Privacy Statement | Slashdot Media (original) (raw)

This Privacy Statement was amended as of August 27, 2024 and is effective as of that date.

Thank you for visiting Slashdot Media's Online and Mobile Resources (defined below), and for viewing this Privacy Statement. This Privacy Statement applies to any online and mobile resource that links to this Statement, including SlashdotMedia.com, SourceForge.net, and Slashdot.org, Our full Privacy Statement, contained in the pages that follow, serves to give notice to data subjects, other than our Workforce and Job Applicants (defined below), about the types of Personal Data (defined below) we collect as a controller, how we use it, who we disclose it with and why, your rights with respect to your Personal Data, and what we do to try to protect it. In addition, the Cross-Border Data Transfer section addresses certain Personal Data we receive from our business customers to process in connections with providing them services that is imported to the United States from certain European territories. We encourage you to read our full Statement carefully. Workforce and Job Applicants can obtain a copy of a notice of the data practices that apply to them by contacting us here. This Statement also outlines privacy rights and options that you may have, and how to exercise them, including for our Workforce and Job Applicants, as more fully set forth in Your California Privacy Rights, Your GDPR Privacy Rights and our DPF Policy.

SOME IMPORTANT VOCABULARY

Although not itself a contract, this Privacy Statement is an important document that explains how we address some of our legal obligations, and your related legal rights, involving Personal Data. Clarity is, therefore, important. We will use this section to let you know about some words that have special meanings whenever you see them in this Statement.

Let's start with the word "Statement" itself: when we reference "this Statement", "this Privacy Statement" and "our Statement", we mean the Privacy Statement you are reading now. Wherever we say "Company", "we", "us", "our", or "SDM", we mean Slashdot Media LLC or its affiliates, as applicable.

When we talk about our "Online and Mobile Resources", we mean all websites, portals, or other features SDM operates, that link to this Statement. SDM also offers certain business-to-business marketing and advertising services. When we refer to "Lead Ads and Content" we mean the special types of advertisements and other content, such as whitepapers and email contents, containing forms or other means for users to provide information showing their interest in the applicable product or service. The term "Affinity Action" means when you "follow" us, "like" us or take a similar or analogous action on our external social media presence.

Finally, and perhaps most importantly, when we refer to "Personal Data" we mean information that identifies or can be used to reasonably identify you, or that is otherwise treated as personal information or Personal Data under applicable laws (for example, IP address, cookie IDs, device IDs). Where information does not qualify as Personal Data under applicable law (e.g., information that has been anonymized, or aggregated), we will not treat it as such.

WHO DOES THIS STATEMENT APPLY TO?

This Statement describes our Personal Data practices regarding the following groups of data subjects:

• individuals that visit, use, access, or interact with our Online and Mobile Resources and/or Lead Ads and Content ("Visitors and Users");
• contact persons and representatives of customers of our advertising, marketing and lead generation services ("Customer Personnel"); and
• contact persons and representatives of our third-party vendors and business partners ("Vendor and Business Partner Personnel").

The categories of data we collect from each of these groups, and the ways in which we use it, differs.

While our data practices regarding our current and former personnel and job applicants ("Workforce and Job Applicants") are described in a separate notice and not this Statement, this Statement does explain how those data subjects can exercise their privacy rights under applicable law. With the exception of our DPF Policy and the Cross-Border Data Transfer section, this Statement does not include Personal Data we do not control but may process for our business customers to provide them services.

Our Visitors and Users

This Privacy Statement applies to Visitors and Users of our Online and Mobile Resources and those that interact with our lead generation ads and content including content we may send as part of email campaigns.

Our Customers and Customer Personnel

Our business customers enter into contracts with us. That contract is separate from this Statement and has its own terms and conditions for processing of Personal Data on their behalf and governing our overall confidentiality, data privacy and data security obligations. As a result, those terms, and not this Statement, apply to the Personal Data of business customers that we process for them. However, we independently collect and process for ourselves Personal Data of Customer Personnel, and this Statement covers that. In addition, our DPF Notice and the Cross-Border Data Transfer section covers certain Personal Data of our business customers that we import to the U.S. to process in connection with providing them services.

Our Workforce and Job Applicants

We collect and retain the types of professional or employment related Personal Data you would expect an employer to have about its workforce and job applicants, however, rather than describe those practices in this Statement, we provide legally required notices of collection and describe our use and sharing of the Personal Data of our Workforce and Applicants in greater detail in a separate notice. Contact us here for more information. However, this Statement does explain how our Workforce and Job Applicants may exercise their privacy rights under applicable law.

Our Vendors and Business Partners

Like all corporate enterprises, we buy goods and services, lease equipment and office space and attend industry events. In doing so, we interact with personnel of existing and potential Vendors from whom we necessarily collect certain Personal Data. We describe our use of Vendor and Business Partner Personnel Personal Data that we control generally in this Statement; provided, however, that our confidential contracts with those parties may address other Personal Data processing relating to those parties.

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AND HOW DO WE USE IT?

We collect the Personal Data we control in three ways: (i) Personal Data you voluntarily provide to us; (ii) Personal Data we collect through automated/technical means; and (iii) Personal Data that we collect from publicly available sources or obtain from third parties. We may also infer other Personal Data from the Personal Data that we collect and control. We describe our Personal Data processing practices regarding each of those collection methods in the tables below. Additional detail is provided in the Comprehensive Privacy Laws section that provide required notices to California residents and for the UK, European Economic Area and Switzerland.

By using our Online and Mobile Resources, you are signifying to us that you have read and understand this Privacy Statement.

We provide more detailed descriptions of our Personal Data practices by source in the charts below. However, regardless of source, SMD may use your Personal Data for any purposes not inconsistent with our statements under this Privacy Statement, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including, without limitation, to:

• allow you to participate in the features we offer on our Online and Mobile Resources;
• facilitate, manage, personalize, and improve your user experience;
• process your registration, manage your account, and/or upload your user generated content;
• transact with you, provide services or information you request, respond to your comments, questions and requests, serve you content and/or advertising, and send you notices;
• market to you and other promotional purposes;
• sell to our business customers, subject to limitations, as more fully explained here;
• improve our products and service and for other internal business purposes;
• tailor our content, advertisements, and offers;
• fulfill other purposes disclosed at the time you provide your Personal Data or otherwise where we are legally permitted or required to do so;
• determine your location and manage digital content (e.g., territory restrictions or customization); and
• prevent and address fraud, breach of policies or terms, and threats of harm, enforce rights and/or comply with law and legal process.

Without limiting the generality of the forgoing, please see the following sections below regarding distinctions between Voluntarily Submitted Data, Automatically Collected Data, and Data Collected from Other Sources.

Voluntarily Submitted Data

If you choose to participate in or make use of certain activities and features available via our Online and Mobile Resources, you will need to provide us with data about yourself. The types of Personal Data you will be submitting to us in those situations is almost always limited to basic identifiers such as your name, email address, mailing address, and phone number. Below are some of the ways you voluntarily give us your Personal Data and information on how and why we use it:

Automatically Collected Data

When you visit or use our Online and Mobile Resources, basic data about your internet/electronic activity is automatically collected through your browser via tracking technologies, such as “cookies.” Cookies are small text files downloaded onto your computer or mobile device. Cookies allow us to collect your IP address and other usage data, recognize your computer or mobile device, and store some data about your preferences for using our Online and Mobile Resources or past actions, such as described in the table below:

Data Collected from Other Sources

We collect Personal Data from publicly available sources and from third parties (such as data brokers), which we may combine with Personal Data you have provided to us or that we have collected automatically.

Additional data about cookies and tracking technologies is available here.

If you access our Online and Mobile Resources from a phone or other mobile device, the mobile provider may transmit certain data to us such as uniquely identifiable mobile device data. That, in turn, allows us to collect mobile phone numbers and associate them with the mobile device identification data. You can control some of the information disclosed with us through your device settings.

When you use our Online and Mobile Resources, we may allow third party providers ("Third-Party Digital Businesses") to place their own cookies or similar technologies to engage in the same types of collection we describe above.

As part of our services, we will sometimes initially identify prospective customers via public websites or applications operated by third parties such as Seamless.ai . The type of data we collect is the same as that described above, such as name, email address, mailing address, and phone number, as well as potentially workplace and job title of the contact persons at those prospective customers. We also purchase data sets from third parties and use them to check the accuracy of the data we collected from such public sources. In some cases, we may use the data we purchased from a third party even if we did not previously collect it from a public source. We exercise reasonable care and due diligence in purchasing data from third parties and only do so when we are able to obtain assurances that they obtained Personal Data in a lawful manner.

User Beware: External Sites, Apps, Links, and Social Media

We maintain a presence on one or more external social media platforms such as X, Facebook, Instagram, and LinkedIn. We may further allow the community features of our Online and Mobile Resources to connect with, or be viewable from, that external social media presence. Similarly, our Online and Mobile Resources may contain links to other websites or apps controlled by third parties.

If you interact with our Online and Mobile Resources using plug-ins for any social networks, including Facebook, X, or YouTube, your activity may be available for review by those network operators and other users of such social networks.

We and the third-party owning such social network plug-ins process the Personal Data collected from the interaction with such plug-ins as joint controllers. The processing operations that we carry out on a joint controller basis are the collection and communication by transmission to the relevant network operator of Personal Data related to our visitors. Where these third parties carry out further processing operations for their own purposes, they will be considered as the sole data controllers. Where you access our resources from the EEA, UK, or Switzerland, our joint controller agreements with such third parties will apply. These agreements determine the respective responsibilities for compliance with the obligations under the GDPR and equivalent regulations with regard to the joint processing, as specified in the applicable product terms of Facebook, X, and YouTube. Please note that the information collected by means of social network plug-ins used may entail the transfer of your Personal Data by the corresponding third parties to countries outside the European Economic Area. These international transfers of data are controlled in their entirety by the relevant third party as set out in their respective privacy and cookie policies and will generally rely on these social networks being DPF certified.

We are not responsible for the content on, or the privacy practices of, social media platforms, or any third-party sites or apps to which we link. Those apps, sites and platforms are not controlled by us and therefore have their own privacy policies and terms of use. To be clear: neither this Statement nor the terms of use appearing on or in any of our Online and Mobile Resources apply to our social media presence or any third-party sites or apps to which we may link. That means even if you take an Affinity Action on our specific social media profile, and identifiers about you are automatically collected and given to us as a result, that collection and transfer is governed by the privacy policies and other terms of the applicable social media platform. If you have questions about how those apps, sites and platforms collect, use and disclose Personal Data, you should carefully read their privacy policies and contact them using the contact information they provide.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We retain your Personal Data for a period of time consistent with the purpose of collection and processing, fulfilling our legal obligations and enforcing our agreements and defending our legitimate interests. The retention period for Personal Data is determined by us based on the amount, nature, and sensitivity of the Personal Data being processed, the potential risk of harm from unauthorized use or disclosure of the Personal Data, whether we can achieve the purposes of the processing through other means, and any applicable legal requirements. For example, we will retain certain identifiers for as long as it is necessary to continue maintaining your account and providing you our products and services, to comply with our tax, accounting, and recordkeeping obligations, and for research, development, and safety purposes, as well as an additional period as necessary to protect, defend, or establish our rights, defend against potential claims, and to comply with our legal obligations.

WHEN AND TO WHOM DO WE DISCLOSE PERSONAL DATA?

We may disclose your Personal Data as described below, subject to the requirements of the Comprehensive Privacy Laws, such as lawful basis for processing under EU/UK/Swiss laws and opt out under the California Consumer Privacy Act.

Affiliates

Subject to applicable law, we may disclose Personal Data to other corporate affiliates who will use such data in the same way as we can under this Statement.

Legal Requirements

We may disclose Personal Data to government authorities, and to other third parties, as required or permitted by law, including responding to court orders and subpoenas.

To Prevent Harm

We also may disclose Personal Data when we have reason to believe that someone is causing injury to or interference with our rights or property or harming or potentially harming other persons or property.

Business Transactions

If we, or any of our affiliates, sell or transfer all or substantially all of our assets, equity interests or securities, or are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, divestiture, consolidation, or liquidation, Personal Data may be one of the transferred assets. Such disclosures may include pre-transaction disclosures such as during due diligence.

Vendors and Business Partners

We also disclose Personal Data to service providers, contractors, or processors, and business partners (our "Vendors") who need it to perform services for us under the contracts we have with them, including Third Party Digital Businesses (e.g., operators of cookies and tracking technologies associated with our Online and Mobile Resources).

Customers

As a data-driven business-to-business demand generation marketing and technology company, we provide services to help our business customers understand and expand their audiences such as email marketing, lead generation and advertising. As part of those services, we collect certain Personal Data that is then sold as part of our broader service offerings. In almost all cases, only a name, email address, work title and location, and a phone number will be sold. You can withdraw consent, or otherwise instruct us not to sell, or further sell, your Personal Data at any time by visiting our opt-out/do not sell portal found here.

HOW DO WE PROTECT COLLECTED PERSONAL DATA?

Our Data Security Program

We have adopted, implemented, and maintain an enterprise-wide corporate data security and privacy program that includes technical, organizational, administrative, and other security measures designed to protect, as required by applicable law, against reasonably anticipated or actual threats to the security of your Personal Data (the "Security Program"). We have reason to believe our Security Program is reasonable and appropriate for our business and the nature of foreseeable risks to the Personal Data we collect and process. Nonetheless, we cannot guarantee that your Personal Data, whether during transmission or while stored on our systems, otherwise in our care, or the care of our Vendors, will be free from unauthorized access or that loss or accidental destruction will never occur. Except for our duty under applicable law to maintain the Security Program, we disclaim, to the maximum extent the law allows, any liability for any theft or loss of, unauthorized access or damage to, or interception of any data or communications including Personal Data.

YOUR GENERAL RIGHTS AND OPTIONS

If we are using your Personal Data to send you marketing materials, such as newsletters or product alerts via email, you may opt out / withdraw your consent by following the instructions linked or otherwise provided in the applicable email or other communication. In addition, residents of certain jurisdictions have additional rights as set forth in the California Privacy Rights and GDPR Privacy Rights sections below. When we receive your request, we will take reasonable steps to remove your name from our distribution lists, but it may take time to do so. You may still receive materials for a period of time after you opt out. Opting out of or changing Affinity Actions or other submissions or requests made on our external social media presence, may require that you do so directly on that applicable platform as we do not control their procedures.

Some information about your use of our Online and Mobile Resources and certain third-party services may be collected using tracking technologies across time and services and used by SMD and third parties for purposes such as to associate different devices you use and deliver relevant and retargeted ads and/or other content to you on the Service and certain third-party services. Some browsers have a do not track (“DNT”) feature that lets you tell websites that you do not want to have your online activities tracked. We do not support DNT because there is no industry consensus on how they should be treated. We do, however, support Global Privacy Control (“GPC”) in jurisdictions that require us to recognize it. The GPC signal communicates a Do Not Sell / Share / Target request from a global privacy control if enabled for that browser or device, or the data subject, if they can be identified. For more information regarding GPC, see the section YOUR RIGHTS AND OUR OBLIGATIONS UNDER THE CCPA below.

You also have additional rights under certain laws to withdraw consent, limit processing, and/or to instruct us not to sell / share your Personal Data or use it for targeted advertising. We describe those rights and the procedure for exercising them here.

CHILDREN'S PRIVACY

U.S. Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward and collect and use Personal Data from children under the age of 13. Certain Comprehensive Privacy Laws also regulate Personal Data processing practices involving children and other minors. We take those age-related requirements very seriously, and, consistent with them, do not intend for our Online and Mobile Resources to be used by persons under the age of majority, and do not intend to otherwise collect Personal Data from or about minors. Moreover, we do not otherwise knowingly collect Personal Data from minors. If we become aware that anyone under the age of majority has submitted Personal Data to us, we will delete that data other than to retain records of that action. If you are a parent or legal guardian and believe we have collected Personal Data about your minor child, you can contact us here. California minors have certain rights in addition to those discussed in this section. Click here for more information for California minors.

COMPREHENSIVE PRIVACY LAWS

Privacy and data protection laws vary around the world and among the individual United States. Our obligations arising under the majority of the world’s privacy laws, including U.S. federal and most state laws, are identified by risk assessments that we conduct to ensure we act reasonably and responsibly when processing your Personal Data. In some jurisdictions, however, privacy laws grant you, the data subject, certain specific rights regarding your Personal Data. We refer to these types of privacy laws as "Comprehensive Privacy Laws." Examples of Comprehensive Privacy Laws include the European Union ("EU GDPR"), and United Kingdom's variant of the General Data Protection Regulation ("UK GDPR") and Switzerland's data protection law based on GDPR (collectively, the "GDPR"), and the consumer privacy statutes of several U.S. states, such as California, Colorado, Utah, Virginia ("U.S. Privacy Laws"). In other jurisdictions, such as Nevada, more narrow privacy laws have some features of Comprehensive Privacy Laws such as the right to opt-out of the sale of your Personal Data.

The nature and locations of our business activities make us subject to some, though not necessarily all, Comprehensive Privacy Laws. We are for instance, subject to the California Consumer Privacy Act, or "CCPA" and the GDPR, but not other U.S. Privacy Laws at this time. As such, when we collect Personal Data from data subjects protected by the CCPA or GDPR, we become subject to, and those data subjects have rights under, those Comprehensive Privacy Laws. This section of our Statement is used to explain your rights under those laws. For purposes of this section, the words "you" and "your" mean only California (as defined by CCPA) and data subjects whose Personal Data was collected while they were in a GDPR jurisdiction.

Questions about how the Comprehensive Privacy Laws of other jurisdictions might apply to us can be directed to us through the contact data found here.

YOUR RIGHTS AND OUR OBLIGATIONS UNDER THE CCPA

Categories of Data Collected

We collected and processed the following categories of Personal Data within the 12 months prior to the effective date of this Privacy Statement:

• identifiers such as name, address, email address, IP address, and other similar identifiers
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data analytics providers, data processors, payment processors, and marketing companies), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Personal Data under the Customer Records provision of the California Civil Code such as a name, address, telephone number, credit card number
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data processors, and payment processors), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Commercial data such as products or services purchased or considered
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data analytics providers, data processors, and marketing companies), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Internet/electronic activity such as browsing history and search history
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data analytics providers, data processors, and marketing companies), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Geolocation data including geographic coordinates/physical location
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data analytics providers, data processors, and marketing companies), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Audio, video, electronic or other similar data
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, premises security vendors, and call center providers), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: N/A.
• Professional or employment related data such as job title and company
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, and data processors), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Our business customers.
• Inferences drawn from the foregoing to create a profile about a consumer reflecting the an individual's commercial preferences, predispositions, behavior, and attitudes.
• • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, data analytics providers, data processors, and marketing companies), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: Third-Party Digital Businesses and our business customers.
• Sensitive Personal Information: to create a profile about a consumer reflecting the an individual's commercial preferences, predispositions, behavior, and attitudes.
• • log-in information (e.g., username and password to online account with Company)
  • Recipients: Service Providers (e.g., general IT, cloud computing, software, and other business vendors, and data processors), other members of our corporate group, and/or other parties (e.g., litigants and government entities).
  • Sale/Share: N/A.

Because there are numerous types of Personal Data in each category, and various uses for each Personal Data type, actual retention periods vary. We retain specific Personal Data pieces based on how long we have a legitimate purpose for the retention. For more information regarding our retention practices, click here. Generally, we process your Personal Data to provide you services and as otherwise related to the operation of our business, including for one or more of the following business purposes: performing services; managing interactions and transactions; security; debugging; advertising and marketing; quality assurance; processing interactions and transactions; and research and development. We may also use Personal Data for other business purposes in a context that is not a sale or share under the CCPA, such as disclosing it to our service providers, contractors, or processors that perform services for us (“Service Providers”), to you or to other parties at your direction or through your action; for the additional purposes explained at the time of collection (such as in the applicable privacy policy or notice); as required or permitted by applicable law; to the government or private parties to comply with law or legal process or protect or enforce legal rights or obligations or prevent harm; and to assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business (“Additional Business Purposes”). Subject to restrictions and obligations under the CCPA, our Service Providers may also use your Personal Data for Business Purposes and Additional Business Purposes, and may engage subcontractors to enable them to perform services for us.

What sources did we obtain Personal Data from and for what reasons did we collect it and do we process it?

Please re-review this part of this Privacy Statement to understand the scope of purposes and the sources from which we collect and for which we process Personal Data.

Your California Privacy Rights

As described more below, subject to meeting the requirements for a Verifiable Consumer Request (defined below) and limitations permitted by applicable law, we provide California residents the privacy rights described in this section, as required by the CCPA. If you exercise these rights, we will not discriminate against you by treating you differently from other individuals who use our Online and Mobile Resources or purchase our services but did not exercise their rights.

Under the CCPA, a consumer includes persons in their capacity as our Workforce and Job Applicants, so accordingly this section also applies to them. It does not, however, apply to our Workforce or Job Applicants that are not current California residents.

• Know – California consumers have the right to request that we disclose to you, specifically beyond the general statement immediately above, the categories of Personal Data collected including the source of the data, our use of it and, if the data was disclosed or sold to third parties, the categories so disclosed or sold as well as the categories of third parties who received or purchased it.
• Access – You have the right to receive a copy of the categories and specific elements of Personal Data we collected about you in the preceding 12 months.
• Correct – You have the right to request the correction of inaccurate information collected. You can also make changes to your online account in the account settings section of the account. That will not, however, change your information that exists in other places.
• Delete – You have the right to request the deletion of Personal Data we collected about you held by us, our Service Providers and any other third party to which we have sold your Personal Data.
• Opt Out –You have the right to opt out of any sale, sharing, or targeted advertising of Personal Data (as defined in the CCPA) if such sale / sharing / targeted advertising occurs.
• • Due to technical limitations, this opt-out may be exercised separately for cookie and non-cookie data, as explained below.
• Transfer –You have the right to request the transfer of specific pieces of Personal Data we have collected about you to another entity.
• Sensitive Personal Information –With regard to Personal Data that qualifies as sensitive Personal Data under the CCPA, if you elect to provide us with that sensitive Personal Data you will have consented to such processing. We do not process sensitive personal information that is subject to the right to limitation under the CCPA. Note, you can terminate your account with us at any time
• Automated Decision Making / Profiling – We do not engage in Automated Decision Making or Profiling as defined by the CCPA.

To submit a request to exercise your consumer privacy rights as a California resident for data deletion, to request your data, or to correct your data use our Privacy Rights Request Form or to request Do Not Sell/Share opt-out use our use our Do Not Sell or Share Form or call us at 1-800-552-9000 or +1-858-454-5900 x10804, and respond to any follow-up inquiries we make. To submit a request to become approved as an authorized agent, use our Authorized Agent Request Form or call us at 1-800-552-9000 or +1-858-454-5900 x10804, and respond to any follow-up inquiries we make. Please be aware that we do not accept or process requests through other means (e.g., email, via fax, chats, social media etc.). We have the ability to charge a reasonable fee for administrative costs of providing the Personal Data to you in situations where the request is unfounded or excessive (e.g., due to its repeated nature), or in the alternative, we may refuse to act on the request in those situations. We will notify you in such cases.

Opt Out of Sale / Sharing / Targeted Advertising:

Opt-out for non-cookie Personal Data: If you want to limit our processing of your non-cookie Personal Data (e.g., your email address) for targeted advertising, or opt-out of the sale/sharing of such data, make an opt-out request here.

Opt-out for cookie Personal Data: If you want to limit our processing of your cookie-related Personal Data for Targeted Advertising, or opt-out of the Sale/Sharing of such Personal Data, California allows you to exercise a separate opt-out request by clicking the Do Not Sell or Share My Personal Information link that can be found in the bottom footer of the site for which you wish to manage cookies. This is because we have to use different technologies to apply your opt-out of cookie Personal Data and to non-cookie Personal Data. Our cookie management tool enables you to exercise such an opt-out request and enable certain cookie preferences on your device. You must exercise your preferences on each of our Online and Mobile Resources you visit, from each browser you use, and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective, and you will need to enable them again via our cookie management tool. Beware that if you use ad blocking software, our cookie banner may not appear when you visit our services, and you may have to use the link above (the Do Not Sell or Share My Personal Information link at the bottom of our Online and Mobile Resources) to access the tool.

Out Preference Signals: You may also opt out of cookie-related sales / sharing / targeted advertising by using an opt-out preference signal or Global Privacy Control (“GPC”). To use a GPC, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable the GPC. We have configured the settings of our consent management platform to receive and process GPC signals on our Online and Mobile Resources. If you opt-out using the GPC functionality available in some browsers while you are logged in to one of our Online and Mobile Resources, we will use that signal to opt you out of all online and offline marketing and sharing. If your browser functionality supports GPC but you are not logged into one of our Online and Mobile Resources we will use that signal to opt you out of online tracking only. If your browser does not support GPC you can click on the Your Privacy Choices link at the bottom of our Online and Mobile Resources to activate our cookie manager where you can select your opt out choices for browser activity. If you email or write us with an opt out request, we will use that request to opt you out of all offline based marketing and sharing and any online based marketing and sharing when you are logged into your account in one of our Online and Mobile Resources. We currently do not, due to technical limitations, process GPC for opt-outs of sales and sharing in other contexts (e.g., non-cookie PI) , except if you are logged into one of our online and mobile resources. We do not: (1) charge a fee for use of our service if you have enabled GPC; (2) change your experience with any product or service if you use GPC; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to the GP

We do not knowingly sell or share the Personal Data of consumers under 16. If you think we may have unknowingly collected Personal Data of a consumer under 16 years old, please Contact Us. For more information regarding Children's Information, click here.

As permitted or required by the CCPA, any request you submit to us must be a Verifiable Consumer Request, meaning when you make a request, we may ask you to provide verifying information, such as your name, e-mail, phone number and/or account information. We will review the information provided and may request additional information (e.g., transaction history) via e-mail or other means to ensure we are interacting with the correct individual. We will not fulfill your Right to Know (Categories), Right to Know (Specific Pieces), Right to Delete, or Right to Correction request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected Personal Data. We do not verify opt-outs of Sell/Share/Target or Limitation of Sensitive Personal Data requests unless we suspect fraud. To protect individuals’ privacy, if we are unable to verify you sufficiently, we will be unable to honor your request. We will verify your access request to a reasonably high level of certainty, meaning that we may match three data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you. We verify a California request to know categories to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you. If we cannot do so, we will refer you to this Statement for a general description of our data practices. We verify your request to delete to a reasonable degree of certainty, which may include matching at least two reliable data points provided by you with data points maintained by us, or to a reasonably high degree of certainty, which may include matching at least three reliable data points provided by you with data points maintained by us, depending on the sensitivity of the Personal Data and the risk of harm to the consumer posed by unauthorized deletion. If we cannot verify you sufficiently to honor a deletion request, you can still make a do not sell/share/target and/or limit sensitive Personal Data request. We verify your correction request to a reasonable degree of certainty, which may include matching at least two reliable data points provided by you with data points maintained by us, or to a reasonably high degree of certainty, which may include matching at least three reliable data points provided by you with data points maintained by us, depending on the sensitivity of the Personal Data and the risk of harm to the consumer posed by unauthorized correction.

We will use Personal Data provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.

You may use an authorized agent to make a request for you, subject to our verification of the agent, the agent’s authority to submit requests on your behalf, and of you. Once your agent’s authority is confirmed, they may exercise rights on your behalf subject to the agency requirements of the CCPA. Agents can request authorization using our Authorized Agent Request Form.

You are not required to create a password-protected account with us to make a Verifiable Consumer Request, but you may use your password-protected account to do so. If we suspect fraudulent or malicious activity on or from the password-protected account, we may decline a request or request that you provide further verifying information.

Financial Incentives

We do not currently offer discounts or rewards to individuals for providing us Personal Data, or set price or service differences related to the collection, retention, sale, or sharing of Personal Data. If we offer such programs in the future, we will update this Statement to describe such program(s), including how you may opt-in and how we value the Personal Data required.

California Minors

Although our services are intended for an audience over the age of majority, any California residents under the age of eighteen (18) who have registered to use our services, and posted content on the service, can request removal by contacting us here, detailing where the content is posted and attesting you posted it. We will then make reasonable, good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines we do not control.

Shine the Light

We may disclose “personal information,” as defined by California's “Shine the Light” law, to third parties for such third parties own direct marketing purposes. California residents may opt-out of this sharing by contacting us at [email protected] or Slashdot Media, LLC, PO Box 12190, San Diego, CA 92112 (Attn: Privacy Compliance). You must put the statement “Shine the Light Request” in the body of your correspondence. In your request, please attest to the fact that you are a California resident and provide a current California address for your response. This right is different than, and in addition to, CCPA rights, and must be requested separately. However, a Do Not Sell/Share/Target opt-out is broader and will limit our disclosing to third parties for their own direct marketing purposes without the need for making a separate Shine the Light request. We will not accept Shine the Light requests by telephone or by fax, and are not responsible for requests not labeled or sent properly, or that are incomplete.

California Delete Act of 2023

Pursuant to the California Delete Act of 2023 SB362 our annual public disclosure can be found here.

Your Rights and Our Obligations Under Nevada Privacy Law

If you are Nevada resident, Nevada law (SB 220), entitles you to opt out of the sale of certain kinds of Personal Data. A sale under Nevada law is the transfer of Personal Data to third parties for monetary consideration. If you are a Nevada resident and wish to opt-out, you may do so by contacting us at any of the methods here or click on the Opt-Out link at the bottom of our Online and Mobile Resources.

When we collect Personal Data from individuals located in the European Economic Area, Switzerland, or the United Kingdom (the "GDPR Jurisdictions"), those individuals have rights under the GDPR. This section of our Statement is used to fulfill our GDPR obligations and explain your GDPR rights. For purposes of this section, the words "you" and "your" mean only such individuals located in the GDPR Jurisdictions.

Our Collection, Use, and Disclosure Practices

Please review this section to understand the scope of purposes and the sources from which we collect Personal Data. Similarly, you can find data about the categories of third parties with which we may disclose your Personal Data and why we disclose it in this section. We do not use your Personal Data for automated decision-making subject to the right to request human intervention. We do, however, collect certain Personal Data from you for the purpose of selling it subject to having obtained your consent if required under applicable law. We also collect certain Personal Data from third parties. If we are reasonably aware that such third parties have not provided you with appropriate notice of collection by us, we will provide you the required alternate notice under Article 14 of the GDPR when we first contact you using such data or before one month has elapsed, whichever occurs first. We typically provide that Article 14 notice in the body of the communication used to contact you.

Legal Basis for Processing Your Personal Data

Our legal basis for collecting and using your Personal Data will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, such as to contact you about products and services you may be interested in. In certain circumstances where our legal basis for processing is for performance of a contract with you, please be aware that, in those circumstances, where you do not provide Personal Data, which is required by us, we will not be able to provide the products and services under our contract with you or your company or may not be able to comply with a legal obligation on us. In some cases, we may also have a legal obligation to collect Personal Data from you or may otherwise need the Personal Data to protect your vital interests or those of another person. If we happen to obtain your consent to process your Personal Data, you may withdraw your consent at any time via any of the means listed here. Detailed information regarding the applicable legal basis for processing your Personal Data is provided in this Statement below.

Your GDPR Privacy Rights

You may exercise the rights available to you under the GDPR, including the right to object to the processing of your Personal Data, as follows:

• Access – the right to obtain a confirmation that your Personal Data is being processed, access to your Personal Data (if we are in fact processing it), other data about the processing of your Personal Data (most of which is set forth in this Statement), and a copy of the Personal Data we are processing.
• Rectification – the right to have your Personal Data corrected if it is inaccurate, and depending on the purposes of processing, you may also have incomplete Personal Data completed.
• Erasure – also known as the “right to be forgotten,” the right to request your Personal Data be deleted under certain circumstances such as if it is no longer needed for the original purpose it was collected for or if you withdraw your consent. The right of erasure does not apply under limited circumstances including if the processing is necessary for exercising the right of freedom of expression and data or our compliance with a legal obligation.
• Restrict processing – the right to restrict processing of your Personal Data under certain circumstances such as if you contest the accuracy of the Personal Data (and only for so long as it takes to verify that accuracy), the processing is unlawful and you have requested restriction of the processing rather than erasure, or if we no longer need the Personal Data but you need it to establish, exercise, or defend a legal claim.
• Portability – the right to receive the Personal Data you provided to us (and not any other data) under limited circumstances such as if the basis for processing the Personal Data was consent or necessary for the performance of a contract with you, or the processing is carried out by automated means.
• Automated Processing – SDM does not engage in automated decision-making activities subject to the right to opt out under the GDPR.
• Object to processing – the right to object to the processing of your Personal Data under the following circumstances:
  • Legitimate Interests – if the basis for which the processing occurs is in our legitimate interests or in the performance of a task carried out in the public interest. If you object, we will stop processing your Personal Data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or we require the Personal Data to establish, exercise or defend a legal claim.
  • Direct Marketing – if the processing is for direct marketing purposes.

You can exercise these rights by contacting us using the contact data listed here, however, we may need to request additional data from you to verify your identity before granting your request. We will respond to all requests we receive from individuals wishing to exercise such rights in accordance with the GDPR. We have the ability to charge a reasonable fee for administrative costs of providing the Personal Data to you in situations where the request is unfounded or excessive (e.g., due to its repeated nature), or in the alternative, we may refuse to act on the request in those situations. We will notify you in such cases.

Lodging a Complaint

You have the right to complain to your data protection authority about our collection and use of your Personal Data. Please contact your local data protection authority for more information. Contact data for data protection authorities can be found here and here.

Retaining Your Personal Data

As more fully set forth above, we will store and retain your Personal Data in accordance with applicable law and as long as necessary to carry out the purposes described in this section in accordance with our internal data retention procedures. The criteria used to determine the retention periods include:

• how long the Personal Data is needed in connection with the applicable purposes for which we use it;
• the type of Personal Data collected; and
• whether we are subject to a legal, contractual, or similar obligation to retain the Personal Data (e.g., mandatory data retention laws, government orders to preserve Personal Data relevant to an investigation, or Personal Data that must be retained for the purposes of litigation or disputes).

Cross-Border Data Transfer

By submitting Personal Data to us, we will receive it in the United States where our technical infrastructure resides. We undertake such collection solely for the purposes described previously in this Statement but note that such direct collection does not constitute a “transfer” under the GDPR. In certain instances, we collect Personal Data from data subjects located within the GDPR Jurisdictions, and do then transfer it to the U.S., to international organizations, and/or to third countries for the same purposes discussed above. When doing so, may use the mechanisms prescribed for lawful transfers in GDPR Articles 44 through 49, including, where appropriate, then-current standard contractual clauses or similar mechanism appropriate to the particular GDPR Jurisdiction involved. You can request further details in relation to international transfers, including a copy of the standard contractual clauses, by contacting us here.

Notwithstanding anything herein to the contrary, with respect to Personal Data that our business customers transfer to us from the EU, UK, or Switzerland, (i) our Data Privacy Framework Policy applies and provides those data subjects additional rights (you can review our DPF Policy and learn how to make DPF requests); and/or (ii) to the extent that your Personal Data was transferred to the U.S. pursuant to the standard contractual clauses, such clauses control with respect to our processing of such Personal Data.

CHANGES TO THIS PRIVACY STATEMENT

We reserve the right to change or update this Statement from time to time. Please check our Online and Mobile Resources periodically for such changes since all data collected is subject to the Statement in place at the time of collection. We will indicate the effective/amendment date at the beginning of this Statement.

HOW TO CONTACT OUR PRIVACY OFFICE

If you have any questions about our privacy and data security policies, procedures, and practices, including anything we say in this Privacy Statement, we encourage you to contact our Privacy Office.

Slashdot Media, LLC

• Address: PO Box 12190 San Diego, CA 92112
• Attn: Privacy Compliance
• Phone: 1-800-552-9000 or +1-858-454-5900 x10804
• Form: Slashdot Privacy Rights Request Form
• Form: Slashdot Do Not Sell/Share opt-out Form
• Form: Slashdot Authorized Agent Request Form

OUR REPRESENTATIVE IN THE EU

General Data Protection Regulation (GDPR) – European Representative Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Slashdot Media, LLC has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR: -by using EDPO’s online request form: https://edpo.com/gdpr-data-request/ -by writing to EDPO at at Regus Block 1, Blanchardstown Corporate Park, Ballycoolen Road, Blanchardstown, Dublin, D15 AKK1, Ireland

OUR REPRESENTATIVE IN THE UK

UK General Data Protection Regulation (GDPR) - UK Representative Pursuant to Article 27 of the UK GDPR, Slashdot Media, LLC has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR: - by using EDPO’s online request form: https://edpo.com/uk-gdpr-data-request/ - by writing to EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom