End Stage Renal Disease National Coordinating Center (ESRD NCC) operated by Health Services Advisory Group (HSAG) knows how important privacy is to its online users and is committed to protecting their information and the security of ESRD NCC's websites.
This Privacy and Confidentiality Statement describes how ESRD NCC collects and uses the information received through its web systems. Please review this policy and contact ESRD NCC if you have any questions.
Email: NCCInfo@hsag.com
End Stage Renal Disease National Coordinating Center c/o HSAG | 3133 East Camelback Road, Suite 140, Phoenix, AZ 85016-4545
Information Collection and Use
ESRD NCC collects certain information to help run and maintain its websites. For example, information collected provides general statistics about how people use the websites to help ESRD NCC continually identify areas for improvement.
ESRD NCC will not obtain personally identifying information when users visit the websites, unless they choose to provide such information, such as meeting or portal access or when completing ESRD NCC’s online participation agreements or project-specific commitment forms. While users do not have to provide personal information to visit ESRD NCC’s websites, ESRD NCC’s websites do automatically collect and record certain information about each visitor’s computer hardware and software, including:
- The date and time of the visit.
- The web pages visited.
- The type of computer and browser used.
- The search engine used, as well as the keywords that helped the visitor find the website.
- The country where the visitor’s computer is located.
ESRD NCC is the sole owner of all information collected on its websites. ESRD NCC does not sell, trade, or rent user information to other organizations, groups, or entities. Though, information collected on ESRD NCC’s websites may be shared with government agencies, when contractually required.
IP Address Log Files
ESRD NCC collects and uses IP addresses to analyze trends, administer the site, track user's movements, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information, except when the user has chosen to provide personally identifying information when registering for meetings or portal access, or when completing ESRD NCC's online participation agreements or project-specific commitment forms. They can, however, be resolved to identify the name of the organization that owns the IP address.
Meeting Registration and Use
ESRD NCC offers online registration for some professional meetings. Users are required to provide contact information during registration. This information may include name, credentials, organization, and email. ESRD NCC uses this information to register users for meetings, contact users about meeting news and updates, and to potentially contact the user about future, related ESRD NCC meetings and activities. Required information fields for registration on the meeting website are clearly marked; all other fields are optional.
Participation Agreements and Project-Specific Commitment Forms
ESRD NCC offers online participation agreements or project-specific commitment forms that partners may complete on ESRD NCC's website. Users are required to provide contact information during completion of these agreements and forms. This information may include name, credentials, organization, and email. ESRD NCC uses this information to sign users up for participation in quality improvement initiatives and specific projects, and potentially contact the user about future, related ESRD NCC initiatives and projects. Required information fields for participation agreements and project-specific commitments on the website are clearly marked; all other fields are optional.
Portal Registration and Use
Registration is also required for access to secure, project-specific online portals maintained by ESRD NCC. This information is used to verify the identity of the requesting user and may be used to issue user names and passwords. All portals are secured by passwords and cannot be accessed by unauthorized personnel. Please keep your password confidential. Do not share it with outside entities. In order to ensure your privacy, immediately notify ESRD NCC if an employee with access to a portal leaves your agency.
When registering for, or logging in to, a secure portal, information is encrypted and protected with industry standard SSL technology. While on a secure page, the lock icon on the bottom of web browsers, such as Microsoft Internet Explorer, becomes locked.
The Use of Cookies
A cookie is a small text file websites place on a hard drive to help remind a website who you are and to add convenience to your visit. For example, returning users registering for an event will have their information preloaded on registration forms based on previous visits to the web page. Users can accept or decline cookies. Users who reject cookies can still be able to use the websites; however, some areas of the website may be limited. For example, users may not receive custom information from the website or have their information preloaded into registration forms.
Every attempt is made to protect personal information that is shared with ESRD NCC. However, non-encrypted electronic mail is at risk of being accessed and viewed by other users without your knowledge and permission. Do not use email for any confidential information. ESRD NCC is not responsible for the security of email communications. To protect privacy, users may send confidential information through postal mail to ESRD NCC.
Information Sharing
ESRD NCC may share information about the use and engagement of its websites with some of its customers, such as the Centers for Medicare & Medicaid Services (CMS) and some state governments. ESRD NCC does not provide personally identifiable information in these reports, which are generally used for verifying the level and type of use of ESRD NCC websites.
Links
ESRD NCC websites contain many links to other sites. ESRD NCC is not responsible for the privacy practices of other sites. Users should be aware when they leave the ESRD NCC website and should read the privacy statement of each website that collects personally identifiable information. This privacy statement applies solely to information collected by ESRD NCC websites.
Information Security
SSL encryption is used to protect sensitive information online. ESRD NCC servers are kept in a secure, restricted-access environment. Robust encryption technology/protocols are in place to ensure the security of user information. Ongoing training on security and privacy practices is provided to ESRD NCC staff members.
Notification of Changes
ESRD NCC reserves the right to amend this policy, as necessary, without prior notice. Any changes to the privacy policy will be posted on the website so users are always aware of what information is collected, how it is used, and under what circumstances, if any, it is disclosed. If, at any point, a decision is made to use personally identifiable information in a manner different from that stated at the time it was collected, ESRD NCC will notify users by way of email. Users will have the choice as to whether or not to give ESRD NCC permission to user their information in this different manner. Unless specific information is given, ESRD NCC will use information in accordance with the privacy policy under which information was collected.
For an Adobe Acrobat Reader formatted copy of this Privacy Policy, click here.