1. Introduction

Chicago Information Systems ("we", "our", or "us"), located at 3263 N Broadway, Chicago, IL 60657, USA, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, Chicago Information Systems is the data controller.

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data: name, job title, company name
• Contact Data: email address, telephone number, postal address
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform
• Usage Data: information about how you use our website and services
• Communications Data: your preferences in receiving marketing communications from us

3. How We Collect Your Data

We collect data through:

• Direct interactions: when you fill in forms, contact us by email, phone, or post, or request services
• Automated technologies: as you interact with our website, we may automatically collect Technical Data using cookies and similar tracking technologies
• Third parties: we may receive data from analytics providers, advertising networks, and search information providers

4. Legal Basis for Processing

We will only process your personal data where we have a legal basis to do so. The legal bases we rely on include:

• Consent: where you have given clear consent for us to process your data for a specific purpose
• Contract: where processing is necessary for a contract we have with you or to take steps at your request before entering a contract
• Legal obligation: where processing is necessary for us to comply with the law
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

5. How We Use Your Data

We use your personal data to:

• Provide, operate, and maintain our services
• Respond to your inquiries and fulfill your requests
• Send administrative information, such as updates or security alerts
• Send marketing and promotional communications (where you have consented)
• Improve our website, products, and services
• Comply with legal obligations
• Protect against fraud or security threats

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service providers: third-party vendors who assist us in operating our website and delivering services (bound by confidentiality obligations)
• Professional advisers: lawyers, auditors, and insurers
• Regulators and authorities: where required by law or to protect our legal rights
• Business transfers: in connection with a merger, acquisition, or sale of assets

7. International Transfers

Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on an adequacy decision.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm, the purposes for which we process it, and applicable legal requirements.

9. Cookies

We use cookies and similar tracking technologies to improve your experience on our website. Cookies are small data files stored on your device. You can control cookies through your browser settings. For more information, please refer to your browser's help documentation.

Types of cookies we use:

• Strictly necessary cookies: required for the website to function
• Analytical/performance cookies: allow us to recognize and count visitors and see how they navigate
• Functionality cookies: used to recognize you when you return to our website

10. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of your personal data
• Right to rectification: to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): to request deletion of your data in certain circumstances
• Right to restrict processing: to request we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: not to be subject to solely automated decisions that significantly affect you
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@chicagoinformationsystems.com. We will respond within 30 days.

11. Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. We encourage you to review this policy periodically.

14. Contact Us & Right to Complain

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your authority at edpb.europa.eu. In the UK, contact the Information Commissioner's Office (ICO).