PRIVACY POLICY - imagineRio

1. This Privacy Policy governs the conditions for use of Your personal data so that imagineRio can provide You with the Services safely and in a dependable fashion.

2. Before using the Services, You must read and fully agree to the terms of this Privacy Policy. IF YOU DISAGREE WITH ANY TERMS OF THIS PRIVACY POLICY DO NOT USE THE SERVICES. WHEN YOU USE THE SERVICES, YOU ARE EXPRESSING YOUR CONSENT TO THE RULES AND CONDITIONS HEREIN SET FORTH.

WHAT DATA WE COLLECT, HOW WE USE IT AND FOR WHAT PURPOSE

3. To use the Services, You will have to create an account that contains some personal data necessary for identification. You will also need to create Your username and password to log on to the platform and utilize the Services.

4. The data provided by You when creating an account can be accessed by ImagineRio at any time for the following purposes:
   4.1 to safeguard the credibility, reliability and safety of the Services;
   4.2 to check for compliance with the Terms of Use, this Privacy Policy or other applicable legislation;
   4.3. to ensure that ImagineRio’s rights and those of its users are protected and to investigate any suspicious acts that may be interpreted as abuse, fraud or as violating the Terms of Use, this Privacy Policy or other applicable legislation;
   4.4. to adopt preventive measures to curb abusive or fraudulent acts;
   4.5. to help users in legitimate requests for assistance

5. We may collect other personal data as a safety measure to ensure access to or recovery of your account such as the e-mail address provided during registration and Your phone number if provided during registration. Accessing this information may be necessary to guarantee the recovery of your profile in case You forget or lose Your password. ImagineRio may also use the e-mail address provided during registration to forward You information concerning its communications, Your activities on the platform or to share relevant events with You in any way, for example, to inform You of any changes to the Terms of Use or this Privacy Policy. You will be able to control the extent of these communications under the “settings” option in your profile.

6. Some functionalities of the Services will require the use of some of Your personal data, such as your username, for example, when identifying Your comments on discussion forums or when identifying content You have uploaded to the platform.

7. When uploading content that You have created, the name, pseudonym or any other identifying marks provided by You when uploading the content will be exhibited on the Services in association with such content. When uploading content of third-party authorship, You will need prior approval from the authors to upload such content which must contain express consent of the authors to the inclusion of their names on the platform as authors of the content, to the maximum extent possible, as defined in the Terms of Use.

8. Your username, comments and uploaded content will always be publicly available on the platform and anyone anywhere in the world will be able to search and access it.

9. Your personal data will never be sold by ImagineRio to third parties.

DATA SHARING

10. Your personal data and information may be shared by ImagineRio with associated entities such as affiliates, subsidiaries and other companies from the same group, as well as with other partners such as service providers and outside consultants, to improve the technologies applied to the platform, its security measures and/or user experience, whenever such data is not able to be deidentified from the content or posts shared for academic or research purposes.

11. In the abovementioned instance, ImagineRio will use its best efforts to engage partners committed to complying with the same level of strictness in its data protection policies as delineated in this Privacy Policy and that have in place appropriate safety and technological measures to do so. You can access a list of ImagineRio’s partners at [imaginerio.org/providers].

12. Your data and information may also be shared with the competent agencies or authorities to avoid legal liabilities, preserve and exercise rights and obligations, allow inquiries concerning violations of the Terms of Use, this Privacy Policy and applicable laws, comply with court orders, administrative or regulatory demands and with any other competent jurisdiction, according to applicable legislation or international treatises.

13. If any third-party websites or links are included in the platform, YOU MUST READ AND AGREE TO THEIR RESPECTIVE PRIVACY POLICIES BEFORE USING THEIR SERVICES AND SUBMITTING ANY PERSONAL INFORMATION. IMAGINERIO IS NOT RESPONSIBLE FOR OR LIABLE UNDER THE TERMS OF THIRD-PARTY WEBSITES PRIVACY POLICIES.

14. By adhering to this Privacy Policy, you declare that you are aware that ImagineRio’s partners and service providers that may have access to your personal data have privacy policies of their own. By utilizing the Services you agree with the respective abovementioned privacy policies, whose list may be accessed at [imaginerio.org/privacy].

YOUR RIGHTS

15. ACCESS AND APPROVAL OF PERSONAL DATA: Your personal data will be available in the “settings” option on Your profile and you will be able to generate reports on the data that has been collected which should always correspond with the information you have provided on Your profile, considering ImagineRio will not collect other personal information. These reports will allow You to transfer Your information to third parties, under Your discretion.

16. DELETION OF PERSONAL DATA: in the event You disagree with any data previously informed to use the Services, you will be able to delete your account.

17. OBJECTION TO DATA PROCESSING AND WITHDRAWAL OF CONSENT: At any time, You may withdraw Your consent to the processing of personal data concerning the Services or request the complete of any processing previously authorized or identified during the Services by deleting Your account.

18. CONSEQUENCES IN REFUSING TO PROVIDE DATA: Since ImagineRio will collect solely those personal data necessary for the operation of Services the consequences in refusing to provide them would be the impossibility to use the Services.

19. The maximum extent of any information or reports made available to You will comply with the applicable legislation concerning ImagineRio’s trade secrets or confidential information as well as its partners and applicable third parties. ImagineRio reserves the right to not provide such information to You.

PERIOD OF USE

20. Your personal information, including the comments posted on discussion forums, will be retained for the time necessary to provide You with the Services, or for the longest period legally allowed.

21. The deletion of Your account will take place immediately after Your request. Your personal data, including comments posted on discussion forums, may be removed within 7 days, according to the applicable legislation.

22. ImagineRio may retain any personal data or comments after the end of the Services – always in an anonymous fashion – if it deems, in good faith, that such retention is necessary to prevent any legal liabilities, preserve rights and obey court orders or any other demands from the competent authorities.

23. According to item 5.3 of the Terms of Use, any content uploaded by You on the platform will be under an irrevocable and definitive license. This means ImagineRio will not delete the content You have uploaded if You decide to delete Your account and that it will maintain the rights to sublicense such content to partners, other users and third parties since ImagineRio will not have any control over the circulation of the content. If any of the content You have uploaded contains any personal information or data, ImagineRio will not be in any way liable for any damages nor responsible for removing such content from the platform. The inclusion of the author’s name, however, may be legally required under certain local legislation.

PLACE OF DATA STORAGE

24. As a condition necessary to provide the Services globally, the information collected by ImagineRio will be transferred to the United States of America and stored in servers located at Rice University in Texas.

25. For information related to the collection, use, and disclosure of personal information provided to Rice University by individuals who are located in the European Economic Area please consult Rice University’s Data Protection Officer at [rice.edu/gdpr].

SAFETY AND EVENTS

26. ImagineRio employs technical, administrative and organizational security measures that aim to protect Your personal data, according to the terms of this Privacy Policy.

27. These safety measures are to be understood as the greatest possible efforts expected from ImagineRio to protect Your data and these measures may be revised, corrected or improved at any time. An example of such safety measures is that password fields do not store the value they are supplied. The value is run through the bcrypt algorithm to generate a hash which is stored instead.

28. Even if ImagineRio’s safety measures are adequate, the diffusion of information on the internet is never completely safe. THEREFORE, WHEN MAKING YOUR PERSONAL DATA AVAILABLE ON THE PLATFORM YOU ARE DELIBERATELY AND CONSCIOUSLY ASSUMING THE RESPECTIVE RISKS.

29. In the event of any security breach that may cause losses or jeopardize You or other users in any relevant way, ImagineRio will use commercially reasonable efforts to remedy, revert or mitigate such risks or losses, as well as inform the competent authorities, according to any applicable legislation, or other authorities ImagineRio considers necessary, in good faith, at its sole discretion, to remedy the situation.

COOKIES

30. ImagineRio uses cookies and similar technologies, namely files that collect Your information automatically, for specific purposes that will be duly informed to You when You first access the Services. The cookies will be submitted for Your prior and express consent and authorization. Any future change on the cookies will be notified to you in advance and submitted for Your express consent and authorization.

31. BY USING THE SERVICES YOU AGREE TO THE USE OF COOKIES BY IMAGINERIO. Otherwise, You can disable our cookies, at any time, according to the settings of Your web browser. ImagineRio will not be liable for any issue exclusively resulting from Your web browser. Once You disable our cookies You will not have access to certain functionalities of the platform.

CHANGES ON PRIVACY POLICY

32. This Privacy Policy may be updated and changed from time to time and ImagineRio will use its best efforts to notify you prior to any changes, through the platform or the contact information available on your profile. If you do not agree with any changes, you will be able to cancel your account or profile.

ADDITIONAL CONDITIONS TO BRAZILIAN RESIDENTS

33. If You are between 16 and 18 years old and are in Brazil, You must be assisted by Your parents or legal guardians to use the Services or to create an account. In this case, by using the Services, You automatically declare that You are doing so under Your parents’ or legal guardians’ assistance. If You are between 13 and 16 years old, You must use the Services and create an account only through the representation of Your parents or legal guardians by means of their express consent to this Privacy Policy and the Terms of Use.

34. ImagineRio shall maintain Your access log in confidentiality in a controlled and safe environment for a period of 6 (six) months.

35. A version of this Privacy Policy will be made available in Portuguese. In case of doubts or conflicts between versions in other languages, the English version will prevail.

CONTACTS, QUESTIONS, AND CONCERNS

36. Should You need any further clarification on the processing of Your personal data or in case You want to forward any related complaint, please contact ImagineRio at imaginerio@rice.edu.

37. In case You are resident in Brazil, whenever You need to address Your concerns related to data privacy, please contact Rice University’s Data Protection Officer at gdpr@rice.edu.

38. The party responsible for the processing of Your data is Rice University.