Our Site is not directed to and is not intended for access and use by persons under the age of 18. We do not intentionally collect or use Personal Data from users that we have reason to believe are under the age of 18.
Personal Data Collected
We gather Personal Data and Other Data (as described below).
Personal data is information that identifies you or can be used to identify or contact you, e.g., your name, email address, address, or phone number (“Personal Data”). We may need to collect and process Personal Data in order to provide requested information, products or services to you (including the Site) or because we are legally required to do so.
- Voluntary Disclosure. We may collect Personal Data voluntarily provided by you, including in emails to the Site, online forms, order and registration forms, surveys, promotion participation, phone calls and online chats with our customer service and through other means.
- Other Means. We may collect information through various other means, including participation at conferences and events, individual introductions, from employers that enroll their employees in our services, and from selected third-party business partners. From time to time, we may also acquire from third parties certain lists containing the names and contact information of individuals who may be interested in our products and services.
We ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through this Site or otherwise to us.
Use and Disclosure of Personal Data
We will not use or share your Personal Data without a valid legal basis to do so. Any use or disclosure of Personal Data will be based on a legitimate interest. We use Personal Data for legitimate business purposes, including the following:
- Fulfillment of Requests. We may use Personal Data about you (a) to deliver products and services to you, (b) provide you with information about products and services you’ve ordered, (c) when it is necessary for employees, agents and contractors to operate or maintain the website or to correct a technical problem, and (d) when it is necessary to verify the existence or condition of your account with a financial institution, credit bureau, insurance provider, or other third-party. We will engage in these activities to manage our contractual relationship with you and/or to comply with a legal obligation.
- Other Communications. From time to time, we may use Personal Data about you to inform you of products, programs, services and promotions that we believe may be of interest to you. If you or your employer is one of our customers, we may also inform you of such products, programs, services and promotions using Personal Data about you that you or your employer provided to us. If you would prefer that we not send electronic marketing messages to you, please see the “opt-out” section below.
- Other Business Purposes. We may also use Personal Data about you for other business purposes, such as data analysis (for example, to improve the efficiency of our Site and services), editorial and feedback purposes, providing customer support, customizing and improving the content and layout of the Site, completing business transactions (for example, to confirm content requested is received by users), development of marketing and promotion plans and materials, statistical analysis of user behavior (for example, to understand what parts of the Site are of most interest to users), product development, market research, administering individual accounts, and meeting government regulatory requirements such as sales tax collection, audits, etc. We may also use Personal Data of journalist/media contacts for press release distribution or sharing other newsworthy developments related to our business activities. We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, and/or because we have a legitimate interest.
We may disclose Personal Data for the following legitimate business purposes:
- Third-Party Service Providers. We may provide Personal Data to third-party service providers, who provide services to us, including but not limited to, data analysis, order fulfillment, payment processing, and other services. We maintain written contracts with these third parties and require that these third parties provide at least the same level of privacy protection and security as required under this Policy. Unless we demonstrate that we are not responsible for violation of this Policy giving rise to damage, we will remain responsible and liable under Privacy Shield Principles if a third-party that we engage to process Personal Data on our behalf does so in a manner inconsistent with the Privacy Shield Principles;
- Affiliate Communications. We may transfer Personal Data among our affiliates to allow our affiliates to contact you regarding products, programs, services and promotions that they believe may be of interest to you, and such affiliates may otherwise use your Personal Data in accordance with this Policy. If you would prefer not to receive marketing communications from us or our affiliates, please see the “opt-out” section below. Aural Analytics, Inc. will be the party responsible for jointly used Personal Data.
- Strategic Partners and Co-Branded Sites. From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with us to provide or promote joint products, services, applications, or features (together, “Jointly Offered Items”). These special relationships may include co-branded web sites (“co-branded pages”). Any information, including Personal Data, that you provide in connection with one of these Jointly Offered Items, and/or on one of these co-branded pages, will be shared with our third-party partners. You should check these third parties’ web sites for information regarding their privacy practices. PLEASE NOTE THAT THIS POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES. If you do not want Personal Data about you shared with such third parties, please do not provide Personal Data in connection with the Jointly Offered Items and/or co-branded pages.
- Third-Party Data Providers. If you subscribe to one of our products or services that contains third-party data, we may be required to provide your Personal Data to the third party as part of our reporting obligations. We will only do so if a third-party data provider conditions your receipt of their data on knowing your identity.
- Conferences and Events. When you attend a conference or event organized by us, your name and contact information may be shared with other attendees.
- Promotions. We may share the Personal Data you provide in connection with Promotions with third-party sponsors of such Promotions (irrespective of whether such Promotions are hosted by us), or otherwise in accordance with the rules applicable to those Promotions.
- Assignment. We may disclose or transfer any and all Personal Data that we collect to an affiliated entity or a third party (and their respective advisors) in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
Such disclosures may include transfers of Personal Data from one country to another. Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. If you are accessing the Site from outside the United States, you may be sending information, including Personal Data to the United States where our servers are located. That information may be transferred within the United States or back out of the United States to other countries outside your country of residence.
Collection and Use of Other Data
We and our service providers may also collect and use the following types of data, referred to in this Policy as “Other Data”:
- Monitoring Data. We and our service providers may collect and/or track other information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of the Site (“Monitoring Data”). We use Monitoring Data to help us understand who uses the Site and to improve and market it, as well as our other web sites and services. Unless combined with Personal Data, Monitoring Data does not personally identify you or any other user, and we may use it for any purpose.
- Aggregated Data. We may aggregate Personal Data in a manner such that the end-product does not personally identify you or any other user of the Site, for example, by using information to calculate the percentage of our users who have a particular telephone area code. Such aggregate information may also be used for any purpose.
- IP Addresses. When you visit and interact with the Site, we and our third-party service providers may collect Internet Protocol (IP) addresses. Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). This number is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use IP addresses to understand how the Site is used by our users, to improve the Site and to enhance user experience of the Site. We may also use your IP address to help diagnose problems with our server and to administer our Site. We may also derive your approximate location from your IP address.
We may use third-party advertising companies to serve advertisements regarding products and services that may be of interest to you when you access and use the Site, our apps and other websites or online services, based on information relating to your access to and use of the Site and other websites or online services on any of your devices, as well as on information received from third parties. To do so, these companies may place or recognize a unique cookie on your browser (including through the use of pixel tags). They may also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.
We may store your Personal Data. This information is retained and used in accordance with existing laws, rules, regulations, and other policies.
While there is no such thing as “perfect security” on the Internet, we will take reasonable steps to ensure the safety of your Personal Data. Personal Data is stored on our server and is not publicly accessible. To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we take reasonable precautions and have security measures in place to protect the loss, misuse and alteration of the information under our control. Although we attempt to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information. We are not responsible for any breach of its security or for the actions of any third parties that may obtain any Personal Data. You are prohibited from violating or attempting to violate security for or otherwise interfering with the operation of the website. We do not make, and expressly disclaim, any representation or warranty, express or implied, regarding the security or integrity of the website and your Personal Data.
If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately by sending an e-mail to to email@example.com.
Data Integrity; Retention Period
We will use Personal Data only in ways that are compatible with the purposes for which it was collected, authorized by this Policy, or authorized by you. We will take reasonable steps to ensure that Personal Data is relevant to its intended use, and is accurate, complete, and current (as provided by you). We depend on you to update or correct your Personal Data whenever necessary.
We will retain Personal Data about you for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
We give you choices regarding our use and disclosure of your Personal Data as follows:
- If you no longer want to receive marketing-related emails from us on a going-forward basis, you may stop receiving these marketing-related emails by sending an e-mail to firstname.lastname@example.org.
- If you would prefer that we do not share your Personal Data on a going-forward basis with our affiliates or with unaffiliated third parties for their marketing purposes or for the other purposes described in this Policy, you may cease this sharing by sending an e-mail to email@example.com. This does not apply to third parties acting as our agents and under our instruction pursuant to a written agreement. If we transfer personal data to a third party acting as an agent, we will: (i) transfer the personal data only for limited and specified purposes; (ii) ensure that the agent is obligated to provide at least the same level of privacy protection as is required by the Privacy Shield principles; (iii) take reasonable and appropriate steps to ensure that the agent effectively processes the personal datad in a manner consistent with our obligations under those principles; (iv) require the agent to notify the us if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the principles; (v) upon notice, including under (iv), take reasonable and appropriate steps to stop and remediate unauthorized processing; and (vi) provide a summary or a representative copy of the relevant privacy provisions of its contract with that agent to the Department of Commerce upon request.
- If you would like to opt-out of your Personal Data being used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by you, e-mail firstname.lastname@example.org.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you exercise the second option as described above, we will not be able to remove your Personal Data from the databases of our affiliates or unaffiliated third parties with which we have already shared your Personal Data (i.e., to which we have already provided your Personal Data as of the date that we implement your request). Further, please note that requesting us not to share your Personal Data with affiliates or unaffiliated third parties may result in you no longer receiving any marketing emails from us. Please also note that if you choose not to receive marketing-related messages from us, we may still send you important administrative messages, and you cannot elect to stop receiving such administrative messages, unless you choose to stop receiving services from us.
You may also indicate your choices regarding marketing-related emails by contacting us via postal mail or telephone using our contact information below, or if you have a Site profile/account, by changing your preferences on your Site profile/account at any time.
You have certain rights over your data:
- You have the right to be informed, which means that anyone processing your personal data must make clear what they are processing, why, and who else the data may be passed to.
- You have the right to request an exported file of the Personal Data we hold about you, including any data you have provided to us. You have the right to receive this data in a commonly used, machine readable format.
- You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
- You have the right to have your data amended or corrected. The process for doing that is described later in this Policy.
- You have the right to restrict or object to further processing of your data
- You have the right to submit a complaint related to use or collection of you information.
If you would like to request to review, correct, update, suppress, delete or otherwise limit our use of your Personal Data that has been previously provided to us, or if you would like to request to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may make a request by contacting us by sending an e-mail to email@example.com. We will respond to your request consistent with applicable law. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting the change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.
Do Not Track Disclosures
We do not respond to Do Not Track (“DNT”) signals at this time. Some third-party sites may track your actions when you are browsing and accessing content. Various browsers offer a DNT option that sends a signal to third parties that you do not want to be tracked.
This Policy applies to Personal Data to the extent Aural Analytics is deemed to be a Data Controller of your Personal Data. A Data Controller is a person or entity that determines the purposes and means of the processing of the Personal Data. Aural Analytics may also be a Data Processor or may engage third parties to be a Data Processor of your Personal Data. Questions or requests related to your Personal Data may be submitted to firstname.lastname@example.org.
Cross Border Transfer of Personal Data
Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. If you are accessing the Site from outside the United States, you may be sending information, including Personal Data to the United States where our servers are located. That information may be transferred within the United States or back out of the United States to other countries outside your country of residence. We take appropriate measures to secure your Personal Data under these circumstances in accordance with this Policy and applicable laws. By transferring information or allowing information to be transferred to us, you consent to the transfer, processing and storage in countries outside your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your Personal Data. As further provided in this Policy, our participation in and certification of compliance with the Privacy Shield Principles forms the legal basis for transferring data from certain countries into the United States.
If you have any questions about this Policy or the practices of our website, you can e-mail us at email@example.com.
Aural Analytics, Inc. is committed to adhere to the Privacy Shield Principles (“the Privacy Shield list”) and operates under the EU-U.S. and Swiss-U.S. Privacy Shield Framework https://www.privacyshield.gov/welcome
Aural Analytics, Inc. is committed to cooperate with data protection authorities located in the European Union or their authorized representatives. Our participation in the Privacy Shield can be verified at www.privacyshield.gov/list.
As required by the Recourse, Enforcement and Liability Principle, the recourse is available to individuals and is free of charge to individuals
Questions or concerns can be addressed by contacting the Privacy Shield organization or Aural Analytics, Inc. directly. You can do this using Aural Analytics’ Privacy Shield Inquiry Form or by typing the organization’s name Aural Analytics, Inc. into the search bar within the Privacy Shield List, clicking on the name Aural Analytics, Inc., and then clicking “Questions or Complaints?” Aural Analytics, Inc. will respond to you within 45 days.
Alternatively, you can file a claim directly with government agencies
- For the U.S. you can file at https://www.ftc.gov/news-events/media-resources/identity-theft-and-data-security/filing-complaint
- For the EU, you can file at https://edpb.europa.eu/about-edpb/legal-notices/data-protection-notice_en
- For Switzerland, you can file at https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/task.html
Any questions about this Policy, the practices of the Site, or to exercise any of the rights outlined in this Policy may be directed to us at firstname.lastname@example.org.
Dispute Recourse & Arbitration
Individuals outside the US who decide to invoke arbitration must take the steps documented at https://www.privacyshield.gov/article?id=G-Arbitration-Procedures prior to initiating an arbitration claim. In the US, an individual submit a claim using the Independent Dispute Recourse Provider Form or the link above. If any provision of this Policy is held by a court of competent jurisdiction to be illegal, unenforceable, or in conflict with any applicable law, the validity of the remaining portions or provisions shall remain in full force and effect. Under the following circumstances, you may request binding arbitration: (1) raise your compliant directly to us using the contact details in this Policy and provide us the opportunity to resolve the issue; and (2) raise the issue through the relevant data protection authority and allow the U.S Department of Commerce an opportunity to resolve the complaint at no cost to you. For information on that, you may visit https://www.privacyshield.gov/article?id=G-Arbitration-Procedures. To the extent allowed by the Privacy Shield Arbitration Procedures, the venue for any such arbitration will be in the State of Arizona in the United States.
Updated: May 2020