This data privacy and security policy (“Privacy Policy”) describes how INTEGRITY Security Services and its affiliates (“ISS”), collect and process information, including Personal Information and Company Data.
ISS collects and processes information from many sources, including, but not limited to, trade shows, conferences, and other events; through business interactions with actual and potential customers and suppliers, and their personnel; and through the websites and other information systems that it controls, including, but not limited to, www.ghsiss.com, www.autoauth.com and all other websites and applications that either (1) are controlled by ISS; or (2) link to this policy (collectively, the “Services”). This Privacy Policy details how ISS uses and protects data, including Personal Information, that comes into its possession.
As used in this Privacy Policy, the following terms capitalized terms shall be given the following meaning:
“Company Data” or “OEM Data” means data belonging to any company or original equipment manufacturer (“OEM”) and includes, without limitation APIs, Vehicle Model Unlock Codes, technical and non-technical information (and documentation related thereto), patent, copyright, trademark, trade secret, proprietary information, intellectual property, techniques, sketches, drawings, models, inventions, know-how, processes, apparatus, equipment, design details and specifications, architecture, and Personal Information provided by an OEM.
“Data Protection Requirements” means applicable data protection laws and regulations wherever INTEGRITY Security Services, LLC or its affiliates conduct business, including the data protection principles contained in the EU General Data Protection Regulation (2016/679) (the “GDPR”); the GDPR as implemented in the UK together with the UK Data Protection Act 2018; the California Consumer Privacy Act of 2018 (“CCPA”); and the Massachusetts Data Privacy Protection Act (“MDPPA”) and associated regulations (e.g., 201 CMR 17.00).
“Personal Information” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal Information is any information or combination of information that can be used to distinguish or trace a natural person’s identity. Personal Information includes, without limitation, given name, middle name, surname, maiden name, social security number, driver’s license number, passport number, taxpayer identification number, military identification number, government issued identification number, other identification numbers, biometric data records, phone numbers, job titles, employers, e-mail addresses, residential address, work address, date of birth, place of birth, mother’s maiden name, schools attended, credit card number(s), debit card number(s), payment card data, bank account number(s), bank account routing number(s), retirement account number(s), instant messaging user identifier(s), and social media screen name(s). As used in this Privacy Policy, Personal Information includes all “Personal Data” as that term is defined by the EU GDPR and UK GDPR, as well as “Personally Identifiable Information” as defined by NIST FIPS 201-3.
“You” means a user of the Services as defined above, or a person who has accessed this Privacy Policy, regardless of whether the user is a natural person, business entity, association, or any other legally recognized person.
ISS collects Personal Information from a variety of sources, including from You directly (e.g. when You contact ISS, complete a form, sign up for an account, complete a transaction with ISS, or otherwise provide ISS with Your Personal Information), information ISS generates about You in the course of our relationship with You (e.g. data collected from cookies and other similar technologies which are described in our cookies policy at https://ghsiss.com/policy), and information we collect about You from other sources, including commercially available sources, such as lawful publicly available databases.
We may be required by law to collect certain Personal Information about You or as a consequence of any contractual relationship we have with You. Failure to provide this information may prevent or delay the fulfillment of these obligations.
Information we collect directly from You
The categories of information that we may collect directly from You include the following:
(a) personal details, including, but not limited to, name, job title, and company;
(b) government issued identification numbers, including, but not limited to, driver’s license number, passport number, taxpayer identification number, and military ID number;
(c) contact details, including, but not limited to, phone number, email address, fax number, postal address, and mobile number;
(d) account details, including, but not limited to, type of product or service, username, password, payment method, and authorized users;
(e) transaction details including, but not limited to, when You purchase, what You purchase, how You pay for purchases, and how You respond to offers;
(f) product or service details, including, but not limited to, which products and services You have purchased from ISS, how You use Your products and services, what information You download from our websites and other information systems, what product inquiries You have made, and what type of business You are in;
(g) communications , including, but not limited to, when You contact ISS, what You contact ISS about, which message boards or forums You participate in, which polls or surveys You respond to, and which products or services You review, comment upon, or request; and
(h) licensing details, including, but not limited to, licensee name, entity type, contact name, e-mail address(es), authorized user(s), license term, and types of products licensed.
Information we collect about Your use of ISS Services
The following are examples of the other categories of information which ISS may use that relate to You:
(a) Technical information collected from Your computer or mobile device, including, but not limited to, Your IP address, browser type, and operating system;
(b) Information about Your usage of ISS’s Websites, including, but not limited to, Your login history, the pages You visit when using the Services, the duration of Your use of the Services, the files You download, the search terms You enter on the Services, how often You use the Services, and the pages You access before and after accessing the Services; and
(c) Information which we generate as a result of Your use of the ISS Services, including, but not limited to, ISS’s understanding of Your interests as a result of Your use of the ISS Services and whether You are a regular or occasional user of the ISS Services.
Information we collect from other sources
ISS may also collect information about You from third-parties such as business partners, conference organizers, publicly available websites, and commercial databases. The following are examples of the categories of information ISS may collect from other sources.
(a) personal details, such as Your name, job title, and company;
(b) contact details, such as phone number, email address, fax number, postal address, mobile number; and
(c) details about advertising preferences, such as products purchased, interaction with advertisements online, and offers You have responded to.
ISS may use Personal Information for the following purposes:
Restrictions ISS observes in its use of Your Personal Information:
Your Personal Information may be shared when:
Depending on where You live and where You work, the Data Protection Requirements provide You with certain rights regarding the Personal Information ISS hold about You. These may include the rights to access, correct, delete, restrict or object to our use of, or receive a portable copy in a usable electronic format of Your Personal Information. Depending on the jurisdiction in which You reside, You also may have a right to lodge a complaint with Your local data protection or privacy regulator.
We encourage You to contact us to update or correct Your information if it changes or if the Personal Information we hold about You is inaccurate. Where You have provided Your consent to any use of Your Personal Information, You can withdraw this consent at any time.
Requests regarding Your Personal Information can be communicated to ISS in any way, including via email, fax, letter, telephone, website request, customer services or via a third party. Any ISS personnel who receives a request in relation to Personal Information is dedicated to preserving Your rights with respect to Your Personal Information.
To the extent that by exercising Your rights over Your Personal Information, You make it commercially impractical for ISS to deliver Services, ISS may discontinue Your access to the Services. Such discontinuation of Services shall not entitle You to a refund of any fee paid for the Services.
Unless You request ISS to delete Personal Information ISS has about You, ISS retains Your Personal Information for as long as we have a relationship with You. When deciding how long to keep Your Personal Information after our relationship with You has ended, we consider our legal obligations. We may also retain records to investigate or defend against potential legal claims.
Individuals located within the EEA, the UK or Jersey may be able to exercise the following rights:
Individuals located within the State of California may have the following non-exclusive rights to:
Please note that we may require additional information from You in order to honor Your requests. If You would like to discuss or exercise any rights You may have under law, please contact us at the contact information set forth below.
Your Personal Information may be transferred to, stored, and processed in a country that is not regarded as providing the same level of protection for Personal Information as the laws of Your home country, and may be available to the government of those countries under a lawful order made in those countries.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to provide adequate protections for Your Personal Information, regardless of jurisdiction.
ISS implements security measures designed to safeguard the Personal Information, Company Data, and OEM Data we process through the Services. These measures are aimed at providing on-going integrity and confidentiality for Your Personal Information, Company Data, and OEM Data. ISS evaluates and updates these measures on a regular basis.
In maintaining and processing Personal Information ISS will:
With Regard to Company and OEM Data, ISS shall:
Access Restrictions:
Security Audits:
ISS is the controller responsible for the Personal Information, Company Data, and OEM Data we collect and process. We are represented in the European Union by our affiliate 3Key s.r.o.
If You have questions or concerns regarding the way in which Your Personal Information, Company Data, or OEM Data has been used, please complete and submit the form at https://ghsiss.com/privacy-contact-us
We are committed to working with You to obtain a fair resolution of any complaint or concern about privacy. If, however, You believe that we have not been able to assist with Your complaint or concern, You may have the right to make a complaint to the data protection authority for the jurisdiction in which you reside.
We may modify or update this privacy policy from time to time. If we make any revisions that materially change the ways in which we process Your Personal Information, Company Data, and/or OEM Data, we will notify You of these changes before applying them.
This privacy policy describes how INTEGRITY Security Services Software and its affiliates (“INTEGRITY Security Services”, “ISS”, “we”, “our”, or “us”), collects and processes personal information about you through “www.ghsiss.com” and all other ISS websites and applications that link to this policy; through our interactions with you at trade shows, conferences, and other events; and through any other means by which we may receive your personal information (collectively, the “Services”), how we use and protect this information, and your rights in relation to this information.
This privacy policy applies to all personal information we collect or process about you. Personal information is information, or a combination of pieces of information, that could reasonably allow you to be identified.
We collect personal information about you from a variety of sources, including from you directly (e.g. when you contact us, complete a form, sign up for an account, complete a transaction with us, or otherwise provide us with your information), information we generate about you in the course of our relationship with you (e.g. data collected from cookies and other similar technologies which are described in our cookies policy at https://ghsiss.com/policy and information we collect about you from other sources, including commercially available sources, such as public databases (where permitted by law).
We may be required by law to collect certain personal information about you or as a consequence of any contractual relationship we have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations.
Information we collect directly from you The categories of information that we may collect directly from you include the following:
(a) personal details (e.g. name, job title, company);
(b) contact details (e.g. phone number, email address, fax number, postal address, mobile number);
(c) account details (e.g. username, password);
(d) transaction details (e.g. when you make purchases or respond to offers);
(e) product or service details (e.g. information about products or services you have purchased from us and how you use them and/or expressed an interest in by downloading datasheets or visiting our web pages);
(f) communications (e.g. when you participate in message boards or forums, participate in polls or surveys, write a review or contact us with a question, comment or request); and
(g) licensing details (e.g. name, address and email address of named licensed users of our products).
The following are examples of the other categories of information which we may use about you:
(a) Technical information collected from your computer or mobile device (e.g. your IP address, browser type, operating system);
(b) Information about your usage of our Websites (e.g. your login history, the pages you visit when using the Services, the files you download, the search terms you enter on the Services, how often you use the Services, and the pages you access before and after accessing the Services); and
(c) Information which we generate as a result of your use of the Services (e.g. our understanding of your interests as a result of your use of the Services and whether you are a regular or occasional user of the Services).
We may also collect information about you from third-parties (e.g., business partners, conference organizers, publicly available websites or databases). The following are examples of the categories of information we may collect from other sources.
(a) personal details (e.g. name, job title, company);
(b) contact details (e.g. phone number, email address, fax number, postal address, mobile number); and
(c) details about advertising preferences (e.g. products purchased, interaction with advertisements online).
We may use your personal information for the following purposes:
• Identification and authentication: We use your identification information to verify your identity when you access and use our Services and to ensure the security of your personal information. This is so we can comply with our contractual obligations to you.
• Operating the Services: We process your personal information to provide the products and Services you have requested. This includes providing licenses and customer and technical support for our products and Services. This is so we can comply with our contractual obligations to you.
• Improving our Services: We analyze information about how you use our Services to provide an improved experience for our customers of all our Services, including product testing and site analytics. It is in our legitimate business interests to use the information provided to us for this purpose, so we can understand any issues with our Services an improve them.
• Communicating with you: We may use your personal information when we communicate with you, for example if we are providing information about changes to the terms and conditions or if you contact us with questions. It is in our legitimate interests that we are able to provide you with appropriate responses and provide you with notices about our Services.
• Marketing: we may use your personal information to build a profile about you and place you into particular marketing segments in order to understand your preferences better and to appropriately personalize the marketing messages we send to you. It is in our legitimate interest to provide more relevant and interesting advertising messages. Where necessary, we will obtain your consent before sending such marketing messages.
• Exercising our rights: we may use your personal information to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our software license or service agreement.
• Complying with our obligations: we may process your personal information to, for example, carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law.
• Customizing your experience: when you use the Services, we may use your personal information to improve your experience of the Services, such as by providing interactive or personalized elements on the Services and providing you with content based on your interests.
We may also anonymize your personal information in such a way that you may not reasonably be reidentified by us or any other company, and may use this anonymized information for any other purpose.
We may share your personal information with third parties under the following circumstances:
• Service providers and business partners: we may share your personal information with our service providers and business partners that perform marketing services and other business operations for us for the purposes set forth above. For example, we may partner with companies to sell, distribute and support products, process secure payments, fulfill orders, optimize services, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, and analyze information. These service providers and business partners may include advertising agencies and fraud prevention agencies which will use your personal information only in the ways described in this policy.
• Group companies: ISS works closely with other businesses, its parent company GHS, and its affiliates. We may share portions of your personal information (e.g. your buying and browsing history on the Services and your personal and contact information) with other GHS companies for marketing purposes, security, optimization of products and services, and internal reporting. We do this for the purposes set out above.
• Where required by law: we may share your personal information with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.
• In the context of a transaction: we may share your personal information with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to obligate the entity to which we transfer your personal information to use it in a manner that is consistent with this Privacy Policy.
You have certain rights regarding the personal information we hold about you, subject to local law. These may include the rights to access, correct, delete, restrict or object to our use of, or receive a portable copy in a usable electronic format of your personal information. You also may have a right to lodge a complaint with your local data protection or privacy regulator.
We encourage you to contact us at the contact information set forth below to update or correct your information if it changes or if the personal information we hold about you is inaccurate. Where you have provided your consent to any use of your personal information, you can withdraw this consent at any time.
Please note that we may require additional information from you in order to honor your requests. If you would like to discuss or exercise any rights you may have under law, please contact us at the contact information set forth below.
We implement security measures designed to safeguard the personal information we process through the Services. These measures are aimed at providing on-going integrity and confidentiality for your personal information. We evaluate and update these measures on a regular basis.
We retain your personal information for as long as we have a relationship with you. When deciding how long to keep your personal information after our relationship with you has ended, we take into account our legal obligations. We may also retain records to investigate or defend against potential legal claims.
Your personal information may be transferred to, stored, and processed in a country that is not regarded as providing the same level of protection for personal information as the laws of your home country, and may be available to the government of those countries under a lawful order made in those countries.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to provide adequate protections for your personal information. For more information on the appropriate safeguards in place and to obtain a copy of such safeguards, please contact us at the contact information set forth below.
ISS is the controller responsible for the personal information we collect and process.
If you have questions or concerns regarding the way in which your personal information has been used, please complete and submit the form at https://ghsiss.com/privacy-contact-us We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to make a complaint to the data protection authority of your country of residence.
We may modify or update this privacy policy from time to time. If we make any revisions that materially change the ways in which we process your personal information, we will notify you of these changes before applying them to that personal information.
Stop by and visit with us if you’re in town.
