Please read the information below to learn more about our data collection policies and practices.
Types of information that may be collected
Information You Provide Us: When you visit certain portions of the Website, we may ask you to provide us with specific information, including:
- contact information, such as your name, mailing address, email address or phone number;
- unique identifiers such as your membership ID;
- demographic information such as your age, education, occupation and gender; and
- financial information, such as your credit card number or similar information.
Site Usage Information: We may receive and store certain types of internet usage information whenever you visit the Website, such as your landing page, order of pages viewed, and other click stream data. See “IP Addresses and Click Stream Data” section below.
Email Communications: When you open emails from us, we may receive data about if you opened the email and what links you clicked on, if your computer supports such capabilities. We also may keep track of what emails we send you and when. Additionally, we keep a record of what communications you have opted to receive or not to receive.
How information is collected
Online Memberships and Donations: When you purchase a membership or make a donation to The Indiana State Museum and Historic Sites online, we will ask you to provide us with the information we need to process your membership and/or to acknowledge your contribution. This information includes your name, billing and mailing addresses, telephone number, email address, and credit card information. Your credit card information will be stored temporarily on a secured server and used only as needed to process your transaction. We will retain your personally identifiable information for our records, in order to facilitate better customer service. To process payments for members who have selected automatic renewal, we will also retain payment information, in a secure manner, until such time that either the payment information expires (when we will contact you to update it), or the auto-renewal of the membership is canceled by you. In certain cases, you may be asked for additional information to complete your request, such as the names of your children if obtaining a Family or Family Plus membership.
Transaction Information: If you conduct a financial transaction on our Website, such as buying tickets or merchandise, we will ask you to complete an order form that will request certain information from you, including contact information, demographic information and financial information. We will use this information to complete the transaction that you have requested, i.e., to deliver the information, products or other services that you order, and to send you a confirmation email. For your protection, such information is collected and stored through encrypted means.
Contests or Sweepstakes: We may periodically operate contests or sweepstakes through the Website that may require registration or the submission of personal information. Participation is voluntary and you will have the opportunity to decide whether or not to disclose information to us. Your personally identifiable information may be used to contact you for winner notification, prize delivery confirmation or other related purposes (see the rules of each contest for details about how your personal information will be used). We may also ask your permission to allow us to publicly post some of your information on the Website, such as on a winner’s page, in the event you win a contest or sweepstakes. Except as required by applicable law, we will not post your information without your permission.
IP Addresses and Clickstream Data: We may collect IP addresses and/or clickstream data. An IP address is a number associated with the service through which you access the Internet, like your ISP (Internet service provider) or your company. Standing alone, your IP address is not personally identifiable information. At times, we also use IP addresses for purposes of system administration and to report aggregate information to our partners and affiliates (e.g., regarding the frequency with which our guests visit various parts of our Website). We may combine this information with personally identifiable information. Clickstream data is information collected by our computers when you request certain pages from the Website. Clickstream data may include such information as the page served, the time, the source of the request, the type of browser making the request, the preceding page view and other such non-personal information. When analyzed, this data helps us analyze how visitors arrive at the Website, what type of content is most popular, what type of visitors in the aggregate are interested in particular kinds of content and advertising, and the like.
How we use the information collected
As applicable, the information you provide to us may also be used to:
- contact you about the Website;
- contact you relating to your membership or user status;
- confirm or fulfill an order you have made;
- inform you of a prize you have won;
- monitor or improve the use of the Website;
- customize the content you see on the Website;
- maintain website security;
- enhance navigation;
- send or offer you a newsletter; and
- send you promotional material or special offers on behalf of our partners and/or affiliates.
You may choose not to receive these kinds of emails by indicating your desire to leave the mailing list (offered in emails we send you) or contacting us.
With whom the information may be shared
At times, we may share your personal information with others for various purposes. The following outlines the ways in which your information may be shared with others and the ways in which you may opt-out of having your information shared:
Our Agents: We may employ other businesses, certain services and individuals to perform functions on our behalf. Examples include fulfilling orders, sending email, website analysis, analyzing data, providing marketing assistance, processing credit card payments, and providing customer service. They may have access to personally identifiable information needed to perform their specified functions, but may not use it for their own purposes, such as sending you marketing offers about their products or services.
Aggregate Information: We may share aggregate information, such as demographics and Website usage statistics, with our partners, affiliates or other organizations. When this type of information is shared, the other parties do not have access to your personally identifiable information
Administrative or Legal Process: Your personal information may be transferred to third parties without notice to you in order to comply with applicable law, law enforcement agencies, to protect our rights, or protect the rights of other users of the Website.
Links to other websites
We use reasonable measures to protect personally identifiable information that is stored within our database, and we restrict access to such information to those employees and agents who need access to perform their job functions, such as our customer service personnel and technical staff. However, please note that we cannot guarantee the security of this information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of member information at any time. For additional information about the security measures we use on the Website, please contact us at [email protected].
Correcting/updating personal information
If your personally identifiable information changes (such as your email address or zip code), or if you no longer wish for us to have your personally identifiable information on file, we provide a way to correct, update or remove the personal data you have provided to us. This can be done by using an opt-out message in an email, or by emailing us at [email protected].
Photo/video policy within the museum
Each person entering the Indiana State Museum and Historic Sites property grants us permission to photograph, videotape, record or otherwise reproduce the image and/or voice of that person and all accompanying minors, without compensation, for archival, educational, promotional, marketing, website, commercial, and such other purposes as the Indiana State Museum and Historic Sites determines.
Our Whistleblower Policy
The purpose of the Whistleblower Policy is to provide a way for staff, volunteers or the general public who believe inappropriate financial transactions, harassment or discrimination are occurring within the Indiana State Museum and Historic Sites (ISMHS) to report such action to those in authority and be protected for doing so.
Appropriate Information to Report
Any information regarding suspected theft, fraud, other misuse of ISMHS funds, harassment, discrimination or other such misconduct should be reported. Reporting personnel issues is not appropriate through this means unless the report is regarding harassment or discrimination that can’t be brought to a supervisor’s or human resource’s attention for fear of reprisal. This would include, but not be limited to, hiring, termination, promotion, compensation, or supervisory related issues.
How to File a Report
Go to the Indiana Office of the Inspector General’s website at https://www.in.gov/ig/hotline/. Click on “Complete Hotline Report Form”. Complete the form and press the “Submit” button. The form can be submitted anonymously, but no follow up with the reporter can be done if submitted anonymously.
What to Expect When You Make a Report
The Office of the Inspector General will review the reported information and will conduct an investigation. Subsequent action will be determined by the results of the investigation.
Posting of Whistleblower Reporting Information
The whistleblower contact information shall be posted on the ISMHS intranet used by staff. The policy shall be verbally communicated to all employees upon hiring and shared annually through electronic communication and/or at an all-staff meeting. The policy shall be shared with the ISMHS board of directors annually. The policy will also be posted to the ISMHS website.