This Privacy & Cookies Statement explains how The Joint Commission, The Joint Commission Resources, Inc. (JCR) with its division Joint Commission International, and the Joint Commission Center for Transforming Healthcare ("Center") (collectively, "The Joint Commission,") (with contact details below) collects, uses, shares, and otherwise processes individually identifiable data obtained about visitors to our website, as well as contact persons for our customers, distributors, sales representatives, end users, and suppliers ("Personal Information"). This Privacy & Cookies Statement pertains to Personal Information that we collect through our public websites, mobile applications, and other online properties (each, a “Site”) as well as through trade shows and offline means.
Summary of Key Points
||As a business to business ("B2B") organization, we collect name, contact details, and other Personal Information related to our commercial relationships. Click here to learn more..
||We use Personal Information to perform transactions and respond to inquiries, to manage accounts and maintain business operations, to provide relevant marketing, and to fulfill other business and compliance purposes. Click here to learn more.
||We share Personal Information as necessary to perform transactions and respond to requests, and to fulfill other business and compliance purposes. Click here to learn more.
||You have control on how we use Personal Information for marketing. Click here to learn more.
|Cookies and tracking
|Data subject rights
||You have certain rights to request access, rectification, deletion, objection, or other actions regarding your Personal Information where required by applicable law. Click here to learn more.
||We maintain technical and organizational measures to protect Personal Information from loss, misuse, alteration, or unintentional destruction of Personal Data. Click here to learn more.
|Cross-border data transfers
||We provide appropriate protections for cross-border transfers where specified by law. Click here to learn more.
||We provide other information in this Privacy & Cookies Statement about: (i) the legal basis for our collection and processing of Personal Information, (ii) the consequences for not providing Personal Information, (iii) automated decision-making, (iv) do-not-track (DNT) signals, (v) data retention, (vi) links to third party websites, (vii) employee and contractor issues; and (viii) changes to this Privacy & Cookies Statement. Click here to learn more.
||Please contact us as detailed below with any questions. Click here to learn more.
Collection of Personal Information
We collect the following categories of Personal Information about Site visitors, customers, distributors, sales representatives, end users, and suppliers:
|Basic data: Name, title, company, job responsibilities, phone number, mailing address, email address, and contact details.
||Compliance data: Government identifiers, passports, beneficial ownership data, and due diligence data.
|Registration data: Newsletter requests, subscriptions, downloads, and username/passwords.
||Job applicant data: Data provided by job applicants or others on our Sites or offline means in connection with employment opportunities.
Transaction data: Transaction history, payment details, and performance data.
Marketing data: Data about individual participation in trade shows and conferences, credentials, associations, product interests, and preferences.
|Device data: Computer Internet Protocol (IP) address, unique device identifier (UDID), cookies and other data linked to a device, and data about usage of our Sites (Usage Data). Note, however, we do not consider Device Data to be Personal Information except where we link it to you as individual or where applicable law provides otherwise.
Specific Collection Points of Personal Information:
When you visit our Site we may ask you for any of the above information. We may also ask you to create a password for your account and to provide demographic data in certain circumstances as described below. The specific areas where Personal Information is collected are as follows:
- Websites: There are places on each of the following Sites where information is collected when you sign up to received information about the services and products.
- Webstore: Each individual who creates a webstore account to become a registered customer and purchase products or services will have a username and password. For reasons of security and privacy, as a user, you are responsible for not sharing your username and password. As a registered customer you can purchase products and/or services, access your web order history and reorder, create and maintain your own address book, manage a wish list that you can send to friends, setup reminders, request e-mail announcements, view saved orders and expedite your checkout process. We will capture and retain email address, name, accredited organization affiliation, professional title (optional), company (optional), country, billing address, shipping address and phone number to accurately process your order.
- E-mail alerts/Newsletters and Journals: You can sign up to receive e-mail alerts, newsletters or journals. We capture and retain name, organization and e-mail address to provide the information you specifically request.
- Public Comment on Standards/Measures: Periodically, The Joint Commission seeks public comment on draft standards, performance measures or other matters. This is usually accomplished through the use of an electronic survey tool. In order to validate the comment, The Joint Commission requests some demographic information in the survey. Completion of this section is optional to you. Should you submit the requested demographic data this information will be retained until no longer necessary for the purpose of the study.
- Registration to the Joint Commission Connect or JCI Direct Connect Extranets: Each individual who registers to use the Joint Commission Connect will have a user name and password. For reasons of security and privacy, as a user, you are responsible for not sharing your user name and password. For additional information about Joint Commission Connect see Log in Help.
- Blogs/News and Discussion Boards: If you sign-up to participate on blogs and discussion boards, we capture name and e-mail address to allow posting of comments to the Site.
- Speakers Bureau Form: By completing the electronic form to retain a Joint Commission speaker, you provide name, e-mail address, city, state, zip and phone. This information is captured and retained for securing Joint Commission Speakers.
- Events/Podcasts/Audio-conferences: If you chose to sign-up for any event, podcast or audio-conference, we will capture and retain the name and e-mail address for registration.
- Business Development: If you complete the registration form requesting additional information about an accreditation or certification program, we capture and retain the name of the individual, the organization, the e-mail address and demographic data for the purpose of responding to your questions on accreditation and/or certification. This information is not shared outside The Joint Commission.
- Tools and online applications: Through the website Center offers online applications (TST® and ORO 2.0®) freely available to accredited organizations where user’s name, password and email address are collected for the purpose of facilitating your use of the tool. There are application specific privacy statements available on each. JCR has several online applications available for purchase (Tracers with AMP™, ECM®Plus, CMSAccess®, and E-dition®) each which collect user name, password and email addresses for the purposes of facilitating use of the tool.
We may use your Personal Information to provide you with information of interest and other marketing communications via email. You may opt-out of receiving such marketing communications at any time through the use of the subscription center or by contacting us at (http://info.jcrinc.com/Subscription-Center_JCI.html) or by responding to the instructions in any marketing communication.
Top of Page
Use of Personal Information
The purposes for which we use Personal Information which is collected as identified above are as follows:
- To perform transactions and respond to inquiries we use basic data, registration data, transaction data, and device data.
- To manage accounts and maintain business operations we use basic data, registration data, transaction data, and device data.
- To make our Sites more intuitive and easy to use we use device data.
- To protect the security and effective functioning of our Sites and information technology systems we use basic data, registration data, transaction data, and device data.
- To provide relevant marketing we use marketing data, basic data, registration data, transaction data, and device data.
- To address compliance and legal obligations we use compliance data, basic data, registration data, transaction data, and device data.
- To consider individuals for employment and contractor opportunities and manage on-boarding procedures we use job applicant data and compliance data.
Top of Page
Sharing of Personal Information
We share Personal Information with the following categories of recipients:
- Affiliates: We share Personal Information within the Company group of affiliated companies as necessary for the purposes identified above. The list of affiliates within the Company group includes; The Joint Commission, The Joint Commission Resources, Inc. (JCR) with its division Joint Commission International (JCI), and the Joint Commission Center for Transforming Healthcare (Center) (with contact details for each provided below).
- Distributors and sales representatives: We share Personal Information with distributors and sales representatives in order to: perform transactions and respond to inquiries; manage accounts and maintain our business operations; provide relevant marketing; and address compliance and legal obligations.
- Suppliers and service providers: We share Personal Information with suppliers and service providers to enable such parties to perform functions on our behalf and under our instructions in order to carry out the purposes identified above. We require such parties by contract to provide reasonable security for Personal Data and to use and process such Personal Information on our behalf only.
- Auditors, advisors, and financial institutions: We share Personal Information with auditors for the performance of audit functions, with advisors for the provision of legal and other advice, and with financial institutions in connection with payment and other transactions.
- Mandatory disclosures and legal claims: We share Personal Information in order to comply with any subpoena, court order or other legal process, or other governmental request. We also share Personal Data to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others, or to defend against legal claims.
- Contractors: We may disclose Personal Information to contractors to help us support our Site or perform other functions on our behalf. We require such parties by contract to only access Personal Information to the extent needed to provide the functions on our behalf, to maintain appropriate security controls to protect the data, and to use the data for the purposes specified in the agreement.
We do not sell your Personal Information for purposes of allowing others to use such information for their own marketing purposes. If you have questions about the parties with which we share Personal Information, please contact us as specified below.
De-Identified Aggregate Data
We may also use the information you provide in a de-identified format as to both individual and organization, for research, quality improvement, or benchmarking purposes, and may provide this information in the aggregate to third parties. For example we might inform other users regarding the number of users to the Site.
Top of Page
You have control regarding our use of Personal Information for directing marketing. If you no longer wish to receive any marketing communications, remain on a mailing list to which you previously subscribed, or receive any other marketing communication, you can choose to not receive such communications at any time. Please follow the unsubscribe link in the relevant communication, visit the Subscription Center (http://info.jcrinc.com/Subscription-Center_JCI.html) or contact us as per below.
Top of Page
Cookies and Tracking
We may collect information about your browser and usage activity on our Site using cookies, web beacons, and other technologies. In particular, we may obtain: the IP address of the computer you are using; the name of the domain you use to access the Internet (e.g., gmail.com); the date, time and length of your visit, device, browser, and the pages you visited. We use this information in order to present relevant content to a user for both marketing and informational value, to assist with diagnosing and solving problems with our server, and to assist with the administration of our Site.
Cookies on our Sites are generally divided into the following categories:
- Strictly Necessary Cookies: These are required for the operation of our Sites. They include, for example, cookies that enable you to log into secure areas. These cookies are session cookies that are erased when you close your browser.
- Functional Cookies: These improve the functional performance of our Sites and make it easier for you to use. For example, cookies are used to remember that you have previously visited the Sites and asked to remain logged into it. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Sites. You can delete these cookies via your browser settings.
- Targeting Cookies: These record your visit to our Sites, the pages you have visited and the links you have followed to recognize you as a previous visitor and to track your activity on the Sites and other websites you visit. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Sites. You can delete these cookies via your browser settings. See below for further details on how you can control third party targeting cookies.
Below is a summary of our cookies, trackers, and analytics technologies.
||The Joint Commission
||The Joint Commission, JCR, JCI, WHS
||The Joint Commission, JCI, CTH
||JCR, JCI, WHS
|Google AdWords Conversion
||The Joint Commission, JCR, JCI, QC, CTH, WHS
|Google Tag Manager
||The Joint Commission, JCR, JCI, CTH
||The Joint Commission, JCR
||The Joint Commission, JCR, JCI
||The Joint Commission, JCR, JCI
Control Over Cookies
You can review your internet browser settings, typically under “Help” or “Internet Options” to exercise choices you have for Cookies on your computer or device.
Where required by applicable law, you have the right to obtain confirmation of the existence of certain Personal Information relating to you, to verify its content, origin, and accuracy, as well as the right to access, review, obtain a copy, port, delete, or to block, or withdraw consent to the processing of certain Personal Information (without affecting the lawfulness of processing based on consent before its withdrawal), by contacting us as detailed below. Additionally, you have the right to object to our use of Personal Information for direct marketing and in certain other situations at any time. Contact us below for more details. Please note that we need to retain certain Personal Information as required or permitted by applicable law.
We maintain technical and organizational measures in place to protect Personal Information from loss, misuse, alteration or unintentional destruction. Although we make every reasonable attempt to secure your information, there is always some risk in transmitting information across the internet. No security measure can guarantee against compromise. We cannot guarantee that the Personal Information we collect will never be disclosed in some manner not consistent with this Privacy & Cookies Statement. We also cannot protect against any misuse, loss, or alteration of any user-editable content. You also have an important role in in protecting Personal Information. You should not share your username and password with anyone, and you should not re-use passwords across more than one Sites. If you have any reason to believe that your username or password has been compromised, please contact us as detailed below.
Cross-Border Data Transfers
We transfer Personal Information to jurisdictions as necessary for the purposes described above, including to jurisdictions that may not provide the same level of data protection as your home country. In particular, if you reside outside the United States ("US"), you should note that The Joint Commission is a controller that operates this Site in the US and therefore maintains Personal Information in the US. Regarding transfers from the European Economic Area ("EEA") to the United States, we rely on the derogations for transfers which are necessary to perform the transaction with you and other grounds. We also implement standard contractual clauses approved by the European Commission, and other appropriate solutions to address cross-border transfers as required or permitted by Articles 46 and 49 of the General Data Protection Regulation. Where required by law, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below. If you reside in other non-US jurisdictions outside the EEA, your use of the Site or provision of any Personal Information constitutes your consent for the transfer of such data to the United States for the purposes identified above. If you have questions about cross-border transfers, please contact us as detailed below. You may also have rights to contact your local supervisory with any questions.
(i) What is the legal basis of processing?
Some jurisdictions require an explanation of the legal basis for the collection and processing of Personal Information. We have several different legal grounds on which we collect and process Personal Information, including: (a) as necessary to perform a transaction (such as when we respond to your requests); (b) as necessary to comply with a legal obligation (such as when we use Personal Information for record keeping to substantiate tax liability); (c) consent (where you have provided consent as appropriate under applicable law); and (d) necessary for legitimate interests (such as when we act to maintain our business generally). With respect to legitimate interests, given that we are a B2B company, we typically collect and process limited Personal Information about customer contacts and other individuals acting in their business capacities, as part of our overall effort to reduce the privacy impact on individuals.
(ii) What are the consequences of not providing Personal Information?
You are not required to provide all Personal Information identified in this Privacy & Cookies Statement to use our Sites or to interact with us offline, but certain functionality will not be available if you do not provide Personal Information. If you do not provide Personal Information, we may not be able to respond to your request, perform a transaction with you, or provide you with marketing that we believe you would find valuable.
(iii) Do we engage in automated decision-making without human intervention?
We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
(iv) Do the Sites honor do not track ("DNT") signals sent via browsers?
Given the divergent practices of organizations that offer browsers and the lack of a standard in the marketplace, we generally do not respond to DNT signals at this time.
(v) How long do we retain Personal Information?
We typically retain Personal Information related to marketing activities for as long as you accept marketing communications from us, and we will securely delete such data in accordance with applicable law upon request. For Personal Information that we collect and process for other purposes, we typically retain such Personal Information for no longer than for the period necessary to fulfill the purposes outlined in this Privacy & Cookies Statement and as otherwise specified in applicable record retention policies and procedures.
(vi) Are third party websites governed by this Privacy & Cookies Statement?
This Site contains links and references to other websites administered by unaffiliated third parties. This Privacy & Cookies Statement does not apply to such third party websites. When you click a link to visit a third party websites, you will be subject to that websites' privacy practices. We encourage you to familiarize yourself with the privacy and security practices of the linked third party websites before providing any Personal Information on that websites.
(vii) How does the Company handle employee and contractor privacy issues?
Personal Data about our employees and contractors are addressed through internal company policies and procedures, and are outside the scope of this Privacy & Cookies Statement.
(viii) How will we handle any changes to this Privacy & Cookies Statement?
We may update this Privacy & Cookies Statement from time to time as our services and privacy practices change, or as required by law. The effective date of our Privacy & Cookies Statement is posted below, and we encourage you to visit our Sites periodically to stay informed about our privacy practices. We will post the updated version of the Privacy & Cookies Statement on our Sites, and ask for your consent to the changes if legally required.
Children Under Age 18
While the content of our website may be suitable for an audience of any age, the Site is not designed for children and we do not knowingly collect, use or disclose any personally identifiable information from those under the age of 18, without the consent of a parent or guardian. By accessing and using our Site, you hereby represent that you are at least 18 years of age.
Top of Page
For questions about this policy or concerns please send an email to firstname.lastname@example.org. If you wish to file a complaint, you may send an email to email@example.com.
The names and addresses of The Joint Commission entities are as follows:
The Joint Commission (Headquarters)
One Renaissance Blvd.
Oakbrook Terrace, IL 60181-4294 Main Phone: (630) 792-5000
Main Fax: (630) 792-5005
Customer Service Phone: (630) 792-5800
Joint Commission Resources, Inc. (JCR) and Joint Commission International (JCI)
1515 West 22nd St.
Oak Brook, IL 60523-2000
Main Phone: (630) 268-7400
Main Fax: (630) 268-7405
Center for Transforming Healthcare
One Renaissance Blvd.
Oakbrook Terrace, IL 60181-4294 Main Phone: (630) 792-5100
Last Updated: 18 May 2018