Privacy Policy

The following privacy policy applies only to information the National Recreation and Park Association (“NRPA”) collects from its website (the “Site”). This policy does not cover information collected by us through any other means, including on any other website operated by NRPA or any third party that does not link to this policy; or any third party, including through any application or content (including advertising) that may link or be accessible from our Site. In this policy, we describe what personal information we collect, how we use it, and your options regarding information we may collect about you.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Site or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy.

By using this Site, you agree to the terms and conditions contained in this Privacy Policy and/or any other agreement that we might have with you. If you do not agree to this Privacy Policy or our Terms and Conditions, you should not use this Site or any NRPA benefits or services.

If you have questions about this policy, please feel free to contact us at:

National Recreation and Park Association
22377 Belmont Ridge Road
Ashburn, Virginia 20148
USA Tel: +1.703.858.0784
Fax: +1.703.647.0794
Email: customerservice@nrpa.org

Changes and Updates to the Privacy Notice

This policy may change from time to time. Your continued use of the Site after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

What Data Does NRPA Collect and How is it Used?

In aggregate form only, NRPA tracks website usage statistics. The data is used for internal and marketing purposes and does not include any personally identifiable information. NRPA relies on a legitimate interest basis for collecting, storing and processing this information.

Emails sent by NRPA may contain code that allows NRPA to track whether the email measured any opens or clicks. This information is used in aggregate form to determine the success of email campaigns. NRPA relies on a legitimate interest basis for collecting, storing and processing this information.

NRPA frequently requests information (typically name and email) in conjunction with the providing of a service – email subscriptions, promotions, document access, etc. Submission of this information is voluntary and the data submitted will be used for the purpose identified at the point of collection. NRPA relies upon a contract fulfillment basis to process personal data associated with providing goods and services.

NRPA collects data as a part of doing business concerning store purchases, NRPA membership, certifications, meeting registrations and exhibits. This information is stored in NRPA’s internal system and typically includes fields like name, organization, address, phone number and email. NRPA collects the information required to provide the goods or services requested. Email addresses are used to communicate NRPA’s benefits, products and services. In order to provide a safer conference/in-person events and to comply with COVID-19 restrictions and guidelines, NRPA collects information regarding an attendee’s vaccination status. NRPA relies on the fulfillment of the contract as the lawful basis under GDPR Article 6 for processing members’ and attendees’ personal information.

NRPA certification registries provide name, city, state, and certification information for certified individuals as part of their certification. Certified Playground Safety Inspector (CPSI) and Aquatic Facility Operator (AFO) registries also display the email address only if authorized by the certified individual. NRPA relies on a legitimate interest basis for collecting, storing and processing this information, and relies upon consent for the displaying of the email address.

Credit Card Information

NRPA collects credit card information without storing details for purchases. NRPA relies upon a contract fulfillment basis to process personal data associated with providing goods and services.

Children’s Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 13. If we learn we have collected or received personal data from a child under 13, we will delete that information.

Third-Party Data Usage

NRPA will not sell or rent your information. NRPA may utilize third-party vendors to conduct business and provides contact information and email addresses to do so. Business activities include, but are not limited to, NRPA Annual Conference registration and housing, order fulfillment, certification testing, and external mailings. We do not otherwise reveal your data to third‐parties for their independent use unless: (1) you request or authorize it; (2) it’s in connection with NRPA‐hosted and NRPA co‐sponsored conferences; (3) the information is provided to comply with the law (for example, to comply with a search warrant, subpoena or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf; or (7) through the NRPA certification registry. We may also gather aggregated data about our members and Site visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers and/or other third-parties for marketing or promotional purposes.

The NRPA provides membership lists (name, organization, city and state only) to NRPA Affinity partners. Information provided is used for verification of membership purposes only.

NRPA does not share customer information directly with conference exhibitors. Attendee mailing addresses are provided securely to a mail house that will distribute the exhibitor marketing materials. NRPA uses a secure third‐party vendor to allow conference exhibitors to email conference attendees on a limited basis. Attendees are given the opportunity to opt‐out of these mailings during the registration process.

NRPA shares member contact and address information with State Affiliates. Membership promotions, educational, and research programs may leverage this information.

Users may request NRPA to refrain from disclosing the data it collects to third-parties on the membership application form, conference registration form or any other form on which they are providing information; an opt‐out box will appear on each form on which a user provides information. Alternatively, users may contact NRPA at membership@nrpa.org or 800.626.NRPA to express their preferences if they determine later that they do not wish to have the information shared.

Cookies

We use “cookies,” tags, scripts, and other similar technologies both to understand service and internet usage and to improve the content, offerings, services or advertisements on our services. These cookies contain no information intended to identify you personally.

Most web browsers are set up to accept cookies. You may be able to set your browser to warn you before accepting certain cookies or to refuse certain cookies. However, if you disable the use of cookies in your web browser, some features of the services may be challenging to use or inoperable.

External Links

The website contains links to other external websites. NRPA is not responsible for the privacy policies, or the content of these external links.

Transferring Information to the United States

NRPA has its headquarters in the United States. NRPA processes information collected from you in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. NRPA relies on derogations for specific situations as set forth in Article 49 of the GDPR. In particular, NRPA collects and transfers to the U.S. personal data only: with your consent; to perform a contract with you, or to fulfill a compelling legitimate interest of NRPA in a manner that does not outweigh your rights and freedoms. NRPA endeavors to apply suitable safeguards to protect the privacy and the security of your data and to use it only consistent with your relationship with NRPA and the practices described in this Privacy Notice. NRPA also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate.

Your Rights Concerning Your Personal Information

Depending on your state of residency, you may have certain rights related to your personal data, including:

• The right to understand what data is maintained: How NRPA received it, and how NRPA uses it
• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.
• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.
• Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights or appeal a decision regarding a consumer rights request, please contact us at customerservice@nrpa.org.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request to us at customerservice@nrpa.org. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

Security of Your Information

To help protect the privacy of data and personally identifiable information you transmit through use of this Site, we maintain commercially reasonable physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your data to those employees who need to know that information to provide benefits or services to you. Also, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities. However, no Site or online service is completely secure, and we cannot guarantee the security of your personal data. Any transmission of personal data is at your own risk.

Data Storage and Retention

NRPA stores your data on its servers, and on the servers of the cloud‐based database management services the NRPA engages, located in the United States. NRPA retains data for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as for the duration of the customer’s or member’s business relationship with NRPA, for a period of time thereafter to allow members to recover accounts if they decide to renew, to analyze the data for NRPA’s operations, and for historical and archiving purposes associated with NRPA’s history as a membership association. For information on where and how long your data is stored, and for information on your rights of erasure and portability, please contact customerservice@nrpa.org.

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us by emailing to customerservice@nrpa.org or by calling 703.858.2167