NPR Privacy Notice for EU Users
Last modified: September 7, 2022.
'Personal data' means any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Categories of Data Obtained Directly from You
NPR obtains personal data from you including your name, email address, postal address, telephone number, and payment card information. We collect this information when you:
- Register for an NPR account, NPR podcast subscription service, application programming interface (API) content access, or any NPR email newsletter.
- Email, text or otherwise share a story from any of the Services.
- Contact us for information or ask a question.
- Make a donation to NPR or a Member station or express interest in or request information about making donations.
- Post, upload, or otherwise submit a comment, story idea, essay, photo, or other content ("User Materials") to NPR.
- Register for an NPR tour or event or any contest we sponsor.
- Apply for a job, internship or fellowship at NPR
- Otherwise volunteer information to us or respond to a request for information through any of our Services.
- If you choose to participate in a survey, we may ask you to provide your date of birth, gender, education level, information about your employment, income level and other information.
Information Obtained Automatically Through Technology
You can find our Statement Regarding Cookies and Other Tracking Technologies here.
Depending on which Services you use and how you access them, the information collected automatically through technology, such as access logs, cookies, pixels and other tracking technologies, may include:
- Internet Protocol Address (IP address)
- The domain name of your Internet Service Provider
- The website, application, platform or service you visited before and after visiting our Services.
- Information about your computer or mobile device, and their browser, operating system, settings and software.
- Unique device identifiers on your mobile device, such as the Google Android Advertising ID. If you have an iOS mobile device, we may collect the Apple IDFA (Identifier for Advertisers) with your consent.
- Your approximate geographic location (derived from requested header information, such as your IP address) and/or more precise location information if you have given NPR consent to receive this information for an NPR application on your mobile device.
- The dates, times, duration and frequency of your interactions with our Services, search terms, the media files you download, interact with or share, favorites you select, and your navigation path through our Services.
- Listening and usage data, including information about your interactions with NPR podcasts and other media files, such as time and date stamps for when a file is downloaded and when playback of a particular segment or sponsorship credit or marketing message starts, stops, is skipped or paused.
- Information about your interactions with our email messages.
- Any errors you encountered during your use of the Services.
- Analytics information to understand our users, for our internal purposes, and to customize and evaluate the performance of the Services, content, sponsorship credits and marketing messages you receive.
Information Not Obtained Directly From You
Purposes for Processing of Personal Data
NPR processes your data in order to:
- Manage, administer, deliver, promote, analyze and improve the Services and our communications, including measuring and analyzing user traffic and usage patterns.
- Respond to your questions or messages and fulfill your requests for services.
- Customize the content you see and hear on our Services, including offering content from NPR Member stations associated with your account or located near you and offering other content that may be of interest to you.
- For providing and managing sponsorship credits, and marketing purposes, including customizing the sponsorship credit and marketing messages you see and hear on our Services and on third-party services you may use or visit and to measure the performance and effectiveness of such sponsorship credits and marketing messages.
- Publish, broadcast or otherwise use User Materials.
- Offer you access to NPR tours and events.
- Process applications for jobs, internships, fellowships and other positions at NPR.
- Manage contests, contact you for an online survey, or for editorial purposes.
- Recognize you as a returning user as you access our Services, content, marketing messages, and sponsorship credits using different computers, devices and browsers and to save and "remember" your registration information, settings and preferences for later visits.
- Send you email newsletters and marketing, fundraising, membership and other communications from NPR and our Member stations.
- To understand whether and when you read our email messages and click on links in those messages.
- Analyze personal preferences or interests to provide personalized content and messages from NPR and NPR sponsors and to control the sequence and frequency of those messages.
- Generate aggregate or other information that is not reasonably linkable to you or your devices used to access our Services, and use and share that information for NPR's purposes.
- We also may use the information collected from you in other ways, and for other purposes, that are described to you at the point of collection or for which we otherwise have obtained your consent.
Sharing Your Personal Data
NPR and service providers working on our behalf may share your personal data with the following categories of recipients:
- Member stations, for their internal purposes and to send you email newsletters and marketing, fundraising, membership and other communications, and for other purposes disclosed at the point of collection or for which we otherwise have obtained your consent.
- NPR's authorized service providers and vendors to provide services on our behalf.
- NPR's authorized third-party applications to provide certain Services to you on the third-party applications.
- NPR's analytics partners such as Google Universal Analytics, Google Analytics Demographics and Interest Reporting, Google Ad Manager and others.
- If we sell a Service or in the unlikely event of bankruptcy.
- Podcast producers, to the extent such data involves listening, usage and other data that does not identify you that we collect through your interaction with the podcasts and other media files produced by those third-party producers.
- With public authorities when required by law, to respond to subpoenas, court orders, legal process, and other law enforcement measures, and to comply with legal or regulatory obligations.
- With persons we contact on your behalf when you choose to email, text, or otherwise share a story or other content through the Services.
- With social networking services, if you choose to share stories or other content with your friends and followers on the social networking service.
- With any third parties if the information is anonymous and aggregate.
- With any third parties if we have disclosed such sharing to you at the time of collection of the information or if we otherwise have your consent.
Lawful Basis for the Processing of Personal Data
NPR is required to demonstrate a lawful basis for the processing of personal data. NPR relies on legitimate interest to process data for the following purposes:
- Data analytics
- Managing user accounts
- Operating, modifying and improving the Services
- Identifying usage trends
- Customizing content and user experience
- Web hosting
- Direct marketing
- Fraud prevention
- Network and information systems security
- To determine the effectiveness of promotional campaigns, sponsorship credits, and marketing messages
- To serve promotional, sponsorship, and marketing messages based on user behavior and preferences.
- Responding to user questions and requests for information
Your personal data is retained no longer than is reasonably necessary to perform the processing described in this Notice and in case of any legal claims or complaints, or as required by law.
Subject to exemptions under applicable law (which may include, depending on the circumstances, U.S. law protecting the rights to free speech and free press or EU law protecting the rights to freedom of expression or information, including processing for journalistic purposes), you have the following rights with respect to your personal data:
- To request a copy of your personal data which NPR holds;
- To request that NPR provide you access to and/or rectify personal data that is inaccurate or out of date;
- To request erasure of your personal data where it is no longer necessary for NPR to retain it;
- If you have consented to processing, the right to withdraw consent at any time;
- To request that the data controller provide you with your personal data and where possible, to transmit that data directly to another data controller, where applicable. This right of portability only applies where the processing is based on consent or is necessary for the performance of a contract and if NPR processes the data by automated means;
- To request a restriction on further processing where applicable;
- The right to object to processing if the processing is based on legitimate interest, is for direct marketing, or is for scientific/historical research and statistics;
- To lodge a complaint with a supervisory authority.
You may exercise these rights by contacting NPR at email@example.com, providing the email address you used to register with NPR, and stating your specific request in writing. NPR reserves the right to verify your identity and confirm your right to the information.
The following options for exercising your rights are also available:
You can manage your cookie settings, including accepting or rejecting cookies, by clicking the "Cookie Settings" button below.
- Browser Tools. You also have the option to set your browser to accept all cookies, reject all cookies, notify you when a cookie is set, or delete cookies. Each browser is different, so select the "Help" menu in your browser for instructions on how to use the relevant tools and settings. Note that if you disable or delete cookies, you may lose access to certain features of the NPR Services.
- Tools for "Interest-Based" Sponsorship Credits and Marketing Messages. You can learn more about opting out of receiving personalized or "interest-based" online sponsorship credits and marketing messages from our service providers, our vendors and other participating companies and you can access opt-out tools from http://www.youronlinechoices.eu.
- Google Opt-Out. To prevent your data from being used by Google Analytics, click here for the Google Universal Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout. Google also offers opt-out features to limit the use of your information for personalized or "interest-based" sponsorship credits and marketing messages at https://adssettings.google.com/. To learn more about how Google uses data, visit www.google.com/policies/privacy/partners/.
- Device Settings. You also may adjust the settings on your device to control NPR Services' use of device identifiers. For iOS mobile devices, go to "Settings" from your device's home screen, scroll down to and select "Privacy", and then select "Tracking" to adjust tracking permission. For Android mobile devices, go to "Google Settings" on your device, select "Ads"; and check the box labeled "Opt Out of Interest-Based Ads" or "Opt Out of Ads Personalization." (Please note these settings allow you to opt out of interest-based messages for all applications, not just NPR's mobile applications. These device settings options may change in the future or otherwise may differ for certain devices; consult your device manufacturer's support literature for the most current information.)
- Advertising industry opt-out tools. You also may use opt-out options offered by the advertising industry to limit use of your information for interest-based advertising by participating companies. For more information, visit Digital Advertising Alliance or Network Advertising Initiative.
- Please note that if you use these tools or settings to limit the collection and use of your information, you may still receive the same number of sponsorship credits, but they may not be as relevant to your interests. The tools or settings described above are specific to the device/browser. If you use a different device/browser or if your browser cookies expire, you may need to reconfigure your preferences by using the tools described above.
To learn more about cookie controls and browser settings, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
NPR participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. NPR uses OneTrust as its consent management platform.
- To withdraw consent for collection of precise device location, you may access the privacy settings of your mobile device and/or the settings of the NPR mobile application.
- To cancel your NPR account, or correct or update your registration information, you may sign in to your account or contact us using the information below. You can click here to learn how to cancel your podcast subscription services.
Transfer of Data Abroad
Because NPR operates the Services from the US, your personal data may be transferred to the US and/or to countries or territories outside the EEA or Switzerland not recognized by the European Commission as ensuring an adequate level of protection pursuant to the GDPR. Where required, data transfers will be made subject to the terms of the applicable EU Standard Contractual Clauses or with your consent. NPR will take all steps reasonably necessary to ensure that personal data is treated securely and in accordance with this Privacy Notice in respect of such transfer.
NPR employs physical, technical and organizational safeguards to ensure an appropriate level of security for personal data, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and security for the rights and freedoms of natural persons,
Automated Decision Making and Analysis
NPR and its data analytics and sponsorship vendors analyze user interactions with the Services to deliver personalized content to users and to serve personalized sponsorship credits and marketing messages. This includes tracking user preferences with respect to listening data, websites visited, Member station chosen, and search terms in order to derive a user's interests and preferences. The consequences of such processing for the data subject are that the data subject receives content that may be of interest to him or her, as well as email, online and in-app messages from NPR and NPR's sponsors that are geared towards the interests and preferences of the data subject.
You must be at least 18 years of age to submit any User Materials or Personal Data on or through the Services, create a public profile, or participate in any online contests. If your child is under age 16 and has provided personal data to the Services, please contact us at firstname.lastname@example.org for deletion of the data.
If NPR plans to use personal data for a new purpose, it will update this Notice and communicate the changes to individuals before starting any new processing.
Data Protection Officer
1111 North Capitol Street, NE
Washington, DC 20002
National Public Radio, Inc.
1111 North Capitol Street, NE
Washington, DC 20002, USA