Why do we collect personal information? 

As part of the Inheritance Project experience, all participants complete two online forms: 

1. Pre-session Reflection Workbook

2. Post-session Feedback and Integration Workbook 

Pre-Session Reflection Workbook 

The primary purpose of this workbook is for you to deepen your self-awareness, understanding of your own inheritance and identity, and prepare for the topics we will cover during the training. 

We also use your workbook responses to:

• Understand more about your organization’s demographics and culture

• Tailor our facilitation approach to the perspectives and needs of your group 

• Research trends in inheritance, identity, culture and inclusion  

• Deliver anonymous aggregated data to your employer 

The pre-session workbook uses a framework proposed by NYU sociologist Kwame Appiah, called the 5Cs of Identity: Country, Culture, Creed, Color and Class.  Investigating these topics can feel deeply personal and private, which is why we are committed to the highest standards of integrity in data privacy and security. 

The pre-session workbook includes: 

• Name - if you prefer not to provide your full name, you may write “anonymous” 

• Email address 

• Personal demographic information such a gender, age race/ethnicity and nationality

• Reflections on the 5Cs of Identity  and the impact of each on on your life 

• Questions about your workplace and organizational culture, if you are participating as part of a program through your employer 

Post-Session Feedback and Integration Workbook 

The purpose of this workbook is to: 

• Help you more deeply integrate what you learned and discussed during the workshop

• Understand the impact of the workshop on you and your organization 

• Receive feedback on your experience, so we can improve our workshop design and facilitation in the future

Why do you collect email addresses?

Providing your email address is required, so that we can send you a copy of your responses for your records and on-going reflection. 

You will not be added to our mailing list, unless you opt-in. We do not sell or share email addresses with any third party. 

How do you use workbook responses? 

We do not sell or share personally identifiable information collected in our workbooks with ANY third party, unless we have your express permission or it is required by law. 

If you are participating in a workshop as part of a program with your employer, your employer will receive anonymized and aggregated responses, only to questions related to organizational demographics and culture. We ensure that your responses cannot be connected to you or your name by your employer. Your personal reflections on your inheritance and the 5Cs will not be shared with your employer. 

Anonymized and aggregated responses may be analyzed by our team of data analysts and published as part of Inheritance Project’s research on inheritance, identity,  culture and inclusion. We do not publish personally identifiable information. Responses will be anonymized and aggregated before publication. 

The lawful bases we rely on for processing this information are: 

(a) Your consent. 

(b) We have a contractual obligation.

(c) We have a legitimate interest.

How do you store my personal information?

We use Typeform to collect and store workbook responses. 

Here is more information about Typeform’s data privacy and security protocols: 

• All data is hosted on Amazon’s AWS service. Typeform’s main servers are located in Virginia, USA and backup servers are located in Frankfurt, Germany. You can read more about AWS here. 

• Typeform prevents access to information by any third party, by encrypting your data in-transit (end-to-end, including within the virtual private cloud at AWS) using secure TLS cryptographic protocols (TLS 1.2), and Advanced Encryption Standard (AES) is used with a 256-bit key to encrypt data at rest including the backups of the information. You can read more about Typeform’s security protocols here.

• All Typeform employees are bound by strict confidentiality agreements.

• Transport Layer Security (TLS)  is used to secure all data in transit. 

Additionally, data for our research projects may be stored and worked on through Google Cloud Storage. Data is deleted immediately after use. Google contractually commits to deleting data from their systems within 180 days of Inheritance Project deleting it. 

Google’s security practices are verified and certified by third-party auditors. They have achieved ISO 27001 certification, which means that an independent auditor has examined the controls present in our data centers, infrastructure, and operation.

You can learn more through Google’s Privacy FAQs, their detailed Data Processing Amendment and their Data Processing and Security Terms. 

What are your data protection rights?

Under data protection law, you have rights including:

1. Your right of access - You have the right to ask us for copies of your personal information. 

2. Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

3. Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

4. Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

5. Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

6. Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

If you wish to make a request or have any concerns about the use of your personal information, you can contact us at hello@inheritanceproject.org.