Your privacy is important to HMMT, as a recognized student organization of MIT. We are committed to respecting it.

This privacy statement is based on the privacy policy of the main MIT website. It applies to all HMMT websites (all domains and subdomains of hmmt.org and hmmt.co).

You can visit the unauthenticated parts of the HMMT website without telling us whom you are and without revealing any personal information about yourself. All such information is considered publicly available, with all rights and assignments held by HMMT and its organizers.

In using specific features, such as web forms, on the HMMT website, you may be asked to provide additional information, such as your name or email address, that may be needed to contact you or to subscribe you to updates. In such cases, it is our intent that your provided information will be used only to fulfill the request(s) you make of us, and to allow us to contact you if there are any problems with your request. We will not share or exchange your email address and other provided personal information to third parties without your prior consent. We will never sell your information.

A cookie is a short identifier, stored on your computer, that can contain site-specific settings or identify you to a site when you make a return visit. The unauthenticated part of the HMMT website does not use cookies. Your experience on the unauthenticated part of the HMMT website will not change if you turn off or disable cookies. The authenticated part of the HMMT website uses cookies for session tracking and token storage purposes only. No session information is stored on our servers. Deleting or disabling cookies will prevent you from authenticating into the HMMT website, but no additional session information will be stored.

HMMT does not use any analytics to gather or track website access statistcs. HMMT does log each and every page access, including information about the identity of the accessor (if known), what page was accessed, HTTP headers transmitted in the request and response (excluding passwords and other sensitive information), HTTP payloads and request bodies (excluding passwords and other sensitive information), and any errors encountered in serving the page. These logs are retained on our servers for up to 12 months.

We process your personal information collected on the HMMT website to facilitate our online interactions with you. We only collect and process your personal information in furtherance of HMMT's legitimate interests and/or to fulfill any contractual obligations with you.

If you have concerns about this Privacy Policy, any of these purposes, or how we communicate with you, please contact us at dataprivacy@hmmt.org. We will always respect a request by you to stop processing your personal information (subject to our legal obligations). Note that such a request may entail your exclusion from HMMT-run activities, including tournaments and results.

HMMT stores your information in a database with certificate-based authentication policies. To the extent that is reasonable, your information is cryptographically encrypted (such as your HMMT browser cookies) or hashed (such as your HMMT account password). There are reasonable security measures in place to help protect against the loss, misuse, and alteration of the information under our control. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

We consider our relationship with the HMMT community to be lifelong. This means that we will maintain a record for you until such time as you tell us that you no longer wish us to keep in touch. After such time, we will retain a core set of information for HMMT's legitimate purposes, such as archival, scientific, and historical research; for the defense of potential legal claims; and other requirements that may be imposed on us by MIT.

You have the right in certain circumstances to (1) access your personal information; (2) correct or erase information; (3) restrict processing; and (4) object to communications, direct marketing, or profiling. To the extent applicable, the EU's General Data Protection Regulation provides further information about your rights. You also have the right to lodge complaints with your national or regional data protection authority.

If you are inclined to exercise these rights, we request an opportunity to discuss with you any concerns you may have. To protect the personal information we hold, we may also request further information to verify your identify when exercising these rights. Upon a request to erase information, we will maintain a core set of personal data to prevent us from contacting you inadvertently in the future, as well as any information necessary for HMMT archival purposes. We may also need to retain some financial information for legal purposes, including US IRS compliance. In the event of an actual or threatened legal claim, we may retain your information for purposes of establishing, defending against, or exercising our rights with respect to such claim.

By providing information directly to HMMT, you consent to the transfer of your personal information outside of the European Economic Area to the United States of America. You understand that the current laws and regulations of the United States of America may provide a different level of protection as the data and privacy laws and regulations of the EEA.

The HMMT website contains links to third-party sites located outside of HMMT. HMMT is not responsible for the privacy practices or the content of these websites. We encourage you to review privacy statements and policies published by these third-party sites.

We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information, we will make this clear on our website or by contacting you directly.

The controller for your personal information is HMMT. We can be contacted at dataprivacy@hmmt.org.