Privacy Policy

Introduction

This Privacy Policy (the "Privacy Policy") applies to our website available at https://www.cdta.org (the "Website" or "Site") operated by Capital District Transportation Authority ("CDTA," "we," "our," or "us"), as well as to the services and information available on the Website (collectively, the "Services"). This Privacy Policy describes how we collect, use, and disclose information, governs how we treat this information, and lets you know your associated rights. Please read this Privacy Policy carefully; once you consent to this Privacy Policy and its terms, it creates legal obligations on you and on CDTA.

Our Website contains links to other websites for your convenience and reference. We are not responsible for the privacy practices or the content of those site

Your Consent to this Privacy Policy

You indicate your consent to the terms of this Privacy Policy in different ways, depending on your relationship to the Website. The procedures for consenting to this Privacy Policy are less formal if you are a casual visitor to our Site (a "Guest User") and more formal if you are, or are seeking to become, a registered user (a "Registered User"). We use the term "you" to refer to both Guest Users and Registered Users.

Consent by Guest User

We have structured our Website so that, as a casual Website visitor, you are able to come to our Website and use certain of our Services or review information available on our Website, without providing us with any Personally Identifiable Information. By accessing and using our Website as a visitor, you are acknowledging that you have read and understood this Privacy Policy and agree to be legally bound by it.

Consent by Registered Users

In order to participate in certain of our Services, you must: (i) complete the registration process at our Website; (ii) be age eighteen (18) or older; and (iii) indicate your consent to this Privacy Policy in the manner we specify during the registration process.

Consent by User Acting in a Representative Capacity

If you are agreeing to our Privacy Policy on behalf of a company or other legal entity ("Your Organization"), then (i) you represent and warrant that you have authority to act on behalf of, and to bind, Your Organization, and (ii) for all purposes in this Privacy Policy, the term "you" means Your Organization upon whose behalf you are acting.

Right to Withdraw Consent

You have the right to withdraw your consent at any time – please see Section 11 (Your Right to Opt-Out; Object to Processing; Deleting Information) for more information about withdrawing your consent.

The Information We Collect

To provide our Services, and to otherwise conduct our business via the Website, we rely on information provided by, and collected from, our users. This information consists of the following:

Personally Identifiable Information

We collect certain information that identifies you as an individual (collectively, "Personally Identifiable Information"). The Personally Identifiable Information we collect may include the following:

  • Your name;

  • Your phone number;

  • Your mailing and home address;

  • Your email address;

  • Your payment information;

  • Your gender; and

  • Your employer.

Non-Personally Identifiable Information

We also collect technical and device-related information that is not Personally Identifiable Information, and instead identifies, or may reasonably be used to identify, a particular user device (collectively, "Non-Personally Identifiable Information"). Non-Personally Identifiable Information is typically collected automatically by technical means and, subject to Section 3.4 (Treatment of Combined Information), for purposes of our Website and Services, consists of the following:

  • Device identifiers, such as cookies;

  • Device information, such as hardware and software settings;

  • IP addresses and log information, such as your device's name, the type and version of your web browser, and referrer addresses that can function to identify a user device; and

  • Tracking information that we, or a third party, may collect.

Anonymous Information.

Our Website also collects, processes, and/or uses information that does not identify you or your devices, including Personally Identifiable Information that has been made anonymous by: (i) removing identifying fields and aggregating the information with other information so that individual subjects of the information cannot be re-identified, or (ii) anonymizing the information with techniques that remove or modify the identifying data so as to prevent re-identification of the anonymized information (collectively, "Anonymous Information"). Information that meets these criteria may include, for example, demographic information, statistical information (e.g. page views and hit counts), and general tracking information.

Treatment of Combined Information

If we combine Non-Personally Identifiable Information or Anonymous Information with Personally Identifiable Information, then we treat the resulting combination as Personally Identifiable Information.
 

How We Collect this Information

We collect the above information through the following means and technologies:

Contacting CDTA

You can contact us with questions or comments. For example, you can contact us to learn more about our various transit initiatives or to inquire about career opportunities at CDTA. In order to communicate with us, you must provide certain Personally Identifiable Information.

Payments

When you order certain Services or purchase certain products through our Website, such as STAR Tickets or Monthly Passes, we require you to submit payment using a payment method that we have implemented on our Website. The payment information we collect during this process includes your credit or debit card number or your bank account number, the expiration date of your credit or debit card, purchase amount, date of purchase, and payment method. We may also collect certain Personally Identifiable Information from you, such as your name, billing address, and, if applicable, shipping address. Please note that different payment methods may require us to collect different categories of information. Depending on the payment method we have chosen to make available, we may collect your transaction information (i) directly from you for transfer to our payment processor, or (ii) through the third-party payment processor(s) that we have authorized to collect such information from you on our behalf. For more information on our privacy practices with respect to our service providers, please refer to Section 6.1 (Our Service Providers).

Job Applications and Inquiries

You may submit information associated with a potential application for employment with us, and this information may include Personally Identifiable Information. In each instance, we collect the information you submit to us for various purposes, including to respond to your inquiries or to consider your candidacy for our employment opportunities.

Information Provided to Third Parties

As explained further in Section 6.1 (Our Service Providers), we may engage third parties to perform certain services for us or on our behalf. The forms on our Website may be managed by such third parties, and we may obtain from the applicable service provider the information that you provide using such forms.

Newsletters

We may offer newsletters and other content about CDTA, our services and initiatives, and other issues that we believe may be of interest to you. We will use your Personally Identifiable Information to provide you with this content. You can opt-out of receiving this content by following the instructions set out in Section 11 (Your Right to Opt-Out; Object to Processing; Deleting Information).

Questionnaires and Surveys

Our Website may allow you to participate in surveys and questionnaires, which we may post on the Website from time to time. You are free to choose whether you participate in a survey or questionnaire. We may ask that, in addition to providing your responses, you also provide Personally Identifiable Information. In these instances, we use any information that you provide to us for the purposes for which you submit the information. If you are a Registered User, we may also add your Personally Identifiable Information to your customer profile so that we can provide you a more personalized experience on the Website, as well as for advertising and marketing purposes. Survey and questionnaire information may be used for the purposes of monitoring or improving the use and appeal of our Website or for other business purposes.

Device Identifiers; Logs; IP Addresses

To determine whether your device is supported by our Website and Services, we may collect certain information about your device and network, including your IP address, your operating system and browser, your device model, information about your use of the Website or Services, and the presence of any software that our Website or Services may require to operate with your device, or other third party software or mobile apps on your device. We automatically receive and record this information in log files, and this is generally Non-Personally Identifiable Information.

Cookies

A cookie is a small amount of data that is sent to your browser from a website's computers and stored on your computer's hard drive. Cookies can be used to provide you with a tailored user experience and to make it easier for you to use a website upon a future visit. We may include cookies on our Website and use them to recognize you when you return to our Website. You may choose not to accept cookies; however, you may need to enable cookies if you wish to access certain personalized features of our Services. Cookies alone are typically Non-Personally Identifiable Information.

Beacons and Tags

The Website may use certain data collection technologies that rely on: (i) beacons; (ii) pixel tags and object hyperlinking tags; and (iii) other means to link an object to an Internet address, a remote software application, a remote database, or other remote means of receiving or processing information. We may use these technologies to tell us what parts of our Website have been visited or to measure the effectiveness of searches that users perform on our Website. These technologies also enable us to send email messages in a format users can efficiently read, to learn whether these email messages have been opened, and to help ensure, for example, that our messages are of interest to our users. These technologies provide us with Anonymous Information, Non-Personally Identifiable Information and, in certain instances, Personally Identifiable Information.

Click-Throughs

We may send email messages or display links that use a "click-through URL" linked to our Website or to another resource. When you click one of these URLs, you pass through our web server before arriving at the destination website page or other resource. Click-throughs may use and collect Anonymous Information and Non-Personally Identifiable Information. We may track this click-through data to help determine interest in particular topics and measure the effectiveness of our user communications.

Other Technologies and Data Sources

We may combine Personally Identifiable Information that you provide to us with other data, including demographic information (such as age, job industry, or job title) for purposes of responding to your inquiries or interest in employment opportunities, and for other purposes specified in this Privacy Policy. If information we combine in this manner includes your Personally Identifiable Information, we will treat the combined information as your Personally Identifiable Information for all purposes under this Privacy Policy.