have affinity programs or similar commercial relationships in order to market and provide products, goods or services that may be of interest to you.

Additional Information About our Data Collection and Sharing Practices

Sharing of Aggregated Data: We may analyze aggregated, de-identified data and share these analyses at our discretion, including with marketing agencies, media agencies, and analytics providers. These third parties will not be able to relate this data to identifiable individuals.

Combination of Information: We may combine information from the Services together and with other information we obtain from our business records. Additionally, information collected about you from a particular browser or device may be linked to information collected from another computer or device that we believe relates to you.

Personal Data Collected From You About Others: If you decide to invite others to the site, we will collect your and the other person’s names, e-mail addresses, and/or phone numbers in order to send an e-mail or text message and follow up with the other person. You hereby agree that you will obtain the other person’s consent to this before giving us their personal data. You hereby agree not to send us the contact details of any legal minor.

Change of Ownership or Corporate Organization:We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this policy.

Cross-border Transfer of Data: If you use our Services outside of the United States, you understand that we may collect, process, and store your personal information in the United States and other countries.  The laws in the U.S. regarding personal information may be different from the laws of your state or country.  Any such transfers will comply with safeguards as required by relevant law.  By using the Services, you consent to the collection, international transfer, storage, and processing of your data.

Your Options and Rights

Please visit the login page on any Association website to update your contact information and payment method.

If at any time you would like to unsubscribe from receiving future emails, you can click the unsubscribe link at the bottom of any email bulletin, or email us at Privacy@restaurant.org and we will promptly remove you from all correspondence.

Your California Privacy Rights

Residents of the State of California have the right to request information from the Association regarding third parties to whom the company has disclosed certain categories of personal information during the preceding year for the third parties’ direct marketing purposes.  If you are a California resident and would like to see the categories of personal information that we collect or sell, please see our Notice of California Consumer Data Collection and Sharing Practices.   If you are a California resident and would like to make such a request to access your personal information, delete you personal information, or request that we do not sell your information, please visit our Privacy Request webpage, email Privacy@restaurant.org, write to or call us at:

Director of Security
National Restaurant Association
233 South Wacker Drive
Chicago, IL 60606
1-800-765-2122

Special Information for California Residents

The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of “Personal Information,” as well as rights to access and control Personal Information. The CCPA defines “Personal Information” to mean “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Certain information we collect may be exempt from the CCPA because it is considered public information (i.e., it is made available by a government entity) or covered by a federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.

To the extent that we collect Personal Information that is subject to the CCPA, that information, our practices, and your rights are described below.

Right to Information Regarding the Categories of Personal Information Collected, Sold, and Disclosed

You have a right to obtain information about the categories of Personal Information we collect, sell, and disclose.  Please see our Notice of California Consumer Data Collection and Sharing Practices.

Right to Access Information

You have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. To protect our customers’ Personal Information, we are required to verify your identify before we can act on your request.

Right to Request Deletion of Information

You have the right to request in certain circumstances that we delete any Personal Information that we have collected directly from you. To protect our customers’ Personal Information, we are required to verify your identify before we can act on your request. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Right to Information Regarding Participation in Data Sharing for Financial Incentives

We may run promotions from time to time whereby we incentivize a consumer to share certain pieces of information with us; for example, we may offer a one-time discount if consumers sign up for our email marketing list. Participation in these incentives is voluntary, and you may opt out of the data sharing at any time.

Right to Opt Out of Sale of Personal Information to Third Parties

You have the right to opt out of any sale of your personal information by the Association to third parties. To exercise this right, please visit our Privacy Request webpage. Please note that your right to opt out does not apply to our sharing of personal information with service providers, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.

Notice of California Consumer Data Collection and Sharing Practices.

The following is a description of our data collection practices, including the personal information we collect, the sources of that information, the purposes for which we collect information, and whether we disclose that information to external parties. We may use any and all of the information for any of the purposes described in this Privacy Policy, unless limitations are listed. The categories we use to describe the information are those enumerated in the CCPA.

• Personal Identifiers:
  • We may collect your name, phone number, and email address and contact address when you create an account, register for events, or complete a transaction. If you choose to create an account, you may also be asked to create a username, and we may assign one or more unique identifiers to your profile.
  • You may provide us with payment information, which may be your credit card number or a bank account, when you complete a transaction or set up a recurring payment.
  • We may collect your Social Security number.
  • We may collect your IP address automatically when you use our Services.
  • We may collect your Device ID automatically when you use our Services.
• Protected Classifications: We may collect your age in order to comply with laws that restrict collection and disclosure of personal information belonging to minors. We may collect your gender and ethnic origin.
• Commercial Information: When you engage in transactions with us, we may create records of goods or services purchased or considered, as well as purchasing or consuming histories or tendencies.
• Biometric Information: We may collect information about your physiological, biological, and behavioral characteristics.
• Internet or Other Electronic Network Activity Information: We may collect information about your browsing history, search history, information regarding your interaction with websites, and applications or advertisements automatically when you utilize our Services.
• Geolocation Data: As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on the IP address.
• Audio, electronic, visual, thermal, olfactory, or similar information: If you contact us via phone, we may record the call. We will notify you if a call is being recorded at the beginning of the call. If you take an examination, we may video record. We may collect your image, thermal, and olfactory similar information.
• Professional or employment-related information: We may collect information about your current employer and your employment history.
• Education information: We may collect information about the institutions you have attended and the level of education you have attained.
• Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics: We may analyze your actual or likely preferences through a series of computer processes. On some occasions, we may add our observations to your internal profile.

We may share any of the above-listed information with “Service Providers”, which are external parties that we engage for business purposes and are restricted from using Personal Information for any purpose that is not related to our engagement. The categories of Service Providers with whom we share information and the services they provide are described in this Privacy Policy.

On certain occasions, we also sell information to third parties. An external party may be considered a third party either because the purpose of sharing is not an enumerated business purpose under California law, or because our contract does not restrict them from using Personal Information for other purposes. To “sell” information means to disclose it to an external party for monetary or other benefit. We may sell the following information:

Personal Identifiers:

• We may provide your contact information such as name, phone number, email address and contact address.
• We may provide commercial information, such as a business’ name and address.
• We may provide your contact information to directory services providers and public safety authorities.
• We may provide your IP address and Device ID to our advertising partners, corporate affiliates, and business partners.
• All personal information may be shared with our corporate affiliates.

We sell this information to third parties in order to allow those entities to provide you with targeting advertising and marketing that may interest you. We may also disclose information to other external parties who are not listed here when required by law or to protect the Association or other persons, as described in this Privacy Policy.

Special Information for Nevada Residents
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to third parties who will sell or license their information to others. If you are a Nevada resident and would like to make such a request, please visit our Privacy Request webpage, email Privacy@restaurant.org or write to or call us at:

Director of Security
National Restaurant Association
233 South Wacker Drive
Chicago, IL 60606
1-800-765-2122

Information for Individuals Located in the European Economic Area and Switzerland

We process personal data on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement to provide Services; and (3) as necessary for our legitimate interests in providing the Services where those interests do not override your fundamental rights and freedom related to data privacy. Personal information we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates or subcontractors maintain facilities, as described above.

Users that reside in the EEA or Switzerland have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available here.

If you are a resident of the EEA or Switzerland, you are entitled to certain rights. Please note: In order to verify your identity, we may require you to provide us with personal information prior to accessing any records containing information about you. These rights include the ability:

• to request from us access to personal information held about you
• to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
• to ask for data to be erased if the data is no longer necessary for the purpose for which it was collected, you withdraw consent and no other legal basis for processing exists, or you believe your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing.
• to request that we restrict our processing if we are processing your data based on legitimate interests or the performance of a task in the public interest as an exercise of official authority (including profiling); using your data for direct marketing (including profiling); or processing your data for purposes of scientific or historical research and statistics.

To submit a request to exercise your rights, please contact us at Privacy@restaurant.org. We may have a reason under the law why we do not have to respond to your request, or respond to it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Changes to This Policy

We may make changes to this Policy from time to time. We will post any changes, and such changes will become effective when they are posted. Your continued use of our Services following the posting of any changes will mean you accept those changes. For questions about our privacy practices, contact us at:

Director of Security
National Restaurant Association
233 South Wacker Drive
Chicago, IL 60606
1-800-765-2122
Email: Privacy@restaurant.org

Additional Information About Our Use of Tracking Technologies and Interest-Based Advertising

The Association relies on partners to provide many features of our sites and services using data about your use of the Association and other sites. We use cookies for the following purposes:

• Site Operations: Enabling features that are necessary for providing you the services on our site, such as identifying you as being signed in, tracking content views remembering your preferences and the number of times you have been shown an advertisement.
• Analytics: Allowing us to understand how our services are being used, track site performance and make improvements
• Personalized Advertising: Delivering tailored advertising based on your preferences or interests across services and devices and measuring the effectiveness of ads
• Social Media: Enabling the sharing of content from our services through social networking and other sites

Below is a list of these partners with links to more information about the use of your data by our service providers and third parties that use tracking devices or cookies.  We have provided links to information about the choices these services may make available to you.

Most web browsers automatically accept cookies but, if you prefer, you can usually modify your browser setting to disable or reject cookies. If you delete your cookies or if you set your browser to decline cookies, some features of the Services may not be available, work, or work as designed. You may also be able to opt out of or block tracking by interacting directly with the third parties who conduct tracking through our Services.

You can learn more about ad serving companies and the options available to limit their collection and use of your information by visiting the websites for the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Initiative. Similarly, you can learn about your options to opt out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple or Android device.

Please note that opting-out of advertising networks services does not mean that you will not receive advertising while using our Services or on other websites, nor will it prevent the receipt of interest-based advertising from third parties that do not participate in these programs. It will, however, exclude you from interest-based advertising conducted through participating networks, as provided by their policies and choice mechanisms.  If you delete your cookies, you may also delete your opt-out preferences.