This Privacy Policy describes the practices of the Ohio Hospital Association, its subsidiaries and affiliates (referred to as a group as “OHA”) regarding past and ongoing collection and use of information from visitors to our websites and users of our other Internet services. By visiting an OHA website including but not limited to www.ohiohospitals.org, you are accepting the practices described in this Privacy Policy.

1. Information We Collect and How We Use It

OHA collects information from several sources. Our Web server automatically collects the domain name and Internet Protocol, or IP address for each visitor to our websites. We collect information about the usage of our websites. In addition, we may request or require you to provide personally identifiable information and/or create an account to access certain services or engage in certain activities on a website. The information collected depends on how you choose to use our services and our websites, as detailed below.

A. Commonly Accepted Practices

Information collected may be used for commonly accepted practices, including:

1. Product service fulfillment, such as the use of addresses for shipping and credit card information for payment
2. Sending electronic publications to online subscribers
3. Administration of our websites and monitoring usage of our websites
4. Internal operations, such as the use of identity-verification technologies, and the review of server logs
5. Legal compliance and public purposes, such as subpoena compliance and credit reporting
6. Registration and participation in OHA products, services, and communities
7. Marketing of products and services to you by OHA

B. Information Collected to Create an Account

There are times when OHA may request or require you to create an account with us to obtain certain services. In such cases we may collect user name or ID and password information from you. We use this information to verify users’ identities in order to prevent unauthorized access to users’ personal information.

OHA allows account holders to elect to have the website remember their login information for 90 days so they do not have to log in each time. This is done by checking a box labeled “remember my login information for 90 days” on the login page. This feature requires the placement of a small text file called a cookie (see next section) on the user’s hard drive. The cookie tells the site that the user has logged in before. As part of registering for some of OHA’s products and affiliates, we may collect contact and demographic information such as your name, address, email address, etc. Certain information may be required to complete the registration process.

C. Cookies

Several portions of the OHA websites use cookies. Cookies are small data files that are transferred to your computer through your Web browser. Cookies are used by most websites. We may use cookies, clear gifs, and log file information to: (i) store information so that you will not have to re-enter it during subsequent visits; (ii) provide personalized content on OHA.org and to provide targeted advertising on other sites; (iii) monitor effectiveness of marketing campaigns; (iv) record site analytics such as total number of visitors, pages viewed, etc.; and (v) track your entries, submissions and communications. Certain features of our website require cookies to function properly.

Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. Some OHA website features and services may not function properly if you set your browser to refuse cookies.

D. Email Addresses and Mailing Lists

OHA collects and uses the email addresses and mailing addresses of its members (see Section 2. Members’ Information, below) for purposes of providing membership benefits and services to members. In addition, OHA collects email and mailing addresses in connection with registration for and attendance at conferences, webinars and other events, subscriptions for publications, the purchase of products and services, and in other circumstances.

We may use your e-mail address or other personally identifiable information to send commercial or marketing messages to you regarding OHA’s products or services. In addition, we may also use your name, mailing address, e-mail address, or other personally identifiable information (i) to send commercial or marketing messages on behalf of our affiliated organizations or on behalf of unrelated third parties, and/or (ii) in a mailing list sold to third parties for the marketing of their products and services. For example, we may share contact information you provide when you register for a conference or webinar with conference exhibitors or webinar sponsors so that they may send you commercial messages. You may opt-out of any or all of such disclosures as provided below.

E. Surveys

Our online surveys may ask respondents for contact, demographic and other personally identifiable information. The ways in which such information may be used or disclosed will be described in the survey materials. We also may use contact information from our surveys to send the user information about products and services of OHA, our affiliated organizations and/or unrelated third parties.

F. Information from Other Sources

The information we collect is gathered from several sources. Such sources may include but are not limited to: membership enrollment; conference, webinar, distance learning and other event registration; website visits; newsletter and magazine subscriptions; and product sales. We may combine the information you submit when using one of our services with information (i) collected from your use of other OHA services, (ii) collected by OHA affiliated organizations, or (iii) obtained from third parties. The combined information may be used in a similar manner to any other information we collect.

2. Members’ Information

OHA and its affiliated organizations offer individuals and institutions the opportunity to become members of the OHA and its affiliates. As part of membership enrollment, we may require or ask you for personal or organizational information. We will create a member profile for you using such information and other information collected as described in this Privacy Policy. We may share the information in the member profile created with respect to membership in one OHA organization with other OHA affiliated organizations.

The information you submit as part of your membership may also be used to compile a member directory or a list of persons registered to attend an event (either hardcopy or electronic). Such directories and lists may be shared with other members within a group, other registrants or third parties for marketing of their products and services.

3. Third Party Advertisers and Links

This Privacy Policy applies to OHA websites only. We may allow third-party ad servers or ad networks to serve advertisements within OHA’s websites. These third party ad servers or ad networks use technology to send, directly to your browser, the advertisements and links that appear on the website. They automatically receive your IP address when this happens. They may use other technologies such as cookies, scripting language or clear gifs to measure the effectiveness of their advertisements and to personalize the advertising content you see.

These third parties may view, edit or set their own cookies. They may also collect non- personal and personal information concerning your online activities over time and across different websites. The information they may collect includes the other sites you have visited or applications that you have downloaded to your mobile device, and other information about you or your device to help analyze and serve targeted advertising on the Web Site and elsewhere.

OHA does not provide any personally identifiable information to these third party ad servers or ad networks without your consent or except as part of a specific program or feature for which you will have the ability to opt-in or opt-out.

OHA’s websites and publications contain many links to other websites. In addition, OHA and its affiliates may maintain a presence on third-party sites such as Twitter®, Facebook® or Linked-In®. These other websites may send their own cookies to users, collect data or solicit personal information. OHA is not responsible for the privacy practices or the content of these other websites. Please check with the other sites to review their privacy policies and how they may collect or use information.

OHA websites may contain functionality which enables you to import profile information or contacts from third party services (e.g., LinkedIn, Facebook, Twitter, Gmail, etc.) (collectively, “Third Party Social Media Accounts”). If you choose to do this, you may have to log into the applicable third-party account, using such account’s user name and password. The copy of the information received by us shall be subject to this Privacy Policy. However, any data maintained by or in Third Party Social Media Accounts and by such third-party service and your use of that third party service will be subject to that third party’s terms of use and privacy policy.

4. Information Sharing

In addition to the information sharing described elsewhere in this Privacy Policy, the OHA shares personal information with OHA affiliated organizations and other trusted businesses or persons to perform functions on our behalf. These third parties have access to personal information needed to perform their functions but may not use it for other purposes. In the unlikely event that OHA or one of its affiliated organizations is acquired, or substantially all of the assets of OHA or one of its affiliated organizations are acquired, by a third party either in a sale, bankruptcy court proceeding or otherwise it is possible that personal information of website users and customers would be one of the assets transferred. In such an event, OHA would take reasonable steps to require the third party to maintain our privacy policies and practices.

In addition, OHA may disclose personally identifiable information to third parties, but only:

• To contractors we use to support our business, provided they only use the personally identifiable information for OHA purposes
• To respond to law enforcement requests, where required by applicable laws, court orders, warrants, subpoenas (whether civil or criminal) or governmental regulations
• In situations involving threats to the physical safety of any person
• In connection with joint ventures with third parties
• Is necessary to enforce our rights in connection with the website

5. Information Security

Please understand that no one can give an absolute assurance that information intended to be maintained as private, whether transmitted via the Internet or otherwise, cannot be accessed inappropriately or unlawfully by third parties. It is important for you to protect against unauthorized access to your password and to your computer. Be sure to sign off when finished using a computer. We have taken and will continue to take reasonable steps to ensure the secure and safe transmission of your personal information.

6. Children’s Privacy

The OHA website is not intended for children under 18 years of age. OHA does not knowingly solicit or collect personal information from or about any such children, and OHA does not knowingly market its products or services to any such children. If OHA becomes aware that it has inadvertently received personal information from a user under the age of 18, it will delete such personal information from its records.

7. Changes to Our Privacy Policy

OHA may modify this privacy policy at any time, and any change will be effective immediately upon posting of the modified privacy policy. You agree to review the privacy policy periodically to be aware of such modifications and your continued access or use of the site shall be deemed your conclusive acceptance of the privacy policy, as modified.

If for any reason OHA would like to use the information you have submitted for substantially different purposes other than those outlined at the time you originally submitted your information, OHA will affirmatively request permission from you to use such data for those substantially different purposes prior to using the data.

8. Accessing and Updating Personal Information

You may request access to your personal information, corrections and/or deletions of the same by using the Contact Information set forth below. We will use reasonable, good faith efforts to promptly address your concerns, subject to legal retention obligations and legitimate business needs. When making a request, individual users are asked to identify themselves and the information requested to be accessed, corrected or removed.

We may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, would be extremely impractical, or for which access is not otherwise required. Correcting or removing data is done free of charge to the user unless doing so requires a disproportionate effort. After deleting your information from active servers, copies may remain in our backup system.

9. Contact Information and Opt-Out Requests

We welcome your comments, suggestions, and questions about our Privacy Policy and privacy practices. If you feel that OHA is not following this Privacy Policy, please contact our CIO.