Effective Date: January 1, 2020
Commitment to Individual Privacy
Online Privacy Notice
The Health Center at Auraria supports the protection of the privacy of individuals who visit the official HCA website (the “Site”). It recognizes the numerous laws that govern the collection, storage, transfer, use and access to personal information. This statement extends to the collection of all personal information, regardless of source or medium.
This statement does not apply to websites that are created and maintained for purposes other than conducting official University business by individual faculty, staff or students using resources made available within a University domain.
Collection of Information
It is the practice of the Health Center at Auraria to collect the least amount of personal information required to fulfill its duties and responsibilities, to complete a particular transaction, or as required by law. Personal information includes, but is not limited to, your name, email address, postal address, telephone number, username and password, and other information specific to you.
You may choose whether or not to provide personal information to the Health Center at Auraria via the Internet. If you choose not to provide personal information, you can still visit and utilize resources on the Health Center at Auraria Site.
For website administration purposes, non-personal information is collected for analysis (“Usage Information”). Usage Information includes, but is not limited to, number of visitors, number of page views, IP address, website pages visited prior to visiting the Site(s), browser information, technical information about your device, system, software, and peripherals.
Usage Information is used to help diagnose problems, assess what information is of most interest, determine technical design specifications, and identify system performance and/or problem areas, and other administrative functions. The Health Center at Auraria may use Usage Information to facilitate the provision of software updates, product support and other services to you (if any).
Sharing and Disclosing Your Information
The Health Center at Auraria may, for example, provide your personal information to third parties in the following instances: (i) to the extent necessary to comply with applicable law and our legal obligations, such as to comply with a subpoena or similar legal process; (ii) when the Health Center at Auraria believes in good faith that disclosure is necessary to protect its rights, your safety or the safety of others; (iii) with third party vendors, consultants and other service providers who work for us and need access to your information to do that work; (iv) to investigate fraud, or respond to a government request; (v) to comply with an appropriate request under the Colorado Open Records Act (C.R.S. § 24-72-201 et. seq.); (vi) if you request that someone from the Health Center at Auraria share your information; and (vii) in connection with or during negotiation of any merger, financing, acquisition, or dissolution, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company.
Colorado Open Records Act (CORA)
As a public institution of the state of Colorado, the Health Center at Auraria must comply with CORA. Information we handle, including your personal information, may be available for request under CORA if it is not protected under any other law or specifically exempt from disclosure under CORA. We will not disclose information protected by law in response to a public records request.
Protecting Your Information
The Health Center at Auraria has security policies and standards regarding the protection of personal information. These standards include both administrative and technical requirements to appropriately protect personal information. The Health Center at Auraria has an information security officer and team who assist in providing appropriate protection for personal information. This includes active monitoring and assessments to detect potential security issues.
When third party vendors, consultants, and other service providers who work for the Health Center at Auraria handle your information, the Health Center relies on a combination of contractual requirements, third-party audits, security reviews and assessments and as assurances that personal information is appropriately protected.
Third Party Tracking and Advertising
The Health Center at Auraria is not responsible for the content or privacy statements of those links or the content of any third-party websites. If you are asked to supply personal information to those websites, we suggest you read carefully through the privacy statements of those websites or mobile applications.
The Health Center at Auraria may include information on the Site including social media features. These social media features may collect your IP address, which page you are visiting on our Site, and may set a cookie to enable the social media feature to function properly. Social media features may be hosted by a third party or hosted directly on the Health Center Site. Your interactions with these social media features are governed by the privacy statement of the company providing them.
Cookies, Web Beacons and Trackers
Health Center at Auraria uses certain technologies to help us provide you with personalized service, and to help make our websites, applications and services perform better for you.
- Session Cookies are temporary cookies that identify and track users within our Site, applications or services which are deleted when you close your browser or leave your session in the application or service.
- Persistent Cookies are cookies which enable our websites, applications or services to “remember” who you are and to remember your preferences within our Site, applications or services and which will stay on your computer or device after you close your browser or leave your session in the application or service.
Health Center at Auraria also uses another similar website technology known as web beacons to count users who have visited our Site after clicking through from one of our advertisements on another website or in emails and to collect details of any website services utilized. These web beacons collect limited information which does not identify particular individuals. While it is not possible for you to restrict the use of web beacons, because they are used in conjunction with cookies, you can effectively disable them by setting your browser to restrict or block cookies.
Any child under the age of 13 should not register to use any portion of the Health Center at Auraria website, or provide any personal information. It is not Health Center at Auraria’s desire or intent through its Site to collect and store any personal information from any person Health Center at Auraria actually knows to be under the age of 13.
Health and Medical Information
Certain health and medical information about you is protected under the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state law. This information may be provided by you online or offline, or may be collected by us from other methods such as through a health care provider. The Health Center at Auraria protects covered health and medical information as required by HIPAA and applicable state law. Similarly, the Health Center at Auraria may use covered health and medical information as permitted by HIPAA and applicable state law.
In the event of any conflict between the Health Center’s HIPAA Notice of Privacy Practices and this Website Privacy Statement, the terms of our HIPAA Notice of Privacy Practices shall control.
What You are Consenting to:
By using the Site, you are consenting to the use and processing of your information as set forth in this Privacy Notice, almost all of which activities will take place in the United States. If you reside outside the U.S., your information will be transferred to the U.S., and processed and stored there under U.S. privacy standards. By using the Site and providing information to us, you consent to such transfer to, and processing in, the U.S.
If the Health Center at Auraria collects information based on your consent, the Health Center at Auraria will conform to the processes outlined in any applicable consent form. If you provide information based on consent, you may generally withdraw your consent at any time. However, withdrawal will not affect the processing based on such consent prior to withdrawal.
My Rights Regarding my Personal Information:
The rights you have regarding the use and disclosure of your personal information depend on the nature of your relationship to Health Center at Auraria, applicable law, and the type of the information HCA holds about you. Please be aware that personal information rights under international, United States, and Colorado information and privacy laws may differ. Depending on the applicable law(s), you may have the right to request:
- A list of the types of the personal information Health Center at Auraria has about you;
- That Health Center at Auraria correct inaccurate information about you (For example, updates to your name, contact information, etc.);
You should direct all requests to exercise these rights to the contact information provided in the Contact Us section.
Comments and Feedback
Comments or questions can be submitted at /contact-us/. Do not send attachments with the message. (Due to concern about computer viruses and the damage they cause, email messages containing attachments will be deleted without opening them.)
The information provided in this Privacy Notice should not be construed as giving business, legal or other advice, or as guaranteeing the security of information provided through the Health Center at Auraria Site.
This Privacy Notice may be modified or updated at any time by the Health Center at Auraria.