mahaska.org

  • Increase font size
  • Default font size
  • Decrease font size

Online Privacy Policy

Effective Date of This Online Privacy Policy

This Online Privacy Policy is effective as of May 1, 2007

Scope of This Online Privacy Policy

This Online Privacy Policy describes how Mahaska Communications Group LLC (“MCG,” “we,” “us,” and “our”) protects your privacy when you use the public (not password protected) www.mahaska.org (our “Site”). 

Please note that this Online Privacy Policy does not apply to the password protected areas of our Site, nor to the personal information we receive in connection with your use of our services.  Your purchase and use of products and services offered by MCG are governed by separate contracts and policies, including separate privacy policies, that apply to specific products and services — even if you access those services through this Site.  

Privacy Notices

This Online Privacy Policy may be modified or supplemented from time to time by “Privacy Notices” posted on specific areas of our Site.  For example, certain pages of our Site contain Privacy Notices providing details about the personal information we collect on those pages, why we need that information, and choices you may have about the ways we use that information.

Your Consent to This Online Privacy Policy

By using an MCG Site, you are agreeing to the collection, use, and disclosure of your personal information as described in this Online Privacy Policy.  If you do not consent to the collection, use, and disclosure of your personal information as described in this Online Privacy Policy, you may not use our Site. 

“Personal information” means information that identifies you personally, either alone or in combination with other information available to us.

Questions Concerning Our Online Privacy Practices

If you have any questions or concerns regarding this Online Privacy Policy or our privacy practices, please contact us by This e-mail address is being protected from spambots. You need JavaScript enabled to view it  or by writing us at Mahaska Communications Group LLC,  PO Box 1038, Oskaloosa, Iowa 52577.

This Online Privacy Policy May Change

We reserve the right to update or modify this Online Privacy Policy and any Privacy Notice, at any time and without prior notice, by posting the revised version of this Online Privacy Policy on the Site.  These changes will only apply to personal information we collect after we have posted the revised Online Privacy Policy on our Site.  Your use of our Site following any such change constitutes your agreement that all personal information collected from or about you through this Site after the revised Online Privacy Policy is posted will be subject to the terms of the revised Online Privacy Policy. 

To alert you to these changes, we will provide a notice at the top of this Online Privacy Policy for at least 30 days after the new effective date and highlight the changes so that you can locate them easily.  Unless the change is a minor change (such as a change in our contact information) or a non-substantive change (such as the reformatting of our Online Privacy Policy), we will also post notices (a) on our home page and/or on the relevant pages of our Site and (b) on any notice providing highlights of this Online Privacy Policy for 30 days after the new effective date to alert you to the change.

From time to time, for example, because of changes in the law or technology or the way we operate our business, we may ask your permission to use the personal information we have collected from you in new or different ways.  We will do this by sending you a notice by e-mail or postal mail at the last e-mail or postal address you provided us, asking you to agree to the change.  If you do not expressly agree to the change, we may, at our discretion, delete all or some of your personal information from our databases to avoid using your information in ways to which you have not consented. 

You may access the current version of this Online Privacy Policy at any time by clicking on the link marked "Privacy Policy" at the bottom of each page of our Site. 

This Privacy Policy was last revised on May 1, 2007 and is effective as of that date.

What Personal Information Do We Collect on Our Websites?

Information You Volunteer.  We collect the personal information you knowingly and voluntarily provide when you use our Sites, for example, the information you provide when you submit a preliminary request for services, or e-mail us with questions or comments.  We use this information to provide the information, products and services you request and as set forth below.

Information Sent to Us by Your Web Browser.  We collect information that is sent to us automatically by your web browser.  This information typically includes your IP address, the address of the web page you were visiting when you accessed our Site, the name of your operating system (such as Windows® or Macintosh®), the name and version of your browser (such as Netscape® or Internet Explorer®), and the date and time of your visit.  The information we receive depends on the settings on your web browser.  Please check your browser if you want to learn what information your browser sends or how to change your settings. 

The information provided by your browser does not identify you personally.  We use this non-personal information primarily to create statistics that help us improve our Site and make them more compatible with the technology used by our visitors.  However, if you have created a user identity on one of your visits to our Site, or if you access a MCG Site by clicking on a link in an email we have sent you, we may link the information provided by your browser to information that identifies you personally.  In addition, we may review our server logs for security purposes, such as detecting intrusions into our network.  If we suspect criminal activity, we might share our server logs -- which contain visitors’ IP addresses -- with the appropriate investigative authorities who could use that information to trace and identify individuals. 

Information We Collect Using Cookies and Other Web Technologies. Like many commercial sites, we use "cookies," and similar technologies to collect information and manage our Site.  A cookie is a small text file that is placed on your hard disk by a web server.  Cookies cannot be used to install computer programs or deliver viruses to your computer.  We may use two types of cookies -- “session cookies” and “persistent cookies.”

A “session cookie” assigns a randomly-generated, unique identification number to your computer when you access our Site.  A session cookie expires after you close your browser.  Generally, we use session cookies to collect information about the ways visitors use our Site – which pages they visit, which links they use, and how long they stay on each page.  This information is known as “click-stream data.”  Session cookies may also be used to facilitate your interactions with our Site.  We do not link clickstream data with any information that identifies you personally.

We may also use “persistent cookies.”  These cookies do not expire when you close your browser, but stay on your computer until they expire or you delete them.  Each time you visit the MCG Site, our Web server will recognize you by “searching” the information contained in these cookies.  By assigning your computer a persistent, unique identifier, we are able to create a database of your previous choices and preferences.  This permits us to offer you a personalized experience when you use our Site.  Assigning your computer a persistent, unique identifier also helps us keep a more accurate account of how many people visit our Site, how often they return, how their use of our Site may vary over time, and the effectiveness of our promotional efforts. 

Neither session cookies nor persistent cookies identify you personally.  If, however, you have created an account on our Site or if you access the Site by clicking on a link in an email we have sent you, we may link the information collected by our cookies to information that identifies you personally.

If you do not wish to receive cookies, you may set your browser to reject cookies or to alert you when a cookie is placed on your computer.  You may also delete our cookies as soon as you leave our Site.  Although you are not required to accept our cookies when you visit our Site, if you set your browser to reject cookies, you will not be able to use all of the features and functionality of our Site. 

In addition to cookies, we may also use “web beacons” and other web technologies to manage our Site and email.  A web beacon is a small bit of computer code.  Web beacons may be used to count how many people visit a web page or tell us whether an email has been opened.  We may link the information we collect using web beacons and other web technologies to information that identifies you personally. 

In What Other Ways Do We Use Your Personal Information?

MCG uses the personal information collected through MCG Site to provide the information, products and services you request; to provide you with information about products and services offered by MCG and its affiliates; to send you survey invitations related to MCG services; to display personalized content and advertising when you visit our Site; to improve our services; to improve our Site; to better market our products and services; and for any other purpose we disclose to you in a specific Privacy Notice.

We may also use the personal information you provide for other business purposes such as customer service, fraud prevention, and providing you with information and offers we believe may be of interest to you.

In addition, we may delete information that identifies you personally and study the balance of the information we collect through our Site to improve our programs and services, to improve the content, functionality, navigation and usability of our Site, to better understand the needs and interests of our customers and potential customers, and to better market our services.

With Whom Do We Share Your Personal Information?

Service Providers.  We may share personal information collected through our Site with companies and organizations that perform services on our behalf, for example, companies that provide support services to us (such as employment services and web hosting services) or that help us market our products and services. When we share personal information with our third party service providers, these service providers are required by contract to use the personal information we share with them to only perform services on our behalf (with one exception, explained below) and to protect the confidentiality of your personal information.

Protection of Our Websites and Others.  We may disclose the personal information we collect through our Site when we, in good faith, believe disclosure is appropriate to comply with the law (or a court order or subpoena); to prevent or investigate a possible crime, such as fraud or identity theft; to enforce the terms of use or other agreements that govern your use of our Site; to protect the rights, property or safety of MCG, our users or others; or to protect your vital interests.

Business Transfers.  Information submitted to our Site is an asset of MCG and/or its affiliates and will become part of our normal business records.  In addition to the transfer of information between affiliates as described in this policy, your personal information may be transferred to another company (either an affiliate or an unrelated third party) that has acquired the stock or assets of MCG, one of our affiliates, or one of our operating divisions, for example, as the result of a sale, merger, reorganization, dissolution or liquidation.  If such a transfer occurs, the acquiring company’s use of your personal information will still be subject to this Online Privacy Policy, any applicable Privacy Notices, and the privacy preferences you have expressed to us. 

Specific Situations

Please read further to learn more about the ways we collect, use, and with whom we share personal information in specific situations:

Signing up for Communications Services.  When you complete an online application for communications services, such as, telephone, e-mail, high-speed internet, digital television, and web hosting, we collect the personal information you submit on the application and use that information as set forth in this privacy policy. 

If you become a subscriber, the information you provided on the online application becomes part of your account information.  Your purchase and use of products and services offered by MCG, and our collection, use and disclosure of your account information, are governed by separate contracts and policies, including separate privacy policies, that apply to specific products and services — even if you access those services through this Site.    

 e-Bill. When you sign up for our e-Bill service, we direct you to the web site of our service provider Crescent Systems.  The use of personal information collected by Crescent Systems is governed by their privacy policy.  All credit card information submitted when you submit a payment via the e-Bill service is collected, processed, and stored by Crescent Systems, in accordance with their privacy policy.  When you provide credit card information through this site, your information goes directly from your computer to a server operated by Crescent Systems.  Crescent Systems sends us the information we need to update your account.  For your security, Crescent Systems does not share your credit card information with us.

Contacting Us. When you email an inquiry to us via the Contact Us page, we receive your name, address, email address and any other information you choose to include in your email.  The content of any email inquiries received by MCG shall be deemed to be non-confidential.  Any inquiries or materials sent to MCG through this Site shall become the sole property of MCG.  Please be assured, however, that we will not use the information you include in your email in a manner that identifies you personally without first obtaining your permission.  To learn more about the ways we use comments, suggestions, and other feedback we receive through our Site, please see the Your Comments section of our Terms of Use.

Employment Applications. When you follow the link to apply for employment at MCG, we direct you to the employment application located on the web site and server of our parent corporation Musco Sports Lighting, LLC (“Musco”).  Because the employment application is hosted on Musco’s server, the personal information you provide on the employment application is governed by the privacy policy posted on that Site.  Please take a few minutes to review the Musco.com Online Privacy Policy before submitting your application. 

As the Musco.com Online Privacy Policy explains, Musco and its subsidiaries, including MCG, use the information you submit through the career areas of our Sites to match your experience and preferences with the job openings we have.  Someone from Musco, MCG or another Musco subsidiary may contact you about a possible employment opportunity.  We use the employment information you submit only for recruiting and employment purposes, including analyzing information in the aggregate to determine demographic trends.  We do not use it for marketing purposes.  Please note that by submitting your employment information, you authorize us to transmit and store your employment information in Musco’s recruitment database as long as necessary to comply with applicable laws and regulations and to circulate that information as necessary within Musco and its subsidiaries for the purpose of evaluating your qualifications for job vacancies at Musco, MCG, or one of Musco’s other affiliates.

We may provide your employment information to The Palmer Group, a third party we hire to assist us with recruiting and staffing.  The Palmer Group is required by contract to your employment information confidential and use it only in connection with its recruiting services.  Someone from The Palmer Group may contact you in connection with an opportunity at Musco, MCG or one of Musco’s other affiliates.  If we do not have an opening that appears to be right for you, The Palmer Group may send you emails informing you of other positions outside of MCG that you may be interested in pursuing.  If you do not wish to continue receiving these e-mails, please follow the “opt-out” option at the bottom of each e-mail you receive from The Palmer Group. 

If you are hired by MCG, the information you provide during the recruiting process will become part of our employee records.

Updating Your Personal Information

If you have submitted personal information via our Site, you may update your information by contacting MCG via telephone at 641-676-1000, or by writing us at Mahaska Communications Group LLC,  PO Box 1038, Oskaloosa, Iowa 52577 or by visiting our office at 112 1st Ave West, Oskaloosa, Iowa and requesting an update of your information.

Security

Certain areas of our Site are password protected.  You are responsible for maintaining the confidentiality of your passwords.  We have the right to assume that anyone accessing our Site using a password assigned to you has the right to do so.  You agree to notify us promptly by This e-mail address is being protected from spambots. You need JavaScript enabled to view it  or by writing us at Mahaska Communications Group LLC,  PO Box 1038, Oskaloosa, Iowa 52577 or by visiting our office at 112 1st Ave West, Oskaloosa, Iowa. If you have reason to believe that your password may have been compromised or used without authorization.

Although we use reasonable measures to help protect your personal information against unauthorized use or disclosure, we cannot guarantee the security of information provided over the Internet or stored in our databases.

Children’s Privacy

MCG's Site is not directed at nor targeted to children under the age of 13.  We do not use our Site to knowingly solicit personal information from or market to children under the age of 13.  If you are under the age of 13, do not provide us with any personal information.  If we learn that someone under 13 has provided personal information to our Site, we will use reasonable efforts to remove such information from our databases.

Governing Law

This Privacy Policy is part of our Terms and Conditions and, as such, shall be governed under the laws of the State of Iowa, United States of America without regard to its conflicts of law provisions.

 

Support Information

Your IP address is: 38.107.179.206

Have Postini?

Spam / Virus Protection

Our spam filter is completely customizable by you. It catches spam and viruses before they enter your system and attack sensitive information. The cost is only $0.95 per month per email account and is an inexpensive way for you to protect your data. Call or email to sign up today!

Postini

 

 

 

Advisories

Computer Security Tips

  • ST06-004: Avoiding the Pitfalls of Online Trading
    Online trading can be an easy, cost-effective way to manage investments. However, online investors are often targets of scams, so take precautions to ensure that you do not become a victim.

    What is online trading?

    Online trading allows you to conduct investment transactions over the internet. The accessibility of the internet makes it possible for you to research and invest in opportunities from any location at any time. It also reduces the amount of resources (time, effort, and money) you have to devote to managing these accounts and transactions.

    What are the risks?

    Recognizing the importance of safeguarding your money, legitimate brokerages take steps to ensure that their transactions are secure. However, online brokerages and the investors who use them are appealing targets for attackers. The amount of financial information in a brokerage's database makes it valuable; this information can be traded or sold for personal profit. Also, because money is regularly transferred through these accounts, malicious activity may not be noticed immediately. To gain access to these databases, attackers may use Trojan horses or other types of malicious code (see Why is Cyber Security a Problem? for more information).

    Attackers may also attempt to collect financial information by targeting the current or potential investors directly. These attempts may take the form of social engineering or phishing attacks (see Avoiding Social Engineering and Phishing Attacks for more information). With methods that include setting up fraudulent investment opportunities or redirecting users to malicious sites that appear to be legitimate, attackers try to convince you to provide them with financial information that they can then use or sell. If you have been victimized, both your money and your identity may be at risk (see Preventing and Responding to Identity Theft for more information).

    How can you protect yourself?

    • Research your investment opportunities - Take advantage of resources such as the U.S. Securities and Exchange Commission's EDGAR database and your state's securities commission (found through the North American Securities Administrators Association) to investigate companies.
    • Be wary of online information - Anyone can publish information on the internet, so try to verify any online research through other methods before investing any money. Also be cautious of "hot" investment opportunities advertised online or in email.
    • Check privacy policies - Before providing personal or financial information, check the website's privacy policy. Make sure you understand how your information will be stored and used (see Protecting Your Privacy for more information).
    • Conduct transactions on devices you control - Avoid conducting transactions on public resources such as internet kiosks, computers in places like libraries, and other shared computers and devices. Other users may introduce security risks.
    • Make sure that your transactions are encrypted - When information is sent over the internet, attackers may be able to intercept it. Encryption prevents the attackers from being able to view the information.
    • Verify that the website is legitimate - Attackers may redirect you to a malicious website that looks identical to a legitimate one. They then convince you to submit your personal and financial information, which they use for their own gain. Check the website's certificate to make sure it is legitimate (see Understanding Web Site Certificates for more information).
    • Monitor your investments - Regularly check your accounts for any unusual activity. Report unauthorized transactions immediately.
    • Use strong passwords - Protect your computer, mobile devices, and accounts with passwords that cannot easily be guessed (see Choosing and Protecting Passwords for more information). Use different passwords for each account.
    • Use and maintain anti-virus software - Anti-virus software recognizes and protects your computer against most known viruses. However, because attackers are continually writing new viruses, it is important to keep your virus definitions current (see Understanding Anti-Virus Software for more information).
    • Use anti-spyware tools - Spyware is a common source of viruses, and attackers may use it to access information on your computer. You can minimize the number of infections by using a legitimate program that identifies and removes spyware (see Recognizing and Avoiding Spyware for more information).
    • Keep software up to date - Install software patches so that attackers can't take advantage of known problems or vulnerabilities (see Understanding Patches for more information). Enable automatic updates if the option is available.
    • Evaluate your security settings - By adjusting the security settings in your browser, you may limit your risk of certain attacks (see Evaluating Your Web Browser's Security Settings for more information).
    The following sites offer additional information and guidance:
    Author: Mindi McDowell
    Produced 2006, 2011 by US-CERT, a government organization. Terms of use
    Last updated April 7, 2011

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify

  • ST11-001: Holiday Traveling with Personal Internet-Enabled Devices
    The internet is at our fingertips with the widespread use of internet-enabled devices such as smart phones and tablets. When traveling and shopping anytime, and especially during the holidays, consider the wireless network you are using when you complete transactions on your device.

    Know the risks

    Your smart phone, tablet, or other device is a full-fledged computer. It is susceptible to risks inherent in online transactions. When shopping, banking, or sharing personal information online, take the same precautions with your smart phone or other device that you do with your personal computer — and then some. The mobile nature of these devices means that you should also take precautions for the physical security of your device (see Protecting Portable Devices: Physical Security for more information) and consider the way you are accessing the internet.

    Do not use public Wi-Fi networks

    Avoid using open Wi-Fi networks to conduct personal business, bank, or shop online. Open Wi-Fi networks at places such as airports, coffee shops, and other public locations present an opportunity for attackers to intercept sensitive information that you would provide to complete an online transaction.

    If you simply must check your bank balance or make an online purchase while you are traveling, turn off your device's Wi-Fi connection and use your mobile device's cellular data internet connection instead of making the transaction over an unsecure Wi-Fi network.

    Turn off Bluetooth when not in use

    Bluetooth-enabled accessories can be helpful, such as earpieces for hands-free talking and external keyboards for ease of typing. When these devices are not in use, turn off the Bluetooth setting on your phone. Cyber criminals have the capability to pair with your phone's open Bluetooth connection when you are not using it and steal personal information.

    Be cautious when charging

    Avoid connecting your mobile device to any computer or charging station that you do not control, such as a charging station at an airport terminal or a shared computer at a library. Connecting a mobile device to a computer using a USB cable can allow software running on that computer to interact with the phone in ways that a user may not anticipate. As a result, a malicious computer could gain access to your sensitive data or install new software. Don't Fall Victim to Phishing Scams If you are in the shopping mode, an email that appears to be from a legitimate retailer might be difficult to resist. If the deal looks too good to be true, or the link in the email or attachment to the text seems suspicious, do not click on it!

    What to do if your accounts are compromised

    If you notice that one of your online accounts has been hacked, call the bank, store, or credit card company that owns your account. Reporting fraud in a timely manner helps minimize the impact and lessens your personal liability. You should also change your account passwords for any online services associated with your mobile device using a different computer that you control. If you are the victim of identity theft, additional information is available from http://www.idtheft.gov/.

    For even more information about keeping your devices safe, read Cybersecurity for Electronic Devices.

    Last updated December 19, 2011

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify

  • ST06-001: Understanding Hidden Threats: Rootkits and Botnets
    Attackers are continually finding new ways to access computer systems. The use of hidden methods such as rootkits and botnets has increased, and you may be a victim without even realizing it.

    What are rootkits and botnets?

    A rootkit is a piece of software that can be installed and hidden on your computer without your knowledge. It may be included in a larger software package or installed by an attacker who has been able to take advantage of a vulnerability on your computer or has convinced you to download it (see Avoiding Social Engineering and Phishing Attacks for more information). Rootkits are not necessarily malicious, but they may hide malicious activities. Attackers may be able to access information, monitor your actions, modify programs, or perform other functions on your computer without being detected.

    Botnet is a term derived from the idea of bot networks. In its most basic form, a bot is simply an automated computer program, or robot. In the context of botnets, bots refer to computers that are able to be controlled by one, or many, outside sources. An attacker usually gains control by infecting the computers with a virus or other malicious code that gives the attacker access. Your computer may be part of a botnet even though it appears to be operating normally. Botnets are often used to conduct a range of activities, from distributing spam and viruses to conducting denial-of-service attacks (see Understanding Denial-of-Service Attacks for more information).

    Why are they considered threats?

    The main problem with both rootkits and botnets is that they are hidden. Although botnets are not hidden the same way rootkits are, they may be undetected unless you are specifically looking for certain activity. If a rootkit has been installed, you may not be aware that your computer has been compromised, and traditional anti-virus software may not be able to detect the malicious programs. Attackers are also creating more sophisticated programs that update themselves so that they are even harder to detect.

    Attackers can use rootkits and botnets to access and modify personal information, attack other computers, and commit other crimes, all while remaining undetected. By using multiple computers, attackers increase the range and impact of their crimes. Because each computer in a botnet can be programmed to execute the same command, an attacker can have each of them scanning multiple computers for vulnerabilities, monitoring online activity, or collecting the information entered in online forms.

    What can you do to protect yourself?

    If you practice good security habits, you may reduce the risk that your computer will be compromised:

    • Use and maintain anti-virus software - Anti-virus software recognizes and protects your computer against most known viruses, so you may be able to detect and remove the virus before it can do any damage (see Understanding Anti-Virus Software for more information). Because attackers are continually writing new viruses, it is important to keep your definitions up to date. Some anti-virus vendors also offer anti-rootkit software.
    • Install a firewall - Firewalls may be able to prevent some types of infection by blocking malicious traffic before it can enter your computer and limiting the traffic you send (see Understanding Firewalls for more information). Some operating systems actually include a firewall, but you need to make sure it is enabled.
    • Use good passwords - Select passwords that will be difficult for attackers to guess, and use different passwords for different programs and devices (see Choosing and Protecting Passwords for more information). Do not choose options that allow your computer to remember your passwords.
    • Keep software up to date - Install software patches so that attackers can't take advantage of known problems or vulnerabilities (see Understanding Patches for more information). Many operating systems offer automatic updates. If this option is available, you should enable it.
    • Follow good security practices - Take appropriate precautions when using email and web browsers to reduce the risk that your actions will trigger an infection (see other US-CERT security tips for more information).

    Unfortunately, if there is a rootkit on your computer or an attacker is using your computer in a botnet, you may not know it. Even if you do discover that you are a victim, it is difficult for the average user to effectively recover. The attacker may have updated files on your computer, so simply removing the malicious files may not solve the problem, and you may not be able to safely trust a prior version of a file. If you believe that you are a victim, consider contacting a trained system administrator.

    As an alternative, some vendors are developing products and tools that may remove a rootkit from your computer. If the software cannot locate and remove the infection, you may need to reinstall your operating system, usually with a system restore disk that is often supplied with a new computer. Note that reinstalling or restoring the operating system typically erases all of your files and any additional software that you have installed on your computer. Also, the infection may be located at such a deep level that it cannot be removed by simply reinstalling or restoring the operating system.


    Author: Mindi McDowell
    Produced 2006 by US-CERT, a government organization. Terms of use
    Last updated September 30, 2008

    This product is provided subject to the Notification as indicated here: http://www.us-cert.gov/legal.html#notify