Effective date: 9 January 2022
The Internet Society and the Internet Society Foundation (“ISOC Foundation”) (collectively, “ISOC,” “we,” or “us”) is a global organization that supports and promotes the development of the Internet as a global technical infrastructure, a resource to enrich people’s lives, and a force for good in society.
In keeping with our goals and objectives, we recognize that individual privacy is an important consideration in all facets of the Internet, and that your choice to share information with us is a critical part of how we can try to achieve our mission. We’ve developed this Privacy Notice to explain how and why we collect, use, share and otherwise process your personal information.
This Privacy Notice is not a contract and does not create any legal rights or obligations.
Previous versions:
19 Feb 2021
20 Apr 2018
17 Aug 2017
15 Dec 2011
Our Services: When we use the term “Services”, we are referring to all the services that we offer on our own behalf, including our membership offerings, events, mailing lists, trainings, policy work and the websites that post or link to this Notice. This Privacy Notice does not cover or address personal information and privacy practices relating to job applicants, employees and other personnel.
Personal Information: When we use the term “personal information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or anonymized deidentified information that is maintained in a form that is not reasonably capable of being associated with or linked to you.
We collect personal information in a variety of different ways:
We collect and use personal information you provide in the following ways:
We use various technologies to collect information about the device or browser you use to navigate our websites or from your use of our Services, including:
We may receive personal information about you from other users or our business partners and service providers and combine this information with other information that we have.
In addition to the uses described above, we may collect and use personal information for the following purposes:
We may share your personal information in the following ways:
You have some choices regarding how we use your personal information, including the following:
Our websites and online services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If you are under the age of 13, please do not use our websites or online services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.
Our Services may include links to third-party websites, plug-ins, and applications. Except where we post, link to, or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, nor are we responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions, or states. Please refer below for disclosures that may be applicable to you:
Any user who wishes to request further information about our compliance with these requirements, or has questions or concerns about our privacy practices and policies, may contact us at [email protected] or by mail at:
Internet Society
Attn: Legal Department
11710 Plaza America Drive
Suite 400
Reston, VA 20190
We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the “Last Updated” date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
Effective Date: 9 December 2021
These Additional European Economic Area (“EEA”) Privacy Disclosures supplement the information contained in our Privacy Notice. In addition, these Disclosures apply only to our processing of your personal data where you are based in the EEA.
Internet Society (“ISOC,” “we,” or “us”)is the data controller responsible for the collection and use of such personal data.
Unless otherwise expressly stated, capitalized terms in these Disclosures have the same meaning as defined in the Privacy Notice.
When we use the term “personal data” in these Disclosures, we mean any information relating to an identified or identifiable natural person.
Our legal basis for collecting and using the personal information described in our Privacy Notice depends on what the information is and the context in which we collect it.
However, we will normally collect information from you only where we need it to perform our contract with you (i.e., our Terms of Service), where the processing is in our legitimate interests (provided that these are not overridden by your interests or rights), or if we otherwise have your consent.
In some cases, we may also have a legal obligation or need to collect personal data from you or may otherwise need the personal data to protect your vital interests or those of another person (for example, another Member or event attendee).
If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, this will normally be clear from the context in which we are asking you to provide your information (for example, when we ask you to provide a username to access our Services, this will be to create an account for you in accordance with our Terms of Service), and, if not, we will provide an explanation to you at the relevant time. We will also make clear whether providing information is mandatory.
Similarly, if we collect and use your personal data in reliance on legitimate interests (or those of any third party) which are not listed above, it will be made clear to you at the relevant time what those legitimate interests are (such as personalizing our services and marketing, for example).
If you have questions or need further information about the legal bases on which we collect and use your personal data, you may contact us using the contact information in the Contact Us section below.
We retain personal data about you for as long as is necessary for the purposes set out in these Disclosures unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.
The criteria used to determine the period for which personal data about you will be retained varies, depending on the legal basis under which we process the personal data:
In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.
We may transfer personal data about you among us and to our subsidiaries or affiliates, as well as to the categories of third parties identified in the Privacy Notice. Personal data may be transferred to, stored and processed in a country other than the one in which it was collected, including, but not limited to, the United States. The country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.
We may transfer personal data about you outside the EEA and when we do so, we rely on appropriate or suitable safeguards recognized under the GDPR, including adequacy decisions and standard contractual clauses.
Adequacy Decisions. We may transfer personal data about you to countries that the European Commission has deemed to adequately safeguard personal data.
Standard Contractual Clauses. The European Commission has adopted Standard Contractual Clauses which provide safeguards for personal data transferred outside of the EEA. We may use these Standard Contractual Clauses when transferring personal data from a country in the EEA to a country outside the EEA that has not been deemed to adequately safeguard personal data.
You have the following rights in relation to your personal data (subject to certain limitations at law):
Please note that if the exercise of these rights limits our ability to process personal data, we may not be able to provide our products or services to you, or otherwise engage with you going forward.
Right to Withdraw Consent. Where we rely on your consent for processing of your personal data, you also have the right to withdraw your consent to such processing, subject to certain limitations at law.
You may withdraw your consent by contacting us at [email protected] or by following the instructions outlined in the initial consent notice.
Submitting Requests. To submit a request, please contact us as set forth in the Contact Us section. We may need to verify your identity before processing your request, which may require us to obtain additional personal data from you. In certain circumstances, we may decline a request to exercise the rights described above.
Right to Lodge a Complaint. If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with your national data protection authority (i.e., supervisory authority).
We may update these Disclosures from time to time. When we make changes to these Disclosures, we will change the “Effective Date” date at the beginning of these Disclosures. If we make material changes to these Disclosures, we will notify you by email to your registered email address, by prominent posting on our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.
If you have any questions or requests in connection with these EEA Disclosures or other privacy-related matters, please send an email to legal at isoc.org.
Alternatively, inquiries may be addressed to:
Internet Society
Attn: Legal Department
11710 Plaza America Drive
Suite 400
Reston, VA 20190

More Stories
Anatomy of a Scam
Climate and Environmental Sustainability Within the IETF and IRTF
From Commitments to Practice: Internet Society’s Priorities for WSIS+20 Implementation