Collection of Personal Information. MiR collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information“). In particular, MiR has collected the following categories of Personal Information from its consumers within the last twelve (12) months:
Personal Information does not include information that is:
- Lawfully made available from government records.
- Deidentified or aggregate information.
- Otherwise excluded from the scope of the CCPA.
The chart above provides the categories of Personal Information (as defined by the CCPA) which MiR has collected, disclosed for a business purpose, sold, or used for business or commercial purposes in the preceding twelve months since this Privacy Notice was last updated, as well as the categories of sources from which that information was collected, and the categories of third parties with whom we shared Personal Information. The examples of Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of Personal Information associated with each category.
Use of Personal Information. MiR may use or disclose the Personal Information that MiR collects for one or more of the following business purposes:
- To fulfil or meet the reason the individual provided the information. For example, if Data Subject’s shares his/her/its name and contact information to ask a question about our products or services, MiR will use that Personal Information to respond to the Data Subject’s inquiry. If an individual provides Personal Information to purchase a product or service, MiR will use that information to process the payment and facilitate delivery. MiR may also save an individual’s information to facilitate new product orders or process returns.
- To provide, support, personalize, and develop products, and services.
- To create, maintain, customize, and secure an account with MiR.
- To provide individuals with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to the recipient.
- To provide an individual with support and to respond to the inquiries.
- To process requests, purchases, transactions, and payments and prevent transactional fraud.
- To deliver content and product and service offerings relevant to an individual’s interests, including targeted offers and ads through MiR website, third-party sites, and via email or text message (with consent, where required by law).
- For auditing related to a current and/or concurrent transaction with a Data Subject.
- To help maintain the safety, security, quality, and integrity of MiR’ products and services, databases and other technology assets, and business, including to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity, and to debug to identify and repair errors that impair existing intended functionality.
- For testing, research, analysis, and product development and demonstration, including to develop and improve MiR’ products, and services.
- To respond to law enforcement requests and as otherwise required by applicable law, court order, or governmental regulations.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of MiR assets, whether as a going concern or as a part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by MiR about MiR’ website users is among the assets transferred.
MiR will not collect additional categories of Personal Information or use the Personal Information that MiR collects for materially different, unrelated, or incompatible purposes without providing notice.
Sharing the Personal Information. MiR may disclose Personal Information to a third party for a business purpose. When MiR discloses Personal Information for a business purpose, MiR enters into a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and to not use it for any purpose except performing the contract.
MiR may share Personal Information with the following categories of third parties:
- Related corporations, affiliates, subsidiaries, associated companies, and parent company.
- Service providers.
- Third parties to whom the Data Subject has authorized MiR to disclose his/her/its Persona Information in connection with a product, service or offering.
Disclosures of Personal Information for a Business Purpose. In the preceding twelve (12) months, MiR has disclosed the following categories of Personal Information for a business purpose:
Category A: Identifiers.
Category B: California Customer Records Personal Information categories.
Category D: Commercial information.
Category F: Internet or other similar network activity.
Category G. Geolocation data
Category I: Professional or employment-related information.
California Privacy Rights. According to the CCPA, California residents may make certain requests to MiR regarding Personal Information, specifically:
- The Right to Access/Know: the specific pieces or categories of the Personal Information, which also maybe disclosed or sold (if any) to the third parties for the business purposes, and categories of such third parties to whom this information was disclosed or sold; and the business or commercial purposes for collecting or selling the Personal Information.
- The Right to Request Deletion: the right to request the deletion of Personal Information, subject to certain exceptions.
- The Right to Correction: the right to request that any inaccuracies in Personal Information be corrected, taking into account the nature of the Personal Information and the purposes of the processing of Personal Information.
- The Right to Opt-Out of Sales or Sharing of Personal Information: the right to direct MiR not to “sell” Personal Information to third parties for monetary or other valuable consideration, or “share” the Personal Information to third parties for cross-context behavioral advertising purposes.
- Right to Limit Use and Disclosure of Sensitive Personal Information: the right to direct MiR to limit the use of the sensitive personal information to certain purposes, including to perform the services or provide the goods or services reasonably.
- The Right to Non-Discrimination: the right not to receive discriminatory treatment for exercising any of the rights described above, with limits to process Personal Information, such as in the case of a deletion request.
- “Shine the Light”: California residents that have an established business relationship with MiR have the right to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83). MiR does not share Personal Information with third parties for MiR’ own direct marketing purposes.
Right to Opt-Out of Personal Information Sales or Sharing. Unless a Data Subject has exercised his/her/its right to opt-out of Personal Information sales, MiR may sell Personal Information to third parties for monetary or other valuable consideration. The third parties may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties. These third parties may include business partners, third party advertising networks, social media companies and other third parties.
Do Not Sell or Share Personal Information. In certain circumstances, an individual may be permitted to use an authorized agent to submit requests on their behalf where MiR can verify the authorized agent’s authority to act on their behalf. In order to verify the authorized agent’s authority, MiR generally requires evidence of either (i) a valid power of attorney or (ii) a signed letter containing the name and contact information of the Data Subject of the request, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and location/residency, MiR may still need to separately reach out to the Data Subject to verify the Data Subject’s identity in connection with the request and to confirm that the authorized agent has permission to act on the Data Subject’s behalf.
Non-Discrimination. MiR will not discriminate against you for exercising any of individual’s CCPA rights. Unless permitted by the CCPA, MiR will not:
- Deny goods or services.
- Charge different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide a different level or quality of goods or services.
- Suggest that individual may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, MiR may offer certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive that MiR offers will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
Contact Information. In case of questions and/or suspected violations of this Privacy Notice, please contact the Data Protection Team at: firstname.lastname@example.org
Any request can be exercised free of charge and will be addressed as expeditiously as possible and always within one (1) month or sooner, if required by applicable law.