Notice to California Customers – Your Privacy Rights
The California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et. seq. (“CCPA”), grants residents of California certain rights with respect to their Personal Information and requires us to provide such individuals with certain information, described in this.
-
- California residents may exercise the following rights by sending us an email with the following:
- Know the ways in which we collect, use, share, disclose and otherwise process your Personal Information;
- Know the specific pieces of your Personal Information that we hold;
- Request the deletion of your Personal Information, subject to several exceptions; and
- Not to be unlawfully discriminated against for exercising these rights.
We reserve the right to take reasonable steps to verify your identity before fulfilling your request to know or delete. For example, we may seek to establish your identity to a reasonable or a reasonably high degree of certainty by matching information that you submit alongside your request with information that we have on our records. We may ask for supplemental information as needed to establish your identity.
- California residents also have the right to opt-out of the “sale” of their Personal Information. We put sale in quotation marks because the CCPA considers some transfers of Personal Information to third parties in exchange for value as sales, even if no money changes hands, such as when cookies and other Tracking Technologies are shared with Third Party Businesses to further their own commercial purposes such as generating and/or adding to profiles about individuals for OBA. California residents can exercise this right by doing both of the following:
- to opt-out of “sales” that occur on the Service through cookies and other Tracking Technologies, follow the instructions in the “Do Not Sell My Personal Information” link, which can generally be found in the Service’s footer (if a website) or settings/about menu (if an application). You may need to flip a toggle or take other action as described in those instructions. Toggle settings are generally browser-, Service-, and Device-specific and may reset if cookies are cleared. If you have any questions or need assistance exercising your rights, please contact us by email or as described at the end of this document.
- Authorized agents seeking to submit requests on behalf of California residents and parents or guardians seeking to submit requests on behalf of their minors who are residents of California can submit such requests by using the forms above, by contacting ATOD by email. We may ask California residents to verify their identity and to confirm that they authorized the requestor to act on their behalf.
- The CCPA requires businesses to provide additional disclosures regarding the third parties to which we transfer Personal Information for business purposes and to whom we sell Personal Information. We provide those disclosures in the following table.
- California residents may exercise the following rights by sending us an email with the following:
Category of Personal Information | Categories of third parties to which we may have disclosed the Personal Information for a business purpose | Categories of third parties to which we may have “sold” the Personal Information |
---|---|---|
|
|
|
|
|
|
B. California’s “Shine the Light” law, Civil Code §1798.83, gives California customers the right to prevent our disclosure of their Personal Information to third parties for those third parties’ direct marketing purposes, and requires certain businesses to respond to requests from California customers asking about the business’ practices related to disclosing Personal Information to third parties for the third parties’ direct marketing purposes. Alternately, such businesses may have in place a policy not to disclose Personal Information of customers to third parties for the third parties’ direct marketing purposes if the customer has exercised an option to opt-out of such information-sharing. We have such a policy in place as discussed above.
C. California’s “Online Erasure” law, Business and Professions Code §§ 22580-22582, requires operators of certain websites and online services to allow registered users who are under the age of 18 and residents of California to request removal of Content they post. If you fit that description and posted Content on a section of our Service that is directed to California residents older than 12 and younger than 18 years of age, you may request removal of the Content by contacting us by email. In response to your request, we may elect to make the Content invisible to other users and the public (rather than deleting it entirely), in which case the Content may remain on servers we control and/or may be publicly available elsewhere if a third party copied and reposted the Content.
Notice to Residents of the European Economic Area (EEA), Switzerland and U.K.
Purposes of Processing. As explained, we process your Personal Information to process your requests, to administer the Service, facilitate access by Service Providers, Third Party Businesses, and Related Entities, make marketing communications, facilitate health, safety and legal requests, respond to your requests in connection with employment opportunities, transfer or sell our business, and to combine data sets. As explained above, we may also use, transfer and otherwise process Personal Information acquired from you directly or by use of Tracking Technologies, for marketing purposes, including to serve you with Online Behavioral Advertising (OBA).
Legal Basis for Processing. We serve you with OBA with your consent, and you have the right to withdraw consent at any time as described above. You may also do so by contacting us by email at [email protected] or as described at the end of this section. We rely on the legitimate interest basis of processing for the other activities described because processing Personal Information is necessary to provide you with our Products and to respond to your requests, our activities are reasonably expected by our visitors, and those activities do not unduly and negatively affect the privacy rights of our visitors. When you make a purchase, enter a sweepstakes, sign-up to attend an event or conference, or engage in another type of transaction with us, we may process your Personal Information to fulfill that contract. We may also process your Personal Information to comply with legal obligations to which we are subject and cooperate with regulators and enforcement bodies.
Transfers. As described above, your Personal Information may be processed in or transferred to the U.S. or elsewhere in the world. We will ensure that transfers of Personal Information to a third country or an international organization are subject to appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at [email protected].
Individual Rights. If you are a resident of the EEA, Switzerland or the United Kingdom, you are entitled to the following rights.
Please contact our Data Protection Officer to exercise these rights by email at [email protected] or as described at the end of this section. Please note : In order to verify your identity, we may require you to provide us with Personal Information prior to accessing any records about you.
- Right to access and rectify your Personal Information. You have the right to obtain information about our processing of your Personal Information and a copy of your Personal Information that we store. You have the right to request that we update your Personal Information if it is inaccurate or incomplete.
- Right to request erasure of your Personal Information. You have the right to have your Personal Information erased from our systems if the Personal Information is no longer necessary for the purpose for which it was collected or you withdraw consent and no other legal basis for processing exists.
- Right to restrict our processing of your Personal Information. You have the right to restrict our processing if you contest the accuracy of the Personal Information we store about you, our processing is deemed unlawful and you oppose erasure of your Personal Information, or we no longer need the Personal Information for the purposes for which we collected it but we must store it to comply with our legal obligations.
- Right to portability of your Personal Information. You have the right to receive your Personal Information and to transmit it to another controller where our processing is based on consent you gave us and was carried out by automated means.
- Right to object to our processing of your Personal Information. You have the right to object to our processing where we process Personal Information based on legitimate interest.
- Right to lodge a complaint.You have the right to lodge a complaint about our collection and processing of your Personal Information to your Data Protection Authority. Contact details for Data Protection Authorities are available at http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.html
- Data Protection Office. If you are a Data Protection Authority in the EEA or UK with questions about this Privacy Policy or the Service, please contact us directly by contacting us via email at [email protected].