California Consumer Privacy Act (CCPA) Privacy Policy Addendum

Last updated October 25, 2021
 

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding our collection and use of your personal information. This Addendum describes those additional rights and is intended to supplement Onemata’s Privacy Policy. If you are not a California resident, this Addendum does not apply to you.

 

When we say “Personal Information” in this Addendum, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is aggregated, deidentified, or information from publicly available federal, state or local government sources, excluding biometric information.

 

Categories and Sources of Personal Information Collected

 

The personal information which Onemata collects or has collected in the twelve (12) months prior to the effective date of Onemata’s Privacy Policy, fall into the following categories established by the CCPA, and have been collected from the sources defined below.

Category
Examples
Categories of Sources
Identifiers
First and last name, IP address, mobile advertising ID (MAID) also known as a IDFA for Apple products or a GAID or AAID for Google/Android products, cookie identifiers, email address, phone number

• You

• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)

• Software development kit (SDK) networks

• Data brokers

• Marketing services companies

Professional or employment-related information
Employer

• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)

Internet or other electronic network activity information
Browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement, operating system (OS), user agent (i.e. browser identification)

• You

• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)

• Software development kit (SDK) networks

• Data brokers

• Marketing services companies

Geolocation data
Latitude, longitude, time stamp of when its location was observed, country of where its location was observed, speed of movement when its location was observed, and the horizontal and vertical accuracy of the latitude/longitude coordinates

• Publishers (such as mobile applications, or “apps”, desktop, and mobile websites)

• Software development kit (SDK) networks

• Data brokers

• Marketing services companies

Categories of Personal Information Sold and Categories of Third Parties Sold To

 

Onemata has “sold” (as defined by the CCPA) the following categories of personal information to the categories of third parties defined below in the twelve (12) months prior to the effective date of Onemata’s Privacy Policy.

Category
Category of Third Parties Sold To
Identifiers (e.g. first and last name, IP address, mobile advertising ID (MAID) also known as a IDFA for Apple products or a GAID or AAID for Google/Android products, cookie identifiers, email address, phone number)
• Advertising networks (e.g., demand-side platforms, agency trading platforms) • Agencies and advertisers • Data brokers • Data analytics providers • Marketing research providers • Information services and publishers
Information that relates to, describes, or is capable of being associated with you (e.g. education, employment and employment history)
• See above
Characteristics of protected classifications under California or federal law (e.g. age, gender, ethnicity, country of origin (Hispanic only), marital status and religion)
• See above
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (e.g. whether you have purchased a home or vehicle information)
• See above
Internet or other electronic network activity information (e.g. browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement, operating system (OS), user agent (i.e. browser identification))
• See above
Geolocation data (e.g. latitude, longitude, time stamp of when its location was observed, country of where its location was observed, speed of movement when its location was observed, and the horizontal and vertical accuracy of the latitude/longitude coordinates)
• See above
Professional or employment-related information
• See above
Categories of Personal Information Disclosed for a Business Purpose and Categories of Third Parties Disclosed To

 

Onemata has disclosed for a “business purpose” (as defined by the CCPA) the following categories of personal information to the categories of third parties defined below in the twelve (12) months prior to the effective date of Onemata’s Privacy Policy.

Category
Category of Third Parties Disclosed To
Characteristics of protected classifications under California or federal law (e.g. age, gender, ethnicity, country of origin (Hispanic only), marital status and religion)
• Data supply partners • Data analytics providers • Publishers • Marketing research providers
Professional or employment-related information
• Advertising networks (e.g., demand-side platforms, agency trading platforms) • Agencies and advertisers • Data analytics providers • Data supply partners • Information services and publishers • Legal counsel • Marketing research providers • State law enforcement agencies
Geolocation data (e.g. latitude, longitude, time stamp of when its location was observed, country of where its location was observed, speed of movement when its location was observed, and the horizontal and vertical accuracy of the latitude/longitude coordinates)
• Advertising networks (e.g., demand-side platforms, agency trading platforms) • Agencies and advertisers • Data analytics providers • Data supply partners • Information services and publishers • Legal counsel • Marketing research providers • State law enforcement agencies
Internet or other electronic network activity information (e.g. browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement, operating system (OS), user agent (i.e. browser identification))
• Advertising networks (e.g., demand-side platforms, agency trading platforms) • Agencies and advertisers • Data analytics providers • Data supply partners • Information services and publishers • Marketing research providers
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (e.g. whether you have purchased a home, or vehicle information)
• Data analytics providers • Data supply partners • Legal counsel • Marketing research providers • State law enforcement agencies
Identifiers (e.g. first and last name, IP address, mobile advertising ID (MAID) also known as a IDFA for Apple products or a GAID or AAID for Google/Android products, cookie identifiers, email address, phone number)
• Advertising networks (e.g., demand-side platforms, agency trading platforms) • Agencies and advertisers • Data analytics providers • Data supply partners • Information services and publishers • Legal counsel • Marketing research providers • State law enforcement agencies
Our Business and Commercial Purposes for Collecting, Selling and Sharing Personal Information

 

The business and commercial purposes for which we collect, sell and/or share personal information is described in Privacy Policy and our Cookie Policy.

 

Your Rights with Respect to Your Personal Information

 

As a California resident, you have certain rights available to you with respect to your personal information pursuant to the California Consumer Privacy Act of 2018. This section describes those rights and how you may exercise those rights.

 

Right to Know/Right to Access

 

California residents have the right to request that we disclose to you the following:

  • Categories of personal information we have collected, shared and/or sold about you

  • Categories of sources from which the personal information about you is collected

  • Our business or commercial purposes for collecting, selling, or sharing your personal information

  • Categories of third parties to whom we have sold and/or disclosed personal information

  • The specific pieces of personal information we have collected about you

 

Right to Request Deletion

 

California residents have the right to request that we delete any of your personal information which we have collected from you. As described in our Privacy Policy above, most of the personal information we collect about you is collected from third parties and not directly from you, or from the consumer. Nonetheless, to the best of our ability we will honor any request for deletion we receive from you and are able to verify.

 

Right to Opt-Out of the Sale of Your Personal Information

 

California residents have the right to opt-out of the “sale” of your personal information, as defined by California law.

 

Right to Nondiscrimination

 

Onemata does not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights.

 

Exercising Your Right to Know/Access, Deletion and Opt-Out

 

California residents may submit a request to know/access, delete or opt-out, by clicking here. Alternatively, you may use the contact information provided in the Contact Us section of our Privacy Policy, or at our toll-free number (833) 663-6282. Onemata will honor your rights to the extent required by the CCPA.

 

Please be sure to complete the form in its entirety so we are able to identify you in our records. The information you provide us in the form will only be used to locate your personal data in our records and carry out your request, as necessary. Upon receipt of a request, we will verify your identity and your California residence for security purposes and as required under California law. For instance, if you request categories or specific pieces of personal information we have collected or shared about you, you may need to provide a piece of identification that confirms you are the person you claim to be.

 

We will review all requests and comply as necessary under applicable law. If we are unable to complete your request, we will provide you additional information about the reasons that we could not comply with your request.

 

Information About Persons Under 16 Years of Age

 

We do not knowingly collect personal information from minors under 16 years of age in California unless we have received legal consent to do so. If we learn that personal information from such California residents has been collected, we will take reasonable steps to remove their information from our database (or to obtain legally required consent).

 

Authorized Agents

 

You may also designate an agent to make requests to exercise your rights under the CCPA as described above. To accommodate such a request by an authorized agent, we will either:

  1. Require a copy of a valid power of attorney and verify the identity of the authorized agent, or

  2. Take steps to verify both your identity as well as the identity of your authorized agent and require a copy of a signed written authorization allowing the authorized agent to make such a request on your behalf.

 

If you are an authorized agent and would like to make a request on behalf of a California resident, please send an email to privacy@onemata.com.

Annual Reporting for 2020

Request Type
Number Received
Number Complied With
Number Denied
Average Number of Days for Response
Access
0
0
0
0
Deletion
1
1
0
1
Opt-out
0
0
0
0