INTRODUCTION
Welcome to Mitratech Holdings, Inc., (“Mitratech”, “Our”, “We”, or “Us”)! We understand the impact Our privacy practices may have on You when You share data with Us, and therefore we are committed to protecting Your privacy in all aspects of Our business. This Privacy Policy explains what information We collect from Our end-users, clients, partners and Site visitors (“You”, “Yours”); how We use that information; and the rights You may have with respect to Your Data. This Policy applies to Mitratech and its subsidiaries (a list of all subsidiaries can be found at https://mitratech.com/legal-notice/entity-and-subsidiaries/).
To use certain features of Our Site or access specific services and/or products available through the Site, We may process certain Personal Data. You will be provided with the mechanisms necessary to manage your preferences regarding the processing of Personal Data that is not necessary for the provision of the Services, such mechanisms are described in this Privacy Policy. If you do not agree to the processing of Personal Data essential to the functionalities of the Site or the Services You request, You might not be able to use those specific features or Services.
YOUR ACCEPTANCE OF THIS POLICY AND MODIFICATIONS
WE MAY CHANGE THIS PRIVACY POLICY FROM TIME TO TIME IN OUR SOLE AND REASONABLE DISCRETION. IF WE MAKE MATERIAL CHANGES THAT ALTER YOUR RIGHTS OR IMPACT YOUR PERSONAL OR SENSITIVE DATA WITH US, WE WILL NOTIFY (AND WHERE APPLICABLE, REQUIRE YOUR ACTIVE CONSENT) YOU BY REVISING THE DATE AT THE TOP OF THIS WEBPAGE AND PROVIDING YOU WITH WRITTEN NOTICE (SUCH AS ADDING A STATEMENT TO OUR HOMEPAGE AND SENDING YOU AN EMAIL OR NOTIFICATION). ANY AMENDED PRIVACY POLICY SHALL SUPERSEDE ALL PRIOR VERSIONS AND SHALL BE DEEMED ACCEPTED UPON YOUR CONTINUED USE OF THE SITES AND/OR SERVICES, UNLESS AGREED OTHERWISE IN AN ENFORCEABLE AND VALID WRITTEN AGREEMENT BETWEEN US AND YOU.
IMPORTANT PRIVACY PRACTICE NOTES
First and foremost, We do not sell or share Your Data with any third-party that is not required to provide You with the Services and/or Site.
Some of Our subsidiary Services may collect, store, require, transmit, or otherwise process sensitive data, individually identifiable health information or PHI via the Site or Services in connection with use of the Sites and/or Services.
Our Site, Services, and communications may involve interactions with various third parties regarding Your Personal Information. We engage trusted Sub processors to perform specific services on Our behalf. Your data, when processed by these providers acting as Sub processors, is covered by the terms of this Privacy Policy.
Mitratech’s Sites, Services and/or communications may contain, for your convenience, links to websites or other online services or products provided by third parties, when You click on such links and leave our Site, any information you provide directly to those third parties, or that they collect from you, will be governed by their respective privacy policies. We are not responsible for the content, privacy practices, or data security of these independent third-party sites or services, and we encourage you to review their policies before sharing any Personal Information.
Mitratech may use SSO integrations to offer third party solutions and/or products, and such links and integrations do not mean that (a) We endorse such websites, products, and/or services; (b) We represent and/or warrant the quality, usability and/or accuracy of the information presented by the third party provider; nor (c) We represent and/or warrant their privacy practices and data security. You acknowledge and agree that We are not liable or responsible, fully or in part, for the collection and/or use of Your information by third parties and/or third-party websites, offerings, services and/or products, even if such offerings are made through Mitratech’s Sites and/or Services. The privacy and data practices of third parties are governed by their respective privacy policies.
Mitratech, as a standard practice, does not knowingly or specifically collect, use or require any Data about minors under the age of 18. Mitratech Sites are not intended for minors under the age of 18, and the Services should not be used by individuals under the age of 18. Consistent with the COPPA requirements, if You believe We have mistakenly or unintentionally collected such information without first receiving a parent or legal guardian’s verified consent, please notify Us so that We may delete the information from Our servers. We will use any collected information solely to inform the child that use of the Site and Services is prohibited, and any collected Data will be immediately deleted.
LASTLY, MITRATECH DOES NOT PROVIDE PROFESSIONAL LEGAL, TAX OR ACCOUNTING ADVICE AND/OR SERVICES. YOU SHOULD SEEK INDEPENDENT PROFESSIONAL ADVICE IN THESE AREAS IF NEEDED.
- DEFINITIONS
The following terms are frequently used in this Policy and are defined here for Your reference.
“Affiliate” includes any entity owned, whether wholly or partially, by Mitratech Holdings, Inc.“Business Information” includes Your job title or department; Your employer’s name, phone number, postal address, payment information, type of company, company industry, and company size.“COPPA” means the Children’s Online Privacy Protection Act.“Data” means, collectively, the following information: Order Information, Payment Information, Personal Information, Usage Data, Business Information, User Information, Sensitive Data, and User Content.“Data Controller” is the entity or natural person that determines the purpose(s) for which and the means by which personal data is processed. In this instance, Mitratech may be the Data Controller.“Data Processor” means an entity or natural person, public authority, agency or other body which processes personal data on behalf of a controller. In some instances, Mitratech may be the Data Processor.“Data Subject” means a natural person whose personal data is processed by Us.
“Consent” is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, written or verbal, that signifies agreement to the processing of personal data relating to the You.
“Cookies” means small text files that can be read by a web server in the domain that put the cookie on your hard drive.
“Client” means, a customer that is authorized by Us to access and use the Services or a portion thereof or a customer directly contracted with Us for Mitratech Services.
“EEA” means the European Economic Area.
“FDPA” means the Swiss Federal Data Protection Act.
“Mitratech” means, Mitratech Holdings, Inc., and its Affiliates, “Mitratech” or “We”, or “Us”.
“GDPR” means the UK/EEA General Data Protection Regulation.
“Order Information” may include company names, contact name and information, products/services purchased, shipping address, telephone number, email address, billing address.
“Partner” means an entity purchasing subscriptions to the Services and authorized by Us to provide access to and use of the Services or a portion thereof to a Client, or on behalf of a Partner’s Client.
“Payment Information” means information required to process any orders for the Services, such as Your name, credit card information, billing information, address, expiration dates and processing codes.
“Personal Information” means information associated with or used to identify You, such as: (a) Your first and last name, email address, postal address, phone number, and some Usage Data under applicable law.
“PIPEDA” means the Personal Information Protection and Electronic Documents Act.
“PHI” means protected health information as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Privacy Rule.
“Policy” means this Privacy Policy as updated and amended from time-to-time.
“Sensitive Data” any information relating to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, or information that reveals race, ethnic origin, sexual orientation, political opinions, religious or philosophical beliefs, or trade union membership, or that concerns an individual’s health.
“Services” means the Mitratech services, solutions, applications, and products.
“Sites” means Mitratech’s website located at www.mitratech.com and its subpages and Affiliate subdomains.
“Third-Party Service Provider” means a third-party performing work for Us or a portion of the Services on Our behalf.
“Usage Data” means information about Your activity on the Site or Services that, by itself, does not identify You, such as: (a) browser type, operating system, webpages visited, access times, links clicked, and the page visited before navigating to Our Site or Services; (b) technical information about the computer or mobile device You use to access Our Site or Services, including hardware model, operating system and version, unique device identifiers, location data, IP address, domain name, internet service provider, or network information; (c) information searched for, observed, or accessed while using the Services; or (d) metadata related to User Content, such as date, time, or location.
“User Content” means content uploaded or submitted by Users such as information, documents, images, photographs, videos, notes, sounds, data, and posts.
“UDID” means Your city location, device model and version, and device identifier.
“User Information” means information such as name, username, password, email address, phone number, and address.
“User” means any individual or entity that uses the Site and/or Services or a portion thereof on behalf of a Client or Partner or through the account or passwords of either, whether authorized or not, including, without limitation, the employees, contractors, and/or agents of either.
“You” or “Your” means the individual visiting, accessing, or using the Site and/or Services in his/her/their individual capacity or as a User, Partner, or Client, as the context requires.