Privacy Policy

Who Controls and Owns MSA.COM?

Management Science Associates, Inc.

info@msa.com

What Types of Personal Data Does MSA.COM Collect?

When a user accesses or uses the website, among the types of Personal Data that MSA.COM collects, by itself or through third parties, there are:

• First Name
• Last Name
• Phone number
• Company name
• Email
• Cookie
• Usage Data

Other Personal Data collected may be described in other sections of this privacy policy or on the web page itself.

The Personal Data may be freely provided by the User, or collected automatically when using MSA.COM.

Any use of Cookies – or of other tracking tools – by MSA.COM or by MSA’s third party services used by MSA.COM, unless stated otherwise, serves to identify Users and remember their preferences, for the sole purpose of providing the service required by the User.

To the extent that information we collect is a special category of Personal Data subject to the European Union’s General Data Protection Regulation (“GDPR”) or the California Consumer Privacy Act of 2018 (“CCPA”) and as amended and replaced by the California Privacy Rights Act (“CPRA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Delaware Personal Data Privacy Act (“DPDPA”), the Iowa Consumer Data Protection Act (“ICDPA”), the Montana Consumer Data Privacy Act (“MCDPA”), the Nebraska Data Privacy Act (“NDPA”), the Oregon Consumer Privacy Act (“OCPA”), The Texas Data Privacy and Security Act (“TDPSA”), the Utah Consumer Privacy Act (“UCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the United Kingdom’s Data Protection Act of 2018 (“DPA”) or Australia’s Privacy Act of 1988 and/or the Australian Privacy Principles (collectively “APP”), we ask for your explicit consent to process the data. We obtain this consent separately when you take actions leading to our obtaining the data. You can withdraw your consent at any time.

Failure to provide certain Personal Data may make it impossible for MSA.COM to provide its services.

The User assumes responsibility for the Personal Data of third parties published or shared through MSA.COM and declares to have the right to communicate or broadcast them, relieving MSA of all responsibility.

How and Where Will Personal Data Be Processed?

Method of Processing

MSA processes the Data of Users in a proper manner and takes appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to MSA, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by MSA. The updated list of these parties may be requested from MSA at any time.

MSA employs and maintains an information security management system, which utilizes certain data protection mechanisms, such as encryption, to prevent unauthorized or unlawful access, destruction, loss, alteration, or disclosure of the Personal Data of Users. MSA.COM undergoes periodic security assessments to ensure the constant protection of the Personal Data of Users.

Place

The Data is processed at MSA’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact MSA.

Conservation Time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this policy, and the User can always request MSA for their suspension or removal.

Why Is Personal Data Collected?

The Data concerning the User is collected to allow MSA.COM to provide its services, as well as for the following purposes:

• Contacting the User
• Analytics
• Displaying content from external platforms

The Personal Data used for each purpose is outlined in the specific sections of this document.

Can You Give Some More Details?

Personal Data is collected for the following purposes and using the following services:

Analytics

The services contained in this section enable MSA to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of MSA.COM, to prepare reports on its activities and share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookie and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out

Contacting the User

Contact form (MSA.COM)
By filling in the contact form with their Data, the Users authorize MSA.COM to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected:

• Company name
• Email
• First Name
• Last Name
• Phone number

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Displaying Content from External Platforms

These services allow you to view content hosted on external platforms directly from the pages of MSA.COM and interact with them.

If a service of this kind is installed, it may still collect web traffic data for the pages where the service is installed, even when users do not use it.

Google Maps widget (Google)

Google Maps is a maps visualization service provided by Google Inc. that allows MSA.COM to incorporate content of this kind on its pages.

Personal Data collected: Cookie and Usage Data. Place of processing: USA – Privacy Policy – Opt Out

ReCAPTCHA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Legal Action

The User’s Personal Data may be used by MSA, to the extent that it is required to do so by law, in legal proceedings or in the stages leading to possible legal action arising from improper use of MSA.COM or the related services or to establish, exercise or defend its legal rights.

Additional Information about User’s Personal Data

In addition to the information in this privacy policy, MSA.COM may provide the User with contextual information concerning particular services or the collection and processing of Personal Data.

System Logs and Maintenance

For operation and maintenance purposes, MSA.COM and any third party services may collect files that record interaction with MSA.COM (System Logs) or use for this purpose other Personal Data (such as IP Address).

Information Not Contained in this Policy

More details concerning the collection or processing of Personal Data may be requested from MSA at any time at its contact information.

With Whom Will We NOT Share Your Information?

Any sharing of the Personal Data of Users is limited to those purposes outlined in preceding section. All other transfers, uses or sale of the Personal Data of Users is prohibited, including:

• Transferring or selling the Personal Data of Users to third parties like advertising platforms, data brokers, or any information resellers.
• Transferring, selling, or using the Personal Data of Users for serving ads, including personalized or interest-based advertising.
• Transferring, selling or using the Personal Data of Users to determine credit-worthiness or for lending purposes.
• Transferring, selling or using the Personal Data of Users with any product or service that may qualify as a medical device pursuant to Section 201(h) of the Federal Food Drug & Cosmetic Act if the Personal Data of Users will be used by the medical device to perform its regulated function.
• Transferring, selling or using the Personal Data of Users for any purpose unless express written approval is provided. 

Data Retention

MSA keeps your information, including, but not limited to, your name, and email address, for as long as necessary for legal reasons, and to prevent harm, including as described in the “How We Use Information” section of this Privacy Policy.

The Rights of Users

Users have the right, at any time, to know whether their Personal Data has been stored and can consult MSA to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to MSA at the contact information set out above.

MSA.COM does not support “do not track” requests.

To understand if any of the third party services it uses honor the “do not track” requests, please read their privacy policies.

If you live in the European Union, European Economic Area, United Kingdom, Switzerland, Australia (“the Designated Countries”), or the states of California, Colorado, Connecticut, Utah, and Virginia you have a number of legal rights with respect to your information, which your account settings and tools allow you to exercise, as outlined below.

Right to Opt-Out of the Sale of Personal Data.

Under the CPRA, CPA, CTDPA, DPDPA, ICDPA, MCDPA, NDPA, OCPA, TDPSA, UCPA, VCDPA,  the DPA, the APP and the GDPR, you have the right to opt-out of the sale of your Personal Data by a business. MSA does not sell your Personal Data that you provide freely or that we collect in connection your use of MSA.COM.

Accessing and Exporting Data. 

To receive the entirety of your Personal Data collected by MSA.COM in a commonly used file format, please contact MSA’s Data Protection Officer at MSADataProtectionOfficer@msa.com. Before your Personal Data that has been collected by MSA.COM is produced, you will be asked to verify your request and your identity. A request for the production of your Personal Data may be made by your authorized agent if your authorized agent provides your written permission to MSA.  

Editing and Removing Data.  

You may request the entirety of your Personal Data be deleted by submitting a request to MSA. Before your Personal Data is deleted, you will be asked to verify your request and your identity. A request to remove your Personal Data may be made to MSA’s Data Protection Officer.   If you make such a request, your personal data will no longer be accessible. This process may take up to thirty (30) days to take effect. We may also preserve data for legal reasons to prevent harm.

Objecting to Data Use. 

If you live in a Designated Country, in certain circumstances, you can object to our processing of your information based on our legitimate interests, including as described in the “How We Use Information” section of this Privacy Policy. You have a general right to object to the use of your information for direct marketing purposes.

Restricting or Limiting Data Use.

If you reside in a Designated Country, you can seek to restrict our processing of your data in certain circumstances.

If you need further assistance regarding your rights, please contact our Data Protection Officer at MSADataProtectionOfficer@msa.com, and we will consider your request in accordance with applicable laws. If you reside in a Designated Country, you also have a right to lodge a complaint with your local data protection authority.

Users have the right, at any time, to know whether their Personal Data has been stored and can consult MSA to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, canceled, updated or corrected, or for their transformation into anonymous format or to block any Personal Data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to MSA’s Data Protection Officer at MSADataProtectionOfficer@msa.com.

Right to Non-Discrimination.

If you choose to exercise your rights as a user of MSA.COM as outlined above, we will not discriminate against you or otherwise treat you differently than other users.

Information Security.

MSA works hard and takes precautions to keep your data safe. We utilize a combination of technical, administrative, and physical controls to maintain the security of your data.  This includes the measures to encrypt much of the data submitted to and collected by MSA.COM.  However, no method of transmitting or storing data is completely secure.  If you have a security-related concern, please contact MSA’s Data Protection Officer at MSADataProtectionOfficer@msa.com. 

In the case of breach of Personal Data, MSA shall without undue delay notify affected Users by describing the nature of the breach, providing contact information of its Data Protection Officer, and advising of the likely consequences of the breach. 

In support of MSA’s efforts to keep your data safe, we recommend Users employ their devices’ password features and ensure that the settings on such devices allow Users to encrypt data.  

MSA is committed to providing our Users with meaningful information and choices about the information they share through MSA.COM. The GDPR and DPA requires organizations to have legal bases to collect, use, share, and otherwise process information about users residing in the European Union or the United Kingdom, respectively. If you habitually reside in the European Union or the United Kingdom, there are particular rights available to you. While some of these rights apply generally, certain rights only apply depending on the legal bases we rely on to process data. We have explained these legal bases and your rights below.

Legal obligation or for the establishment, exercise or defense of legal claims

We process data where we have a legal obligation to do so, for example, where we are responding to valid and binding legal process from law enforcement agencies for certain data. In addition, processing may be needed for us to establish, exercise or defend civil or criminal claims in connection with actual or potential litigation including to protect the MSA.COM and related services, our property or other legal rights, including those of our users or partners.

To protect vital interests

We process data where it is necessary to protect an interest which is essential to someone’s life or protect any person from serious bodily injury. This includes processing information to combat harmful conduct both on and off of our Services.

Carrying out a task in the public interest

 
Where set forth by the law of the European Union or a member state thereof or the United Kingdom, we may process users’ data to perform processing in the public interest. This may include protecting against harm and undertaking research for social good. You have the right to object to, and seek restriction of, our processing of your Personal Data when we process data using this legal basis.

In furtherance of legitimate interests

We process your information for our legitimate interests, and those of third parties, while applying appropriate safeguards that protect your privacy, rights and interests. We do this to:

• Maintain our business by conducting research and continuously improving the services so as to offer innovative and customized offerings to our members and partners.

• Keep the services safe and secure by using information to prevent or detect violations of our Terms of Use, fraud or abuse, and other harmful or illegal conduct. We may also share information with third parties, including law enforcement agencies for this purpose.

You have the right to object to, and seek restriction of, our processing of your Personal Data based on legitimate interests. Please contact MSA’s Data Protection Officer at MSADataProtectionOfficer@msa.com if you object to us using your information.

Changes to this Privacy Policy

MSA reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using MSA.COM and can request MSA to erase the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data MSA has about Users.

Information about this Privacy Policy

MSA is responsible for this privacy policy.

Definitions and Legal References

Personal Data (or Data)

Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number when a User accesses or uses the services of MSA.COM.

Usage Data

Information collected automatically from MSA.COM (or third party services employed in MSA.COM), which can include:

• The IP addresses or domain names of the computers utilized by the Users who use MSA.COM
• The URI addresses (Uniform Resource Identifier)
• The time of the request
• The method utilized to submit the request to the server
• The size of the file received in response
• The numerical code indicating the status of the server’s answer (successful outcome, error, etc.)
• The country of origin
• The features of the browser and the operating system utilized by the User
• The various time details per visit (e.g., the time spent on each page within MSA.COM)
• The details about the path followed within MSA.COM with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.

User

The individual using MSA.COM, which must coincide with or be authorized by the Data Subject, to whom the Personal Data refers.

Data Subject

The legal or natural person to whom the Personal Data refers.

Data Processor

The natural person, legal person, public administration or any other body, association or organization authorized by MSA to process the Personal Data in compliance with this privacy policy.

Data Controller (or Application Owner, or Owner)

The natural person, legal person, public administration or any other body, association or organization with the right, also jointly with another Data Controller, to make decisions regarding the purposes, and the methods of processing of Personal Data and the means used, including the security measures concerning the operation and use of MSA.COM. MSA, unless otherwise specified, is MSA of MSA.COM.

MSA.COM

The hardware or software tool by which the User Personal Data is collected.

Cookie

Small piece of data stored in the User’s device.

Legal information

Notice to European Users: this privacy statement has been prepared in fulfillment of the obligations under EU Directives.

This privacy policy is solely about MSA.COM.

34894214.1