Privacy Notice

DATED 2021-01-01 · VERSION 20210607_rev01 · COMPARED WITH 20210502_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20210502_rev01 to 20210607_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 If we rely on your consent for us to use your personal information in a particular way, but you later change your mind, you may withdraw your consent by visiting your profile page and clicking the box to remove consent and we will stop doing so. If you withdraw your consent, this may impact the ability for us to provide some of our Services to you.
 ## What Information We Collect
 We gather two types of information about users through the Site:
+- **Information relating to your use of our Site.** When users come to our Site, we may track, collect, and aggregate information indicating, among other things, which pages of our Site were visited, the order in which they were visited, when they were visited, and which hyperlinks were clicked. We also collect information from the URLs from which you linked to our Site. Collecting such information may involve logging the IP address, operating system, and browser software used by each user of the Site. We may be able to determine from an IP address a user's Internet Service Provider and the geographic location of their point of connectivity. Location data may be used to route your traffic to the nearest regional server to reduce latency and improve your experience. We may also use cookies and web beacons when you visit our Site. For more information on our use of cookies and web beacons, please refer to our [Cookies Policy](https://www.coursera.org/about/cookies).
+. **Information relating to your use of our Site.** When users come to our Site, we may track, collect, and aggregate information indicating, among other things, which pages of our Site were visited, the order in which they were visited, when they were visited, and which hyperlinks were clicked. We also collect information from the URLs from which you linked to our Site. Collecting such information may involve logging the IP address, operating system, and browser software used by each user of the Site. We may be able to determine from an IP address a user's Internet Service Provider and the geographic location of their point of connectivity. Location data may be used to route your traffic to the nearest regional server to reduce latency and improve your experience. We may also use cookies and web beacons when you visit our Site. For more information on our use of cookies and web beacons, please refer to our [Cookies Policy](https://www.coursera.org/about/cookies).
+- **Personal Data provided directly by you or via third parties.** We collect Personal Data that you provide to us when you register for an account, update or change information for your account, purchase products or Services, complete a survey, sign-up for email updates, participate in our public forums, send us email messages, and/or participate in Content Offerings or other Services on our Site. We may use the Personal Data that you provide to respond to your questions, provide you the specific Content Offering and/or Services you select, send you updates about Content Offerings or other Coursera events, and send you email messages about Site maintenance or updates.
+. **Personal Data provided directly by you or via third parties.** We collect Personal Data that you provide to us when you register for an account, update or change information for your account, purchase products or Services, complete a survey, sign-up for email updates, participate in our public forums, send us email messages, and/or participate in Content Offerings or other Services on our Site. We may use the Personal Data that you provide to respond to your questions, provide you the specific Content Offering and/or Services you select, send you updates about Content Offerings or other Coursera events, and send you email messages about Site maintenance or updates.
 - Account Registration. If you register for an account on our Site, you may be required to provide us with Personal Data such as your name and email address.
 - Updates. Coursera may offer you the ability to receive updates either via email or by posting on portions of the Site only accessible to registered users. In order to subscribe to these Services, you may be required to provide us with Personal Data such as your name and email address.
 - Forums. Coursera may offer public forums from time to time (the "Forums") where you can share comments and thoughts. In order to participate in the Forums, you may be required to register with us and/or provide us with Personal Data such as your name and email address. Please keep in mind that information you post or make available in Forums will be publicly available. You should not include any personal information or other information of a personal or sensitive nature, whether relating to you or another person, in a Forum post. Please also reference our Terms of Use and our [Code of Conduct](https://learner.coursera.help/hc/en-us/articles/208280036-Coursera-Code-of-Conduct) for additional information about proper use of our Forums.
 - Participation in Content Offerings. Coursera offers users the opportunity to participate in Content Offerings on or through the Site. If you desire to participate in a Content Offering, you will be asked to provide us with certain information necessary to conduct such a Content Offering. This information may include, among other things, your name and email address.
 - Surveys. We may receive Personal Data when you provide information in response to a survey operated by us or a Content Provider.
 - Partner sites. Partner sites providing Content Offering-related tools and services to Coursera users may collect nonfinancial individual-level user data regarding the individual's use of that partner site while the partner sites provide those services to Coursera. The partner sites may share that data with Coursera for the purpose of improving our Services, the partner site's services, and the individual's education experience. This data includes information such as the amount of time spent on the partner site and pages viewed.
 - Third Party Payment Processing. Coursera provides you with the ability to pay for Content Offerings and other Services using a credit card or other methods through a third party payment processing service provider. Please note that our service provider - not Coursera - collects and processes your financial information.
 ## How We Use the Information
+- **Information relating to your use of our Site.** We use information relating to your use of the Site to build higher quality, more useful Services by performing statistical analyses of the collective characteristics and behavior of our users, and by measuring demographics and interests regarding specific areas of our Site. We may also use this information to ensure the security of our Services and the Site.
+- **Personally Identifiable Information provided directly by you or via third parties.** Except as set forth in this Privacy Notice or as specifically agreed to by you, Coursera will not disclose any of your Personal Data. In addition to the other uses set forth in this Privacy Notice, we may disclose and otherwise use Personal Data as described below.
+. **Information relating to your use of our Site.** We use information relating to your use of the Site to build higher quality, more useful Services by performing statistical analyses of the collective characteristics and behavior of our users, and by measuring demographics and interests regarding specific areas of our Site. We may also use this information to ensure the security of our Services and the Site.
+. **Personally Identifiable Information provided directly by you or via third parties.** Except as set forth in this Privacy Notice or as specifically agreed to by you, Coursera will not disclose any of your Personal Data. In addition to the other uses set forth in this Privacy Notice, we may disclose and otherwise use Personal Data as described below.
 - Providing the Site and our Services. We use Personal Data which you provide to us in order to allow you to access and use the Site and in order to provide any information, products, or Services that you request from us.
 - Technical support and security. We may use Personal Data to provide technical support to you, where required, and to ensure the security of our Services and the Site.
 - Updates. We use Personal Data collected when you sign-up for our various email or update services to send you the messages in connection with the Site or Content Offerings. We may also archive this information and/or use it for future communications with you, where we are legally entitled to do so.
 When we use the term "Sensitive Personal Information" in this Privacy Shield Notice, we are referring to a particular subset of an individual's Personal Information that provides details of his or her race, ethnic origin, sexual orientation, political opinions, religious or philosophical beliefs, or trade union membership or that concerns his or her health.
 The purpose of this Privacy Shield Notice is to outline our general practices for implementing the Principles with respect to the Personal Information we collect. If you would like to obtain additional information regarding our privacy practices in connection with information collected on this website in general, please refer to our online Privacy Notice.
 ## Principles.
+- **Notice**. We will provide you with timely and appropriate notice in our Terms of Use and Privacy Notice, describing what Personal Information we are collecting, how we will use that information, and the types of third parties with whom we may share such information (and the reasons we do so). Please review these documents carefully. Where we process personal data on behalf of our business partners, we will work with them to help them provide appropriate notice to you.
+. **Notice**. We will provide you with timely and appropriate notice in our Terms of Use and Privacy Notice, describing what Personal Information we are collecting, how we will use that information, and the types of third parties with whom we may share such information (and the reasons we do so). Please review these documents carefully. Where we process personal data on behalf of our business partners, we will work with them to help them provide appropriate notice to you.
+- **Choice**. We will offer you the opportunity to opt-out of your Personal Information (or to provide explicit consent for Sensitive Personal Information) being: (i) disclosed to a third party (other than a service provider as set forth below); or (ii) used for a purpose materially different from the purpose for which it was originally collected (as set out in our Privacy Notice), or subsequently authorized by you, when the circumstances arise. You also have the ability to opt out at any time from the use of your Personal Information for direct marketing purposes. To exercise this right, please check your settings options. If you have further questions related to the above, you can also contact us at [privacyshield@coursera.org](mailto:privacyshield@coursera.org).
+. **Choice**. We will offer you the opportunity to opt-out of your Personal Information (or to provide explicit consent for Sensitive Personal Information) being: (i) disclosed to a third party (other than a service provider as set forth below); or (ii) used for a purpose materially different from the purpose for which it was originally collected (as set out in our Privacy Notice), or subsequently authorized by you, when the circumstances arise. You also have the ability to opt out at any time from the use of your Personal Information for direct marketing purposes. To exercise this right, please check your settings options. If you have further questions related to the above, you can also contact us at [privacyshield@coursera.org](mailto:privacyshield@coursera.org).
 Where we process personal data on behalf of our business partners, we will work with them to ensure you are offered appropriate choices (and means to exercise those choices) for limiting use or disclosure of your personal data (where appropriate).
 Notwithstanding the foregoing, you agree that we may disclose Personal Information under the following circumstances without offering you an opportunity to opt out of such disclosure: (i) to our Content Providers and other service providers that we have retained to perform requested Services on our behalf; (ii) if we are required to do so by law or legal process; (iii) pursuant to valid requests by law enforcement or other government authorities (which we are legally required to respond to); and (iv) when we believe disclosure is necessary to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity. In addition, we reserve the right to transfer Personal Information in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation). Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use the Personal Information in a manner consistent with this Privacy Shield Notice.
+- **Onward Transfers (Transfer to Third Parties)**. We will only transfer Personal Information to third parties where the third party: (i) has provided satisfactory assurances to us that it will protect the Personal Information in accordance with this Privacy Shield Notice and the Principles; (ii) is located in the EU or a country considered "adequate" for privacy by the EU Commission, and therefore is required to comply with the EU data protection laws or substantially equivalent privacy laws; or (iii) has certified to Privacy Shield, and is independently responsible for complying with the Principles.
+. **Onward Transfers (Transfer to Third Parties)**. We will only transfer Personal Information to third parties where the third party: (i) has provided satisfactory assurances to us that it will protect the Personal Information in accordance with this Privacy Shield Notice and the Principles; (ii) is located in the EU or a country considered "adequate" for privacy by the EU Commission, and therefore is required to comply with the EU data protection laws or substantially equivalent privacy laws; or (iii) has certified to Privacy Shield, and is independently responsible for complying with the Principles.
 Where we have knowledge that a third party to whom we have provided Personal Information is processing that Personal Information in a manner contrary to this Privacy Shield Notice or the Principles, we will take reasonable steps to prevent or terminate processing by the third party until such time the third party can process Personal Information in compliance with this Privacy Shield Notice and the Principles. Under certain circumstances, we may be potentially liable if these requirements are not met.
+- **Data Security**. We will take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We have implemented appropriate physical, electronic and managerial procedures to help safeguard and secure Personal Information from loss, misuse, unauthorized access or disclosure, alteration, or destruction.
+. **Data Security**. We will take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We have implemented appropriate physical, electronic and managerial procedures to help safeguard and secure Personal Information from loss, misuse, unauthorized access or disclosure, alteration, or destruction.
+- **Data Integrity and Purpose Limitation**. We will process Personal Information in a manner that is compatible with and relevant to the purpose for which it was collected or authorized by you. To the extent necessary for those purposes, we will take reasonable steps to ensure that Personal Information is accurate, complete, current, and reliable for its intended use.
+. **Data Integrity and Purpose Limitation**. We will process Personal Information in a manner that is compatible with and relevant to the purpose for which it was collected or authorized by you. To the extent necessary for those purposes, we will take reasonable steps to ensure that Personal Information is accurate, complete, current, and reliable for its intended use.
+- **Access**. Upon request, we will provide you with reasonable access to the Personal Information about you that we hold. We will also take reasonable steps to correct, update, amend, or delete any information that is demonstrated to be inaccurate, except where the burden or expense of doing so would be disproportionate to the risks to your privacy in the case in question or where the rights of third parties would be violated. Where we process personal data on behalf of our business partners, we will work with them in complying with such requests in accordance with applicable law.
+. **Access**. Upon request, we will provide you with reasonable access to the Personal Information about you that we hold. We will also take reasonable steps to correct, update, amend, or delete any information that is demonstrated to be inaccurate, except where the burden or expense of doing so would be disproportionate to the risks to your privacy in the case in question or where the rights of third parties would be violated. Where we process personal data on behalf of our business partners, we will work with them in complying with such requests in accordance with applicable law.
+- **Recourse; Enforcement**. We will regularly review our compliance with the statements set forth in this Privacy Shield Notice, and we will provide an independent way to resolve complaints about our privacy practices. We encourage interested persons to first contact us (contact information provided below) and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of Personal Information in accordance with the Principles. If your inquiry is not satisfactorily addressed by us, we have registered with the International Centre for Dispute Resolution ("ICDR"), a division of the American Arbitration Association, to provide independent third party dispute resolution (free of charge) to you. To contact ICDR and/or learn more about the company's dispute resolution services, including complaint submission, please visit: [http://go.adr.org/privacyshield.html](http://go.adr.org/privacyshield.html). There may also be circumstances when disputes can be resolved through the Privacy Shield binding arbitration process. Please see the [Privacy Shield website for further information](https://www.privacyshield.gov/article). For residents of Switzerland, the Swiss Federal Data Protection and Information Commissioner's authority will replace that of the EU bodies. For residents of the United Kingdom, the Information Commissioner's Office will serve this role.
+. **Recourse; Enforcement**. We will regularly review our compliance with the statements set forth in this Privacy Shield Notice, and we will provide an independent way to resolve complaints about our privacy practices. We encourage interested persons to first contact us (contact information provided below) and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of Personal Information in accordance with the Principles. If your inquiry is not satisfactorily addressed by us, we have registered with the International Centre for Dispute Resolution ("ICDR"), a division of the American Arbitration Association, to provide independent third party dispute resolution (free of charge) to you. To contact ICDR and/or learn more about the company's dispute resolution services, including complaint submission, please visit: [http://go.adr.org/privacyshield.html](http://go.adr.org/privacyshield.html). There may also be circumstances when disputes can be resolved through the Privacy Shield binding arbitration process. Please see the [Privacy Shield website for further information](https://www.privacyshield.gov/article). For residents of Switzerland, the Swiss Federal Data Protection and Information Commissioner's authority will replace that of the EU bodies. For residents of the United Kingdom, the Information Commissioner's Office will serve this role.
+- **Jurisdiction**. As part of our participation in Privacy Shield, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission and other authorized statutory bodies.
+. **Jurisdiction**. As part of our participation in Privacy Shield, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission and other authorized statutory bodies.
 ## Modifications.
 We may amend this Privacy Shield Notice from time-to-time in accordance with the requirements of the EU-U.S. or Swiss-U.S. Privacy Shield Framework. The most recent version of the Privacy Shield Notice will always be posted to this website. Anytime that we do make such changes, we will also update the effective date listed at the top of the Privacy Shield Notice. Please be sure to review the most recent version of the Privacy Shield Notice each time that you visit this website so that you are aware of how we collect, use, and retain personal information.