Privacy Policy

Privacy Policy
Aurora Cooperative Digital Products Privacy Policy
Last Modified: August 9, 2024

Aurora Cooperative Elevator Company (“Aurora Cooperative”) is committed to transparency
and accountability in its privacy practices. This Privacy Policy applies to certain digital products
sponsored by Aurora Cooperative, including www.auroracoop.com (the “Website”) and the
Aurora Cooperative mobile application (the “Mobile App”). The Website and the Mobile App
are collectively referred to as the “Digital Products”). The Digital Products allow you to access
certain goods and services (“Services”) we offer. This Privacy Policy describes the information
Aurora Cooperative collects, and how Aurora Cooperative uses the information collected,
through its Digital Products.

Hosted by WP Engine.

The Website and Mobile App data are hosted by WP Engine (“Host”). This means that data you
provide us or that we or our third-party service providers collect from you is hosted with Host on
servers that Host owns or controls. Host may use such data for its business purposes, subject to its own privacy practices. For more information about Host’s privacy practices, please visit https://wpengine.com/legal/privacy/.

Use of the Aurora Cooperative Digital Products is governed by our Digital Products Terms of Use. By accessing and using our Digital Products, you are accepting the practices set out in this Privacy Policy and in our Digital Products Terms of Use

1. The Data We Collect and Store.

Aurora Cooperative (also referred to as “we,” “us,” or “our” in this Privacy Policy) collects the information you voluntarily provide when you use the Digital Products, including when you register an account or fill out forms on our Digital Products, or otherwise contact us via the Digital Products.

We collect the following:

Personal Information
When you become or register as a Member, we collect certain information from you:

Name
Username
Email address
Password
Age
Gender
Location
Phone number
Address
Any other information you provide us

Third-Party Application Information
We receive certain information when you engage with third-party applications or platform integrations:

If you link our Digital Products with third-party applications or integrations, we receive your contact information, including your name and email address, and any additional information you authorize the third party to share with us (e.g., “sign-in with” functionality)

Device Information
We automatically receive and record certain information from your device when you use the Digital Products.

  • Device ID
  • Your device’s operating system, but not version

Location Data
We use your precise geo-location where you have given us permission to do so through your device-based settings:
Your precise geo-location collected from your device
Transactional Data
When you buy goods or services from us via the Digital Products, we collect information about the order as part of your transaction history:
Purchase history
Device Permissions
We retain information regarding permissions you grant us:
Camera and gallery applications
Location information
File system
Contacts
Photographs and Videos
You may enable us to access your mobile device’s camera or gallery application to upload photographs or videos to us:
Photos and videos you upload to us
2. How We Use Your Information and Our Legal Basis
When you access or use the Services or interact with us, we collect, use, share, and otherwise process your personal information for the purposes described in this policy. To the extent required by applicable law, we rely on a number of legal bases to use your information in these ways. If you reside outside the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”) (together referred to as the “European Region”), the legal bases on which we rely may differ from those listed below.

Why and How We Use Your Information
To create and maintain your account and provide our services
We collect certain information to set up your account and allow you to interact with the Digital Products:

Personal Information
Third-Party Application Information
Device Information
Location Data
To promote the safety, security, and integrity of our Services
We use certain information to verify accounts and related activity, to find and address violations of our Terms of Use, investigate suspicious activity, detect, prevent and combat fraudulent or other unlawful behavior (including by automated means), and to maintain the integrity of our services.
Personal Information
Device Information
Location Data

To communicate with you
We use certain information to send you administrative or account-related communications about our Services, including to verify your email address, welcome you to the Services, confirm a transaction, or notify you about an order, service availability, changes to the Services, or updates to this Policy, our Terms of Use, or other policies. You may not opt out of receiving service communications, such as emails or mobile notifications sent for legal, security, or other transactional purposes:
Personal Information
Transactional Data

To provide customer support
We use your information to respond to support requests and other inquiries:
Personal Information
Transactional Data

To comply with legal and regulatory obligations
We may use, preserve, or release your personal information to a third party to comply with our legal and regulatory obligations, including in response to lawful requests by public authorities and to meet legitimate national security or law enforcement requirements. For example, we may be required to collect, use or disclose your information in connection with: Civil, commercial, criminal or consumer protection matters or litigation: where we are in receipt of a court order to disclose information or receive regulatory inquiries. Regulatory matters: to comply with our regulatory obligations. We may also be required to collect, use or disclose your information to comply with our obligations to engage with regulators:
Personal Information
Device Information
Transactional Information
Location Data
To keep our Services safe and secure
We collect and store your information and, in some cases, apply automated processing and manual (i.e., human) review to maintain the security and integrity of our Services. This involves taking steps to detect, investigate and otherwise protect our community against spam, abuse, harassment, intellectual property infringement, crime, suspected fraud, harm, suspected violations of the Terms of Use and safety and security risks of all kinds. It is in our legitimate interests, and those of our Members, to ensure the security of our Services, to verify accounts and activity, to combat harmful or inappropriate conduct or content and to detect, prevent and address spam. It is in our legitimate interests, those of our Members and the general public to enforce our rules, Terms of Use, and associated policies, including to prevent or address fraud and other illegal activity:
Personal Information
Transactional Data
Location Data

To protect our legal rights
We may also retain, preserve, or review your personal information to protect, establish, or exercise our legal rights or defend against impending or asserted legal claims, including to collect a debt or address violations of our Terms of Use:
Personal Information
Transactional Data
Communication Data, subject to applicable law
Location Data

In the event of a business reorganization
In some cases, we may choose to reorganize its business. In these types of transactions (such as a sale, merger, liquidation, receivership, reorganization, or transfer of all or substantially all of our assets), Member information is typically one of the business assets that is transferred. Such transactions may be necessary and in our legitimate interests, particularly our interest in making decisions that enable our business to develop over the long term.
Personal Information

To send you email marketing
In certain countries (such as those in the EU), we may need your consent to send you email marketing messages. You will be given the opportunity to opt out of each marketing communication we send:
Personal Information
Device Information
Transactional Data

To collect your information through the device-based settings that you have enabled
With your consent, we may:
Collect your device-based Location Data
Access your camera and/or photo gallery (if you upload media)
Location Data
Device Permissions
Photographs and Videos

To preserve, review and share information to perform a task in the public interest
In limited, fact-specific circumstances, we will access, preserve and share your information with regulators, law enforcement or others where necessary to perform a task in the public interest. For example, we might share information with others for the purposes of combatting unlawful or harmful behavior where it is in the public interest to do so and where the public interest is laid down by applicable law (including EU or Member State law, where required).
Personal Information
Transactional Data
Location Data

To preserve, review and share information with law enforcement and others
We may preserve, review, and share information with law enforcement and others in circumstances where someone’s vital interests require protection, such as in the case of emergencies. For example, we may need to share information to prevent loss of life or personal injury of a Member or other third party or to prevent crime or fraud:
Personal Information
Transactional Data
Location Data

3. Automated Data Collection and Online Tracking Information, and How It Is Used.
As is true of most websites and mobile applications, we or our third party service providers, including Host, may collect information from you over time using automated means such as cookies, beacons, or online data analytics tools. Users can control the use of cookies at the individual browser or device level, but certain features of the Website or Mobile App may not perform as expected if cookies are disabled. We or our third party service provider also may gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, MAC addresses, device IDs, device and browser type(s), referring/exit pages, operating system, date/time stamp, or clickstream data, and other information about the way you used the Digital Products. We may link this automatically collected data to other information you provide or we collect about you. We use analytics tools to analyze trends, administer the Digital Products, track Users’ movements around the Digital Products and on the Internet, and to gather demographic information about our user base as a whole. This information helps us to improve our Digital Products and to deliver a better and more personalized service. The third party analytics companies who collect information on our Digital Products may combine the information collected by and provided to Aurora Cooperative with other information they have independently collected elsewhere

Mobile App Opt-Out Rights.
Opt-out of all Mobile App information collection by uninstalling the Aurora Cooperative Mobile App. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. Aurora Cooperative does not honor “do not track” signals and will track, set cookies, and may serve advertisements even if a Do Not Track (DNT) browser mechanism is in place. For more information on “do not track” options, please see: http://donottrack.us/.

4. We Do Not Sell or Rent Your Information
Aurora Cooperative does not sell or rent your personally identifiable information to anyone. Aurora Cooperative, together with its subcontractors, service providers, and other authorized third parties we work with to support our business, use Users’ personally identifiable information to solicit, service, and communicate with you or as otherwise disclosed in this Privacy Policy. The Host may also use collected information for its business purposes, subject to its privacy practices.

5. How we Transfer Your Information Between Countries.
By using the Services, you acknowledge that we will use your information in the United States
and any other country where we operate. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may
differ from those that apply in the country in which you reside. To the extent that Aurora
Cooperative is deemed to transfer personal information outside of the EEA, we rely separately,
alternatively, and independently on the following legal bases to transfer your information:

Adequacy Decisions: Where available, we rely on decisions of the European Commission,
known as “adequacy decisions,” recognizing that certain countries offer a level of protection of
personal data that is essentially equivalent to the EEA.

Standard Contractual Clauses: Otherwise, we primarily rely on the European Commission’s
Standard Contractual Clauses for the international and onward transfer of personal data outside
of the EEA to third countries, including, for example, to the United States and India. This
includes transfers from Aurora Cooperative to its Affiliates. You can request a copy of our
Standard Contractual Clauses by contacting us through the contact options set out in this policy.

Necessary for the Operation of the Digital Products: You can choose whether or not to use the
Digital Products.. As we may operate in countries worldwide and use technical infrastructure in
the United States to deliver the Services to you, in accordance with the contract between us
(our Terms of Use), we transfer your personal information to the United States and to other
jurisdictions as necessary to provide the Digital Products. Simply put, we may not be able to
provide you with the Services and perform our contract with you without moving your personal
information outside of your home country.

6. How Long We Store Your Information.
We will retain your information only for as long as is necessary for the purposes set out in this
Policy, for as long as your account is active, or as needed to comply with our legal obligations
under national applicable law. We decide how long we need information on a case-by-case basis and depending on the retention laws applicable.

7. Your Rights and Choices.
Certain privacy laws around the world, including the European General Data Protection
Regulation (GDPR), provides users with rights and choices related to their personal information.
Depending on where you reside, you may have some or all of these legal rights:
Right to Access: You can access certain personal information associated with your account by visiting your account privacy settings. You can request a copy of your personal information in an easily accessible format, as well as information explaining how that information is used.
Right to Portability: You have the right to receive certain of your information which you provided in a structured, commonly used and machine-readable format and to transmit such information to another controller.
Right to Correction: You have the right to request that we rectify any inaccurate information about you. By visiting your account settings, you can correct and change certain personal information associated with your account.
Right to Restrict Processing: In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your personal information.
Right to Deletion: In certain circumstances, you have the right to request the deletion of your personal information, except information we are required to retain by law, regulation, or to protect the safety, security, rights, and integrity of our systems. Please note that closing your account may not free up your email address or username for reuse on a new account.
Right to Object: If we process your information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.
Right to Withdraw Consent: Where we rely on consent, you can choose to withdraw your consent to our processing of your information using, for example, an email unsubscribe link or your account privacy preferences. If you have consented to share your precise device location details with us, you can revoke that consent through the settings on your mobile device. This is without prejudice to your right to generally permanently close your account and delete your personal information. Please be aware that withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to File a Complaint: If you are a resident in the EEA, Switzerland or the UK, you have the right to lodge a complaint about our practices with respect to your personal information with the supervisory authority of your country or state.

Please see the United States Regional Privacy Policy for information about privacy rights
provided under certain US state laws. We reserve the right to decline any request that we are not bound by law to honor.

How to Exercise Your Rights and Choices. If you would like to manage, change, limit, or delete
your personal information, you can do so via your account settings. Alternatively, you can
exercise any of the rights above, subject to applicable law, through the contact options set out
under Contact Information below. Once you contact us to exercise any of your rights, we will
confirm receipt of your request. Limiting use of, or deleting, your personal information may
impact features and uses that rely on that information.

Communication Choices. You can opt out of receiving marketing emails by using the unsubscribe link in our marketing emails or through your account settings. Certain communications from us are service-related or legally required and you will continue to receive
them even if you opt out of marketing emails.

8. Disclaimer.
Aurora Cooperative takes reasonable measures to safeguard and protect the information we process and maintain. Aurora Cooperative cannot guarantee that your
information will not be compromised, and Aurora Cooperative expressly disclaims any liability
for the loss or theft of information you provide us.

9. Payment Information.
Credit card payments submitted through the Aurora Cooperative Digital Products are processed directly by our payments processor or Host’s payments processor, as applicable. Aurora Cooperative does not collect, store, share or otherwise use any financial information, such as credit/debit card number, expiration date, or security code submitted through our Digital Products.

10. Links and Third Party Websites.
The Digital Products may contain links to other, third-party websites. Please be aware that we are not responsible for the privacy practices or the content of such other websites. We encourage you to read the privacy statements of each and every website, application or platform they visit. This Privacy Policy applies solely to
information collected by us through the Digital Products (not including YieldAdvantage) and
does not apply to these third-party websites. The ability to access information of third parties
from the Digital Products or links to other websites or locations is for your convenience and does not signify our endorsement of such third parties, their products, their services, other websites,locations or their content. Information you post on third-party websites, including but not limited to Facebook, LinkedIn, or Twitter pages, is governed by the privacy policies
applicable to those services, and may not be considered confidential or proprietary.

11. Children Should Not Provide Information to Aurora Cooperative.
None of AuroraCooperative’s Digital Products are intended for use by children under the age of 13. No one under age 13 may provide any information to or on Aurora Cooperative’s Digital Products. We do not knowingly collect personal information from children under 13. If you are under 13, DO NOT use or provide any information on our Digital Products, including our Website and Mobile App. If Aurora Cooperative becomes aware that personal information has been collected or received from a child under 13 without verification of parental consent, the information will be deleted from the Aurora Cooperative database. If you believe we might have any information received or collected from a child under 13 or about a child under 13, please contact us at: 402-694-2106 or auroracoop@auroracoop.com.

12. Your Consent.
By accessing and using the Digital Products, you are consenting to our collection and use of User-provided and automatically collected information as set forth in this Privacy Policy. If you access or use the Aurora Cooperative Digital Products outside the United States, your information will be transferred to the United States, and processed and stored there under United States privacy standards. By using the Digital Products and providing information to us, you consent to such transfer to, and processing in, the United States.

13. Contact Information.
To ask questions or exercise rights under this Digital Products Privacy Policy and applicable law, contact us at: 800-642-6795 or auroracoop@auroracoop.com. The “Last Modified” date, above, indicates the most recent date that any material changes were made to this Privacy Policy. Aurora Cooperative may revise this Digital Products Privacy Policy at any time without prior notice. Such changes, modifications, additions, or deletions shall be effective immediately, will be posted to the applicable Digital Products, including the Website and Mobile App, and shall apply to you upon your next use of the Digital Products after such update. You are responsible to check for any changes to this Digital Products Privacy Policy.