Pentaho Privacy Statement
Last Updated: 2 March 2017
Pentaho has certified that its use of personal information conforms to the principles of the EU-U.S. Privacy Shield agreement. To view our certification, and learn more about Privacy Shield, please visit www.privacyshield.gov.
By submitting your data to us, you provide your explicit consent to the use of your personal information in accordance with this Privacy Statement.
This Privacy Statement applies to personal data collected from you:
- (a) when you visit our website at www.pentaho.com and any other websites administered by Pentaho (“Websites”);
- (b) in the course of conducting marketing activities; and
- (c) when providing products and services to you.
The Websites contain links to other websites, which may be owned or controlled by Pentaho' affiliates or unrelated third parties (including but not limited to websites administered by Pentaho’s employees). Please note that the privacy policies of these linked websites may differ from those of Pentaho. Pentaho is not responsible for the manner in which your personal information is processed by any linked website which will be governed by the terms of their respective privacy policies.
PERSONAL INFORMATION COLLECTED
Pentaho may collect the following personal information about you, depending on your interactions with Pentaho, and this can include but not be limited to the following:
- (a) Name and contact data: Pentaho collects your first and last name, business email address, company name, address, phone number and other similar contact data.
- (b) Usage data. Pentaho collects data about how you interact with Pentaho and our products and services. For example, we collect:
- (i) Product Use Data. Following the installation of Pentaho’s software product into your IT environment, certain technical information about the installation will be sent to us automatically by your hardware and this can include information about plugins, IP addresses and the number of cores the Pentaho product has been installed on.
- (ii) Support Data. In the event of a support incident, we collect information about your hardware, your use of the Pentaho software and other details relating to the support incident. Such data includes your contact details or authentication data, the content of your chats and other communications with Pentaho’s support team including those provided to Pentaho’s technical support portal. Unless otherwise agreed with Pentaho, you agree not to provide Pentaho with any other personal information (including those of any third parties) in the course of using Pentaho’s products and services.
- (c) Survey data. Pentaho may conduct surveys for marketing and planning purposes which are optional to participate in. Pentaho will collect information about your experience with its products and services and gather your opinion about the industry in which it operates in.
- (d) Website statistical data. We may also collect information during your visit to the Websites through the use of automatic data collection tools such as cookies (described below) and other commonly used information-gathering tools. These tools collect certain standard information that your browser sends to the Websites such as your browser type, the Internet Protocol (IP) address from which you are accessing the Internet, the address of the website from which you arrived at a Website, and the date and time of visits. We may also gather aggregate, non-personally identifiable information, such as the number of visits to the Websites.
- (e) Cookies. Pentaho employs "cookies" to provide you with tailored information when you visit the Websites. A "cookie" is a small text file placed on your hard drive that assists us in providing a more customised website experience. A cookie is either stored temporarily (“session cookies”) or permanently (known as a “permanent” or “persistent cookie”) and is used in the following manner:
- (i) Session cookies (cookies which are stored temporarily and deleted once a browser is closed) can be used to help your browser navigate our Websites more smoothly and will identify if you have visited us from a website with which the subsequent website has some relationship (e.g., a website of an affiliated company) and can give helpful information.
- (ii) Persistent cookies (cookies which are stored permanently on the hard drive of a computer) can be used to customize the Website during your visit, such as by storing passwords, preferences, and registration and account information so that you do not have to re-enter this information each time you visit a Website.
Our Websites may use both session cookies and persistent cookies to store information that allows us to improve our customer service to you and provide you with the ability to navigate the Websites more easily. To make our Website easier to use, we combine information collected via cookies with personal information. However, you may at your option, block or delete our cookies from your hard drive through your web browser’s settings. By disabling cookies, however, certain site features and functionality may no longer work properly, or at all.
DATA INTEGRITY AND PURPOSE
Pentaho will only use personal information in a manner that is compatible with the purposes for which the information was collected as follows:
- (a) Marketing purposes and surveys. Pentaho uses your contact details to inform you about its products and services, provide you with publications or newsletters and notify you of events which may be of interest to you. For surveys, if the responses are to be made public, survey participants will be notified at the time they participate in the survey and Pentaho will disclose only aggregated information and not personal information identifying any specific individual among its survey participants.
- (b) Provide our products and services. Pentaho uses your personal information to provide products and services to you and for general account management purposes.
- (c) Website administration. Pentaho may use the personal information you provide us to enable you to participate in online forums available on the Websites and to interact with other Website users.
- (d) Statistical analysis. Pentaho may use website statistical data for various purposes, including but not limited to marketing, trends and statistical analysis, service evaluation and planning.
We will take reasonable steps to ensure the personal information is relevant to its intended use, accurate, complete and current.
Pentaho will retain your personal information for as long as necessary in accordance with applicable laws.
You have a right to ask us to not process your information for a purpose which is materially different from the original purpose from which the information was collected. You can opt out of receiving marketing communications at any time. Any email sent will include directions on how a subscriber may remove himself or herself from the list, or a URL where the user may find such directions. If you register on a Website and participate in an online forum, your personal information may be publicly available through your profile display on a Website. In such cases, you have the option to opt out of publicly displaying your real name. Where a Website allows you to display optional personal information publicly, such entry and display is at your discretion and may be changed at any time by you. As a registered user on a Website, you will have the opportunity to use a Website to send electronic mail to another user through an online forum. In such cases, a user's username and email address will be included with such messages. If you do not wish your email address to be shown to another user, you would have to refrain from using the messaging service available through the Website.
If we process your sensitive information (i.e., personal information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information specifying the sex life of the individual) for the purposes set out in this Privacy Statement, Pentaho will obtain your express consent (opt in) if such information is to be (i) disclosed to a third party that is a non-agent (except for our affiliates); or (ii) used for a purpose other than those for which it was originally collected or subsequently authorized by you.
YOUR RIGHT TO ACCESS AND UPDATE YOUR PERSONAL INFORMATION
You have the right to access the personal information that we hold about you and ask that we correct, amend, or delete personal information which it is inaccurate or has been not been processed in accordance with applicable data protection laws or the Privacy Shield principles except where the burden or expense of providing access would be disproportionate to the risks to your privacy or where the rights of third parties would be violated. In certain cases, your rights may be exercised via the Website. Otherwise, please contact Pentaho by e-mailing email@example.com.
Personal information collected by us may be stored and processed in the United States or any other country in which Pentaho or its subsidiaries or service providers maintain facilities. By providing the information to us, you are consenting to the transfer of the personal information from your country to a country which may not have the same data protection laws as the country in which you reside. We share your personal information for business purposes only on a need-to-know basis with our employees, affiliates and third parties who provide goods and services to us and will not otherwise share, sell, transfer or exchange your personal information with any other third parties. We will take the necessary steps to ensure that such onward transfers of personal information comply with applicable data protection laws or the Privacy Shield principles. In the case of onward transfer of personal information, we will assume responsibility for the processing of personal information we receive and subsequently transfer to third parties acting as an agent on our behalf. We shall remain liable under Privacy Shield principles if third parties engaged by us to process such personal information do so in a manner inconsistent with Privacy Shield principles.
Please note we may be required to disclose your personal information in response to a lawful request by a public authority, including to meet national security and law enforcement requirements.
We will take reasonable and proportionate security measures to protect personal information from loss, misuse and unauthorised access, disclosure, alteration and destruction.
Pentaho employs measures including but not limited to security audits, use of encryption tools and software, and other reasonable security measures and procedures. Internal access to users' private and non-public personal information is restricted to site administrators and individuals on a need-to-know basis.
Please keep in mind that while we have established safeguards to help prevent unauthorized access to or misuse of your personal information, we cannot guarantee that it will never be disclosed in a manner inconsistent with this Privacy Statement (for example, in the event of unauthorized acts by third parties that violate applicable law or our policies). In addition, if a password is used to help protect your accounts and personal information, it is your responsibility to keep your password confidential.
RECOURSE, ENFORCEMENT AND LIABILITY
We will respond to your inquiries and complaints about this Privacy Statement and our handling of your personal information. In the first instance, we request that you contact:firstname.lastname@example.org and we will respond within 45 days.
As part of our Privacy Shield commitments, we have also committed to cooperating with EU Data Protection Authorities (DPAs) and the panel of DPAs. You can contact the DPA in the country where you live or work for further information.
If your complaint has not been handled in a satisfactory manner through these recourse mechanisms, you may invoke the binding arbitration procedure through the Privacy Shield Panel or the Privacy Shield Ombudsman. Further information can be found at the Privacy Shield website.
Our commitments under the Privacy Shield agreement are also subject to the investigatory and enforcement powers of the US Department of Commerce’s Federal Trade Commission.
CHANGES TO THIS PRIVACY STATEMENT
We will update this Privacy Statement when necessary to reflect feedback and changes in our products and services. When we post changes to this Privacy Statement, we will revise the "last updated" date at the top of the Privacy Statement.