Privacy Policy
Index table
- Background
- Controller
- What personal data does cibes process?
- Cibes’ processing of your personal data
- How does cibes protect your data?
- Transfer of personal data to third parties and third countries
- Social media
- Your rights
- Mechanisms to control your information
- Cookies
- Links to other websites
- Children using or accessing Cibes’ services
- Contact
- Changes to this privacy policy
- State specific privacy rights
1. Background
You should always feel secure when you provide Personal Data (as defined in section 3 below) to Cibes Lift Group AB and its subsidiaries (collectively, “we”, “our”, “us”, “Cibes” or the ”Company”). Your right to privacy and that you continue to trust us is of great importance to us. The terms “you” and “your” refers to you, the user. If you are interacting with Cibes on behalf of a business, association, or other entity, “you” or “your” will also refer to such business, association, or other entity, unless the context clearly dictates otherwise.
In this Privacy Policy we describe how Cibes collects, shares, processes and uses your Personal Data when you are a customer, applying for a job position, visiting our website (www.cibessymmetry.com) or using our application, or when you are representing a company which is a customer, potential customer, distributor or partner to Cibes (collectively, “Services”). This Privacy Policy also describes your rights and how you may exercise such rights.
By using/continuing to use the Services, you acknowledge you have read and understand and agree to the collection, storage, use, and disclosure of your Personal Data as described in this Privacy Policy, and you agree to the Terms of Use which is incorporated by reference. If you choose to access or use the Services, your access and use, and any dispute over privacy is subject to this Privacy Policy and our Terms of Use, including, but not limited to, limitations on damages and resolution of disputes. If you do not agree, please do not access or use the Services.
2. Controller
Cibes Lift Group AB, Swedish registration number 556343-1484, Utmarksvägen 13, SE-802 91 Gävle, Sweden, is the controller regarding your Personal Data and is therefore responsible for your Personal Data being processed in a correct and safe manner in accordance with applicable law. You can find the Company contact information in the section ”Contact” below.
Cibes has appointed a group of people as responsible for data protection, with the responsibility to monitor Cibes’ processing of Personal Data and assure that the processing is in accordance with applicable data protection legislation. You can contact the Data protection group via the email address gdpr@cibesliftgroup.com.
3. What personal data does Cibes process?
Personal data means all types of information which can, directly or indirectly, be used to identify a living physical person. Your personal data is information about you. Examples of personal data are names, contact data, pictures of you and IP-addresses.
Processing means all types of actions made with personal data, such as collecting, storing, using, processing and transferring personal data. When we talk about “Personal Data” in this Privacy Policy, we are talking about any information processed in accordance with this section.
| Customers (private customers and sole proprietorships): | |
Cibes collects and stores the following information about you as a representative for a company/organisation:
Your personal data is usually collected from the company/organisation that you represent, but in some cases directly from you, e.g. through e-mail correspondence or other communication, in connection with you attending our company events or meetings and when you are active on our social media. Cibes may also collect personal data of you from another Cibes group company or Cibes’ other partners. Moreover, and if necessary, the Company uses external information services in order to collect supplementary information such as title and contact information. |
| Potential customers and company representatives for potential customers: |
Cibes may collect and store the following information about you as a potential customer, or as a representative for a company/organisation that is a potential customer:
|
| Visitors of Cibes’ website and users of Cibes’ application: |
Cibes collects the following information about you that visit our website and uses our application:
|
| Recruitment (job applicants): |
Cibes collects the following information about you that applies for positions within the Company:
Your personal data is collected directly from you or from the recruitment agency that you apply through. |
4. Cibes’ processing of your personal data
The purposes for which we process your Personal Data, the legal basis we have for each processing and for how long we store your Personal Data is presented in the tables below.
Cibes will not store your Personal Data for a longer period than necessary in order to fulfil the purposes for which the Personal Data was collected, or for as long as Cibes is obligated to store your Personal Data in accordance with law, or to safeguard Cibes’ legal interests, e.g. if there is an ongoing legal process. Your Personal Data will thereafter be deleted. For more details, please see the tables below, or contact Cibes. Contact information is found in the section ”Contact” below.
In addition to the purposes stated in the charts below, Cibes might process any Personal Data collected for those purposes if it is necessary for the establishment, exercise or defense of legal claims. The processing is necessary for the establishment, exercise or defense of legal claims (legitimate interest).
| Customers (private customers and sole proprietorships): | ||
| Purpose | Legal basis | Storage period |
| In order to be able to administrate your customer relationship with Cibes and to keep contact for delivery of product and services, performing of services of existing products from Cibes.
Personal identification number is stored only for proper identification. | In order to fulfil the agreement with the customer. | The data is stored for as long as we have a business relationship and any obligations under the agreement is outstanding. |
| In order to comply with legal obligations, such as safety requirements and accounting requirements. | The processing is necessary for the Company’s compliance with legal obligations. | Some personal data will, for the purpose of complying with relevant accounting law, be stored for seven years, counted from the end of the calendar year when the financial year, to which the data belonged, ended.
The data is stored only for as long as Cibes is obligated by law to store your personal data. |
| In order to enable marketing and communication of Cibes’ progress in developing products, such as through sending out newsletters and other marketing material, invitations to events and meetings etc. | The processing is necessary for the purposes of Cibes’ legitimate interest of marketing its business and its products to its customers (legitimate interest). | The data is stored for as long as we have a business relationship or until you opt out. |
| Enable customer surveys and other market surveys regarding Cibes’ products and the customer’s purchase experience. | The processing is necessary for the purposes of Cibes’ legitimate interest to evaluate and develop its products, marketing and trademark. (legitimate interest). | The data is stored for as long as we have a business relationship. |
| To enable customers to make their payments and to analyse purchase history in order to offer customers the correct products and marketing, and in order to follow up Cibes’ salespersons’ performance, sales and need of development of their work skills.
| In order to fulfil the agreement to the customer.
The processing is necessary for the purposes of Cibes’ interest of marketing its business and its products to the customers, regarding customers purchase history, and to follow up Cibes’ salespersons’ performance and offer to develop their work skills (legitimate interest). | The data is stored for as long as we have a business relationship and any obligations under the agreement is outstanding. |
| To enable customer to make their payments after purchasing products and services from Cibes. | In order to fulfil the agreement with the customer. | The data is stored for as long as we have a business relationship and any obligations under the agreement is outstanding. |
| In order to track the customer’s order in the order system, and to communicate with the customer regarding delivery of products etc. | In order to fulfil the agreement with the customer. | The data is stored for as long as we have a business relationship and any obligations under the agreement is outstanding. |
| In order to handle customers’ complaints and warranty matters.
In order to offer customers relevant service and support. | In order to fulfil the agreement with the customer.
The processing is necessary for the purposes of Cibes’ legitimate interest of offering their customers correct and requested service and support (legitimate interest). | The data is stored for as long as we have a business relationship and any obligations under the agreement is outstanding.
The data is stored only for as long as Cibes is obligated to store your personal data in accordance with law, or to safeguard Cibes’ legal interests, e.g. if there is an ongoing legal process. |
| To avoid and investigate break ins in Cibes’ premises. | The processing is necessary for Cibes’ legitimate interest to enable proper investigation of criminal activities in the event of break ins or other situations in the Company’s premises and to ensure the physical security in its premises as well as a safe and secure environment for its employees and visitors (legitimate interest). | Images and video from surveillance cameras will be stored for up to one month, and will then be deleted. |
| Company representatives for customers and partners: | ||
| Purpose | Legal basis | Storage period |
| In order to administrate the customer relationship and maintain contact with a representative for the company regarding delivery of Cibes’ products, performance of services etc. | The processing is necessary for the performance of the agreement with the customer or partner, that you represent.
The processing is necessary for the purposes of Cibes’ legitimate interest in the performance of the agreement with the customer or partner, and to administrate the relationship between you, or the company/organisation you represent and Cibes (legitimate interest). | As long as we have a business relationship with you or the company that you represent.
Contact information to company representatives is stored during the period of time that the storage of data is necessary to in order to maintain the relationship with the company/organisation. The data will be deleted after Cibes has been informed that the personal data is no longer necessary or relevant for the purpose, or when the representatives so demand. |
| In order to comply with legal obligations, such as safety requirements and accounting requirements. | The processing is necessary for the Company’s compliance with legal obligations. | Some personal data will, in purpose of complying with relevant accounting law, be stored for seven years, counted from the end of the calendar year when the financial year, to which the data belonged, terminated.
The data is only stored for as long as Cibes is obligated to store your personal data in accordance with law. |
| Enable marketing and communication regarding Cibes’ trademark and products, to send marketing and invitations to events and meetings etc. | The processing is necessary for the purposes of Cibes’ legitimate interest of marketing its business and its products to the company/organisation that you represent (legitimate interest). | The data is stored for as long as we have a business relationship or until you choose to opt out.
|
| In order to track the order in the order system, and to communicate with customer regarding delivery of products etc. | The processing is necessary for the performance of the agreement with the customer or partner that you represent. | As long as we have a business relationship with you or the company you represent. |
| Potential customers, and company representatives for potential customers: | ||
| Purpose | Legal basis | Storage period |
| To enable marketing and communication regarding Cibes’ trademark and products, and to send marketing material and invitations to events and meetings etc. | The processing is necessary for the purposes of Cibes’ legitimate interest of marketing its business and its products to you as a potential customer or to the company/organisation that you represent (legitimate interest). | The data is stored for up to a month. The data may be stored for a longer period if a customer relationship arises. |
| Website and application visitors: | ||
| Purpose | Legal basis | Storage period |
| To ensure the functionality of the website and application.
In order to develop Cibes’ website and application and to make it more user friendly based on the use of our website ( www.cibesliftgroup.com) and application.
| The processing is necessary for the purposes of the Company’s legitimate interest of improving, streamlining, simplifying and developing its website and application, and for the purpose of attracting more customers and partners, as well as publishing information regarding progress of Cibes’ business and product development (legitimate interest). | Your IP-address is stored for as long as you have our application installed.
Session cookies are stored for as long as the browser is open. Other cookies are stored a maximum of 24 months. |
| Recruitment (job applicants): | ||
| Purpose | Legal basis | Storage period |
| In order to, in connection with recruitment, be able to determine who is best suited for a certain job position, and to make sure that the person in question has the right competence. | The processing is necessary for the purposes of the Company’s legitimate interest of employing the right personnel and to ensure that competent persons work for the Company (legitimate interest). | Cibes will store your personal data concerning the application and recruitment process for two years and one month after the recruitment process is terminated and the job position is filled. |
5. How does Cibes protect your data?
We use a range of technical and organizational measures reasonably designed to protect your Personal Data from unauthorized access, use, loss, change or deletion in accordance with applicable data protection legislation. Such actions include, but are not limited to, physical controls, encryption, access restrictions, security policies, etc.
While we have employed security technologies and procedures to assist safeguarding your Personal Data, no system or network can be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on our website.
6. Transfer of personal data to third parties and third countries
Cibes will not transfer or disclose Personal Data to any third party, unless the Company is required to do so by means of a legal obligation, or when necessary for Cibes to fulfil its commitment to you and its customers and partners. Your Personal Data will not be sold to any third party for marketing purposes. The table below sets out situations when your Personal Data may be transferred to a third party.
| Third party | Reason for transferring personal data to a third party |
| Other companies within the company group of Cibes | Key functions such as but not limited to, IT, visa management and marketing are jointly managed within the Cibes group of companies, which means that personal data may be transferred to other companies within the group. |
| Suppliers of cloud services | Cibes stores some information in cloud services, consequently some of your personal data can be transferred to suppliers of such services. |
| Suppliers, distributors, installation companies and other partners | Cibes may transfer your personal information to suppliers, distributors, installation companies and other business partners of Cibes. Such transfer will occur only if the suppliers, resellers, installation companies or partners need your personal data in order to fulfil their services for Cibes. |
| Authorities | Personal data could be transferred to authorities (also to foreign authorities) when it is needed in order to comply with legal obligations. |
| Company transfer | Should Cibes intend to transfer all or part of Cibes’ business, personal data may be disclosed to a potential buyer. |
If you provide Personal Data to Cibes, you acknowledge and agree that such Personal Data may be transferred from your current location to the offices and servers of the Company and the other third parties referenced in this Privacy Policy located in the EU/EEA, United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of such laws, where applicable.
If you are a resident of the EU/EEA, Cibes strives to process your Personal Data within the EU/EEA. Accordingly, Cibes will not transfer your Personal Data to any country outside the EU/EEA save as stated below. In the event it is necessary or advisable for Personal Data to be transferred to a country outside the EU/EEA, Cibes will take necessary actions to safeguard the Personal Data and to enable a legal transfer of such personal data to a country outside the EU/EEA.
Cibes uses suppliers of software for product development and internal organisation, suppliers of marketing services, and suppliers of cloud services, such as Google and Amazon, which have servers located in USA. Therefore, please be aware, due to Cibes’ use of these suppliers’ services and software, your Personal Data may be transferred to USA. For example, the Personal Data that Cibes collects when you use Cibes’ website or application may be transferred to Google in USA, through Google Analytics and Google AdWords.
8. Your rights
In accordance with applicable data protection law, you may have certain rights further described in this section below.
Provided that Cibes is the data controller, you have the right to, at any time, without charge, receive an excerpt of Cibes’ processing of your personal data, the purposes for such processing and information on the sources of the personal data as well as information on the recipients, if any, or expected recipients of the personal data.
You also have the right to in said excerpt be informed of the anticipated period of time during which the data will be kept or the criteria to determine such period of time. The request to be provided with such excerpt shall be in writing and be sent to Cibes using the contact details set out below under the heading “Contact”.
You are entitled to data portability, i.e. a right to under certain circumstances receive your Personal Data in a structured, accessible and machine-readable format, which can be transferred to another user or data processor.
Cibes will, upon your request as well as on its own initiative, correct, anonymize, delete or supplement information that is found to be incorrect, incomplete or misleading. In certain situations, Cibes has an obligation to process your Personal Data even if you have requested that the data shall be deleted.
In certain circumstances, you have the right to request restriction of processing of your Personal Data (e.g. if you contest the accuracy of the Personal Data or the lawfulness of the processing) as well as a right to opt-out of the processing under the circumstances set out in applicable data protection legislation.
Should you want to exercise any of the rights described above or if you have any questions in respect of Personal Data processed by Cibes or about this Privacy Policy, please do not hesitate to contact Cibes (contact details are set out under the heading “Contact” below). Residents have the right not to receive discriminatory treatment by covered businesses for the exercise of their rights conferred by the applicable data protection law. To protect your privacy, we will take the following steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data or an authorized representative, which may include asking you to answer questions regarding your use of our Services.
Should you be dissatisfied with our refusal to take action in accordance with the exercise of your rights under this section, please let us know, and we will do our best to respond to your complaints (including your request for reconsideration by the Company, which may be sent to the Company in accordance with the contact details under the “Contact” section). Our integrity is very important to Cibes and Cibes always strives to comply with all applicable data protection laws. However, should Cibes in your opinion fail to meet this ambition, you also have a right to submit a complaint to the supervisory authority where you are domiciled, including, without limitation, with the Swedish Data Protection Authority (Sw. Datainspektionen).
9. Mechanisms to control your information
“Do Not Track” (“DNT”) is a privacy preference you can set in certain web browsers. When you turn on this preference, it sends a signal or message to the websites you visit indicating that you do not wish to be tracked. Please note that we currently do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.
10. Cookies
Cibes uses cookies and similar techniques to provide certain functions at the website www.cibesliftgroup.com and to improve our website and to deliver a better and more personal service. The information is stored as a file containing encrypted login-data. The information is used for automatic log in and to store settings that you have changed on the website. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether.
11. Links to other websites
On Cibes’ website (www.cibessymmetry.com) there may be links to third-party websites or applications that Cibes has no control over. These websites are not covered by this Privacy Policy. We encourage our users to read the privacy policies and terms and conditions of each website and application with which they interact. Cibes does not endorse, screen or approve, and is not responsible for the practices of such third parties or the contents of their applications or websites linked from www.cibessymmetry.com. Providing personal data to third-party websites or applications is at your own risk.
12. Children using or accessing Cibes’ services
We are especially committed to protecting the privacy of children. The Company’s Services are directed at a general audience over the age of eighteen (18) and are not targeted to children. If we learn that we have inadvertently collected or received Personal Data from an individual under the age of eighteen (18), we will use reasonable efforts to immediately remove such information, unless we have a legal obligation to keep it. If you are a parent or legal guardian and think your child under the age of eighteen (18) has given us information without your consent, please contact us via the information found in the “Contact” section below.
13. Contact
If you have questions regarding how Cibes processes your Personal Data, or if you want to exercise any of your rights according to this Privacy Policy, please contact Cibes on gdpr@cibesliftgroup.com.
14. Changes to this Privacy Policy
Cibes reserves the right to make changes to this privacy policy at any time. When changing this Privacy Policy, Cibes will publish the revised Privacy Policy at www.cibesliftgroup.com with information on when the changes will enter into force. Cibes will also, in the best way possible, inform its customers and partners of changes made to this Privacy Policy. However, it is your responsibility to check our website regularly for changes to this Privacy Policy. Your continued use of or access to Cibes’ Services following the posting of any changes to this Privacy Policy constitutes acceptance of those changes.
15. State specific privacy rights
If you are a resident of California, Nevada, Virginia, Colorado, Connecticut or Utah, applicable state law requires us to provide additional information and rights, which can be found under the state specific privacy notices below.
California Privacy Notice
California law requires us to disclose certain information related to our privacy practices. This California Privacy Notice (the “CA Notice”) supplements the information contained in the Cibes Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you“). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), and California Privacy Rights Act of 2020 (CPRA) (together, the “CCPA”) and any terms defined under the CCPA have the same meaning when used in this CA Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy. As used in this CA Notice only, “personal information” has the meaning set forth in the CCPA.
To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to California residents.
1. Categories of Personal Information Collected and Disclosed
The CCPA provides California residents with the right to know what categories of personal information covered businesses have collected about them and whether such businesses have disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding 12 months. This information can be found in the table below:
| Category of Personal Information Collected | Category of Third Parties Personal Information is Disclosed to for a Business Purpose |
| Identifiers.
A real name, postal address, Internet Protocol address, email address, or other similar identifiers. |
|
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, address, telephone number, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
| Business-to-Business-related information
Collect the business-to-business information of Customers, to provide the appropriate level of service |
|
| Cibes Professional or employment-related information
Collect the employment information of employees of Cibes, including contents of job applications, employee personnel records, and employee communications. |
|
| Geolocation data
As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
| Category of Sensitive Personal Information Collected | Category of Third Parties Sensitive Personal Information is Disclosed to for a Business Purpose |
| Precise Geolocation Data
Any data that is derived from a device, and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet, except as prescribed by regulations. |
|
We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the personal information was collected. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in “What Personal Data Does Cibes Process?” and “Cibes’ Processing of Your Personal Data” of the Privacy Policy, respectively.
We may share any of the information listed above with service providers, which are companies that we engage for business purposes to conduct activities on our behalf. Service providers are restricted from using personal information for any purpose that is not related to our engagement.
2. “Sales” or “Sharing” of Personal Information under the CCPA
California residents have the right to opt out of the “sale” or “sharing” of their personal information to third parties. The CCPA defines “sale” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for monetary or other valuable consideration (which may be considered “sales” under the CCPA even if no money is exchanged). The CCPA defines “sharing” to mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. The categories of personal information we have “sold” or “shared” and the categories of third parties we have “sold” or “shared” personal information to in the preceding twelve months are listed below:
| Category of Personal Information Sold or Shared by the Company | Category of Third Parties Personal Information is Sold or Shared to |
| Identifiers.
A real name, postal address, telephone number, unique personal identifier, online identifier, email address, or other similar identifiers. |
|
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, address, telephone number. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
The Company’s business and commercial purposes for “selling” or “sharing” personal information can be found in the Privacy Policy section titled “Cibes’ Processing of Your Personal Data“. The Company does not have actual knowledge of any “sale” of personal information of minors under 16 years of age.
3. Other California Consumer Privacy Rights
California residents have additional rights regarding their personal information. This section describes those additional rights and explains how to exercise those rights.
- California Shine the Light. The California “Shine the Light” law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to exercise any of your rights under the law, please contact us as set forth in the “Contact” section of the Privacy Policy. We will process such requests in accordance with applicable laws.
- Opt-out of “Sales or Sharing”. California residents may opt-out of the “sale or sharing” of their personal information by contacting us as set forth in the “Contact” section of the Privacy Policy. California residents (or their authorized agent) may also exercise your right to limit the disclosure of your sensitive personal information, by clicking on this “Limit the Use of My Sensitive Personal Information” link.
Virginia Privacy Notice
Virginia requires us to disclose certain information related to our privacy practices. This Virginia Privacy Notice (the “VA Notice”) supplements the information contained in the Cibes Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Virginia (“consumers” or “you“). We adopt this notice to comply with the Virginia Consumer Data Protection Act (the “VCDPA”) and any terms defined under the VCDPA have the same meaning when used in this VA Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.
To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Virginia residents.
1. Sharing of Personal Data
The VCDPA requires covered businesses to provide residents of Virginia with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Virginia can find this information below:
| Category of Personal Data Shared | Category of Third Parties Personal Data is Shared With |
| Identifiers.
A real name, Internet Protocol address, email address, or other similar identifiers. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
| Business-to-Business -related information
Collect the business-to-business information of Customers, to provide the appropriate level of service |
|
| Geolocation data
As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
2. “Sales” or Sharing for Targeted Advertising under the VCDPA
Residents of Virginia have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale” means any “exchange of personal data for monetary consideration by us to a third party” as defined in the VCDPA. However, please note, in accordance with the VCDPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying advertisements to you where the advertisement is selected based on personal data obtained from your activities over time and across non-affiliated websites or online applications to predict your preferences or interests” as defined in the VCDPA. However, please note, as further described in the VCDPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below (if any):
| Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising | Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising |
| N/A
Identifiers Internet or other electronic network activity Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
3. Right to Opt-Out
Virginia residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.
Colorado Privacy Notice
Virginia residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.
1. Categories of Personal Data Collected or Processed
The CPA requires covered businesses to provide residents of Colorado with the right to know the categories of “personal data” (as defined under applicable law) covered businesses have collected or processed about them and the categories of third parties with whom such personal data has been shared. Residents of Colorado can find this information below:
| Category of Personal Data Collected or Processed | Category of Third Parties Personal Data is Shared With |
| Identifiers.
A real name, Internet Protocol address, email address, or other similar identifiers. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
| Business-to-Business-related information
Collect the business-to-business information of Customers, to provide the appropriate level of service |
|
| Geolocation data
As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
2. “Sales” or Sharing for Targeted Advertising under the CPA
Residents of Colorado have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the CPA. However, please note, in accordance with the CPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the CPA. However, please note, as further described in the CPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below (if any):
| Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising | Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising |
| N/A
Identifiers Internet or other electronic network activity Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
3. Right to Opt-Out
Colorado residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms.
Connecticut Privacy Notice
Colorado residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms.
1. Sharing of Personal Data
The CTDPA requires covered businesses to provide residents of Connecticut with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Connecticut can find this information below:
| Category of Personal Data Shared | Category of Third Parties Personal Data is Shared With |
| Identifiers.
A real name, Internet Protocol address, email address, or other similar identifiers. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
| Business-to-business-related information
Collect the business-to-business information of Customers, to provide the appropriate level of service |
|
| Geolocation data
As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
2. “Sales” or Sharing for Targeted Advertising under the CTDPA
Residents of Connecticut have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the CTDPA. However, please note, in accordance with the CTDPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the CTDPA. However, please note, as further described in the CTDPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below (if any):
| Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising | Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising |
| N/A
Identifiers Internet or other electronic network activity Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
3. Right to Opt-Out
Connecticut residents (or an authorized agent thereof) may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms.
4. Right to Appeal a Denied Appeal
If your request for reconsideration of the Cibes’ refusal to take action in accordance with the exercise of your rights in the “Your Rights” section of the Privacy Policy is denied, you have the right to file a complaint with the Connecticut Office of the Attorney General by visiting the “File a Compliant” page here or contacting the Consumer Assistance Unit at 860-808-5420.
Utah Privacy Notice
Utah requires us to disclose certain information related to our privacy practices. This Utah Privacy Notice (the “UT Notice”) supplements the information contained in the Cibes Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Utah (“consumers” or “you“). We adopt this notice to comply with the Utah Consumer Privacy Act (the “UCPA”) and any terms defined under the UCPA have the same meaning when used in this UT Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.
To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Utah residents.
1. Sharing of Personal Data
The UCPA requires covered businesses to provide residents of Utah with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Utah can find this information below:
| Category of Personal Data Shared | Category of Third Parties Personal Data is Shared With |
| Identifiers
A real name, Internet Protocol address, email address, or other similar identifiers. |
|
| Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Internet or other electronic network activity
Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement. |
|
| Inferences drawn from other personal information to create a profile about a consumer
Profile reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
| Business-to-Business-related information
Collect the business-to-business information of Customers, to provide the appropriate level of service |
|
| Geolocation data
As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
2. “Sales” or Sharing for Targeted Advertising under the UCPA
Residents of Utah have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the UCPA. However, please note, in accordance with the UCPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the UCPA. However, please note, as further described in the UCPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below (if any):
| Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising | Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising |
| N/A Identifiers A real name, Internet Protocol address, email address, or other similar identifiers.Internet or other electronic network activityBrowsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement.Geolocation dataAs described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address. |
|
3. Right to Opt-Out
Utah residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; or (B) sale of personal data. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.
Nevada Privacy Notice
Nevada law requires us to provide all visitors, users, and others who reside in the State of Nevada (“you“) certain additional privacy rights. This Nevada Privacy Notice (the “NV Notice”) supplements the information contained in the Cibes Privacy Policy (the “Privacy Policy”) and applies solely to you. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to sell or license that Personal Information, even if your Personal Information is not currently being sold. If you would like to exercise this right, please contact us via the information found in the “Contact” section of the Privacy Policy.
7. Social media
Regarding personal data that is processed on social media, such as Facebook, Instagram and LinkedIn, please refer to the privacy policies of each social media provider for information on how such companies processes personal data. Cibes purpose of its processing of personal data on social media is to enable representatives for customers, potential customers and partners to interact and contact Cibes through such social media. This is aimed to contribute to a good relationship between Cibes and its customers and partners as well as to make Cibes’ customer service easily accessible through several channels. The processing is necessary for the purposes of Cibes’ legitimate interest of marketing its trademark and its products to customers, potential customers, and to partners (legitimate interest).