Virginia Consumer Data Protection Act (CDPA) Privacy Policy Addendum
Effective January 1, 2023
If you are a Virginia resident, this Addendum applies to you. This Addendum describes how we collect, use, and share your personal data in our capacity as a “Controller” under Virginia’s Consumer Data Protection Act (“CDPA”), and the rights that you have with respect to your personal data, including sensitive personal data. For purposes of this section, “personal data” and “sensitive personal data” have the meanings given in the CDPA and do not include information excluded from the CDPA’s scope.
This Addendum is provided as a supplement to our Privacy Policy. For a more complete understanding of our privacy practices and how we handle personal information, please read our Privacy Policy.
What Personal Data Do We Process and Share?
The table below summarizes the personal data we process, the purposes for processing this data, the categories of personal data that we share with third parties, and the categories of third parties that we sell and share data with. It describes our current practices as well as our practices during the preceding 12 months. Information you voluntarily provide us, such as in free-text webforms, may contain additional categories of personal information not described below.
Category of Personal Data | Personal Data We Collect In This Category (1) | Categories of Sources of Personal Data (2) | Purpose for Processing Personal Data (3) | Categories of 3rd Parties With Whom We Sell and/or Share Personal Data (4) |
|---|---|---|---|---|
Sensitive Personal Data | • Precise geolocation | • Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)
• Software development kit (SDK) networks
• Data brokers | • To develop, provide and improve our Data Products | • Service providers (e.g. IT consultants, cloud management/storage providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
Professional or employment-related information | • Employer
• Education, employment and employment history | • You
• Data brokers | • To respond to your immediate request
• To offer you other products and services
• For future communication with you, including feedback surveys
• To develop, provide and improve our Data Products | • Service providers (e.g. website provider/support, customer support, marketing service providers, payment processors, IT consultants, cloud management/storage providers, advertising analytics providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
Geolocation data | • Device latitude & longitude, time stamp of when device location was observed, country of where device location was observed, speed, direction and altitude of movement when device location was observed, and the horizontal and vertical accuracies of the latitude/longitude coordinates | • Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)
• Software development kit (SDK) networks
• Data brokers | • To develop, provide and improve our Data Products | • Service providers (e.g. IT consultants, cloud management/storage providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
Characteristics of protected classifications under federal law | • Age
• Gender | • Data brokers | • To develop, provide and improve our Data Products | • Service providers (e.g. IT consultants, cloud management/storage providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
Internet or other electronic network activity | • Browsing history
• Search history
• Information regarding your interaction with an internet website, application or advertisement
• Operating system (OS)
• User agent (i.e. browser identification)
• SSID/BSSID | • Your browser or device when you visit our website
• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)
• Software development kit (SDK) networks
• Data brokers | • To develop, provide and improve our Data Products | • Service providers (e.g. IT consultants, cloud management/storage providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
Identifiers | • First and last name
• Email address
• Phone number
• Postal address
• IP address
• Mobile advertising ID (MAID) also known as a IDFA for Apple products or a GAID or AAID for Google/Android products
• Cookie identifiers
• Hashed email address | • You
• Your browser or device when you visit our website
• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)
• Software development kit (SDK) networks
• Data brokers | • To respond to your immediate request
• To offer you other products and services
• For future communication with you, including feedback surveys
• To develop, provide and improve our Data Products | • Service providers (e.g. website provider/support, customer support, marketing service providers, payment processors, IT consultants, cloud management/storage providers, advertising analytics providers)
• Customers (e.g. platforms, analytics developers, advertising audience developers) |
(1) See Section 1 of our Privacy Policy for a detailed description
(2) See Sections 1 and 2 of our Privacy Policy for a detailed description
(3) See Sections 3 and 4 of our Privacy Policy for a detailed description
(4) See Section 5 of our Privacy Policy for a detailed description
What Are My Rights With Respect To My Personal Data?
The following rights are not absolute and are subject to exceptions, and we may be required or permitted by law to decline your request. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
Right to Access and Obtain
You may request that we confirm whether or not we have or currently are processing your personal data.
You may also request to know what personal data of yours we have or are processing, as well as a copy of such personal data.
Right to Correct
You may ask us to correct any specific personal information you believe to be inaccurate.
Right to Delete
You may ask us to delete any personal information we may have collected about you.
Right to Opt-Out of Processing
In working with other companies and businesses, we may disclose personal data in a way that is considered to be a sale of personal data under the CDPA.
You can request to opt-out of the sharing of your personal data in this manner by clicking here, where you will find instructions on opting out of the use of your personal data.
Right to Appeal
If we decline to take action in any request that you submit in connection with the rights described above, you may ask that we reconsider our response by sending an email to privacy@onemata.com. You must ask us to reconsider our decision within 45 days after we sent you our decision.
How Can I Exercise My Rights?
Virginia residents may submit a request to access, obtain, correct, delete or opt-out by clicking here. Onemata will honor your rights to the best of our ability and to the extent required by the CDPA.
Please be sure to complete the form in its entirety so we are able to identify you in our records. The information you provide us in the form will only be used to locate your personal data in our records and carry out your request, as necessary.