Privacy Policy

This Privacy Notice for Community Health Systems, Inc. (“we“, “us“, or “our“) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you visit our website at http://www.chsofwi.org, or any website linked to this Privacy Notice

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our website. If you still have any questions or concerns, please contact us at info@chsofwi.org 

What information do we collect? 

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our services

The personal information we collect depends on your interactions with us, the choices you make and the features you use. The personal information we collect may include the following:

  • name
  • phone number
  • email address
  • mailing or billing address
  • contact preference
  • debit/credit card numbers

When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

  • health data
  • race or ethnic origin
  • sexual orientation or gender identity
  • financial data
  • social security number or other government identifiers

We may collect data necessary to process your payment if you choose to make a donation or pay for services online, such as a payment number and associated data. All payment data is handled and stored by Stripe and MyChart. You may find their privacy notice link(s) here: 

https://stripe.com/privacy

https://mychart.ochin.org/MyChartCHSOFWI/Authentication/Login?mode=stdfile&option=hlthprivacy

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. 

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

How do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with our services, including:
  •  We may process your information to provide you with a requested service. 
  • We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service. 
  • We may process your information when necessary to request feedback and to contact you about your use of our services. 
 

When and with whom do we share your personal information?

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. 
 

How long do we keep your information? 

We will only keep your personal information for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). 

When we have no ongoing legitimate business need to process your personal information, e will either delete or anonymize such information, or if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it  from any further processing until deletion is possible. 

How do we keep your information safe? 

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology an be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment. 

What are your privacy rights? 

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us with the information below. Please note, this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. 

Controls for do-not-track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (DNT) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this notice. 

Privacy Rights

We only collect sensitive personal information, as defined by applicable privacy laws or the purposes allowed by law or with your consent. Sensitive personal information may be used, or disclosed to a service provider or contractor, for additional specified purposes. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you. 

We may also collect other personal information where you interact with us in person, online, or by phone or mail in the context of:

  • Receiving help through our customer support channels
  • Participation in customer surveys or contests and
  • Facilitation in the delivery of our services and to respond to your inquiries

Will your information be shared with anyone else? 

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. 

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. this is not considered to be “selling” of your personal information. 

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding 12 months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers. 

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute and in certain cases, we may decline your request as permitted by law. These rights include:

  • Right to know whether or not we are processing your personal data
  • Right to access your personal data
  • Right to correct inaccuracies in your personal data
  • Right to request the deletion of your personal data
  • Right to obtain a copy of the personal data you previously shared with us
  • Right to non-discrimination for exercising your rights
  • Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
  •  
  • How to Exercise Your Rights

  • To exercise these rights, you can contact us using the contact information on the bottom of this page. 
  •  
  • Under certain US state data protection laws you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws. 
  •  
  • Request Verification

  • Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. 
  • If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf. 
  •  
  • Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at contact@chsofwi.org. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general. 

Do we make updates to this notice? 

We may update this notice from time to time. The updated version will be indicated by an updated “Revised” date at the top of this page. If we make material changes to this notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review the notice frequently to be informed of how we are protecting your information. 

How can you contact us about this notice? 

If you have questions or comments about this notice you may contact our Data Protection Officer (DPO) by email at contact@chsofwi.org or online by filling out a Patient Concern Form

How can you review, update, or delete the data we collect from you? 

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please visit: https://chsofwi.org/contact-us/