Privacy Policy

ServiceCentral Privacy Statement

Last Updated: April 14th, 2020

INTRODUCTION

ServiceCentral Technologies, Inc., ServiceCentral, and RepairQ (“ServiceCentral”, “we,” “us” or “our”) respect your privacy and are committed to protecting it through our compliance with this Privacy Statement. Please read this Privacy Statement carefully to understand our policies and practices regarding your personal information and how we collect, store, process, transfer, share and otherwise use your personal information. “Personal information” means any information that identifies or can be associated with you.

By accessing, downloading, registering with, or otherwise using our websites, services and applications (including, but not limited to, the RepairQ platform) (the “Services”), you (“you” or “your”) or your Organization agree to this Privacy Statement. This Privacy Statement applies to all personal information we collect through our Services, even if you have not signed up for one of our accounts. If you do not agree with our policies and practices, do not access, download, register with, or use the Services. Capitalized terms that are not defined in this Privacy Statement have the meanings given to them in the ServiceCentral Terms of Service, which govern your use of the Services. This Privacy Statement is incorporated into and forms a part of the ServiceCentral Terms of Service.

Please note that this Privacy Statement does not apply to the use of personal information collected outside of the Services, including personal information:

we collect offline;
collected on any third party apps, services or websites, including websites you may access through the Services; or
you provide to, or that is collected by, any third party data controller.

Those third parties may have their own privacy policies, which we encourage you to read before providing information to or through them. We do not accept any responsibility or liability for their privacy policies or any information you provide to or through them.

Please note that if you choose not to provide us with your information, we may not be able to provide some or all of the Services or respond to your other requests.

DATA CONTROLLER/DATA PROCESSOR

A “data controller” is a person or organization who alone (or jointly) determines the purposes for which, and the way that, any personal information is, or is likely to be, processed. A “data processor” is a person or organization who processes personal information on behalf of, and at the instruction of, a data controller. ServiceCentral is the data controller of certain personal information collected through or otherwise provided to the Services (for example, your contact information that we may use for marketing and account administration purposes) and is the data processor of other such personal information (for example, personal information collected from the end users of the Services).

INFORMATION WE COLLECT AND HOW WE COLLECT IT

3.1. Categories of Information

When you use the Services, the categories of personal information about you that we collect may include:

your contact information (such as your name, email address and telephone number)
your business information (such as the name and address of your Organization)
your employment information (such as your employment status, title or role, and the name of your manager)
other profile information
your payment information
information about your mobile device, carrier, and (when enabled) your location information
your username and password
your loyalty card number
your electronic signature
other information provided by third parties (including your Organization)
any information you may choose to provide when you fill out a “free text” box on forms available through the Services (for example, your comments and opinions that you express when you comment on a blog post or other content posted through the Services, or when you contact us by email, mail or phone).

We may collect your personal information when you provide it to us directly or when your Organization provides it to us on your behalf.

The table in Attachment 1 further sets forth the categories of information we collect about you when you use the Services and how (for which purpose) we use that information. The table also lists the legal basis which we rely on to process the information.

3.2. Information You Provide to Us

When you access, download, register with, or use the Services, or when you otherwise contact us, we may ask you to provide, or you may voluntarily provide, information, including personal information, to provide you with Services or the support you request.

Account information: An account is required for certain features of the Services. If you register for an account, we may require certain information, such as your first and last name, company name, email address, and password.

Payment information: When you use our Services to make, accept, request, or record payments, we may require you to provide certain billing details, contact information (e.g., your name, business name, address, email address, and phone number), and financial information corresponding to the selected Services.
Additional Profile Information: You may choose to provide us with certain additional information as part of your account profile.
Other Information You Provide: You may choose to voluntarily provide additional information to us (for example, by filling out and submitting online and other forms for events, webinars, or whitepapers; responding to surveys; participating in contests, promotions or other marketing activities; providing suggestions or improvements; posting content via our sites or applications; or which you otherwise choose to submit through the Services).

3.3. Information Automatically Collected and Tracked

When you access, download, register with, or use the Services, they may use technology to automatically collect information, including personal information, about the Services and how you use them.

Usage Details. When you access and use the Services, we may automatically collect certain details of your access to and use of the Services, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the Services.
Device Information. We may collect information about your device (mobile, computer or otherwise) and an internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information, and the device’s telephone number.
Stored Information and Files. The Services also may access metadata and other information associated with other files stored on your device.
Location Information. The Services may collect information about the location of your device and other location-based information.
Behavioral Information. We also may use technologies to collect information about your activities over time and across third-party websites, apps, or other online services (i.e., behavioral or interest-based tracking).
Transaction Information. When you use our Services to make, accept, request, or record payments, we collect information about when and where the transactions occur, the names of the transacting parties, descriptions of the transactions, the payment or transfer amounts, billing information, the devices and payment methods used to complete the transactions, and other related transaction details.

The technologies we use for automatic information collection may include:

Cookies. A cookie is a small file placed on your device or hard drive. It may be possible to refuse to accept cookies by activating the appropriate setting on your smartphone or internet browser. However, if you select this setting you may be unable to access certain parts of our Services. For more information on cookies and similar technologies, please see our Cookie Policy.
Web Beacons. Certain pages or sites in the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related app statistics (for example, recording the popularity of certain app content and verifying system and server integrity).
Flash Local Shared Objects (LSOs). When we post videos or other media on the Services, third parties may use local shared objects (LSOs), also known as Flash cookies, to store your choices for things like volume control or to further personalize certain features. Cookie management tools provided by your browser will not delete Flash cookies. To learn how to manage privacy and storage setting for Flash cookies, visit here.

We use the information collected automatically to present the Services to you on your device; to determine news, alerts and other products and services that may be of interest to you for marketing purposes; to monitor, support and improve the Services and our business; and to help us develop new products and services. The table in Attachment 2 further sets forth the categories of information we collect about you automatically when you use the Services and how (for which purpose) we use that information. The table also lists the legal basis which we rely on to process the information.

3.4. Information We Collect from Third Parties

We may collect information, including personal information, that others provide about you when they use the Services, or obtain information from other sources (including social media networks) and combine that with the information we collect through the Services. Any information request regarding the disclosure of your personal information to us should be directed to such third parties.

Third Party Services. When you use the Services or any content made available through the Services, certain third parties may use automatic information collection and tracking technologies to collect information about you or your device. These third parties may include advertisers, ad networks, and ad servers; analytics companies; your mobile device manufacturer; your mobile service provider; and other third parties. We do not control third parties’ collection or use of your information to serve interest-based advertising. This information varies and is controlled by those third party services or as authorized by you via your privacy settings with those services.
Marketing Service Providers/Business Partners. We may also receive information collected by our marketing service providers on our behalf, including marketing lead generation service providers, marketing opt-in lists or other data aggregators, as well as information shared with us through referrals by our business partners.
Other Sources. To the extent permitted by applicable law, we may receive additional information about you, such as demographic data, identity or account verification information, or fraud detection information, from third party service providers and/or partners, and combine it with the information we have about you.

HOW WE USE YOUR INFORMATION

4.1. Generally

We generally rely on the following three main bases to process your personal information:

to perform the contract we are about to enter into or have entered into with you, including the ServiceCentral Terms and Conditions, this Privacy Statement, and other agreements and policies;

for our legitimate interests or those of a third party, where your rights and interests do not override those interests; or
to comply with a legal or regulatory obligation.

Sometimes, we may rely on other legal bases to process your information, such as where you have given us consent to use your personal information in certain ways or to protect a user’s vital interest. We also may process your personal information relying on more than one legal basis, depending on the specific purpose for which we are using your personal information.

As noted above, the table in Attachment 1 provides further details on the categories of information we collect about you when you use the Services, how (for which purpose) we use that information, and the legal basis we rely on to process that information. You can also contact us at privacy@servicecentral.com if you need details about the specific legal ground we are relying on to process your personal information where more than one ground has been set forth below.

4.2. Provide Our Services

We use your information to provide or facilitate:

Access to, and use and support of, the Services
Payment processing and account management
Customer service and support
Updates, security alerts, and account notifications
Other services requested by you as described when we collect the information

We process your personal information where it is necessary for the adequate performance of the contract with you. We also process this information given our legitimate interest in providing the Services in an effective manner.

4.3. Understand and Improve Our Services

We use your information to analyze, operate, protect, improve, and customize the Services and user experience, such as by performing data analytics and studying how the Services are used. We process this information given our legitimate interest in improving the Services, understanding how our Services are being used, and developing and growing our business.

4.4. Administer and Protect the Services

We use your information to:

Prevent, detect, investigate, and mitigate fraud, security incidents, abuse, or other potentially harmful or illegal activities
Maintain the network and information security to protect information against loss, damage, theft or unauthorized access
Perform troubleshooting, testing, and system maintenance
Conduct security investigations and risk assessments
Verify your identity
Conduct checks against databases and other information sources, to the extent permitted by applicable laws and with your consent where required

We process your personal information where it is necessary to comply with applicable laws and regulations. We also process this information given our legitimate interest in providing administrative and information technology services, ensuring network and information security, and complying with applicable laws and regulations.

4.5. Legal and Safety

We use your information to:

Prevent, detect, investigate, and mitigate fraud, security incidents, abuse, or other potentially harmful or illegal activities
Comply with our legal obligations, including managing legal and regulatory requests and requirements
Enforce or defend our rights under our Terms of Service, this Privacy Statement, and other agreements and policies
Resolve any disputes with any of our users and enforce our agreements with third parties

We process your personal information where it is necessary to comply with applicable laws and regulations or to ensure adequate performance of the contract with you. We also process this information given our legitimate interest in protecting our Services, preventing harm or illegal activities, enforcing or defending our legal rights, and complying with applicable laws and regulations.

4.6. Provide and Improve Our Marketing

We use your information to:

Send you promotional messages, marketing, advertising, and other information that we think may be of interest to you
Personalize, measure, and improve our marketing and advertising
Administer referral programs, rewards, surveys, sweepstakes, contests, or other promotional activities or events sponsored or managed by ServiceCentral or its third-party partners
Analyze, operate, protect, improve, and customize the Services and user experience, such as by performing data analytics and studying how the Services are used

We will process your personal information given our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest, informing our marketing strategies, and developing and growing our business. Generally, and unless you are a resident of the European Economic Area (EEA), we do not rely on your consent as a basis for processing your personal information other than in relation to sending third-party direct marketing communications to you via email or text message. Where we collect your personal information with consent, you may withdraw your consent for us to use your information at any time by unsubscribing, managing your preferences through your account, or contacting us (See “Your Choices About our Marketing Activities” below).

DISCLOSURE OF YOUR PERSONAL INFORMATION

We will only share personal information collected through the Services as follows:

With your consent
With other users (including your affiliates or similar related business entities) in connection with the Services
If you use an account or profile associated with another party, we may share your information with the owners of that profile (for example, if you are an employee using your Organization’s account or profile to communicate with us regarding the Services)

With contractors, service providers, and business partners. This may include payment processors, marketing providers, cloud storage providers, attorneys, accountants, data analytics providers, and strategic partners.
With our corporate family of companies that are related by common ownership or control, to enable us to provide (or support us in providing) the Services
With a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of ServiceCentral’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by ServiceCentral about the Services and users are among the assets transferred
With third parties to market their products or services to you if you have consented to/not opted out of these disclosures
For any purpose disclosed by us when you provide the information
To comply with any court order, law, or legal process, including to respond to any government or regulatory request
To enforce our rights arising from any contracts entered into between you and us, including the Terms of Service, and for billing and collection
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of, our customers or others
We may also share aggregated information (information about our users that we combine so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.

YOUR CHOICES ABOUT OUR MARKETING ACTIVITIES

6.1. Marketing Communications for Non-EEA Residents

From time to time, you may receive marketing communications from us if you have requested information from us or purchased services from us and, in each case (unless you are a resident of the European Economic Area (EEA)), you have not opted out of receiving such communications. If you are a resident of the EEA, you will not receive such communications from us unless you have specifically opted in to receive them, as described further in Section 6.4 (EEA Residents) below. In any case, most such communications we send will be by email. For some communications, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

6.2. Opt-Out

You can ask us to stop sending you marketing messages at any time by contacting us at privacy@servicecentral.com or by using the contact information set forth below.

6.3. Third Party Marketing

We will get your express opt-in consent before we share your personal information with any company outside ServiceCentral’s corporate family for marketing purposes.

6.4. EEA Residents

If you are resident in the EEA, we will only send you marketing messages if you have given us your consent to do so. If you do not want to receive messages from us, you will be able to tell us by selecting certain boxes on forms we use when we first collect your contact details or by refusing or withdrawing your consent. You can also change your preferences later by clicking on the unsubscribe link at the bottom of our messages or by emailing us at privacy@servicecentral.com.

6.5. Non-Marketing Messages

Please note that if you do opt out of or do not grant consent to receiving marketing related messages from us, we may still send you non-marketing messages.

6.6. Affiliate Usage

Your personal information may also be shared with any affiliates of ServiceCentral, who may also use this information for the same purposes outlined in this Privacy Statement.

INTEREST-BASED ADVERTISING

7.1. Interest-Based Advertising

We may participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history. If so, we may permit third party online advertising networks, social media companies and other third party services to collect information about your use of the Services over time so that they may play or display ads on the Services, on other websites, apps or services you may use, and on other devices you may use. Typically, though not always, the information used for interest-based advertising is collected through cookies or similar tracking technologies. We and our third party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research.

7.2. Online Resources

To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources, at https://www.networkadvertising.org/choices or the DAA’s resources at www.aboutads.info/choices. Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s or Your Online Choices online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use. In addition, some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.

CONTENT

Any content you post on the Services may be viewed by other users in accordance with this Privacy Statement. We can, but have no obligation to, monitor your content, and we can remove any content or other information you post for any reason or no reason.

YOUR RIGHTS OVER YOUR PERSONAL INFORMATION

If you are resident in the European Economic Area (EEA), under the General Data Protection Regulation (GDPR) you have the following rights in respect of your personal information that we hold:

Right of access. You have the right to obtain:
- confirmation of whether, and where, we are processing your personal information;
- information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
- information about the categories of recipients with whom we may share your personal information; and
- a copy of the personal information we hold about you.
Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
Right to object. You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

If you are resident in France, you also have the right to set guidelines for the retention and communication of your personal information after your death.

If you are concerned about the personal information collected as you use our Services or would like to discuss or exercise rights you may have under this Privacy Statement or applicable law, you may contact us at privacy@servicecentral.com. If we are acting as a data controller with respect to the personal information at issue (e.g., personal information collected via the Services), we will respond to your request directly. If we are acting as a processor of your personal information on behalf of a third party data controller, then we will forward your request to the data controller to allow them to respond. If the third party data controller then requests ServiceCentral to facilitate your request with respect to any personal information with respect to which we are the processor, we will respond to the third party data controller’s request as quickly as is practicable under the circumstances. You may also contact the third party data controller directly if you have questions about the personal information with respect to which it is the data controller.

DATA RETENTION

We will only retain your personal information for no longer than necessary for the purposes for which it was collected (as described in further detail in Attachments 1 and 2), and if necessary to comply with our legal obligations and legitimate business interests. If you no longer want us to use your personal information to provide the Services to you, you can request that we erase your personal information and close your account. Please be aware that because we maintain the Services to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

DATA SECURITY

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security. If you have any questions about the security of our Services, please contact us at privacy@servicecentral.com.

CHILDREN UNDER THE AGE OF 16

The Services are not intended for children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@servicecentral.com or by using the contact information set forth below.

YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have the following rights:

Access. You may have the right to access the categories of personal information we have collected about you, the sources from which we collected that information, the business or commercial purpose for collecting your personal information, the categories of third parties with whom we share your personal information, the specific pieces of personal information we have collected about you, and the categories of personal information we disclosed for a business purpose.
Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us.
Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your California privacy rights.

We do not sell your personal information.

In order to protect your personal information from unauthorized access or deletion, we may require you to verify your login credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has been compromised, we may ask you to provide additional personal information for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

In addition, there may be information we will not return in response to your request, such as information that could affect the privacy of others or violate legal requirements. Likewise, there may be reasons why we cannot comply with your deletion request, such as our need to keep your personal information to comply with a legal obligation.

You may use an authorized agent to submit a rights request. If you do so, the agent must present signed written authorization to act on your behalf, and you may also be required to independently verify your identity or your legal authority or ownership of the personal information with us.

In addition, California Civil Code Section 1798.83 (the “Shine the Light Law”) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To exercise any of the rights described in this section, please contact us at privacy@servicecentral.com or by using the contact information set forth below.

INTERNATIONAL DATA TRANSFER

Your personal information may be transferred to, stored, and processed in the United States or a country that is not regarded as providing the same level of protection for personal information as the laws of your home country. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to provide adequate protection for your personal information.

Whenever we transfer the personal information of individuals resident in the European Economic Area (EEA) to countries outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission.
Where we use certain service providers, we may use specific contractual provisions approved by the European Commission which give personal information the same protection it has in the EEA.

CHANGES TO OUR PRIVACY STATEMENT

We may update our Privacy Statement from time to time. If we make material changes to how we treat our users’ personal information, we will post the new Privacy Statement on this page with a notice that the Privacy Statement has been updated and notify you by email to the primary email address and/or phone number specified in your account, or an in-Services alert the first time you use the Services after we make the change. Modifications will be effective as of the date stated on the update, or such other date as communicated in the notice to you.

The date the Privacy Statement was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address and/or phone number for you and for periodically visiting this Privacy Statement to check for any changes.

LODGING COMPLAINTS

You have the right to lodge complaints about the data processing activities carried out by ServiceCentral before your local data protection authority. Further information about how to contact your local data protection authority is available here. In addition, residents in other jurisdictions may also have similar rights to the above. Please contact us at privacy@servicecentral.com if you would like to exercise one of these rights, and we will comply with any request to the extent required under applicable law.

CONTACT INFORMATION

To ask questions or comment about this Privacy Statement or our privacy practices, contact us at privacy@servicecentral.com or ServiceCentral Technologies, Inc., 200 Galleria Pkwy., SE, #1475, Atlanta, GA 30339.

ATTACHMENT 1

PERSONAL INFORMATION WE COLLECT WHEN YOU USE THE SERVICES

Category of personal information	How we use it (purpose of use)	Lawful basis for the processing
Contact information Personal information, such as your name, telephone number, address, and email address	We use this information to establish a business relationship with your Organization, address your inquiries or complaints you make (or are made about you) regarding the Services, to administer your account, to demonstrate the Services to you, to market our goods and services to you and to provide you with news and updates regarding those goods and services. We use your email to uniquely identify you as a user in the system and also to authenticate and authorize you during login.	This processing is necessary for our legitimate interests, namely administering the Services, addressing inquiries and complaints regarding the Services, and for purposes of performing our contract with you or your Organization. We rely on your consent to process your information for marketing purposes.
Business information Your business information, such as the name, size and address of your Organization	We use this information to establish a business relationship with your organization, to administer the Services, to demonstrate the Services to you, and to market our goods and services to you.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization. We rely on your consent to process your information for marketing purposes.
Employment information Your employment information, such as your employment status, title or role, and the name of your manager	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Other profile information Other profile information	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Payment information Payment information, such as your credit card number, your bank account number and your PayPal information	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Information about your mobile device Information about your mobile device, such as model, device ID, carrier, and (when enabled) your location information	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Username and password The username and password you use to access your mobile device	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Your loyalty card number The number associated with any loyalty card issued to you by a third party provider	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Your electronic signature Your signature as entered into and processed by the Services	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Other information provided by third parties (including your Organization) Other information provided by third parties	We use this information to provide and administer the Services.	This processing is necessary for our legitimate interests, namely administering the Services, and for purposes of performing our contract with you or your Organization.
Other information you choose to provide Any information you may choose to provide when you use the chat functionality available through the Services or fill out a “free text” box on forms available through the Services (for example, your comments and opinions that you express when you comment on a blog post or other content posted through the Services, or when you interact with us by chat, email, mail or phone).	We cannot limit what personal information you may choose to provide, for example, in free text boxes or other interactive features made available through the Services.	This processing is necessary for our legitimate interests, namely administering the Services, addressing inquiries and complaints regarding the Services, and for purposes of performing our contract with you or your Organization.

ATTACHMENT 2

PERSONAL INFORMATION COLLECTED AUTOMATICALLY

Category of personal information

How we use it (purpose of use)

Legal basis for the processing

Information about how you access and use the Services.

For example, the Services collect the IP address of your device, your location, and the type of browser you are using to access the Services.

We use this information to improve the Services and to support users in connection with any technical issues, such as the performance of the Services.

The processing is necessary for our legitimate interests, namely to improve the Services generally; to monitor and resolve issues; and for the detection and prevention of fraud.

We use this information (like your IP address) to enhance the security of the Services (for example, so that we can potentially block malicious IP addresses).

The processing is necessary for our legitimate interests, namely to improve the Services generally; to monitor and resolve issues; and for the detection and prevention of fraud.