This Privacy Statement, including our Cookie Policy and Terms of Use, applies to your use of EPRI.com, including mobile-optimized websites, subscription to our media resources, registration on our certification sites, enrollment in coursework and training, and other member services, as well as off-site services to run EPRI's calendar of events or to operate our member center, program cockpits and electronic collaboration websites (the "Services"). The Privacy Statement does not apply to services that state that they are subject to a different privacy or data policy.
Please note, this Privacy Statement does not apply to EPRI's processing of Employee data.
Data We Collect
We collect data directly from you and third parties, including our utility customers and contractors. The information we collect may include your name, contact information, and professional credentials, such as when you create a member account with EPRI. We may also collect analytics and other usage information based on your interaction with our Services. We use the information we collect to operate our business and website, communicate with you, promote our events, products, and services, and to comply with laws, rules, and our policies, including our Terms of Use.
Data From Third Parties
We work with third parties, including utilities and partner contractors, to acquire data about you, such as further employment information to authenticate your membership or verify your certifications. We may also collect personal information in connection with data access or deletion requests submitted by authorized agents on your behalf, or through other publicly available sources. We use appropriate and reasonable security measures, as required by relevant law and security best practices, to maintain and secure your personal information and further require the third parties we work with to implement and maintain appropriate technical organizational and training measures to protect your personal information.
Data Generated About You
We use cookies and other tracking technologies, such as through Coveo and Google Analytics, to automatically collect certain information about you when you interact with our Services. For example, our web servers track various technical details about your site visit, including:
- Details about the devices that are used to access our Services (such as the IP address, and type of operating system and web browser)
- Dates and times of visits to, and use of, our Services
- Information about how our Services are used (such as the content that is viewed or downloaded and how users navigate between our webpages)
- Unique download identification number of documents that are downloaded from our website
- URLs that refer visitors to our Services
- Search terms used to reach our Services
We use this information for a variety of purposes, including authentication of members, recording of member preferences and settings, ranking the relevancy and accuracy of the content on our Services, delivery and measurement of the effectiveness of media resources, and support of EPRI’s internal audit efforts. We also use this information in aggregate form to analyze site traffic and trends to understand what content our members find useful or interesting.
To learn more, please visit our Cookie Policy.
HOW WE SHARE YOUR DATA
We do not sell your personal information to anyone. In limited circumstances, as generally described below, we may disclose your information within EPRI's family of companies, with our service providers, and as required by laws, rules and our policies. If we need to share or otherwise process your data for purposes other than for which the information was originally collected, we will notify and seek your consent as appropriate.
We may share your personal information with:
- EPRI affiliates and subsidiaries
- Persons participating in certain research areas or efforts with which you may become affiliated (e.g. any applicable Manager of EPRI Technology Transfer, committee list customers of committees with which you may be affiliated, or EPRI Advisors and their respective functional equivalents)
- The company or organization with which you are affiliated or which provided you with access to the customers-only section of the website, along with the company or organization's respective affiliates
- Other individuals with access (or individuals applying for access) to the password-restricted portions of the website, such as via the "EPRI People Finder" or bulletin boards, chat rooms, or forums
- Service providers that perform services on our behalf, including:
- Customer service and support providers
- Technology providers (including technology support, email and web hosting providers, marketing and advertising technology providers, email and text communications providers)
- Payment, shipping and fulfillment service providers
Unless prohibited by applicable law, we reserve the right to transfer the information we maintain in the event we sell or transfer all or a portion of our business or assets. If we engage in such a sale or transfer, we will -- where required by applicable law -- make reasonable efforts to direct the recipient to use your personal information in a manner that is consistent with this Privacy Statement. After such a sale or transfer, you may contact the recipient with any inquiries concerning the processing of your personal information.
In addition, we may share your personal information to comply with legal and regulatory requirements, and protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites), and claims and other liabilities.
DATA RETENTION
We retain data for as long as necessary to fulfill the purpose(s) for which the information was collected, depending on the purpose(s) for which the information was collected, the nature of the information, any contractual relationship that may governs the retention of the data, and our legal or regulatory obligations. If you are employed by a member that participates in EPRI, if your employment ceases or your employer ceases to be a customer of EPRI, EPRI will terminate your access to our Services and will no longer display your information in the EPRI People Finder feature. We will otherwise destroy or choose to further retain data in de-identified or aggregated form, in accordance with applicable law.
How We Protect Your Data
EPRI maintains reasonable and appropriate administrative, technical and physical safeguards to protect the Personal Information we maintain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We also regularly monitor our systems for possible vulnerabilities and attacks. However, no system is 100% secure. We cannot warrant the security of any information that you send us, and we cannot guarantee that your Personal Information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.
YOUR CHOICES
You have choices about how your personal information is processed, including the right to access or delete it.
To exercise your rights, please contact EPRI's Customer Assistance Center (CAC) for support.
- By e-mail: askepri@epri.com
- By phone: 800-313-3774 (option 4) or 650-855-2121
You may also submit a request via the form provided on the Contact Us page.
Withdrawing Consent and Other General Objections
To the extent provided by applicable law, you may withdraw any consent you previously provided to us, or object at any time on legitimate grounds, to the processing of your personal information. In some circumstances, withdrawing your consent to EPRI’s use or disclosure of your personal information will mean that EPRI will not be able to provide products or services to you or otherwise engage with you. This may include termination of or other limitations to your member account with EPRI.
In some cases where your personal information is accessible through an online portal or platform, such as the Update My Profile page for individuals with member accounts, you may be able to directly exercise these rights by following the instructions on the portal or platform. These includes updates to your communication preferences, which lets you unsubscribe from receiving marketing or other commercial emails from EPRI. However, even if you opt out of receiving such communications, we retain the right to send you non-marketing communications, such as information about material changes to our Services or notifications about your membership.
Access to Personal Information
You (or your authorized agent) may request access to the information that we maintain about you. Unless we cannot verify your identity with reasonable certainty or there is another basis for denial, we will provide you with a copy of the information we maintain about you in the ordinary course of business, in a commonly used format.
You may also request to correct any errors in your information. You can always edit certain profile information by logging in directly onto your member account through our Services.
Upon review, we may reject your request to access or correct your personal information, as permitted by applicable law. If we reject your request, we will notify you of the reasons for the rejection.
Deletion of Personal Information
You may request that we delete some or all of your personal information, such as in connection with the closing of your EPRI member account. In limited circumstances, we may reject your request if an exception applies, such as when the information is necessary to complete the transaction or contract for which it was collected or when it is being used in relation to security incidents, compliance with legal obligations or other legitimate EPRI interests.
We are also required to verify each requester’s identify, including authorized agents. We may deny a request for deletion if we are unable to verify the requester with a reasonable degree of certainty. If your request is denied, we will notify you of the reasons for the rejection.
Exporting Your Personal Information
You may request that we transfer your personal information to another data controller, such as another certification body or member utility that you have an employment relationship with. We may reject your request if an exemption applies, or as otherwise permitted by applicable law. If we reject your request, we will notify you of the reasons for the rejection.
California Residents
As a nonprofit entity, EPRI is exempt from certain privacy regulations, such as the California Consumer Privacy Act (CCPA). Nonetheless, EPRI is committed to implementing and complying with privacy best practices and will help our members, customers, and other individual users exercise their privacy rights as appropriate.
For example, for residents of California or other states affording similar legal protections, you may be further entitled to ask us for data identifying the sources, categories, and specific pieces of personal information we have collected on you over the past twelve (12) months, including the purpose(s) and with whom we share that data.
This Privacy Statement is subject to appropriate revision and updating to the extent that discrete privacy rights are enacted in other jurisdictions, such as by and under state-specific data protection laws and regulations.
GENERAL DATA PROTECTION REGULATION (GDPR)
As a global organization, EPRI is committed to protecting personal information to ensure that we comply with the principles of increased transparency and control under the GDPR.
We only collect and process personal information where we have one or more lawful grounds to do so. These include processing data to fulfill our contracts and provide requested services or features to you, for purposes of EPRI’s legitimate interests or those of other parties, to fulfill our legal obligations, or based on consent.
Data Controller
Electric Power Research Institute, Inc., EPRI International, Inc. and EPRI Europe DAC are the data controllers for the personal information collected in connection with the use of our Services in the European Economic Area (EEA) and the United Kingdom. Data controllers determine the purposes and means of processing personal data under GDPR Article 4.
Lawful Basis for Processing Data
We only collect and process personal information where we have one or more lawful grounds to do so. In this section, we identify the legal grounds on which we rely to process personal information under GDPR Article 6.
In some cases, EPRI processes personal information to fulfill our contracts with specific parties, such as EPRI customers and other individuals with member accounts with EPRI.
In other cases, EPRI has a legitimate interest to process the personal information that we collect, such as to develop, administer and support our products and services; to operate, evaluate and improve our business; to support our recruitment activities; to benefit the public interest; or to comply with export control regulations and other legal obligations. It may be also necessary for EPRI to process personal information to establish, exercise or defend against fraud, illegal activity, and claims and other liabilities, including by enforcing the Terms of Use that govern the Services we provide. EPRI will rely on legitimate interests as a basis for data processing where the processing of personal information is not overridden by your interests or fundamental rights and freedoms.
EPRI’s processing of certain personal information may also be necessary to comply with our legal obligations, e.g. export control regulations compliance.
If EPRI relies on consent for the processing of your personal information, we will seek such consent at the time we collect your personal information. For more information on consent, please see the YOUR CHOICES section of this Privacy Statement.
International Data Transfers
We may transfer your personal information to countries other than the country in which the data was originally collected for the purposes described in this Privacy Statement. For example, if you are located outside of the United States, we typically transfer your personal information to the United States, where EPRI is headquartered. We rely on legally-provided mechanisms to lawfully transfer data across borders. In some cases, the countries to which we transfer personal information may not have the same data protection laws as the country in which you initially provided the information. In general, we will process your data in ways that are compatible with the purposes for which it was originally collected and will make the requisite disclosures where appropriate.
Filing Complaints
If you reside in the EEA, you have the right to file a complaint with the supervisory authority of your customer state. Please refer to list of National Data Protection Authorities for further information: https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080. If you reside in the United Kingdom, you may file a complaint with the Information Commissioner’s Office: https://www.gov.uk/data-protection/make-a-complaint.
UPDATES TO OUR PRIVACY STATEMENT
EPRI reserves the right to change this Privacy Statement at any time, such as in response to changes in applicable laws and regulations. When we update this Privacy Statement, we will also update the effective date on this page and notify you of changes that are deemed material under applicable legal requirements, such as by e-mail or other contact information you have provided.
HOW TO CONTACT US
You may contact us with questions, comments, or complaints about this Privacy Statement or our privacy practices, or to exercise your privacy rights. Our contact information is as follows:
- By e-mail: askepri@epri.com
- By phone: 800-313-3774 (option 4) or 650-855-2121
- By postal mail: Electric Power Research Institute, Inc.
Attn: Legal Department -- Privacy3420 Hillview Avenue, Palo Alto, California 94304
- By phone: 800-313-3774 (option 4) or 650-855-2121
- By form submission: You may also submit a request via the form provided on the Contact Us page.
