Privacy Statement

Welcome to New York School Bus Services, Inc (NYCSBUS). NYCSBUS provides school bus services to K-12 students in New York City.

In Part I of this Privacy Statement we set forth NYCSBUS's Privacy Policy as to Personal Information which we collect online through the NYCSBUS website.

In Part II of this Privacy Statement we set forth NYCSBUS's Privacy Policy as to Personal Information which we collect other than through NYCSBUS Website.

"Personal Information", is any information that enables us to identify you, directly or indirectly, by reference to an identifier such as your name, identification number, location data, online identifier or one or more factors specific to you. Personal Information includes "sensitive Personal Information" and "pseudonymised Personal Information" but excludes anonymous information or information that has had the identity of an individual permanently removed.

Your use of the NYCSBUS Website and/or provision of your Personal Information or sensitive Personal Information to NYCSBUS constitutes your consent to the use, storage, processing and transfer of that information in accordance with this Privacy Statement.

For the purposes of the EU General Data Protection Regulation 2016/679 (the "GDPR"), except as otherwise expressly stated, the data controller is New York City School Bus Umbrella Services with an office at 297 Norman Ave, Brooklyn NY 11222. NYCSBUS is an organization based in the United States.

QUESTIONS

If you have any questions or complaints regarding this Privacy Statement, please contact us at hr@nycsbus.com or send a letter to:

New York City School Bus Umbrella Services
297 Norman Ave

Brooklyn NY 11222

CHANGES TO THIS PRIVACY STATEMENT

We will update this Privacy Statement from time to time, so please check back periodically.

If at any point we decide to use Personal Information in a manner that is materially different from that stated at the time it was collected, we will endeavor to notify you of such changes (e.g., we will post a revised Privacy Statement with a new effective date, display the word "updated" next to the Privacy Policy link on each page on the NYCSBUS Website, or otherwise) prior to implementing them.

PART I – NYCSBUS WEBSITE PRIVACY POLICY

Throughout the NYCSBUS Website, there are forms for visitors to request information, products, and services. We use Personal Information from these forms to provide the products, promotional materials, or memberships that you request.

Forms on the NYCSBUS Website that request financial information do so in order to bill you for products or services ordered. Unique identifiers (such as your email) are collected from website visitors to verify the user's identity for access to restricted content or features on the NYCSBUS Website.

This Privacy Policy discloses NYCSBUS's privacy practices and contains detailed information about the following:

• What information do we collect?
• What are "cookies" and how does NYCSBUS use them?
• Do we share information with third parties?
• How do we use the information we collect?
• How can you review and modify your Personal Information?
• What is the opt-out policy for NYCSBUS Website?
• Your California privacy rights
• Your European privacy rights
• What types of security procedures are in place to protect against the loss, misuse or alteration of your information?
• How do NYCSBUS Website use bulletin boards, discussion lists, and moderated chats?

WHAT INFORMATION DO WE COLLECT?

NYCSBUS Website collect the following Personal Information about site visitors:

Site Use Information

NYCSBUS collects technical information relating to each time a visitor comes to a NYCSBUS Website, including IP address, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform type (e.g. Internet Explorer browser on a Windows platform).

We may also collect information about your visit, including pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.

Gathering this technical information helps us to learn what browsers we need to support and helps us determine what sections of NYCSBUS Website are most popular and how many visitors come to our site(s). You do not have to register with NYCSBUS Website before we can collect this information.

Information Provided to NYCSBUS

You may provide Personal Information to us which may include your name, home and/or work email address, postal address, phone numbers and/or fax number, your current and past employers and job titles, demographic information about you including birth year, certification designation, etc.

NYCSBUS collects Personal Information in the following ways from different parts of the NYCSBUS Website:

• Employment Applications: When you apply for employment with NYCSBUS using the NYCSBUS Website, we may ask for your Personal Information, including copies of your Resume or CV, and any other information required to verify your qualifications.
• Other Registration: When registering for specific services we may ask for the same type of Personal Information. For example, if you subscribe to an e-mail newsletter, we will ask you to provide your e-mail address.

Do we share information with third parties?

Personal Information collected through NYCSBUS Website is generally collected and maintained solely by NYCSBUS or its contracted vendors.

We may share Personal Information in the following ways:

Information You Give Us

Information provided when you apply for employment with NYCSBUS. If you apply for a position with NYCSBUS, you provide Personal Information required to verify your employment qualifications, including copies of your Resume or CV, in order to do required background checks and education and employment verification, including your employment status, as required by law or NYCSBUS policy. NYCSBUS does not sell or share Personal Information related to employment applications except as necessary to process the application, to conduct the required background checks and education and employment verification, or as necessary to comply with legal obligations.

Site Use Information

We disclose to third-party sponsors/advertisers aggregate statistics (i.e., impressions and click-throughs on a company's advertisement).

In addition, we may share aggregate website statistics with the media or other third parties. We do not disclose Personal Information to these sponsors/advertisers or other third parties as part of this process, only information in an aggregate form.

How do we use the information we collect?

We use your Personal Information according to the terms of the Privacy Policy in effect at the time of our use. We will only process your Personal Information, including sharing it with third parties, where (1) you have provided your consent which can be withdrawn at any time, (2) we are required by law, (3) processing is required to protect your vital interests or those of another person, or (4) processing is necessary for the purposes of our legitimate commercial interests, provided your interests and fundamental rights do not override those interests.

We use Personal Information for the following purposes:

Information You Give Us

We use the Personal Information you give us:

1. for those who apply for employment with NYCSBUS, to process your employment application, including background checks and education and employment verification, as applicable
2. to comply with all applicable laws or legal processes, including providing information on individual users to the appropriate governmental authorities where required by law enforcement or judicial authorities
3. to improve the NYCSBUS Website

Site Use Information

As mentioned above, NYCSBUS uses the aggregate, anonymous data collected to let our website vendor know the number of impressions or views.

NYCSBUS also uses this aggregate, anonymous data to perform statistical analyses of the collective characteristics and behavior of visitors to NYCSBUS Website; to measure user interests regarding specific areas of NYCSBUS Website; and to analyze how and where best to use our resources.

Without such data, we would not know which parts of NYCSBUS Website are the most popular, and we would not be able to change and update the content and services appropriately.

Exceptions

On occasion, NYCSBUS collects Personal Information through NYCSBUS Website with the intent to afford a greater degree of privacy for such information than is otherwise set forth in this privacy policy.

In those relatively rare situations where NYCSBUS does so it will clearly disclose to you at the time it collects such information, what degree of privacy will be afforded to the Personal Information collected at such time; and NYCSBUS will follow a process to assure that the specifically disclosed degree of privacy is in fact afforded to such information.

For example, NYCSBUS may collect survey information through a survey where NYCSBUS's use of any Personal Information from that survey is more limited than the general NYCSBUS Privacy Statement would otherwise allow; in such a case, NYCSBUS will disclose the stricter privacy policy governing that survey information at the time such Personal Information is collected from the survey respondent.

How can you review and modify your Personal Information?

You have the following options for modifying or causing to be deleted Personal Information or demographic information previously provided by you to NYCSBUS.

1. E-mail: hr@nycsbus.com; or
2. Send mail to the following postal address: New York City School Bus Umbrella Services, 297 Norman Ave, Brooklyn NY 11222

Your California Privacy Rights

For California Residents Only. NYCSBUS may disclose your Personal Information to our subsidiaries or other third parties who may use that information to market directly to you. As a California resident, you have the right to opt-out of having your Personal Information licensed to such third parties. We will not share your information after we have received your notification that you are opting out. If you wish to opt-out you have the following options:

1. E-mail: hr@nycsbus.com; or
2. Send mail to the following postal address: New York City School Bus Umbrella Services, 297 Norman Ave, Brooklyn NY 11222

Your European Privacy Rights

For European or United Kingdom Residents Only. If you are based in the EU or the UK, in certain circumstances, you have rights under the GDPR in relation to your Personal Information.

• Request access to your Personal Information. You may have the right to request access to any Personal Information we hold about you as well as related information, including the purposes for processing the Personal Information, the recipients or categories of recipients with whom the Personal Information has been shared, where possible, the period for which the Personal Information will be stored, the source of the Personal Information, and the existence of any automated decision making.
• Request correction of your Personal Information. You may have the right to obtain without undue delay the rectification of any inaccurate Personal Information we hold about you.
• Request erasure of your Personal Information. You may have the right to request that Personal Information held about you is deleted.
• Request restriction of processing your Personal Information. You may have the right to prevent or restrict processing of your Personal Information.
• Request transfer of your Personal Information. You may have the right to request transfer of Personal Information directly to a third party where this is technically feasible.

Where you believe that we have not complied with our obligations under this Privacy Policy, or under European or UK data protection laws, you have the right to make a complaint to an EU or UK Data Protection Authority, such as the UK Information Commissioner's Office. If you wish to exercise your European or UK data subject rights, you have the following options:

1. E-mail: hr@nycsbus.com; or
2. Send mail to the following postal address: New York City School Bus Umbrella Services, 297 Norman Ave, Brooklyn NY 11222

What kinds of security procedures are in place to protect against the loss, misuse or alteration of your information?

NYCSBUS Website has security measures equal to or better than those reasonably expected in the industry, such as firewalls, in place to protect against the loss, misuse and alteration of your Personal Information under our control. While we cannot guarantee that loss, misuse or alteration to data will not occur, we take reasonable precautions to prevent such unfortunate occurrences.

You are ultimately responsible for the security of your NYCSBUS login credentials. You may not share your NYCSBUS login credentials with colleagues or friends so they can access content or features that are restricted to NYCSBUS colleagues only. You should log out of your browser at the end of each computer session to ensure that others cannot access your Personal Information and correspondence, especially if you share a computer with someone else or are using a computer in a public place like a library or Internet cafe.

PART II – NYCSBUS PRIVACY POLICY FOR INFORMATION COLLECTED OTHER THAN THROUGH NYCSBUS WEBSITE

If you submit Personal Information to NYCSBUS through any channel other than NYCSBUS Website, the same privacy rules set forth at Part I above for NYCSBUS Website will be applied to such Personal Information you submit through channels other than NYCSBUS Website (including without limitation your opt-out rights at Part I, Section 6 above), except as follows:

1. Hardcopy Personal Information provided to NYCSBUS which is not converted to electronic media and hosted by NYCSBUS will be subject to different security procedures than will stored electronic Personal Information. NYCSBUS has security measures equal to or better than those reasonably expected in the industry, in place to protect against the loss, misuse and alteration of your hardcopy Personal Information under our control.
2. When NYCSBUS collects Personal Information through channels other than NYCSBUS Website it may in some instances apply a different privacy policy to such information; but where it does so it shall conspicuously disclose to you at the time of collection what privacy policy will apply to such information. For example, NYCSBUS may collect survey information through a survey where NYCSBUS's use of any Personal Information from that survey is more limited than the general NYCSBUS Privacy Statement would otherwise allow; in such a case NYCSBUS will disclose the stricter privacy policy governing that survey information at the time such Personal Information is collected from the survey respondent.