Effective Date: November 2, 2022
This Notice was last updated: October 26, 2022
This Privacy Notice (“Notice”) describes how Chevy Chase Trust Company (“CCT,” “we,” “us,” and “our”) collects, uses, and discloses your Personal Information when you visit any of our websites (the “Sites”) or otherwise interact with any of our website features or services (collectively, the “Services”). This Notice also explains how you can exercise certain rights you may have in connection with your privacy and personal information. Your use of our Services, and any dispute over privacy, is subject to this Notice.
For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:
- Scope of this Privacy Notice
- Modifications
- Accessibility Statement
- Personal Information We Collect, Use and Share
- Our Use of Cookies
- Do Not Track
- Information Regarding Children
- Your GDPR Privacy Rights
- Your California Privacy Rights
- Retention and Disposal of Personal Information
- Links
- Updates to This Notice
- Contact Us
Scope of this Privacy Notice
This Notice applies to all CCT websites and covers only the Services identified above and does not apply to information that you may send us by other means. If you are a client of CCT through either a separately managed account, a trust or estate for which CCT serves as fiduciary, a beneficiary of a trust or Individual Retirement Account at CCT, or an investor in a fund, collective investment trust or other investment vehicle for which we act as investment advisor (collectively, “Clients”), please visit our Client Privacy Notice at: https://www.cctassetmanagement.com/client-privacy-policy/ to learn more about the types of Personal Information we collect and how we handle your Personal Information.
This Site contains links to external sites, including those embedded in third-party advertisements or sponsor information, that are not controlled by CCT. We are not responsible for the privacy practices and data collection policies for such third-party sites. You should consult the privacy policies of those sites for details.
Modifications
CCT reserves the right to make changes to this Notice at any time. Because this Notice may change as we modify or expand our Services, we suggest that you check back from time to time in order to understand how we treat your information. Our Notice’s effective date will always be set forth at the beginning and end of the Notice. Any changes will be immediately incorporated into this Notice and will be prospective only. We will not make any changes that have retroactive effect unless legally required to do so.
Any change to this Notice is effective immediately. Your continued use of the Services after any changes are made to this Notice constitutes your acceptance of the changes. If any changes are unacceptable to you, you should cease all use of the Services.
Accessibility Statement
CCT is committed to making its website, https://www.chevychasetrust.com, usable by all people, including those with disabilities. We are constantly in the process of making upgrades to achieve this goal.
Our Commitment to Help
We are dedicated to meeting your accessibility needs. Should you have specific questions or concerns about the accessibility of this site or need assistance in using the processes found within this site, we have individuals here at CCT to assist you.
Please contact us directly at [email protected]. We would be happy to assist in making your visits to our site as convenient as possible.
Third Party Applications
While you are visiting our site, you will notice that we make use of third-party sites such as LinkedIn, Facebook, Twitter, Wealth Access, and YouTube to provide information about CCT. Though individuals may have challenges with access to these sites, CCT does not control or remedy the way content is portrayed.
Personal Information We Collect, Use and Share
Personal information is generally defined as information that, by itself or in combination with other information, identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household (“Personal Information”). Personal Information can include, but is not limited to, your name, address, telephone number, email address, username and password, IP address or other online identifiers, browsing or search history, credit/debit card number or other financial information, professional or employment-related information, office address and other business information, demographic information, consumer preferences, biometric information such as fingerprints, precise location information, or any other type of information that, directly or indirectly, can be linked to or is reasonably capable of being associated with you.
When using the Services, we may collect, use, and share the following categories of Personal Information from you in the following ways:
| Categories of Personal Information we collect | We may collect this Personal Information when you… | We collect this Personal Information so that we may… | Types of third parties that may receive this Personal Information |
| Contact information such as your name, email, phone number, address, and preferred method of contact. |
|
|
|
| Message contents if you contact us, such as when you send us an email, including any attachments thereto, records and copies of your correspondence, including your name, email, and any other information you choose to provide or communicate to us while using the Services. |
|
|
|
| Preference you may select regarding communication method. |
|
|
|
| Information such as IP address, unique device identifiers, operating system, and other information related to the device used to access our Services. |
|
|
|
| “Clickstream” data (e.g., information regarding which of our Web pages you access, the frequency of such access, and your product and service preferences) may be collected by CCT itself, or by our service providers, using cookies, Web beacons, page tags, or similar tools that are set when you visit the site or when you view an advertisement we have placed on another Web site. |
|
|
|
| Information related to how you interact with the Services and advertisements, such as referring and exit web pages and URLs, browsing history, and other similar information. As described below in the “Our Use of Cookies” section, we may use analytics providers and technologies, including cookies and similar tools, to collect this information. |
|
|
|
| Personal Information about you collected through our affiliates, business partners, and vendors who provide services on our behalf. |
|
|
|
Our Use of Cookies
Cookies are small text files that may be placed on your Web browser when you visit our Sites, or when you view advertisements that we have placed on other Web sites. Cookies allow your browser to remember some specific information which the Web server can later retrieve and use. When you quit your browser, some cookies are stored in your computer’s memory, while some expire or disappear.
Cookies are used primarily for administrative purposes, to improve your experience with our Web sites. Examples of this would include the use of cookies:
- To improve site security by “authenticating” you (i.e., verify that you are who you say you are) when you sign in to our Sites.
- To keep track of your specified preferences such as language, time zone and timeouts after periods of inactivity.
- To allow you to navigate our Sites more easily by “remembering” your identity so that you do not have to input your password multiple times as you move between pages or services.
We use Cookies for the following purposes:
- Website Operation. Cookies help us run our websites securely and enable basic functions like page navigation.
- Performance and Analytics. Cookies help us analyze how you interact with our Sites. These Cookies enable us to monitor and improve website performance, Services, and your experience.
If you wish to prevent Cookies from tracking your activity, or visits across multiple websites, you can set your browser to block certain Cookies or notify you when a Cookie is set. If you block Cookies, certain features and Services may not work. For more information on how you can customize your browser’s Cookie setting, please visit the link to your web browser below:
We are not responsible for the completeness, effectiveness, or accuracy of any third-party opt-out options or programs.
Do Not Track & Global Privacy Controls
Some website browsers offer a “Do-Not-Track” setting or extension you can activate to signal your preference not to have data about your online browsing activities monitored and collected. Currently, our Site and Services do not recognize “Do-Not-Track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies).
Information Regarding Children
The Services are intended for individuals 18 years of age and older. Our Services are not directed at, marketed to, nor intended for, children under 16 years of age. CCT does not knowingly collect, use, or sell any information, including Personal Information, directly from children under 16 years of age.
If children under 16 years of age are named as a beneficiary with respect to an account or in a will or trust, personal information may be collected from the parent(s) or legal guardian(s) with their consent. If CCT learns that it has collected any information regarding a person younger than 16 years of age without consent, CCT will delete or destroy the information immediately.
If there is concern that information regarding a person younger than 16 years of age was somehow collected by CCT, any minor, or the parent(s) or legal guardian(s) of such minor, who wishes to request the removal of the minor’s information should submit their request by using the contact details provided in the “Contact Us” section below.
Your GDPR Privacy Rights
European Economic Area (EEA) residents should be aware that you may be entitled under applicable data protection laws to the following rights with regard to CCT’s collection, use and sharing of your Personal Information:
- Right to object to certain data processing: To the extent that CCT is relying upon the legal basis of legitimate interest to process your personal data, then you have the right to object to such processing, and CCT must stop such processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where CCT needs to process the data for the establishment, exercise or defense of legal claims. Where CCT relies upon legitimate interest as a basis for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.
- Information and access: You have the right to be provided with certain information about CCT’s processing of your personal data and access to that data (subject to exceptions).
- Rectification: If your personal data changes, we encourage you to inform us of the change. You have the right to require inaccurate or incomplete personal data to be updated or corrected.
- Erasure: You have the right to require that your data be erased in certain circumstances, including where it is no longer necessary for us to process this data in relation to the purposes for which we collected or processed the data, or if we processed this data on the basis of your consent and you have since withdrawn such consent.
- Data portability: Where we process your personal data on the basis of your consent, or where such processing is necessary for entering into or performing our obligations under a contract with you, you may have the right to have the data transferred to you or another controller in a structured, commonly used and machine-readable format, where this is technically feasible.
- Right to restriction of processing: You have the right to restrict CCT’s processing of your personal data while your request for data rectification or objection to personal data processing is being considered, if we no longer need to process your data but you need that data in connection with a legal claim, or if our processing is unlawful but you do not want us to erase the data. If this right applies, we will continue to store your data but will only further process it with your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another person, or for reasons of important public interest.
- Right to withdraw consent: If we require your consent to process any of your information, we will request such consent separately. To the extent that CCT relies on your consent to process any of your personal data, you have the right to withdraw your consent to such processing at any time.
- Complaint: You also have the right to lodge a complaint with a supervisory authority, in particular that in your Member State of residence, where applicable.
If you would like to exercise the above rights in any way, please contact us at [email protected] or use the mailing address provided in the “Contact Us” section below.
Your California Privacy Rights
California residents should be aware that this section does not apply to: Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994; or other information subject to a California Consumer Privacy Act (CCPA) exception.
Depending on where you reside, you may have one or more of the following rights with regard to CCT’s collection, use and sharing of your Personal Information:
- Access: The right to request that we disclose what Personal Information we collect, use, disclose or sell about you.
- Deletion: The right to request the deletion of Personal Information we have collected or maintain about you.
- Opt-Out: The right to opt out of the sale of your Personal Information.
- Non-Discrimination: The right not to receive discriminatory treatment by CCT, in terms of the services and prices offered on or through our Services, because you exercised these rights regarding the collection, use and sharing of your Personal Information.
If you would like to access, review, edit, delete or have us properly dispose of any copies of the Personal Information that CCT collected about you (subject to any applicable legal exceptions), or if you would like to exercise the above rights in any other way, please contact us at [email protected] or use the mailing address provided in the “Contact Us” section below.
You may be able to opt out of CCT sharing your Personal Information with the entities identified in this Notice by sending us an email at the address above, unless the sharing of your Personal Information is necessary to perform one of the following business purposes: to count ad impressions and evaluate their effectiveness; to detect, protect against, and prosecute security incidents; to debug or troubleshoot functional errors that may arise with the Services; to complete short-term tasks related to an existing interaction you have with CCT; to maintain or service your account; to process payments and fulfill orders or other transactions you authorize; to verify your customer information; and to ensure the safety and quality of the Services.
CCT will attempt to accommodate any request to delete or properly dispose of any copies of your Personal Information, but we cannot guarantee we can eliminate all Personal Information from the specified uses. Therefore, please be as specific as possible in any request to delete or dispose of copies of your Personal Information. We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise to perform a contract we entered into with you;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Debug products to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546);
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
- Comply with a legal obligation; or
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
If you choose to delete certain portions of your Personal Information, it may affect your ability to use certain Services. If the request relates to information that CCT needs to make the Site or other Services function properly for you, you may no longer be able to use those Services. Any removal of content by CCT does not ensure or guarantee complete or comprehensive removal of the content in all places. The content may have been shared or reposted by other parties, or federal or state law may require maintenance of the content or information.
You may grant an authorized agent written permission to submit requests regarding your Personal Information, but we may deny authorized agent requests absent proof that you authorized such agent to act on your behalf, or if we are unable to verify your identity.
CCT is required to verify the identity of any person or entity that requests the disclosure or deletion of Personal Information. If you have a password-protected account with us, we will use our existing authentication procedures to verify your identity. For most other consumer requests, CCT will ask you to provide information that matches at least two pieces of personal information we store about you before responding to your request. If you would like to request the specific pieces of your personal information that CCT has collected, or if you would like us to delete highly sensitive information, you will need to match at least three pieces of information we store about you, and you must provide a declaration signed under penalty of perjury that you are the consumer whose personal information you are requesting.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We may send periodic promotional emails to you. You may opt out of promotional emails by following the opt-out instructions contained in the email. If you opt out of receiving promotional emails, we may still send you emails about other services you have requested to receive from us.
Retention and Disposal of Personal Information
CCT retains collected information for a reasonable amount of time in order to fulfill the stated purpose for which the information was collected. CCT will also retain collected information connected to business records for periods of time required by law. If CCT determines that collected information is no longer needed, it will delete such information.
Securing Personal Information
CCT is committed to protecting the privacy and confidentiality of your personal information. We maintain physical, electronic and procedural safeguards to protect the information against loss, misuse, damage or modification and unauthorized access or disclosure. Some of the other central features of our information security program are:
- A dedicated group that designs, implements and provides oversight to our information security program;
- The use of specialized technology such as firewalls;
- Testing of the security and operability of products and services before they are introduced to the Internet, as well as ongoing scanning for publicly known vulnerabilities in the technology;
- Internal and external reviews of our Internet sites and services;
- Monitoring of our systems infrastructure to detect weaknesses and potential intrusions;
- Implementing controls to identify, authenticate and authorize access to various systems or sites;
- Protecting information during transmission through various means including, where appropriate, encryption; and
- Providing CCT personnel with relevant training and continually updating our security practices in light of new risks and developments in technology.
Legal Disclaimers
Nothing in this Notice restricts our ability to:
- Comply with federal, state, or local laws;
- Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities;
- Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law;
- Exercise or defend legal claims;
- Detect security incidents and protect against fraudulent or illegal activity and prosecute those responsible for such activity; or
- Transfer Personal Information as part of a merger or acquisition, dissolution, bankruptcy, or any other transaction in which a third party assumes control of all or part of our business.
Links
Our Site and Services may contain links to unaffiliated websites. Any access to and use of such linked websites is not governed by this Notice, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such websites.
Updates to This Notice
This Notice is current as of the Effective Date set forth above. We may change this Notice from time to time, so please be sure to check back periodically. We will post any changes to this Notice on our Site, and any material change to this Notice will be effective immediately. Clients will receive notice of this material change and be notified at least annually if this Notice changes.
Contact Us
If you have questions about this Notice, the privacy aspects of our Site or Services, or would like to make a privacy-related inquiry, complaint, or dispute, please contact us at:
Privacy Team c/o Legal Department
Chevy Chase Trust Company
7501 Wisconsin Avenue
Suite 1300W
Bethesda, MD 20814
Email: [email protected]
CCT intends to strictly enforce the policies described in this Notice. If you believe there has been some violation of the policies described in this Notice, please contact CCT.
