Last Updated: January 17, 2021
Table of Contents
Links and interaction with third party products
Your Privacy Rights and How to Delete Your Account
Specific Provisions Applicable Under California Privacy Law
International Transfer of Data
ControlUp collects the following types of information from its Users:
We collect individually identifiable information, which is related to Users, namely information that identifies an individual or may with reasonable effort identify an individual (“Personal Information”), including the following:
As part of a registration process (e.g. when requesting a demo or a free trial or when you sign in to our platform), we collect your phone number, full name, e-mail address, and details regarding the company you work in order to provide you our Services.
In addition to Personal Information, we collect additional information which cannot be used to identify Users (collectively, the “Other Information”). Such Other Information may include:
Finally, please note that some of the abovementioned Personal Information will be used for detecting, taking steps to prevent, and prosecution of fraud or other illegal activity, to identify and repair errors, to conduct audits, and for security purposes. Personal Information may also be used to comply with applicable laws, with investigations performed by the relevant authorities, law enforcement purposes, and/or to exercise or defend legal claims. In certain cases, we may or will anonymize or de-identify your Personal Information and further use it, for internal and external purposes, including, without limitation, to improve the services and for research purposes. “Anonymous Information” means information which does not enable identification of an individual user, such as aggregated information about the use of our services. We may use Anonymous Information and/or disclose it to third parties without restrictions (for example, in order to improve our services and enhance your experience with them).
Processing of Personal Information is necessary for the performance of our contractual obligations towards you and providing you with our services (e.g., to complete your registration, to communicate with you, to process your requests, to provide you with a demo, etc.), to protect our legitimate interests and to comply with our legal obligations. We also ask for your consent to process your Personal Information for a specific purpose that we communicate to you, for example to send you marketing communications. When you consent to our processing your Personal Information for a specified purpose, you may withdraw your consent at any time and we will stop processing of your data for that purpose.
In addition to the purposes listed above, the information we collect, which may include your Personal Information, is used for the following purposes:
We may share, distribute, sell or rent any of your Personal Information with/to third parties in the following circumstances:
If you want to receive the list of the current recipients of your Personal Information, please make your request by contacting us to firstname.lastname@example.org.
We enable you to interact with or contain links to your third party account (such as social media accounts) and other third party websites, mobile software applications and products or services that are not owned or controlled by us (each a “Third Party Service”). We are not responsible for the privacy practices or the content of such Third Party Services. Please be aware that Third Party Services may collect Personal Information from you. Accordingly, we encourage you to read the terms and conditions and privacy policies of each Third Party Service that you choose to use or interact with.
We do not offer our products or services for use by children and, therefore, we do not knowingly collect Personal Information from, and/or about children under the age of eighteen (18). If you are under the age of eighteen (18), do not provide any Personal Information to us without involvement of a parent or a guardian. For the purposes of the GDPR, we do not intend to offer information society services directly to children. In the event that we become aware that you provide Personal Information in violation of applicable privacy laws, we reserve the right to delete it. If you believe that we might have any such information please contact us at email@example.com.
We follow generally accepted industry standards and appropriate technical, organizational and security measures to protect the Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, due to the nature of Internet communications and evolving technologies, unauthorized entry or use, hardware or software failure, and other factors, the security of User information may be compromised at any time. Therefore, we cannot guarantee the absolute security of the Information and disclaim any assurance that such information will remain free from loss, misuse, or alteration by third parties who, despite our efforts, obtain unauthorized access.
The following rights (which may be subject to certain exemptions or derogations), shall apply to certain individuals (some of which only apply to individuals protected by the GDPR):
You can exercise your rights by contacting us at firstname.lastname@example.org. You can use an authorized agent to submit a request on your behalf if you provide the authorized agent written permission signed by you. To protect your privacy, we take steps to verify your identity before fulfilling your request. Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly in accordance with applicable law or inform you if we require further information in order to fulfil your request. When processing your request, we may ask you for additional information to confirm or verify your identity and for security purposes, before processing and/or honoring your request. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
In the event that your request would adversely affect the rights and freedoms of others (for example, would impact the duty of confidentiality we owe to others) or if we are legally entitled to deal with your request in a different way than initial requested, we will address your request to the maximum extent possible, all in accordance with applicable law.
Deleting your account: Should you ever decide to delete your account, you may do so by emailing email@example.com. If you terminate your account, any association between your account and Personal Information we store will no longer be accessible through your account.
This Section applies only to “consumers” (as defined under the California Consumer Privacy Act (“CCPA”)) who reside in California and whose Personal Information, as processed by ControlUp, is subject to the CCPA’s individual privacy rights provisions.
You have the right to request that businesses that are subject to the CCPA disclose certain information (what Personal Information the business collects, uses, and discloses) to you about their collection and use of your Personal Information and to disclose to you specific pieces of your Personal Information that a business has collected. In addition, you have the right to ask such businesses to delete personal information collected from you, subject to certain exceptions. You may exercise such access and deletion rights through an agent.
If the CCPA applies to our processing of your Personal Information and you make one of the rights requests described above, please contact us as provided below. We will seek to verify your identity and your agent’s authority when we receive an individual rights request from you or on your behalf to ensure the security of your Personal Information. To do so, we will seek to match information we ask you to provide with information that we have already collected from you.
If a business sells personal information, you have a right to opt-out of that sale. Businesses may not discriminate against you for exercising any CCPA rights, such as the access and deletion rights described above.
California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to firstname.lastname@example.org. Please note that we are only required to respond to one request per customer each year.
ControlUp does not monitor, recognize, or honor do not track mechanisms, including general web browser “Do Not Track” settings and/or signals. If an End User is a California resident, California Civil Code Section 1798.83(c)(2) permits such individual to request information regarding the disclosure of his/her information by ControlUp to third parties for such third parties’ direct marketing purposes. To make such a request, please send us an email to email@example.com.
We will retain your Personal Information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. We will keep records as required by applicable laws and regulations.
We rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.
ControlUp transfers information that it collects to affiliated entities or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world and outside of the EEA. In such cases we will transfer your data only to such countries as approved by the European Commission as providing adequate level of data protection or enter into legal agreements with standard safeguards published by the European Commission. If you require more information or need a copy of such legal agreements, please send us an email to firstname.lastname@example.org.
If you have any questions, concerns or complaints regarding our compliance with this notice and the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us at email@example.com.