Last Updated: October 19, 2021
- personal data collected about job applicants or our employees; or
- with the exception of Account Data and other information we collect in connection with your registration or authentication into the DBaaS Service, our security and privacy practices in connection with personal data submitted to and stored within the DBaaS Service by you (“Service Data”). Service Data security and privacy practices are detailed in and governed by our Master Subscription Agreement and the Data Protection Agreement referenced therein. EnterpriseDB processes Services Data, as a processor, on the instructions of its customers.
As used herein, “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include de-identified or aggregate information, or public information lawfully available from governmental records.
By using the Services, you freely and knowingly consent to the collection and use of information as described herein and set forth in our various terms and conditions related to the Services you access, which are incorporated herein by reference. Please note that this ‘consent’ does not constitute consent from a European data protection perspective.
- The personal data we collect
- The purposes for processing your personal data
- With whom we may share your personal data
- International transfers of personal data
- Collection of information by third-party sites and sponsors
- How we secure and store your personal data
- Disclosures and rights applicable to California residents
- Our policy towards children
- Your rights in relation to personal data
- How to contact us
- Consequences for not providing personal data
1. The Personal Data We Collect
The personal data EnterpriseDB collects, differs depending on how you interact with us.
DBaaS Service: EnterpriseDB collects personal data about you such as your name, phone number, email address, and username and password, as well as certain related information like your company name, when you register for an account to access or utilize the DBaaS Services (“Account Data”).
Website and Other Services (other than the DBaaS Service): Enterprise DB collects personal data about you such as, your name, phone number, email address, postal address, username and password, industry, company name, and job role. We may also collect your product registration information, product interest information, transaction information, or demographic information. In addition, for certain licensees, EnterpriseDB may require additional information, such as student verification information. We may collect payment information such as your credit card number and billing address if you purchase or license products and services from us. If you connect with EnterpriseDB accounts on third party social networking sites, we may also collect information about your social networking accounts, for example, your name, user name or handle, public profile, and email address. We may also combine information you provide with data we collect automatically (as further described below) and with data we receive from third parties.
Events: Enterprise DB collects personal data about you such as, your name, phone number, email address and your company name.
2. The Purposes and Legal Bases for Processing Your Personal Data
EnterpriseDB processes your personal data for the following purposes, to the extent EnterpriseDB is carrying out such processing as a controller:
- To provide, operate, maintain, and improve, the services (including, the DBaaS Services) and the Website
- To enable you to access and use the services (including, the DBaaS Services) and the Website
- To process and complete transactions, and send you related information, including purchase confirmations and invoices
- To send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages
- To send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events
- Monitor and analyse trends, usage, and activities in connection with the services (including, the DBaaS Services) and the Website
- Investigate and prevent fraudulent transactions, unauthorized access to the services (including, the DBaaS Services) and the Website, and other illegal activities
- To personalize the services (including, the DBaaS Services) and the Website, including by providing features or advertisements that match your interests and preferences
- Enforce our terms and conditions or protect our business, partners, or users
- Preparing for and acting in relation to enquiries, investigations or proceedings, by governmental, administrative, judicial or regulatory authorities, including civil litigation
- In connection with a potential asset or stock acquisition of EnterpriseDB, or the outsourcing or insourcing of services provided by employees, providing reasonable diligence material to a third party or meeting any disclosure obligations as required by law
Where personal data of third-party individuals (“Third Party Data”) are collected and processed via our products or services purchased by you, EnterpriseDB will process such Third-Party Data, as a processor, on your behalf.
3. With Whom We May Share Your Personal Data
EnterpriseDB may share your personal data with the following third parties:
- our affiliates (including, those in China and India);
- third party service providers who help facilitate the Website and/or the provision of services to you (for example, by providing website development, statistical analyses, data processing, technical support, hosting services, customer relationship management, and payment processing);
- financial institutions, credit card companies, collection enterprises, consultants, auditors and other professional service firms;
- affiliated or non-affiliated sponsors and/or promotional partners of certain contests, sweepstakes, and special events. The information collected in conjunction with events (and where required, with your consent) may also be used for the marketing of additional services and events by us and/or our promotional partners and sponsors beyond the contest, sweepstakes, and/or special event;
- third parties as required to enforce our rights arising from any contracts entered into between you / your company and us;
- third parties, including, but not limited to, law enforcement agencies, state, local or federal governments, private litigants, and other companies, as may be required to (1) comply with lawful requests such as subpoenas or court orders, (2) comply with applicable international, state, federal, or local law, (3) prevent fraud or other illegal activities from being perpetrated through the Website or in connection with the services, or (4) protect the property, safety, or legal rights of EnterpriseDB, its employees and its users;
- any third party whom you have consented to receive your personal data; and
- to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us is among the assets transferred.
4. International Transfers of Personal Data
As Enterprise DB operates globally, we may transfer your personal data to our affiliates and other third parties (as outlined above) located in countries other than where you are located. Such transfers will be made in accordance with applicable data protection and privacy laws by putting in place appropriate safeguards where required or appropriate.
If you are located in the EEA/Switzerland/UK and are a corporate customer of Enterprise DB, then transfers of your personal data and your Third-Party Data to us will be made in reliance on approved data transfer agreements (otherwise known as Standard Contractual Clauses or SCCs). Prior to making any onward transfers of your personal data we will take steps to ensure appropriate safeguards are implemented which may include putting in place additional SCCs (e.g., with our affiliates in China and India). A copy of the SCCs can be obtained by contacting us at the address below.
5. Collection of Information by Third-Party Sites and Sponsors
The following third parties may collect information through the Website (where required, with your consent), including personal data:
- Third party advertisers may collect information about your mobile phone, computer or mobile device relating to the way you interact with the Website, or which third party advertisers you visit;
- Third parties may collect other information that you voluntarily post or publish through the Website in any way;
- Web-crawlers such as Google may collect information through the Website; and/or
- The Website may contain links or references to other websites, including third party advertisers and other unaffiliated websites.
6. How We Secure and Store Your Personal Data
We have put in place reasonable and appropriate physical, electronic, and managerial procedures in an effort to help safeguard information we collect through the Website. However, you should know that no company, including EnterpriseDB, can fully eliminate security risks associated with personal data. To help protect yourself, please use a strong password, do not use the same passwords to access your EnterpriseDB accounts that you use with other accounts or services, and protect your usernames and passwords to help prevent others from accessing your accounts and services.
We store personal data for as long as necessary to fulfil the purposes described above. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means. We also consider the applicable legal requirements and the extent to which it is necessary to process the personal data. In exceptional cases (e.g., in pending litigation matters or where the law requires us to) your personal data may need to be kept for longer periods of time.
7. Disclosures and Rights Applicable to California Residents
California residents may have additional rights with respect to the personal data we collect. See our California Privacy Notice for additional information about California residents’ rights and disclosures of our privacy practices as required under applicable California law.
8. Our Policy Towards Children
EnterpriseDB does not knowingly collect, solicit or sell personal data from anyone under the age of sixteen (16). If we learn that we have inadvertently obtained personal data from a child under the age of sixteen (16), we will delete that information as soon as practicable. If you believe that a child under the age of sixteen (16)has submitted personal data in connection with the Website and/or our services, please contact us at email@example.com.
9. Your Rights in Relation to Your Personal Data
If you are located in the EEA, Switzerland or the UK you have the following rights with regard to personal data which we process about you, which may be subject to limitations and/or restrictions:
- You have the right to request access to the personal data we process about you.
- You have the right to request us to rectify any personal data that might be incorrect, as well as the right to request us to restrict the processing of your personal data.
- You may request to receive a copy of your personal data that you provided to us, in a structured, commonly used and machine-readable format.
- You have the right to request that we erase your personal data.
- You have the right to object to the processing of your personal data and to withdraw consent to the processing of your personal data at any time.
- You also have the right to lodge a complaint with the competent data protection supervisory authority.
- California residents may have similar rights to their personal data. See our California Privacy Notice for more information.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
California residents may have similar rights to their personal data. See our California Privacy Notice for more information.
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us using the Legal Department contact details below.
11. How to Contact Us
If you have any questions as to how we store or process your personal data, or would like to exercise one of your data privacy rights, please email us at firstname.lastname@example.org. We will respond to your access request within 30 days.
Written communication should be sent to:
Attn: Legal Department
34 Crosby Drive, Suite 201
Bedford, MA 01730
12. Consequences of not providing your Personal Data
Where we require your personal data to comply our legal or contractual requirements, failure to provide this information means we may not be able to provide services to you. We will tell you when we ask for your personal data whether it is a statutory or contractual requirement to give us the personal data and the consequences of not providing such personal data.