Last updated August 24, 2024
This subsection applies only to “personal information” about California residents, as that term is defined in the California Consumer Privacy Act, as amended (“CCPA”), and it supplements the information in the rest of our Privacy Notice above. Data about individuals who are not residents of California is handled differently and is not subject to the same rights described below. This section does not apply to data that is exempt from the CCPA, such as publicly available information. Californians who wish to exercise the rights described here with respect to Processor Data, where Picarro processes data on behalf of a customer, should contact the customer on whose behalf we handle the data.
Categories of personal information we collect and disclose
During the 12 months leading up to the effective date of this Privacy Notice and on an ongoing basis, Picarro has collected all of the following information from and about California residents:
Identifiers, such as:
Professional or employment related data (such as title and name of company)
Commercial information, such as:
Audio or video information, such recordings of meetings, or photographs collected from certification candidates for identity verification and security checks
Financial data, such as payment information for Picarro products, services and investor relations-related data
Certain internet or other network or device activity (such as IP addresses, device identifiers, cookie data, device attributes, device usage information, browsing information, and metadata)
Account login credentials
Other information that identifies or can be reasonably associated with an individual
Inferences drawn from any of the above
We intend to retain this information until we determine retention no longer is necessary for the purposes described further below. Because we may collect and use the same category of personal information for different purposes and in different contexts, there is not typically a fixed retention period that always will apply to a particular category of personal information.
Picarro uses personal information as follows:
CCPA “sale” of California personal information
Picarro does not sell personal information as the term “sell” is traditionally understood. But “sell” under the CCPA is broadly defined. As described further below, some of our disclosures of personal information qualify under the CCPA as what it defines as a “sale” or “sharing” of personal information. In many cases, for example, “sale” includes the disclosure of personal information to third parties in exchange for something of value, even if no money changes hands. For example, disclosing an advertising or device identifier to a third party to receive their services may be considered a “sale” under the CCPA in some cases. During the 12 months leading up to the effective date of this Privacy Policy, we have “sold” and “shared” (as those terms are defined under the CCPA) what the CCPA calls “identifiers” (like IP addresses), “internet or other electronic network activity information” (like information regarding an individual’s browsing interactions on Picarro.com), and “commercial information” (like the fact that a browser visited a page directed to people who are considering purchasing from us) to third parties that assist us, such as marketing providers and analytics providers. This practice continues today. To our knowledge, we do not “sell” or “share” (as those terms are defined under the CCPA) the personal information of individuals under 16 years of age.
Californians have a right to ask us not to “sell” or “share” certain personal information as that term is defined in under the CCPA. You can make such a request by performing BOTH of the following steps:
Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this section.
Other Disclosures of Personal Information
In the last 12 months, we disclosed California personal information to third parties as follows:
Category of personal information | Categories of third parties to which it is disclosed |
Identifiers (such as name, address, email address and other contact information) | Our affiliates. |
Our customers. | |
Third parties that assist us, such as our resellers, event providers, payment processors, marketing providers, testing providers, analytics providers, providers of technical services (e.g., providers of data storage, data backup, and CRM systems), and other subcontractors. | |
Joint marketing partners. | |
Security researchers. | |
computer emergency response teams | |
Employers and others who seek verification of an individual’s claimed certification status. | |
Entities involved in dispute resolution (such as an arbitrator or an opposing party). | |
Entities involved in potential or actual significant corporate transactions or events. | |
Governmental entities. | |
Commercial information, (such as information about an individual’s interests and interactions with us, our partners, or our customers, including transaction data) | Same as first row in this chart. |
Financial data (such as payment information) | Affiliates, third parties that assist us, and governmental entities, entities involved in dispute resolution (such as an arbitrator or an opposing party), entities involved in potential or actual significant corporate transactions or events. |
Audio and visual information (such as CCTV images or recordings of calls or meetings) | Affiliates, third parties that assist us, and governmental entities |
Internet or other network or device activity (such as IP addresses, device identifiers, cookie data, device attributes, device usage information, browsing information, and metadata) | Same as first row in this chart. |
Geolocation information | Affiliates, third parties that assist us, and governmental entities, joint marketing partners, researchers. |
Account login credentials | Affiliates, third parties that assist us, researchers. |
Professional or employment related data (such as title) | Same as first row in this chart. |
Other information that identifies or can be reasonably associated with an individual | Same as first row in this chart. |
Inferences drawn from any of the above | Same as first row in this chart. |
We do not use or disclose “sensitive personal information” covered by this Notice and as defined in the CCPA in a manner that requires us to offer a special right to limit our use of this data under the CCPA.
CCPA Right to Access, Correct, or Delete Personal Information
If you are a California resident, California law also may permit you to request that we:
Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you, so we may reject a deletion request for that information while providing services to you.
To request to exercise any of these rights and receive the fastest response, please email us at privacy@Picarro.com. We reserve the right to require verification of your identify before we fulfill a request, which may include requiring you to login to an existing Picarro account, providing us with information that matches our records for you, responding to an email we send, or taking other steps relevant to your relationship with us and the nature of your request.
For security and legal reasons, however, Picarro reserves the right not to accept requests that require us to access third-party websites or services.
You have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA.