隐私保护政策与网站隐私政策
本隐私盾政策("政策")Stratus , Inc.及其在美国("美国")的子公司和关联公司("公司"、"我们"或"我方")如何收集、使用及披露从欧盟和瑞士接收至美国境内的特定个人身份信息("个人数据"),并包含一般网站隐私政策。我们致力于保护您的隐私。 我们发布隐私政策旨在帮助您了解我们的隐私保护措施及其如何保障您的隐私权益。作为跨国企业,我们的总部设在美国。 我们的管理架构与业务流程跨越国界。部分技术系统及数据库由美国、欧洲、瑞士及其他国际办事处共享,这意味着客户与员工数据存在跨境传输。Stratus , Inc. 充分认识到欧盟与瑞士已建立严格的欧盟或瑞士个人数据处理保护机制,包括对转移至欧盟或瑞士境外的个人数据提供充分保护的要求。 为对接收至美国的特定欧盟或瑞士客户/供应商/商业伙伴/求职者/员工个人数据提供充分保护Stratus , Inc.已选择通过美国商务部管理的"欧盟-美国隐私盾框架"及"瑞士-美国隐私盾"(统称"隐私盾")进行自我认证。Stratus , Inc.遵循隐私盾原则:
- 通知,选择,
- 后续转移的责任归属
- 安全,
- 数据完整性与用途限制
- 获取途径与救济途径
- 执行,以及
- 责任。
为确保隐私盾协议的合规执行Stratus , Inc. 受美国联邦贸易委员会的调查与执法权约束。 有关隐私盾的更多信息,请参阅美国商务部的隐私盾声明;如需Stratus , Inc.在隐私盾名单上的自我认证信息,请访问美国商务部隐私盾自我认证页面:https://www.privacyshield.gov。 通知与个人数据收集及使用 我们通过线上线下多种渠道收集个人信息,包括访问网站、咨询产品服务、参与活动会议、培训研讨会、调查及促销活动,以及销售、服务及其他交易相关场景。 本政策不适用于通过线下资源、沟通及其他线下互动渠道收集的信息。我们在线收集的信息主要为商业相关信息,包括商业联系信息、您购买的产品与服务、贵公司关注领域(如行业、产品需求)以及可能涉及的公司财务与信用信息。我们在美国境内可能接收以下类别的个人数据:
- 联系信息,用于维护客户关系以及向客户提供产品和服务。
- 供应商代表的个人数据,例如联系方式、财务报表及声誉数据。
我们出于以下目的处理个人数据:
- 发送宣传材料或其他通讯;
- 与客户沟通并管理其参与特别活动、项目、优惠、调查及市场研究事宜;
- 处理客户咨询;
- 执行数据分析(包括对个人数据进行匿名化和聚合);
- 运营、评估和改进公司业务(包括开发新产品和服务;增强和改进公司产品及服务;管理公司传播事务;分析公司产品、服务及传播活动;执行会计、审计及其他内部职能);
- 客户服务管理,包括谈判管理、合同管理、交易管理及客户账户管理;预算编制、会计核算、维护客户财务分析相关记录;
- 防范、识别并阻止网络安全及其他安全事件、间谍活动、欺诈及其他非法行为、索赔及其他责任;以及
- 遵守并执行适用的法律要求、相关行业标准及公司政策。
Stratus , Inc. 仅会以符合Stratus 收集目的或个人后续授权目的的方式处理个人数据。若我们拟将您的个人数据用于与收集目的或您后续授权目的存在实质差异的用途时,将为您提供选择退出该用途的机会。Stratus , Inc. 制定合理程序以确保个人数据在预期用途中具有可靠性、准确性、完整性及时效性。内部人力资源管理。对于居住在欧盟或瑞士的员工及应聘者,我们亦可能将信息用于 内部人力资源管理。与这些员工活动相关的个人数据类型包括:
- 联系信息(例如姓名、邮寄地址、电话号码和电子邮件地址);
- 公司网站的登录凭证;
- 照片、电子签名及公司政策确认书;
- 其他个人数据,例如社会保障号码、联邦税务识别号、民事和刑事法庭记录,或您所在国家/地区的同等信息;
- 银行账户及财务详情;以及
- 非关联个人提供的内容中包含的其他个人数据。
我们仅出于合法商业目的收集潜在员工和现有员工的信息,包括:
- 本公司及其职能与活动的经营管理
- 员工沟通,包括员工调查,
- 维护一个全球目录,
- 履行雇佣合同项下的义务,遵守雇佣、税务及福利法律,以及与其他工作关系或安排相关的义务。
- 发展与培训计划,
- 招聘和录用求职者,
- 评估资格和表现,
- 进行背景调查并核实推荐人信息,
- 管理员工绩效,
- 确定员工薪酬或支付,
- 管理员工离职流程,以及
- 其他一般性人力资源用途。
我们处理非关联方个人数据的隐私实践符合隐私盾原则,包括通知、选择、后续转移的责任、安全、数据完整性与用途限制、访问权、申诉与救济、执行与责任等原则。 若涉及敏感数据的收集,我们将根据隐私盾要求获取您的主动同意,包括:向第三方披露您的敏感个人数据时;或将您的敏感个人数据用于与收集目的或您后续授权目的不同的用途前。 电子通信协议与Cookie的使用 与访问多数网站类似,当您使用我们的网站时,我们可能通过电子通信协议和Cookie收集您的使用信息。这些工具用于保障安全、维持会话连续性、实现个性化服务、追踪分析使用情况、管理网站运营,以及收集综合性人口统计信息。 Cookie是存储在用户硬盘中的数据片段,包含用户相关信息。您可通过浏览器设置选择接受或拒绝部分或全部Cookie。若Stratus 您仍可使用我们网站的大部分功能,但可能无法访问某些区域或使用特定功能。 向第三方传输数据
第三方代理或服务提供商。我们可能会将个人数据转移给代表我们履行职能的第三方代理或服务提供商,以协助我们支持客户或处理员工相关事务。根据《隐私盾》要求,我们与这些第三方代理及服务提供商签订书面协议,要求其提供与《隐私盾》同等水平的保护,并限制其仅将数据用于代表我们提供的指定服务。 我们采取合理且适当的措施,确保第三方代理商及服务提供商依据我们的隐私盾义务处理个人数据,并及时制止及补救任何未经授权的处理行为。在特定情况下,对于我们向其转移的个人数据,我们可能仍需对其代表我们提供服务的第三方代理商或服务提供商的行为承担责任。
第三方数据控制者。 在某些情况下,我们可能会将个人数据转移给非关联的第三方数据控制者。这些第三方并非作为代理或服务提供商行事,亦不代表我们履行职能。我们可能出于服务支持及内部人力资源管理目的,将您的个人数据转移给第三方数据控制者。 我们仅在您未选择退出披露时向第三方数据控制者提供您的个人数据;若涉及敏感个人数据且隐私盾框架要求征得同意时,则需您主动选择同意。 我们与任何非关联第三方数据控制者签订书面合同,要求其为个人数据提供与隐私盾要求同等的保护级别。同时限制其使用您的个人数据,确保其行为符合您已提供的同意范围及已接收的通知内容。
出于国家安全或执法目的的披露。在 特定情况下, 我们可能需要根据公共机构的有效要求披露您的个人数据,包括为满足国家安全或执法要求而进行的披露。
安全Stratus , Inc. 根据隐私盾原则,采取合理且适当的安全措施保护个人数据免遭丢失、滥用、未经授权的访问、披露、篡改或破坏。此类措施可能包括网络监控、防病毒保护、互联网防火墙、入侵检测及密码保护。您有责任保护并保密您的密码。 当法律要求时,针对信用卡信息等特定个人信息,客户与我方服务器之间的所有传输均采用行业标准SSL协议进行加密。 选择/退出 我们提供以下方式供您选择拒绝接收(退出)来自我们的未经请求的电子邮件通讯:
Data Integrity We are the sole owner of information collected on our websites and we do not sell, rent or provide personal information to any third parties except as provided below (Transfers to Third Parties). We will use personal information only in accordance with this Policy and in ways that are compatible with the purposes for which it was collected or as may be subsequently authorized by you. We will take reasonable steps to ensure that personal information is relevant to its intended use, is accurate and complete. We will retain personal information only for so long as it is reasonably required for the purposes for which it was collected, but in no event longer than permitted by applicable laws. Access Rights You may have the right to access the Personal Data that we hold about you and to request that we correct, amend, or delete it if it is inaccurate or processed in violation of the Privacy Shield. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access. If you would like to request access to, correction, amendment, or deletion of your Personal Data, you can submit a written request to the contact information provided below in the Questions and Complaints section. We may request specific information from you to confirm your identity. In some circumstances we may charge a reasonable fee for access to your information. Notice: Links to Non-Stratus Websites For your convenience and information, our website may provide links to third-party websites not administered by Stratus or its agents. If you access those links, you will leave the Stratus website. Stratus does not control those sites or their privacy practices, which may differ from Stratus’ practices. We do not endorse or make any representations about third-party websites. The personal information you choose to provide to or that is collected by these third parties is not covered by the Stratus Privacy Policy. We encourage you to review the privacy policy of any company before submitting your personal information. Online Forums and Social Networks Through our websites you have the ability to participate in interactive discussions, post comments, or other content to a bulletin board or exchange, or engage in other networking activities. We do not control the content that users post to these forums or social networks. Therefore, you should review any additional terms and conditions that may govern your use of these forums or networks, including terms related to use, the sharing of any of your personal information you may choose to provide and receiving communications from them. Compliance Audits We conduct compliance audits of our relevant privacy practices to verify adherence to this Policy. Any of our employees that we determine is in violation of this policy will be subject to disciplinary action up to and including termination of employment. Where we have knowledge that an Agent is using or disclosing personal information in a manner contrary to this Policy, we will take reasonable steps to prevent or stop that inappropriate use or disclosure. Questions or Complaints You can direct any questions or complaints about the use or disclosure of your EU or Swiss Personal Data to us at STRATUS TECHNOLOGIES Legal Department at [email protected] , by fax at 978-461-3690 or by mail at Stratus Technologies, Inc. 5 Mill & Main, Suite 500, Maynard, MA 01754. We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of your EU or Swiss Personal Data within 45 days of receiving your complaint. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S., based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Additionally, with respect to complaints concerning human resources data that is transferred from the EU to the United States, we have agreed to participate in the dispute resolution procedures of the EU Data Protection Authorities. Contact details for the EU data protection authorities can be found at: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. 3D Systems will cooperate with the appropriate EU Data Protection Authorities during investigation and resolution of complaints concerning human resources data that is transferred from the EU to the United States brought under Privacy Shield. We commit to cooperate with EU data protection authorities (DPAs) and comply with the advice given by such authorities with regard to human resources data transferred from the EU in the context of the employment relationship. Stratus Technologies also commits to cooperate with the Swiss Federal Data Protection and Information Commissioner and comply with the advice given by the Swiss Federal Data Protection and Information Commissioner with regard to human resources data transferred from Switzerland in the context of the employment relationship. These recourse mechanisms are available at no cost to you. Damages may be awarded in accordance with applicable law. Binding Arbitration You may have the option to select binding arbitration for the resolution of your complaint under certain circumstances, provided you have taken the following steps: (1) raised your compliant directly with Stratus Technologies, Inc. and provided us the opportunity to resolve the issue; (2) made use of the independent dispute resolution mechanism identified above; and (3) raised the issue through the relevant data protection authority and allowed the US Department of Commerce an opportunity to resolve the complaint at no cost to you. For more information on binding arbitration, see US Department of Commerce’s Privacy Shield Framework: Annex I (Binding Arbitration). Your California Privacy Rights This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA.” For more details about the personal information we have collected over the last 12 months, including the categories of sources, and commercial uses of this data, please see the Notice and Personal Data Collection and Use section above. Stratus does not sell (as such term is defined in the CCPA) the personal information we collect (and will not sell it without providing a right to opt out). Please note that we do use third-party cookies for our advertising purposes as further described in our Use of Electronic Communications Protocols and Cookies section below. Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights. California consumers may make a request pursuant to their rights under the CCPA by contacting us at [email protected]. We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf. Contact Us If you have any questions about this Policy or would like to request access to your EU or Swiss Personal Data, please contact us as follows: Stratus Technologies - Legal Department at [email protected] or by fax at 978-461-3690. Changes To This Policy We reserve the right to amend this Policy from time to time consistent with the Privacy Shield’s requirements. Effective Date: 十二月 21, 2016 Last modified: 一月 2, 2020
