The Midwest Furry Fandom, Inc. (“MFF") Privacy Policy governs MFF’s collection and use of personal information from staff members, convention attendees, and visitors to our website. Providing requested personal information in connection with serving as MFF staff, attending Midwest FurFest, or visiting MFF’s website constitutes your consent to the terms of this policy.

What information does MFF collect, and why?

MFF collects, uses, and stores personal information such as your legal name, physical address, date of birth, and contact information (including Email address and phone numbers). We use this information to make online services available to you, share relevant event information with you, and to comply with MFF’s staffing, legal, and contractual obligations.

MFF also automatically receives and records non-personal information on server logs including your computer’s or mobile device’s IP address, cookie information, and the page you requested.

How does MFF share information with third parties?

MFF may disclose your personal information when:

• We have your express consent to share the information for a specified purpose.
• We need to respond to subpoenas, court orders, or such other legal process.
• We need to ensure your personal safety and wellbeing at one of our events.
• We need to protect the personal safety of the users of our websites or defend the rights or property of MFF.
• We must enforce MFF’s policies or its legal and contractual rights.
• When required for MFF’s internal operations after removing identifying information such as your name, contact information, and badge number.

Is my personal information secure?

MFF uses reasonable safeguards to protect personal information that you provide including access control procedures, network firewalls and physical security measures, some of which are maintained by contracted third party agents and service providers. In addition, MFF retains your personal information only as long as necessary to fulfill the purposes identified above or as required by law, contract, or MFF policy.

Unfortunately, no data transmission over the Internet can be considered 100% secure so please be careful when deciding whether to provide personal information to MFF.

What else do I need to know?

MFF may, in its sole discretion, amend this policy from time to time, so please review this policy periodically. Anyone may find the most recent version of this policy, and other policies, on our wiki. Your continued use of MFF websites or participation in MFF activities after any such amendments constitutes your agreement to the terms of the revised policy.

If you wish to revoke your consent to the terms of this privacy policy, you may do so by contacting legal@FurFest.org. If you do so, MFF will delete personal information you may have provided. You may need to re-register for MFF services or activities if you want to participate in them in the future.

Midwest FurFest is dedicated to providing a harassment-free convention experience for all, regardless of age, race, gender, gender identity or expression, sexual orientation, disability, physical appearance, or personal beliefs. We do not tolerate harassment of any kind of convention attendees, volunteers, staff, or guests; harassment is considered a serious breach of this code of conduct. This policy applies equally to attendees, staff, contractors, and agents of MFF. If someone requests to be left alone, respect their wishes. Individuals experiencing harassment should contact any member of MFF staff as soon as possible.

Wearing or displaying garments, costumes, or signage that are deemed by MFF to communicate hostile messaging or sentiment is not permitted anywhere at MFF functions. Individuals in violation of this policy will be required to remove such items.

Purpose and Scope: The purpose of this policy is to maintain an adequate level of security and information integrity to protect Midwest Furry Fandom ("MFF") and its business unit's data and information systems from unauthorized access, use and information disclosure. This policy defines the rules necessary to achieve this protection and to ensure a secure and reliable operation of MFF information systems. All systems, compute resources, services and email for which MFF exercises administrative control are included in this policy, whether hosted by MFF or contracted to a third party.

While particularly applicable toward individuals with credentials allowing access to MFF systems, networks, software, information, and datasets, this policy applies to any staff, agent, consultants or contractors with access to, or provided, information not generally accessible to the general public.

Policy: In general, accounts shall be used solely for activities within the scope of an individual's roles and responsibilities. Only authorized users are granted access to information systems, and users are limited to specific defined, documented and approved applications and levels of access rights. Computer and communication system access control is to be achieved via user IDs that are unique to each individual user to provide individual accountability. Individuals are prohibited from gaining access to, or using, a computer system without proper authorization granted through the MFF corporate leadership structure, sharing accounts, or in any way damaging, altering, or disrupting the operations of these systems. Individuals shall not attempt to circumvent system security without the explicit permission of the owner of that system.

Definitions:

• Non-public Information is defined as any information that is inaccessible without credentials or explicit written permission by the Data Owner, and not published to the general public.
• Restricted Information is defined as any information inaccessible without specific permissions beyond the basic (default) access level for the application or system. This information includes, but is not limited to, Personally Identifiable Information (PII), contracts, security logs (operational, computing, or otherwise), proprietary data, attendee records and personnel records.

Prohibited Uses: Staff may not use MFF resources for any unofficial purposes. Specifically prohibited activities include:

• Setting up personal businesses.
• Sending chain letters.
• Transmitting unsolicited commercial or advertising material
• Disclosing Midwest Furry Fandom’s confidential information and messages without authorization.
• Distributing, disseminating, or storing any materials that are discriminatory, obscene, or illegal.
• Distributing, disseminating, or storing or any materials that might be considered indecent, pornographic, offensive, or abusive unless directly related to official Midwest Furry Fandom business such as Midwest FurFest dealer’s room, art show, or artist alley activities.
• Conducting personal attacks on others or take actions that violate Midwest Furry Fandom, Inc.’s anti-harassment policy.
• Violating Midwest Furry Fandom, Inc.’s or any third party’s copyrights, trademarks, or other intellectual property rights.
• Gaining unauthorized access to or making unauthorized use of FurFest.org or any third party’s computer system.
• Publishing unsolicited personal views on social, political, religious or other non-business related matters.
• Undertaking deliberate activities that waste staff effort or networked resources.
• Distributing computer viruses or malware

Appropriate Access of Non-Public Information: The bulk of information found on MFF systems and resources are classified non-public. Such information may be freely accessed and shared by, and among, all active staff and approved individuals. Non-Public Information shall not be disclosed, shared, published or released without written permission from corporate management, or convention leadership at the department director level or above.

Appropriate Access of Restricted Information: Access to Restricted Data must be approved by the designated Data Owner. Restricted data shall not be disclosed, shared, published or released to any party not specifically approved by the Data Owner. Copies of Restricted Information shall not be retained on non-MFF systems without approval of the Data Owner. Processing Restricted Information should not be performed on non-MFF systems when at all possible. When such workflows are required, users shall securely remove Restricted Information from non-MFF systems at the conclusion of the workflow. Financial data must be protected in accordance with all applicable PCI DSS Requirements.

Determining Access Approval: In Confluence, approved individuals may be determined by using the padlock button (or additionally the "Access" button, if available) on the toolbar; other systems and applications vary.

Monitoring. No warranty of privacy, express or implied, is conveyed. Any data may be inspected or examined in MFF accounts and systems. e-mail accounts are not personal, and there is no right to privacy associated with their use.

Inappropriate Systems Use or Information Disclosure: Inappropriate use, disclosure, retention, copying or other mishandling of non-public and restricted information may result in dismissal and/or pursuit of civil remedies by MFF.

Agreement: I understand and shall comply with the terms and conditions of this policy. I further understand administrative access (access levels beyond that of a normal user) requires an express additional agreement prior to receiving or using administrative credentials.

Midwest Furry Fandom, Inc., has elected to obtain Worker’s Compensation coverage for staff members receiving non-cash benefits that are unavailable to non-staff, including, but not limited to, registration credit and early access to hotel rooms. We are required to characterize the type of work our staffers perform for the purpose of insurance reporting. At the time of reporting, your primary department will be used to determine the nature of the work you performed.

Any claim against this coverage is subject to eligibility review by the insurer; Midwest Furry Fandom, Inc. cannot, and does not, guarantee eligibility or coverage for any specific person or circumstance. Contractors, agents and other individuals covered by their employer's policy while staff are expressly excluded from staff coverage. Questions regarding coverage or filing a claim should be directed to hr@furfest.org.  Additional information is posted online in the wiki and during the convention in Operations as required by Illinois state law.

I, the undersigned, do hereby state that I wish to participate in activities sponsored by the organization known as Midwest Furry Fandom, Inc., an Illinois not‐for‐profit corporation (hereafter "MFF").

MFF publishes policies that govern and may restrict the activities in which I can participate. These policies include, but are not limited to the Midwest FurFest Code of Conduct.

MFF makes no representations or claims as to the condition or safety of the land, structures or surroundings, whether or not owned, leased, operated or maintained by MFF.

I understand that all activities are VOLUNTARY and that I do not have to participate unless I choose to do so. I understand that these activities are potentially dangerous or harmful to my person or property, and that by participating voluntarily accept and assume the risk of injury to myself or damage to my property.

I understand that MFF does NOT guarantee any insurance coverage for my person or my property. I acknowledge that I am responsible for my safety and my own health care needs, and for the protection of my property.

In exchange for allowing me to participate in these MFF activities and events, I agree to release from liability, agree to indemnify, and hold harmless MFF and any MFF agent, officer or MFF employee acting within the scope of their duties, for any injury to my person or damage to my property. This clause is not applicable to the Board of Directors or Corporate Officers.

This Release shall be binding upon myself, successors in interest, and/or any person(s) suing on my behalf.

I have read the statements in this document. I agree with its terms and have voluntarily signed it. I understand that this document is complete unto itself and that any oral promises or representations made to me concerning this document and/or its terms are not binding upon MFF, its officers, agents and/or employees.

I UNDERSTAND THAT THIS IS A LEGAL DOCUMENT. I HAVE READ AND UNDERSTOOD THIS RELEASE AND I UNDERSTAND ALL ITS TERMS. I EXECUTE IT VOLUNTARILY AND WITH FULL KNOWLEDGE OF ITS MEANING AND SIGNIFICANCE.

I have been provided a link to the Staff Safety Manual (https://wiki.furfest.org/display/HR/Staff+Safety+Manual), understand its contents and agree to abide by the policies and guidance therein.

Midwest Furry Fandom, Inc., develops and publishes policies and rules covering safety, licensing, media use, conflict of interest and other subjects. These policies exist to ensure a safe environment for all and to ensure compliance with contracts, and state and federal law. I understand that making myself aware and abiding by these policies is a condition of continuing as staff with Midwest FurFest. A complete set of policies is made available to staff on the Midwest FurFest wiki.