9. Rights to Your Personal Data
Under certain laws, you have the right to seek access to your personal data, seek rectification or erasure of your personal data, restrict our use of your personal data, object to our use or request data portability. Please contact us if you wish to exercise any of these rights. In any event, you can always ask us for more information about the people who will be able to see and access your personal data.
Please use the details above to contact us if you want to exercise any of the rights set out below in relation to your personal data:
- the right to access your personal data that we hold about you
- the right to rectification of your personal data. This enables you to have any incomplete or inaccurate data we hold about you corrected;
- the right to erasure of your personal data if your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed or if your personal data has been processed unlawfully;
- the right to restriction of the processing of your personal data;
- the right to data portability;
- the right to withdraw any consents for data processing you have provided;
- the right to object to the processing where there is no compelling legitimate grounds for the processing on our side which overrides the interests, rights and freedoms of the individual or if your personal data is not used for the establishment, exercise or defense of our legal claims.
Please note that you may not have all these rights depending on which law applies to our use of your personal data. Additionally, there may be certain exemptions available to us that we can rely on in handling your request.
You also have a right to file a complaint with a data protection supervisory authority. If you are in the UK, your supervisory authority is the Information Commissioner's Office – we have included a link to their website here. If you are in the EU and have concerns in relation to CPC processing of your personal data, you can find the relevant contacts details for the regulator here (https://edpb.europa.eu/about-edpb/about-edpb/members_en).
In accordance with applicable laws, you may choose to restrict the collection or use of your personal data by us by emailing us at dataprivacy@colder.com. This includes where you:
- Have previously not objected to us using your personal data for our direct marketing purposes but now wish to opt out of receiving future marketing emails from us;
- Want to opt out of any new uses of personal data permitted by this Notice caused by changes in our information practices;
- Do not want us to share your personal data with Affiliates or other partners for marketing purposes;
- Believe that personal data we are holding on you is incorrect or incomplete so that we can consider your concern and, where appropriate, we will promptly correct any personal data found to be incorrect. Or, you may contact us if you wish to review or change your personal data by using the “Contact” tab on our home page; or
- Do not want to be contacted by us in the future (unless you initiate the contact).
You may also write to us at the above address (located at the beginning of this Notice) or call us at +1-651-645-0091 or toll free at 1-800-444-2474.
California Privacy Rights
Some states within our licensed markets have laws that give privacy rights to their residents. This section addresses the California Privacy Rights Act of 2020 (CPRA), which provides Californians with certain rights and choices about their Personal Information.
A. Notice at Collection of Personal Information
Californians have the right to know what Personal Information is collected by CPC. Our Notice describes:
- The categories of Personal Information and Categories of Sensitive Personal Information Processed by CPC.
- Our business purposes for processing the categories of Personal Information and Sensitive Personal Information.
- Whether we sell or share the categories of Personal Information we collect.
- Our retention practices.
B. Notice of Right to Limit Use of Sensitive Personal Information
If sensitive data is used to create inferences, Californians have the right to limit CPC’s processing of their Sensitive Personal Information to business purposes that are reasonable and necessary to provide requested goods and services and for other reasons allowed under applicable law. We do not collect or use sensitive data to create inferences, please contact us at dataprivacy@colder.com or 1-800-444-2474 with questions.
C. Summary of CPRA Rights
The CPRA provides Californians with the following rights and choices regarding their Personal Information.
- Correct
Californians have the right to request the correction of their inaccurate Personal Information and, once we receive a verifiable request, CPC must take reasonable steps to correct the inaccurate data.
- Delete
Californians have the right to request the deletion of their Personal Information and, once we receive a verifiable request, CPC must comply unless an exception applies. The CPRA lists several exceptions, including:
- The data is necessary to complete a transaction for that person.
- The data is necessary to fulfill a warranty or support a product recall.
- The data is necessary to provide goods or services requested by that person.
- The data is necessary to perform a contract between CPC and that person.
- The data is reasonably used within the context of the ongoing business relationship between CPC and that person.
- CPC uses the data to identify and repair issues with our Services.
- CPC must retain the data to comply with a legal obligation.
- Do Not Sell/Share
If CPC sold or shared Personal Information, Californians have the right to opt-out of CPC’s sale/sharing of their Personal Information.
- Freedom from Discrimination
CPC may not discriminate against Californians who exercise their rights under the CPRA.
- Limit
Californians have the right to limit CPC’s use or disclosure of their Sensitive Personal Information as defined under California law.
- Know
Californians have the right to know what Personal Information is or has been collected by CPC in the 12 months prior to receipt of a request. If a request is made and verified, we must disclose, with respect to the Personal Information collected about the requestor, the following:
- The categories of Personal Information and Sensitive Personal Information we have collected.
- Our sources of Personal Information.
- The categories of Personal Information we sold or disclosed for a business purpose.
- The categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.
- Our purposes for collecting and selling/sharing Personal Information.
- Furthermore, Californians have the right to request access to specific pieces of Personal Information we have collected about them and, once we receive a verifiable request, CPC must provide this data in accordance with California law.
D. Exercising Your Rights and How We Will Respond
To exercise any of the rights above, or to ask a question, contact us at 1-800-444-2474; www.cpcworldwide.com/Contact-Us; or dataprivacy@colder.com.
For requests for access or deletion, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We will provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances.
If we expect your request is going to take us longer than normal to fulfill, we will let you know.
We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.
E. Our Commitment to Allowing You to Exercise Your Rights – Non-Discrimination
If you exercise any of the rights explained in this Policy, we will continue to treat you fairly. If you exercise your rights under this Notice, you will not be denied or charged different prices or rates for goods or services, or provided a different level or quality of goods or services than others.
F. Verification of Identity – Access or Deletion Requests
We will ask you for identifying information and attempt to match it to information that we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to your request. We will notify you to explain the basis of the denial.
G. Authorized Agents
You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity that is registered with the California Secretary of State.
If you would like to designate an agent to act on your behalf to request or delete Personal Information, you and the agent will need to comply with our verification process: If the agent submits requests to access, know or delete your Personal Information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.
Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney.
H. California Shine the Light Law
California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents that have an established business relationship with a business to annually request, free of charge, information about certain categories of Personal Information a business has disclosed to third parties for those parties’ direct marketing purposes in the preceding calendar year. For information and to make a request, contact us at dataprivacy@colder.com or you can call us at 651-645-0091 or toll free at 1-800-444-2474.
Virginia Privacy Rights
If you are a Virginia resident, the Virginia Consumer Data Privacy Act (“VCDPA”) grants you the following rights with respect to the personal information we collect about you:
- Right to Know: Virginia residents have the right to confirm whether or not we are processing their personal information and to access such data, including by obtaining a copy of data that they previously provided to us.
- Right to Delete: Virginia residents have the right to request deletion of their personal information that we have collected about them and to have such personal information deleted.
- Right to Correct: Virginia residents have the right to ask that we correct inaccuracies in their personal information, taking into account the nature of personal information and purposes of processing such information.
A. Exercising your Rights
To exercise any of the rights above, or to ask a question, contact us at dataprivacy@colder.com or 651-645-0091. All requesters will be required to authenticate themselves before we respond to their request.
B. Verification Process
We will ask you for identifying information and attempt to match it to information that we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to your request. We will notify you to explain the basis of the denial.
C. Response Timeline and Additional Information
For requests to know, delete or correct personal information, we will provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer to fulfill, we will let you know.
We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.