INTRODUCTION
Welcome to Mitratech Holdings, Inc., (“Mitratech”, “Our”, “We”, or “Us”)! We understand the impact Our privacy practices may have on You when You share data with Us, and therefore we are committed to protecting Your privacy in all aspects of Our business. This Privacy Policy explains what information We collect from Our end-users, clients, partners and Site visitors (“You”, “Yours”); how We use that information; and the rights You may have with respect to Your Data. This Policy applies to Mitratech and its subsidiaries (a list of all subsidiaries can be found at https://mitratech.com/legal-notice/entity-and-subsidiaries/.
To use certain features of Our Site or access specific services and/or products available through the Site, We may process certain Personal Data. You will be provided with the mechanisms necessary to manage your preferences regarding the processing of Personal Data that is not necessary for the provision of the Services, such mechanisms are described in this Privacy Policy. If you do not agree to the processing of Personal Data essential to the functionalities of the Site or the Services You request, You might not be able to use those specific features or Services.
YOUR ACCEPTANCE OF THIS POLICY AND MODIFICATIONS
WE MAY CHANGE THIS PRIVACY POLICY FROM TIME TO TIME IN OUR SOLE AND REASONABLE DISCRETION. IF WE MAKE MATERIAL CHANGES THAT ALTER YOUR RIGHTS OR IMPACT YOUR PERSONAL OR SENSITIVE DATA WITH US, WE WILL NOTIFY YOU BY REVISING THE DATE AT THE TOP OF THIS WEBPAGE AND PROVIDING YOU WITH WRITTEN NOTICE (SUCH AS ADDING A STATEMENT TO OUR HOMEPAGE AND SENDING YOU AN EMAIL OR NOTIFICATION). ANY AMENDED PRIVACY POLICY SHALL SUPERSEDE ALL PRIOR VERSIONS AND SHALL BE DEEMED ACCEPTED UPON YOUR CONTINUED USE OF THE SITES AND/OR SERVICES, UNLESS AGREED OTHERWISE IN AN ENFORCEABLE AND VALID WRITTEN AGREEMENT BETWEEN US AND YOU.
IMPORTANT PRIVACY PRACTICE NOTES
First and foremost, We do not sell or share Your Data with any third-party that is not required to provide You with the Services and/or Site.
Some of Our subsidiary Services may collect, store, require, transmit, or otherwise process sensitive data, individually identifiable health information or PHI via the Site or Services in connection with use of the Sites and/or Services.
Our Site, Services, and communications may involve interactions with various third parties regarding Your Personal Information. We engage trusted Sub processors to perform specific services on Our behalf. Your data, when processed by these providers acting as Sub processors, is covered by the terms of this Privacy Policy.
Mitratech’s Sites, Services and/or communications may contain, for your convenience, links to websites or other online services or products provided by third parties, when You click on such links and leave our Site, any information you provide directly to those third parties, or that they collect from you, will be governed by their respective privacy policies. We are not responsible for the content, privacy practices, or data security of these independent third-party sites or services, and we encourage you to review their policies before sharing any Personal Information.
Mitratech may use SSO integrations to offer third party solutions and/or products, and such links and integrations do not mean that (a) We endorse such websites, products, and/or services; (b) We represent and/or warrant the quality, usability and/or accuracy of the information presented by the third party provider; nor (c) We represent and/or warrant their privacy practices and data security. You acknowledge and agree that We are not liable or responsible, fully or in part, for the collection and/or use of Your information by third parties and/or third-party websites, offerings, services and/or products, even if such offerings are made through Mitratech’s Sites and/or Services. The privacy and data practices of third parties are governed by their respective privacy policies.
Mitratech, as a standard practice, does not knowingly or specifically collect, use or require any Data about minors under the age of 18. Mitratech Sites are not intended for minors under the age of 18, and the Services should not be used by individuals under the age of 18. Consistent with the COPPA requirements, if You believe We have mistakenly or unintentionally collected such information without first receiving a parent or legal guardian’s verified consent, please notify Us so that We may delete the information from Our servers. We will use any collected information solely to inform the child that use of the Site and Services is prohibited, and any collected Data will be immediately deleted.
LASTLY, MITRATECH DOES NOT PROVIDE PROFESSIONAL LEGAL, TAX OR ACCOUNTING ADVICE AND/OR SERVICES. YOU SHOULD SEEK INDEPENDENT PROFESSIONAL ADVICE IN THESE AREAS IF NEEDED.
- DEFINITIONS
The following terms are frequently used in this Policy and are defined here for Your reference.“Affiliate” includes any entity owned, whether wholly or partially, by Mitratech Holdings, Inc.“Business Information” includes Your job title or department; Your employer’s name, phone number, postal address, payment information, type of company, company industry, and company size.“COPPA” means the Children’s Online Privacy Protection Act.“Data” means, collectively, the following information: Order Information, Payment Information, Personal Information, Usage Data, Business Information, User Information, Sensitive Data, and User Content.“Data Controller” is the entity or natural person that determines the purpose(s) for which and the means by which personal data is processed. In this instance, Mitratech may be the Data Controller.“Data Processor” means an entity or natural person, public authority, agency or other body which processes personal data on behalf of a controller. In some instances, Mitratech may be the Data Processor.“Data Subject” means a natural person whose personal data is processed by Us.“Consent” is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, written or verbal, that signifies agreement to the processing of personal data relating to the You.“Cookies” means small text files that can be read by a web server in the domain that put the cookie on your hard drive.“Client” means, a customer that is authorized by Us to access and use the Services or a portion thereof or a customer directly contracted with Us for Mitratech Services.“EEA” means the European Economic Area.“FDPA” means the Swiss Federal Data Protection Act.“Mitratech” means, Mitratech Holdings, Inc., and its Affiliates, “Mitratech” or “We”, or “Us”.“GDPR” means the UK/EEA General Data Protection Regulation.“Order Information” may include company names, contact name and information, products/services purchased, shipping address, telephone number, email address, billing address.“Partner” means an entity purchasing subscriptions to the Services and authorized by Us to provide access to and use of the Services or a portion thereof to a Client, or on behalf of a Partner’s Client.“Payment Information” means information required to process any orders for the Services, such as Your name, credit card information, billing information, address, expiration dates and processing codes.“Personal Information” means information associated with or used to identify You, such as: (a) Your first and last name, email address, postal address, phone number, and some Usage Data under applicable law.“PIPEDA” means the Personal Information Protection and Electronic Documents Act.“PHI” means protected health information as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Privacy Rule.
“Policy” means this Privacy Policy as updated and amended from time-to-time.
“Sensitive Data” any information relating to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, or information that reveals race, ethnic origin, sexual orientation, political opinions, religious or philosophical beliefs, or trade union membership, or that concerns an individual’s health.
“Services” means the Mitratech services, solutions, applications, and products.
“Sites” means Mitratech’s website located at www.mitratech.com and its subpages and Affiliate subdomains.
“Third-Party Service Provider” means a third-party performing work for Us or a portion of the Services on Our behalf.
“Usage Data” means information about Your activity on the Site or Services that, by itself, does not identify You, such as: (a) browser type, operating system, webpages visited, access times, links clicked, and the page visited before navigating to Our Site or Services; (b) technical information about the computer or mobile device You use to access Our Site or Services, including hardware model, operating system and version, unique device identifiers, location data, IP address, domain name, internet service provider, or network information; (c) information searched for, observed, or accessed while using the Services; or (d) metadata related to User Content, such as date, time, or location.
“User Content” means content uploaded or submitted by Users such as information, documents, images, photographs, videos, notes, sounds, data, and posts.
“UDID” means Your city location, device model and version, and device identifier.
“User Information” means information such as name, username, password, email address, phone number, and address.
“User” means any individual or entity that uses the Site and/or Services or a portion thereof on behalf of a Client or Partner or through the account or passwords of either, whether authorized or not, including without limitation the employees, contractors and/or agents of either.
“You” or “Your” means the individual visiting, accessing, or using the Site and/or Services in his/her/their individual capacity or as a User, Partner, or Client, as the context requires.
GENERAL USE OF DATA; PROCESSING; AND TRANSFERS
- Use of Data
In general, We use Data to provide Our Sites and Services, to perform Our contractual agreements with Our Partners, Clients and Users, and for related business purposes, such as, product development, marketing, legal compliance, and other similar business and legal purposes, such as:
- To provide the Site and Services;
- To operate, maintain, develop, improve, or personalize the Services or other products and services We offer;
- To provide customer service or support, or to respond to Your comments, questions and requests;
- To send technical notices, updates, security alerts, and support or transactional messages relating to Your account;
- To share aggregate, de-identified or anonymized Data with authorized third-parties;
- To communicate with You about products, offers, promotions, rewards, and events We or others offer, or provide news and information We think will be of interest to You, unless You have opted-out;
- To monitor and analyze trends, usage, and activities in connection with Our Services;
- To provide advertisements about content or features more relevant to You, unless You have opted-out;
- To assess the effectiveness of and improve advertising and other marketing and promotional activities on or in connection with the Services;
- To process Your transactions and send You related information, such as confirmations and invoices;
- To refer You to Affiliates to which You request or Consent;
- To help Us develop new products and services or improve Our existing Services;
- To power, provide and/or develop solutions, offerings, products and/or services powered by artificial intelligence and/or machine learning;
- To improve Mitratech’s artificial intelligence models, services and features that are intended for Your use with the Services;
- To provide data insights to a Client’s Partner or sponsor;
- To enforce Our Terms of Service and other applicable agreements or policies; and
- To carry out any other lawful purpose for which information was collected.We may derive information or draw inferences based on information collected when You access or use the Services. For example, We may make inferences about Your interest in Our products and services based on Your location, browsing behavior, usage behavior, and past purchases. To improve the Services, information collected may be used in an aggregated or deidentified manner. We may combine Data provided to Us directly by You with information from other sources, such as social media or data brokers, and use the combined information as described in this Policy.
- Machine Learning. Your Personal Information may also be used by Us and its Affiliates, or shared with authorized Subprocessors, contractors and/or agents to:
- develop, train (unless otherwise provided), or enhance artificial intelligence or machine learning models, products, services, features, and/or intellectual property, that are part of or may become part of Our Services, including third-party components of the Services (collectively referred to as, “AI Services”); and
- analyze, assess and/or gather information related to Your outputs, inputs, usage, functionality, and/or feedback relating to the AI Services, which shall be used in an aggregate or deidentified form.Nothing in this section will reduce or limit Our obligations to comply with applicable data protection and privacy laws. You represent and warrant that You have all rights, titles, interests or licenses in and to the Data, and You authorize Us to process Your Data for the purposes listed herein
- Processing of Data
We will only process Your Data as outlined in this Policy and for the purposes indicated herein. We may process Your Data in the following countries:
| United States |
Hosting, processing |
| Australia |
Hosting, processing |
| India |
Hosting, processing |
| Mexico |
Hosting, processing |
| European Union |
Hosting, processing |
Nonetheless, We require that all hosting services, sub-processors, and third-party Service Providers are limited in their access, usage, sharing and disclosure through contractual commitments and required security and privacy standards and measures.
- Onward Transfers of Data
You understand and agree that Mitratech may transfer Your Data to authorized third party providers in the following territories outlined in the preceding clause.For some business processes, it is necessary to pass on Data relating to clients or partners to third parties. If the recipient is located in a third country, he/she must guarantee an adequate level of data protection in line with this statement. This does not apply if the data transmission is carried out owing to a statutory obligation, or to any other permissible legal obligation. The recipient must be bound under contract only to use the data for the specified purpose.
Mitratech will obtain assurances from their agents that they will safeguard sensitive information consistently with this statement. Examples of appropriate assurances that may be provided by agents include but are not limited to: a contract obligating the agent to provide at least the same level of protection as is required by the relevant Data Privacy Principles, being subject to the EU General Data Protection Regulation (Regulation (EU) 2016/679), or being subject to another European Commission adequacy finding. When Mitratech becomes aware that an agent is using or disclosing sensitive information in a manner contrary to this statement, Mitratech will take reasonable steps to prevent or stop the use or disclosure. Mitratech may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
Mitratech primarily stores data about clients and visitors to the Mitratech website in the United States. To facilitate Mitratech’s global operations, Mitratech may transfer and access such information from around the world, including from other countries in which Mitratech has operations, such as the United States, Mexico, United Kingdom, countries within the European Union, Singapore and Australia. A list of the Mitratech’s global offices is available upon request. This statement shall apply even if Mitratech transfers data to other countries.
In the case that data is transmitted to Mitratech by third parties, it must be ensured that the data have been collected lawfully in accordance with the relevant legal provisions, and that the use of such data for the intended data processing activities is permitted.
Supplemental Rights for California Residents
- California Disclosures
If You are a California resident, You have certain additional rights concerning Your data under the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (CPRA), as further described below.
- Personal Information Collected
We will never sell for monetary remuneration Your Personal Information without Your prior written consent. We only share Data and information so that We can provide the Services and help Our partners and third-party affiliates provide the Services to You. We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user, household or device (“CCPA Personal Information”). In particular, We have collected the categories of personal information from Our Sites Users within the last 12 months outlined in Appendix A, for the purposes described in this Policy.Personal Information does not include publicly available information, information from public government records, de-identified or aggregated consumer information, or other information excluded from the CCPA’s scope. We will not collect additional categories of Personal Information or use the Personal Information We collected for materially different, unrelated, or incompatible purposes without providing You with notice.
- Disclosing Personal Information
In the preceding 12 months, We have disclosed the following categories of customers’ CCPA Personal Information (as defined above) for the purposes described in this Policy: identifiers; and California Customer Records personal information categories:
- Sale of Personal Information
In the preceding 12 months, We have not sold any of Our Users’ Personal Information.
- Collection, Disclosure and Use Rights
Pursuant to the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA), service users, consumers and website visitors who are California residents have the following specific rights regarding Your Personal Information:(1) Right to Notice; (2) Right to Access/Right to Request; (3) Right to Know; (4) Right to Delete or Anonymize; (5) Right to Opt-Out; (6) Right to Not Be Discriminated Against Right to Notice of Financial Incentive. Mitratech may deny Your deletion request if retaining the information is necessary for Us or Our service provider(s) to complete certain business purposes, contractual obligations or to comply with legal obligations.You can exercise these data rights by writing to Us at [email protected]
- Access To Specific Information and Data Portability Rights
You have the right to request that We disclose certain information to You about Our collection and use of Your Personal Information over the past 12 months. Once We receive and confirm Your verifiable consumer request, We will disclose to You:
- The categories of Personal Information We collected about You.
- The categories of sources for the Personal Information We collected about You.
- Our business or commercial purpose for collecting or sharing that Personal Information.
- The categories of third parties with whom We share that Personal Information.
- The specific pieces of Personal Information We collected about You (also called a data portability request).
- If We disclosed Your Personal Information for a business purpose, the personal information categories that each category of recipient obtained.
- Deletion Request Rights
You have the right to request that We delete any of Your Personal Information that We collected from You and retained, subject to certain exceptions. Once We receive and confirm Your verifiable consumer request, We will delete or make Your Personal Information de-identified or anonymous (and direct Our Service Providers to do the same) Your Personal Information from Our records, unless an exception applies. Upon deletion, de-identification or anonymization, We shall not be able to honor any outstanding or earned credits, refunds, points or other promotions and offers. We may deny Your deletion request if retaining the information is necessary for Us or Our service providers to:
- Complete the transaction for which We collected the Personal Information, provide a good or service that You requested, take actions reasonably anticipated within the context of Our ongoing business relationship with You, or otherwise perform Our contract with You.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if You previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with Us; or
- Comply with a legal obligation.
- How to Exercise Your Rights
To exercise the access, data portability, and/or deletion rights described above, or if You would like more information about Your rights, please submit a verifiable consumer request to Us by:
- emailing [email protected] with “Mitratech – California Privacy Rights Request” in the subject line.
- Calling Us at this toll-free phone number: (+1) 888 784 7224Only You, or someone legally authorized to act on Your behalf, may make a verifiable consumer request related to Your Personal Information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative, which will require proof that the person is authorized to act on Your behalf. Additionally, the verifiable consumer request must describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.
- Limits on Requests
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must (i) provide sufficient information that allows us to reasonably verify You are the person about whom We collected Personal Information or an authorized representative, and (ii) describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.We will not be able to respond to Your request or provide You with Personal Information if We cannot verify Your identity or authority to make the request and confirm the Personal Information relates to You.Making a verifiable consumer request does not require You to create an account with Us. However, if You do have an account with Us, You can make a verifiable request through Your account. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. In Your request to Us, please DO NOT submit more personally identifiable information than You have already provided to Us.
- Response Timing and Format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If We require more time (up to 90 days total), We will inform You of the reason and extension period in writing. We will deliver Our written response by email electronically, at Your option. Any disclosures We provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response We provide will also explain the reasons We cannot comply with a request, if applicable. For data portability requests, We will select a format to provide Your Personal Information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.By writing to Us, You agree to receive communication from Us seeking information from You in order to verify You to be the consumer from whom We have collected the data from and such other information as reasonably required to enable Us to honor Your request.We do not charge a fee to process or respond to Your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If We determine that the request warrants a fee, We will tell You why We made that decision and provide You with a cost estimate before completing Your request.We will not discriminate against You for exercising any of Your CCPA rights. If You request to delete, stop processing or anonymize or de-identify Your Personal Information or delete Your account, You may not be entitled to any outstanding and/or earned credits, refunds, returns, or similar offers or promotions, and You will no longer have access to the Services.
- Service Providers Obligations
Only to the extent that Mitratech, or its Affiliates, are considered a Service Provider and You are considered a data controller or processor under applicable law(s), the below obligations are enforceable:
- The Personal Data We receive from or on behalf of You will only be used for the specific business purposes outlined in the agreement.
- Service Provider shall not:
- Sell or share personal information.
- Retain, use, or disclose personal information for any purpose other than for the business purposes specified in the contract with You, including retaining, using, or disclosing the Personal Data for a commercial purpose other than the business purposes specified in the contract with You, or as otherwise permitted under applicable privacy laws.
- Retain, use, or disclose Personal Data outside of the direct business relationship between You and Us.
- Combine Personal Data received from, or on behalf of, You with Personal Data received from, or on behalf of, another person or persons, or collect Personal Data from its own interactions with the consumer, except as necessary to perform the business purpose specified in the written contract and as permitted by applicable regulations; and
- Engage any third party sub-processor to assist in processing Personal Data for Our business purposes without notice to You and without a written contract with sub-processor that imposes the same obligations on the sub-processor as set forth in this Policy.
- You may, subject to the terms of any agreement with Us, monitor Our compliance with the terms of this Policy. This may include ongoing manual reviews, automated scans, and regular assessments, audits, or other technical and operational testing at least once every 12 months, to ensure that We are adhering to the obligations set forth in this Policy and any corresponding data processing agreement.
- The Service Provider agrees to comply with all other applicable requirements under the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other relevant privacy regulations to ensure the protection and confidentiality of consumer personal information.
Mitratech may, subject to agreement with the Service Provider, monitor the Service Provider’s compliance with the terms of this Policy. This may include ongoing manual reviews, automated scans, and regular assessments, audits, or other technical and operational testing at least once every 12 months, to ensure that the Service Provider is adhering to the obligations set forth in this Policy and the corresponding Data Processing Agreement.
Supplemental Information for the EEA, Switzerland, and the U.K.
In the event Data is transferred and collected from a data subject outside of the United States, then Mitratech addresses this Supplemental Notice to individuals located in the EEA, Swiss and United Kingdom (UK), as required by the GDPR. In the event of any conflict or inconsistency between the other parts of this Policy and the terms of this section, this section shall govern and prevail with regard to the processing of EEA, Swiss, and U.K. Personal Information, to the extent applicable.
- Applicable Laws
If You are located in the EEA, the GDPR applies to the processing of Your Personal Information. If You are located in the UK, the UK GDPR applies to the processing of Your personal data. If You are located in Switzerland, the provisions of the FDPA apply to You, and references to the GDPR below shall be interpreted analogously for the purposes of applying the FDPA.
- Legal Basis for Processing
Mitratech only process Personal Information to operate Our business and provide the Services requested by You. We also use Personal Information to comply with applicable legal obligations and protect Our legitimate interests, including communicating with Clients and others, improving the Services and personalizing Our Services.
- International Data Transfers
As a global business, We may transfer Personal Information outside the EU/EEA, Switzerland, and the UK to countries that have been determined by the European Commission to offer an adequate level of data protection. Such transfers are made pursuant to the requirements of applicable adequacy decisions. We make these transfers when necessary to provide Our Services, to perform Our contract with You, or when We have Your consent to transfer Your Personal Information to another country.For transfers from the EU/EEA and Switzerland to countries that have not been deemed to offer an adequate level of data protection, We transfer Personal Information pursuant to a data protection addendum with standard contractual clauses and appropriate supplementary measures including, appropriate technical and organizational measures.
- Your Data Protection Rights
In the EEA, Switzerland and the UK You have the following rights, subject to the conditions under the GDPR and/or local data protection law:
- Right to Access. You have the right to confirm from Mitratech whether We are processing Your Data and related information, and, where that is the case, to request access to details about how We process Your Data and copies of the Data.
- Right to Data Portability. You have the right to receive Your personal data which You have provided to Us in a structured, commonly used and machine-readable format and You have the right to transmit the personal data to another entity without hindrance from Us.
- Right to Rectification. You have the right to request the rectification or completion of inaccurate or incomplete Data.
- Right to Objection. You have the right to object to the processing of Your Data in certain cases.
- Right to Restrict Processing. In limited circumstances, you have the right to request that We restrict processing of Your Data.
- Right to Erasure. You may request that We erase Your Data in certain cases.
- Right to Lodge a Complaint. To lodge a complaint with a supervisory authority (only for EEA and UK).
- Right to Refuse or Withdraw Consent. In case We ask for Your consent to process Your personal data, You are free to refuse to give it. If you have declared your Consent for any Data processing activities, you can withdraw this consent at any time with future effect.To exercise Your rights under applicable privacy law, to raise a privacy concern, or to make a data-related request, please contact Us at the contact information further below and describe Your request. We may ask for additional information from You to clarify Your request and verify that You are authorized to make Your request. We will respond to requests to exercise privacy rights according to applicable laws.
- Disclosure and Assessment
Mitratech may be required to disclose Personal Information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.Mitratech will assess its adherence to its privacy policies annually. This assessment will include the following:
- A review of Mitratech privacy policies for ongoing conformance with applicable law.
- Review of the Personal Data that Mitratech collects and means of collecting this data.
- Inclusion of mechanisms, and related communications, that individuals can review their Personal Data, correct it, ask questions or file a complaint.
- Training for Mitratech employees, based on their degree of involvement with Personal Data.
Our commitment to Canadian Privacy (PIPEDA)
Mitratech is committed to protecting the privacy of personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten Fair Information Principles, which form the ground rules for the collection, use, and disclosure of personal information in Canada.
- Your Data Rights
You have certain rights with respect to Your Data, and We want to help You review and update Your information to ensure it is accurate and up-to-date. We may limit or reject Your request in certain cases, such as if it is frivolous, unverified or unduly burdensome, if it jeopardizes the rights of others, if it is not required by law, or if the burden or expense of providing access would be disproportionate to the risks to Your privacy in the case in question, or if it materially alters the way We provide the Mitratech Services to You. In some cases, We may also need You to provide Us with additional information, which may include personal information, to verify Your identity and the nature of Your request. We will take reasonable steps to respond to all requests within 45 calendar days.If You wish to exercise any of the following rights, You may do so by contacting Us at [email protected]:
- Access
You can request more information about the Data We hold about You and request a copy of such Data.
- Excercising your rights
If you would like more information or would like to exercise the access and deletion rights described above, please submit a privacy-related request by doing the following: (1) Calling us at this toll-free phone number: 1 888 784 7224; or (2) Emailing us at [email protected] describing the nature of your request;
- The information We gather, and share is outlined in Appendix A.
Appendix A
The list of categories of data collected in the previous twelve months available here is subject to change from time to time in Mitratech’s sole discretion and without notice to You, unless agreed upon in writing otherwise.
Do Not Sell My Personal Information
Cookie Policy