Last Updated August 8, 2022
5. YOUR CHOICES
When you interact with us through the Services, we may collect Personal Data and other information from you, as further described below:
We may periodically obtain both your Personal Data from affiliated entities, our commercial customers, partners and other independent third-party sources and will add it to our database of information. For example, we may receive information about your interaction with advertisements on third party websites, including updated postal addresses and demographic information. runZero may cache this data and various aggregations and transformation (charts, graphs, maps, tables, dashboards, etc.) as part of normal operations as covered by our Terms of Service, Subscription Services Agreement, or Master Subscription Agreement, as applicable. In some instances, runZero is acting as the data processor on behalf, and pursuant to the instructions, of our commercial customers, who act as the data controller (an entity that determines the purposes and means for processing personal data). If you have any questions about our processing of your Personal Data from such commercial customers, you are advised to contact the applicable customer who has directed us to process the particular information.
Among other third party providers, we partially rely on AWS’ security programs to protect personal information while stored in their respective controlled facilities. We require encryption at rest to be enabled for all storage, multi-factor authentication to be enabled for AWS console access, and CloudTrail configured to log all administrative activity. We maintain layered, rotated backups of the database servers and all Service-related artifacts. For more information on AWS’ security practices and processes, please see https://aws.amazon.com/security/.
Client complies with applicable data protection laws, including applicable security breach notification requirements.
Please keep in mind that no Internet or email transmission is ever fully secure or error free, so you should take special care in deciding what information you send to us.
runZero is not in the business of selling your information. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you, as set forth below:
Business Transfers: runZero may disclose Personal Data as necessary in connection with the sale or transfer of all or part of its business. As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets.
Legal Requirements: runZero may disclose your Personal Data if required or permitted by law, or when we believe, in the good faith, that such action is necessary to (a) comply with a legal obligation or process, including to meet national security or law enforcement requirements, (b) protect and defend the rights or property of runZero, (c) act in urgent circumstances to protect the personal safety of users of the Services, our customers, or the public, or (d) protect against legal liability.
Aggregated Personal Data: In an ongoing effort to better understand and serve the users of the Services, runZero often conducts research on its Customer demographics, interests and behavior based on the Personal Data and other information provided to us, including the total number of visitors to our Sites, the number of visitors to each page of our Sites, and the domain names of our visitors’ Internet service providers. We may compiled, analyzed, publish, share, distribute, or disclose such information on an aggregate basis or in a de-identified manner that does not allow such data about you to be separated from the aggregate data and identified as originating from you.
Personal Information You Post in Public Areas: When you post a message in a runZero forum, chat room, review, or customer feedback, the information you post may be accessible to other users of the Services and the public. If you post Personal Data anywhere on the Services that is accessible to other users or the public, you are advised that such Personal Data can be read, collected, used, or disseminated by others and could be used to send you unsolicited information or otherwise. Accordingly, you assume full responsibility for posting such Personal Data and agree that runZero is not responsible in any way for Personal Data you choose to post in these public areas. All such data shall be deemed to be non-confidential and runZero shall be free to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.
In addition to the above, we may share Personal Data about you with others to the extent you consent to such sharing.
You can visit the Sites without providing any Personal Data. If you choose not to provide any Personal Data, you may not be able to use certain Services. runZero will offer you the opportunity to opt out of your Personal Data being (a) disclosed to third parties, except when disclosure is made to a third party that is acting as an agent to perform task(s) on our behalf and under our instructions, or (b) used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized by you. runZero will provide clear, conspicuous and readily available mechanisms to opt out should applicable circumstances arise.
Your access to and use of the Services is subject to either the Terms of Service at https://www.runzero.com/terms, Subscription Services Agreement, Master Subscription Agreement, or other agreement (e.g. beta agreement, clickwrap) as you may have accepted.
Applicable California privacy legislation permits visitors who are California residents to request certain information regarding our disclosure of Personal information to third parties for their direct marketing purposes. To make such a request to access such information, please contact us as at firstname.lastname@example.org or via the web form located at https://www.runzero.com/company/contact-us/. Within thirty (30) days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted other than to the address specified in this paragraph.
Our databases are currently located in the United States. runZero makes no claim that its Services are appropriate or lawful for use or access outside the United States. If you access the Services from outside the United States, you are consenting to the transfer of your personal information from your location to the United States. You are solely responsible for complying with all local laws, rules and regulations regarding online conduct and access to the Services. By sending us your information, you further consent to its storage within the United States. For residents of the EU, Switzerland, plus Iceland, Liechtenstein and Norway, runZero certifies to the EU-US and Swiss-US Privacy Shield. See our privacy statement specific to Privacy Shield at the following link: https://www.runzero.com/privacy-shield.