Notice to California Residents

Notice to California Residents

This notice describes our collection, use and disclosure of personal information of California residents in our capacity as a “business” under the California Consumer Privacy Act (“CCPA”) and their rights with respect to their personal information. For purposes of this notice, “personal information” has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA.

Your privacy rights. As a California resident, you have the following rights under the CCPA:

  • Right to know.You can request information about the categories of personal information that we have collected; the categories of sources from which we collected personal information; the business or commercial purpose for collecting, sharing and/or selling personal information; the categories of any personal information that we sold or disclosed for a business purpose; and the categories of any third parties with whom personal information was sold, shared or disclosed for a business purpose.
  • Right to access. You can request a copy of personal information that we have collected about you.
  • Right to deletion. You can request that we delete personal information that we collected from you.
  • Right to opt-out. If we “sell” or “share” your personal information as defined by the CCPA, you can opt-out of those disclosures.
  • Right to correction. You can request that we correct inaccurate personal information that we have collected about you.
  • Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.

How to exercise your rights. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion at Colorcon® | Contact Us. The rights described above are not absolute, and, in certain cases, we may decline your request as permitted by law or where the laws in your state do not afford you these rights.  We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.  You can ask to appeal any denial of a request in the same manner through which you may submit one.

Verification of identity; authorized agents.  We may need to verify your identity to process your information/know, access, deletion, and correction requests, and we reserve the right to confirm your residency. To verify your identity, we may require authentication into your Service account if you have one, provide personal identifiers we can match against information we may have collected from you previously, confirm your request using the email or telephone account stated in the request, provide government identification, or provide a declaration under penalty of perjury, where permitted by law. Furthermore, your authorized agent may make a request on your behalf. We will process your agent’s requests to exercise your rights to know, access, correction, or deletion upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to applicable state law, proof that you have given the agent permission to submit the request or additional information.

Information practices. The following describes our practices currently and during the past 12 months:

  • Sources and purposes. We collect all categories of personal information from the sources and use them for the business/commercial purposes described above in the Privacy Policy.
  • Sharing and sales of personal information.
    • Our potential use of the interest-based advertising services described above may constitute “sharing” of your personal information (including identifiers and internet/network information described in the CCPA) with our advertising partners from which you have the right to opt-out.
    • We do not otherwise “sell” personal information as defined by the CCPA. Although our Services are not intended for children under 16 years of age, we are required to inform you that we do not have actual knowledge that we have sold or shared the personal information of children under 16.
  • Sensitive personal information. We do not use or disclose sensitive personal information for purposes that California residents have a right to limit under the CCPA.
  • We do not to attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.
  • Retention. The criteria for deciding how long to retain personal information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this notice, including complying with our legal obligations.
  • Collection and disclosure. The chart below describes the personal information we collect by reference to the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140), and the categories of third parties to whom we disclose it. The terms in the chart refer to the categories of information and third parties described above in this Privacy Policy in more detail. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below. We may also disclose personal information to professional advisors, authorities and others, and business transferees as described above in the How we share your personal information section of this Privacy Policy.

Statutory category/personal information we collect (see “Personal information we collect” section above for details)

Categories of third parties to whom we disclose the personal information for a business purpose

Identifiers

·   Contact data

·   Communications interaction data

·   Affiliates

·   Service providers

Identifiers (online)

·   Device data

·   Communication interaction data

 

·   Affiliates

·   Service providers

California Customer Records (as defined in California Civil Code §1798.80)

·   Contact data

·   Communication data

·   Affiliates

·   Service providers

Commercial Information

·   Contact data

·   Marketing data

·   Online activity data

·   Affiliates

·   Service providers

Internet or Network Information

·   Device data

·   Online activity data

·   Communication interaction data

·   Affiliates

·   Service providers

Professional or Employment Information

·   Company data

·   Affiliates

·   Service providers

Inferences

May be derived from:

·   Contact data

·   Marketing data

·   Online activity data

·   Communication interaction data

·   Affiliates

·   Service providers

Protected Classification Characteristics

May be included or revealed in:

·   Contact data

·   Affiliates

·   Service providers