Effective: January 1, 2020
Affinitiv, Inc. (“Company” “us” “we” or “our”) is a leading provider of data-driven software and service solutions for North American commercial clients within the automotive market.
TYPES OF INFORMATION WE COLLECT
The Company collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked with, directly or indirectly, you or your household (“personal information”), when (a) you browse and interact with the Site and when (b) you authorize an automobile dealership or manufacturer to provide the personal information to us in connection with the services we provide. In particular, the Company has collected the following categories of personal information about consumers within the last twelve (12) months:
|A. Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.||YES|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.||YES|
|C. Protected classification characteristics under California or federal law.||Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).||YES|
|D. Commercial information.||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||YES|
|E. Biometric information.||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.||NO|
|F. Internet or other similar network activity.||Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.||YES|
|G. Geolocation data.||Physical location or movements.||YES|
|H. Sensory data.||Audio, electronic, visual, thermal, olfactory, or similar information.||NO|
|I. Professional or employment-related information.||Current or past job history or performance evaluations.||YES|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.||NO|
|K. Inferences drawn from other personal information.||Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||YES|
HOW WE COLLECT PERSONAL INFORMATION
In connection with the Company’s software and service offering activities in support of the automotive industry, we are sometimes granted access to the categories of personal information described above through dealer management systems or through the customer relationship management system we host on behalf of our dealership customers.
Further, the Site may collect the categories of personal information listed above:
- Directly from you when you:
- Engage with an automobile dealer or manufacturer that subsequently provides the personal information to us in connection with a software or service offering we provide to them;
- Inquire about our services and offerings;
- Contact us through the “Contact Our Experts” link on our Site;
- Inquire into an employment opportunity or submit a resume through the Site;
- Create an account in our software or service offerings;
- Sign up for e-mail updates;
- Subscribe to our blog, newsletter or eBooks;
- Enter a contest; or
- Participate in a marketing survey, promotion or event.
- Indirectly from you:
- By observing your actions on the Site; or
- When you are referred to us through a marketing promotion.
If you contact us through electronic communication, including by e-mail, we typically retain the e-mail in our file servers and collect any contact information you provide so that we can reply to you. Your e-mail also contains metafiles that may contain IP addresses, domain names, and other standard file information and this information may be retained electronically on our servers or in routine back-up files.
If you browse the Site, regardless of whether you create a user account, or otherwise interact with the Site, we log your IP address (the internet address of your computer) to tell us which parts of the Site you visit and how long you spend there. The Company also may track the state and/or country you are accessing the internet from, the date and time you visited and the type of computer, operating system and web browser you are using.
THIRD-PARTY WEBSITES AND INTERACTIONS
The Company is active on social media pages, such as Facebook, LinkedIn and Twitter, and we may integrate social media widgets or features on the Site. These social media companies may recognize you and collect information about your visit to the Site, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.
We utilize third party companies and analytics to help us market, sell, and provide information about our products and services; and we provide your personal information to these third party companies to assist us in conducting business with you. We use web analytics tools provided by service providers, including, but not limited to, Google Analytics, which is a third party service that transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand the Site’s traffic, and web page usage. For more information concerning Google Analytics and how it collects and processes data please see “How Google Uses Data When You Use Our Partners Web Sites or Apps” located at www.google.com/policies/privacy/partners. We use the information provided by these tools to improve our services and our online advertisements. These tools place session and persistent cookies in your browser to identify you as a unique user the next time you visit our Site. Each cookie cannot be used by anyone other than the service provider (e.g. Google Analytics).
USE OF PERSONAL INFORMATION
We use personal information provided indirectly through our hosted customer relationship management services and through dealerships to assist us in fulfilling our contractual obligations to those third party dealerships and to improve our offerings.
We may use, or disclose the personal information we collect from the Site, and from your engagement with our commercial clients, to assist our Company and our commercial clients in one or more of the following business purposes:
- Assist in answering your questions;
- Provide you with excellent customer service;
- Create, maintain, customize, and secure your account;
- Provide the products and services you request;
- Send you promotional offers we believe will be of interest to you;
- Send you email updates;
- Identify your product and service preferences;
- Customize communications to you;
- Provide information concerning products and services you have purchased and products and services that may be of interest to you;
- Help maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets, and business; and
- Engage in other activities in the normal course of providing automotive software and service offerings to our commercial clients.
SHARING OF PERSONAL INFORMATION
The Company may disclose your personal information to a third party for a business purpose.
We may share your personal information with third party service providers who have been retained to perform services on our behalf to help with our provision of software and service offerings to our commercial clients and to help with our own business activities, including without limitation, payment processing, network infrastructure, cloud storage, e-mail marketing, sales, delivery of products, market research, promotions management, website management, accounting, internet service providers, information technology, and that otherwise assist us in running our business.
Further, we may disclose information about you (i) if we are required to do so by law, court order or legal process; (ii) in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; (iii) under the discovery process in litigation or arbitration; (iv) to enforce the Company’s policies, contracts or other rights; (v) to collect amounts owed to the Company; (vi) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity; or (vii) if in good faith we believe that disclosure is otherwise necessary or advisable. In addition, from time to time, server logs may be reviewed by third party forensic investigators and other technology professionals for security purposes – e.g., to detect unauthorized activity on the Site. In such cases, server log data containing IP addresses may also be shared with law enforcement bodies in order that they may identify users in connection with their investigation of the unauthorized activities.
Disclosures of Personal Information for a Business Purpose
In the preceding twelve (12) months, the Company has disclosed the following categories of personal information for a business purpose, to (i) our affiliates, (ii) service providers, and (iii) third parties to whom you or your agents authorized us to disclose your personal information in connection with the products or services we or our commercial clients provide to you:
- Category A: Identifiers.
- Category B: Personal information under the California Customer Records statute.
- Category C: Protected classification characteristics under California or federal law.
- Category D: Commercial information.
- Category F: Internet or other similar network activity.
- Category G: Geolocation data.
- Category I: Professional or employment-related information.
- Category K: Inferences drawn from other personal information.
We maintain commercially reasonable procedures and technology designed to prevent the unauthorized access of your information that you provide to us. The Site has reasonable technical and organizational security measures in place to protect the loss, misuse or alteration of information under our control. However, we cannot guarantee that unauthorized third parties will never be able to defeat those security measures.
If you believe your information has been accessed in an unauthorized manner, please contact us immediately.
TRANSFER OF PERSONAL INFORMATION
RIGHTS AND CHOICES FOR NON-CALIFORNIA RESIDENTS
You may have the right to access, correct, or delete your personal information in certain circumstances. You may also have the right to withdraw any consent you have given the Company to process your personal information. If you have questions about the personal information the Company has about you, need to modify, access or delete your information, or want to withdraw your consent to process your personal information, you can contact us as provided below.
You can opt-out of receiving marketing and promotional communications from the Company or its commercial clients by using the opt-out or unsubscribe features contained in our communications and the communications sent by us on behalf of our commercial clients, or by contacting us as provided below.
RIGHTS AND CHOICES FOR CALIFORNIA RESIDENTS
The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents with specific rights regarding their personal information. This section describes California residents’ CCPA rights and explains how to exercise those rights.
As a service provider of software and service offerings to commercial clients, we collect and use your personal information as directed and contractually authorized by our clients. We do not sell this personal information. To exercise your privacy rights, please contact the automobile dealerships or the businesses with whom you have direct relationships, which can authenticate you and provide information about the rights that you may have under CCPA or other applicable laws.
We also collect contact information from commercial clients and business professionals within the automotive industry. We do not sell this personal information, but we may share such commercial business information with our affiliates and service providers. We may also disclose personal information to third parties for business purposes as permitted by the CCPA.
Access to Specific Information and Data Portability Rights
You have the right to request from the automobile dealerships and businesses with whom you have relationships that certain information be disclosed to you about our collection and use of your personal information over the past 12 months. Once our commercial client receives and confirms your verifiable consumer request, pursuant to their instruction we will disclose:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you.
- If we sold or disclosed your personal information for a business purpose, two separate lists disclosing: (1) sales, identifying the personal information categories that each category of recipient purchased; and (2) disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Deletion Request Rights
You have the right to request from the automobile dealerships and businesses with whom you have relationships that the Company delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once our commercial client receives and confirms your verifiable consumer request, pursuant to their instruction we will delete (and direct our downstream affiliates, service providers, and authorized permitted third parties to delete) your personal information from our records, unless an exception applies.
Exercising Access, Data Portability, and Deletion Rights
You, California resident business professionals, and California resident job applicants engaged directly by and with the Company may exercise the access, data portability, and deletion rights described above directly with the Company by submitting a verifiable consumer request to us, by either:
- sending an email to firstname.lastname@example.org, or
- writing to us at:
300 S. Wacker, Suite 900
Chicago, IL 60606
Attn: Legal Dept, CCPA Privacy Office
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Personal Information Sales Opt-Out
As a service provider to our commercial clients, we collect and use your personal information only as directed and contractually authorized by our clients. We do not sell personal information obtained in our capacity as a service provider, nor obtained from business professionals in the course of our commercial activity, and your rights to opt-out from sales of your information are provided here for informational purposes.
If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time (the “right to opt-out”). The personal information of consumers actually known to be less than 16 years of age cannot be sold, unless affirmative authorization is received (the “right to opt-in”) from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to personal information sales may opt-out of future sales at any time.
To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by contacting us in writing as provided in this Policy.
Once you make an opt-out request, assuming we were to sell your information, we would wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change your mind and opt back in to personal information sales at any time by contacting us in writing as provided in this Policy.
You do not need to create an account to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
This Site is not directed to children. We do not knowingly collect information from children under the age of 16 on the Site. If you are under the age of 16, please do not provide any personal information to us. If we become aware that we have collected personal information from a child under the age of 16, we will make commercially reasonable efforts to delete such information from our database.
HOW TO CONTACT THE COMPANY
You can contact us by using any of the following methods:
- sending an email to email@example.com
- writing to us at:
300 S. Wacker, Suite 900
Chicago, IL 60606
Attn: Legal Dept, Privacy Office
- calling us at: (847) 955-9740