Overview

The California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020, and created a variety of privacy rights for California consumers. Since that time California has amended the CCPA, and additional states have passed laws extending similar privacy rights to their consumers. We use this notice to make disclosures required by these state laws, in addition to information we provide on the DER Security Corp Privacy Policy.

This notice includes the following parts:

• Benefits to You: We use your personal information to benefit you and to make your experiences better.
• Control: We put you in control of your personal information, including accessing, correcting, and deleting your personal information.
• Transparency: We are transparent about how your personal information is collected, used, disclosed, shared, and sold.

Transparency

What Personal Information We Collect and Use

You have the right to know what kinds of personal information DER Security Corp (“DERSec”) collects, how we obtain and use that information, and our business purposes for that collection.

Please see the personal data we collect and the U.S. State Data Privacy sections on our privacy statement for more information.

Categories of Personal Data

The following categories describe the personal data we collect, the sources, recipients, and purposes:

• Name and contact data — Collected from interactions with users and partners; used to provide products, respond to questions, secure services, and for marketing; shared with service providers and user-directed entities.
• Credentials — Collected from interactions with users and organizations; used for authentication, account access, and security; shared with service providers.
• Demographic data — Collected from user interactions and data brokers; used to personalize products, improve development, and for marketing.
• Payment data — Collected from user interactions and financial institutions; used for transaction processing, order fulfillment, and fraud detection.
• Subscription and licensing data — Used to provide, personalize, and activate products; shared with service providers.
• Interactions — Usage data collected to provide and personalize products, improve development, and for marketing.
• Content — Collected from users and organizations; used to provide products and ensure safety.
• Video or recordings — Used for product improvement, development, marketing, and safety.
• Feedback and ratings — Used for product improvement, development, and customer support.

Categories of Sensitive Data

Subject to your privacy settings, consent, and product choices, we may collect certain sensitive data:

• Account credentials and financial data — Used to provide products and fulfill financial transactions; shared with service providers and payment processors.
• Precise geo-location information — Used to provide requested services and for product improvement.
• Racial or ethnic origin, religious beliefs, or union membership — Used only for research studies to improve product experiences.
• Contents of mail, email, or text messages — Used to provide products, improve experience, and ensure safety.

How We Share Your Personal Information

You have the right to know if your personal information is provided to third parties. We may provide personal information to Service Providers to perform services specified by written contract, including providing products, customer service, preventing fraud, processing payments, and fulfilling orders.

“Sharing” and Personalized Ads

We may “share” your personal information with third parties for personalized advertising purposes, as defined under California and other applicable U.S. state laws. Categories shared include name and contact data, demographic data, subscription and licensing data, and interactions — all shared with third parties that perform online advertising services for DERSec.

We Do Not Sell Your Personal Information

Your personal information is not “sold” as defined under the CCPA or other U.S. state data privacy laws.

We Do Not Engage in “Profiling”

DERSec does not engage in “profiling” that utilizes your personal information for automated decision-making that produces legal or similarly significant effects.

Control

Your Rights

You have the right to:

• Delete your personal information.
• Receive a copy of your personal information.
• Correct inaccurate personal information DERSec may have retained.
• Know what specific pieces of personal information DERSec has collected about you.

A valid login is required to access or delete personal information associated with a DERSec account. If you believe your request was denied, you can exercise your right to appeal by contacting support@dersec.io.

Right to Limit Use of Sensitive Personal Information

You have the right to limit the use or disclosure of your sensitive data to activities such as:

• Collecting or processing sensitive data where not for inferring characteristics about the individual
• Verifying or maintaining the quality or safety of a service or device
• Performing services on behalf of DERSec (maintaining accounts, customer service, processing payments, providing analytics)
• Short-term transient use (including non-personalized advertising)
• Ensuring security and integrity of services and combating fraudulent or illegal acts
• Performing services or providing goods you reasonably expect

We do not use or disclose your sensitive data for purposes other than those listed above without your consent.

Right to Opt-out of “Sale” or “Sharing”

DERSec does not sell your personal information. DERSec may “share” personal information with third parties for personalized advertising. You may opt-out by emailing support@dersec.io.

Right to Opt-Out of “Profiling”

DERSec does not engage in profiling that utilizes your personal information for automated decision-making that produces legal or similarly significant effects.

Benefits to You

Financial Incentives

The CCPA and other U.S. state data privacy laws allow businesses to offer consumers financial incentives for sharing personal information. Where DERSec offers these programs, your participation is optional and subject to applicable terms.

Non-Discrimination

U.S. state privacy laws prohibit businesses from discriminating against you for exercising your rights under the law. The CCPA permits businesses to provide differing levels where the difference is reasonably related to the value of the consumer’s personal information.

We determine whether someone is a California consumer by IP address.

As noted above, we do not sell personal information, and do not use or disclose your sensitive data for purposes other than those listed above, without your consent, or as permitted or required under applicable laws.