General Privacy Notice
Version 1/2018-GPN
This privacy notice describes practices of Mirantis Inc., including its subsidiaries, (“Mirantis” or “we”) regarding how information collected about individuals is used and shared with third parties. This privacy notice applies to personal information collected in connection with promotion, sale, support, and use of our products and services from you or from a third party which is authorized by you to share your personal data with us.
Part I. Information Collection
Personal data that might be collected and processed by us may include:
name,
email address, phone number or other contact details,
billing and shipping information,
product purchase information,
name of your organization,
job title,
product registration information,
other data as described in a registration form or provided by customers otherwise.
In general, our basis for collection and/or further processing of your personal data is either your consent, your registration for our products, start of a contract for our products, performance of our contractual obligation.
In order to protect the privacy interests of younger Internet users, we do not actively collect information from children under 13 for marketing purposes. We encourage children of any age to provide us their personal data only with the supervision of their parents.
Part II. Information Usage
We use your personal data for the purposes for which they were provided by you or for other purposes that are legitimate under the applicable laws. The information collected by us is also used to understand how customers are using our products and services in order to make them better.
Personal information is used to fulfill orders, provide customer support, and for marketing purposes such as email announcements of new products or offers.
Anonymous, aggregated data is analyzed on a regular basis to understand product use and quality, feature popularity, quality, and to assist in the design of future products and services.
In some jurisdictions where we operate, we might be allowed to use the contact details of our customers in order to keep them updated about our new products or services which we may do until the customer decides to opt-out. We provide an option for you to choose not to receive marketing communications and you may always contact us at dataprivacy[at]mirantis.com to opt-out of marketing communications (however, we reserve the right to use your contact information if we consider it necessary to send you crucial information about the product or services you have purchased from us)
Finally, please be assured that we do not sell information collected from or about you. However, in order to deliver our services, we might engage third parties to our activities. These third parties might have access or otherwise process your personal data as described in Part IV (Third Party Recipients).
If you do not wish Mirantis to use your personal information as described in this section, please follow the procedure in Part III (Access to Your Information) below.
Part III. Access to Your Information
If you wish to correct or delete any of your personal information held by us or a change the way we use your information, please contact dataprivacy[at]mirantis.com. We will use commercially reasonable efforts to fulfill your request in a timely manner, but not more than 30 days.
If the European General Data Protection Regulation (GDPR) is applicable to collection of your data (which usually is when you are located in the European Union), you might have a number of rights with regard to your personal data. You have the right to request from us access to and rectification or erasure of your personal data, the right to restrict processing, object to processing as well as in certain circumstances the right to data portability. If you have provided consent for the processing of your data you have the right to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn. If you use any of these rights, we will respond to such request in time period consistent with the regulatory requirements. You have also the right to lodge a complaint to the supervisory authority established by the local law if you believe that we have not complied with the requirements of the GDPR with regard to your personal data. If you wish to exercise any of these rights, you can always contact our representative in the European Union.
Part IV. Third Party Recipients
Third Party Service Providers.
We may use third parties (including contractors and service providers) to help with certain aspects of our operations, which may require disclosure of your personal information to them. For example, we may use a third party to communicate with you (via telephone, email, or letter) about our products or services, to send information to you, to process and collect payment via your credit card (if applicable), and to perform other work that we may need to outsource. We require these contractors and third parties to use your personal information only as necessary to perform the services they are asked to perform and strictly in accordance with applicable laws on personal data protection.
We may also share information with companies integral to the use of the product or service. In those cases, the use of that information is subject to the privacy policies of the receiving party.
Affiliates. We may share some or all of your personal information with our current or future “affiliates” (which means a parent company, any subsidiaries, joint ventures, or other companies under a common control) but only as long as we have your consent or another valid legal title to do so, in which case we will require our affiliates to honor this privacy notice. If another company acquires Mirantis (or a business unit of Mirantis that uses your personal information), that company will possess the personal information collected by us and it will assume the rights and obligations regarding your personal information as described in this privacy notice.
Part. V. Cross Border Transfers
The personal data collected by us are stored and processed in the United States but may be processed also in other countries where our affiliates or service providers operate (which includes both EU and non-EU countries including those for which there is no adequacy decision of European Commission). When we transfer your personal data to third parties from non-EU countries for which there is no adequacy decision of European Commission, we usually use the Standard Contractual Clauses issued by the European Commission or other adequate measure used by our partners. More information can be obtained through our representative in the European Union.
Part VI. Data Storage and Retention
We use industry-standard methods of securing electronic databases of personal information. Except as provided elsewhere in this privacy notice, we limit access to personal information in electronic databases to those persons in our organization who have a business need for such access. However, you should know that no company, including Mirantis, can fully eliminate security risks associated with personal information.
Your privacy is very important to us. Due to factors beyond our control, however, we cannot fully ensure that your personal information will not be disclosed to third parties other than those mentioned above. For example, we may be legally required to disclose information to the government or third parties under certain circumstances, or third parties may unlawfully intercept or access transmissions or private communications.
We retain the personal data of individuals for a commercially reasonable time, whose length depends on the purpose for which the data was collected. In general, unless we are allowed or required to process your personal data for a longer period, we delete them after delivery of our products or services in accordance with our data retention policy. However, any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.
Part VII. Modifications
We may amend this privacy notice at any time by posting the amended version on our web sites.
Part VIII. Contact Information
Please note that the controller of all personal data processed under this privacy notice is Mirantis Inc., with registered seat at 900 E. Hamilton Avenue, Suite 650, Campbell, CA 95008, USA, +1-650-963-9828, info[at]mirantis.com.
Mirantis Inc. has appointed its representative in the European Union which is designated to address all queries or requests from individuals from European Union. This representative is our affiliate company Mirantis Czech, a.s. with registered seat at Thámova 137/16 Karlín, 186 00 Praha 8, Czech Republic, dataprivacy[at]mirantis.com.
