Inductive Automation, LLC
Privacy Policy
European Union, Iceland, Liechtenstein, Norway, Switzerland, and the United Kingdom Supplemental Privacy Notice (“EEA/CH/UK Supplement”)
Last Updated: June 7, 2024
This EEA/CH/UK Supplement applies only to personal information collected, used, and disclosed about individuals residing in the European Union, Iceland, Liechtenstein, or Norway (the “EEA”), Switzerland (the “CH”) or the United Kingdom (the “UK”), and supplements the information contained in the Policy. It provides information required in accordance with Article 13 of the European Union General Data Protection Regulation 2016/679 (the “EU GDPR”), the Federal Act on Data Protection (the “FADP”) and the UK General Data Protection Regulation (the “UK GDPR” and, together with the EU GDPR and the FADP, the “GDPR”).
Lawful Bases for Collecting and Processing
We collect personal information (referred to as “personal data” under the EU GDPR, i.e. any information relating to an identified or identifiable natural person (“data subject” under the EU GDPR), about you for a variety of Purposes as defined in the Policy and based on the specific lawful basis (“GDPR Lawful Basis”) described in the table below:
Purposes for Collection
Providing Sites and Services
GDPR Lawful Basis
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us when accessing our Sites and Services.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with our Sites and Services;
to develop our Sites and Services;
to develop and grow our operations;
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Purposes for Collection
Direct Marketing by us
GDPR Lawful Basis
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with up-to-date news and information about our Sites and Services
Purposes for Collection
Analytics
GDPR Lawful Basis
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
-
to define types of customers for any new Sites or Services;
-
to understand how our Sites are being used;
-
to develop and grow our operations.
Purposes for Collection
Contract Performance
GDPR Lawful Basis
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us when purchasing our Sites and Services.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to develop and grow our operations;
to meet our obligations and enforce our legal rights.
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Purposes for Collection
Relationship Management
GDPR Lawful Basis
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us to receive certain communication.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with our Sites and Services;
to provide high quality customer service;
to develop and grow our operations;
to manage our customer base.
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to fulfill our obligations under an agreement with you;
to enter into an agreement with you.
Purposes for Collection
Improve Sites and Services
GDPR Lawful Basis
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to enable us to improve our Sites and Services;
to improve the experience of users and visitors of our Sites.
Purposes for Collection
Safety and Security
GDPR Lawful Basis
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to guarantee the quality and legality of our Sites and Services;
to enhance protection against fraud, spam, harassment, intellectual property infringement, crime and security risk;
to ensure cybersecurity.
Purposes for Collection
Prevent Misuse of Sites and Services
GDPR Lawful Basis
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with up-to-date information about our Sites and Services;
to understand how our Sites are being used;
to ensure cybersecurity.
Compliance with Laws and Regulations (Article 6(1)(c) of the EU and UK GDPR)
to cooperate with law enforcement agencies and regulators.
Purposes for Collection
Compliance with the Laws
GDPR Lawful Basis
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
- to meet our obligations and enforce our legal rights;
to enter into an agreement with you.
Compliance with Laws and Regulations (Article 6(1)(c) of the EU and UK GDPR)
to enhance protection against fraud, spam, harassment, intellectual property infringement, crime and security risks;
to cooperate with law enforcement agencies and regulators.
Purposes for Collection
GDPR Lawful Basis
Providing Sites and Services
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us when accessing our Sites and Services.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with our Sites and Services;
to develop our Sites and Services;
to develop and grow our operations;
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Direct Marketing by us
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with up-to-date news and information about our Sites and Services
Analytics
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
-
to define types of customers for any new Sites or Services;
-
to understand how our Sites are being used;
-
to develop and grow our operations.
Contract Performance
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us when purchasing our Sites and Services.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to develop and grow our operations;
to meet our obligations and enforce our legal rights.
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Relationship Management
Consent (Article 6(1)(a) of the EU and UK GDPR)
based on consent that you provided to us to receive certain communication.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with our Sites and Services;
to provide high quality customer service;
to develop and grow our operations;
to manage our customer base.
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to fulfill our obligations under an agreement with you;
to enter into an agreement with you.
Improve Sites and Services
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to enable us to improve our Sites and Services;
to improve the experience of users and visitors of our Sites.
Safety and Security
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to guarantee the quality and legality of our Sites and Services;
to enhance protection against fraud, spam, harassment, intellectual property infringement, crime and security risk;
to ensure cybersecurity.
Prevent Misuse of Sites and Services
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
to enter into an agreement with you.
Our legitimate interests (Article 6(1)(f) of the EU and UK GDPR)
to provide you with up-to-date information about our Sites and Services;
to understand how our Sites are being used;
to ensure cybersecurity.
Compliance with Laws and Regulations (Article 6(1)(c) of the EU and UK GDPR)
to cooperate with law enforcement agencies and regulators.
Compliance with the Laws
Contractual Necessity (Article 6(1)(b) of the EU and UK GDPR)
to meet our contractual commitments to you;
- to meet our obligations and enforce our legal rights;
to enter into an agreement with you.
Compliance with Laws and Regulations (Article 6(1)(c) of the EU and UK GDPR)
to enhance protection against fraud, spam, harassment, intellectual property infringement, crime and security risks;
to cooperate with law enforcement agencies and regulators.
We process the personal information of visitors to our Sites, those who communicate with us, and those who use our Services who are located in the EEA, CH or the UK for the Purposes and GDPR Lawful Basis set out in the table above. Where more than one GDPR Lawful Basis is listed, please contact us if you would like to know the specific GDPR Lawful Basis which applies in connection with your specific enquiry.
Change of Purpose
We will only use your personal information for the Purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original Purpose. If you wish to get an explanation as to how the processing for the new Purpose is compatible with the original Purpose, please contact us.
If we need to use your personal information for an unrelated Purpose, we will notify you and we will explain the GDPR Lawful Basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Rights of Data Subjects under GDPR
Under the GDPR, you have rights in relation to your personal information. If you wish to exercise any of the rights set out below, you may contact us verbally or in writing.
The GDPR offers individuals the rights to:
- Access your personal information;
- Correct or update any of your personal information that is inaccurate;
- Restrict or limit the ways in which we use your personal information;
- Object to the processing of your personal information;
- Request the deletion of your personal information; and
- Obtain a copy of your personal information in an easily accessible format.
In addition, where we rely on consent to process your personal information, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain Products to you. We will advise you if this is the case at the time you withdraw your consent.
In the ordinary course, you will not have to pay a fee to access your personal information (or to exercise any of the other rights).
Verification Process
When you submit a request to exercise your data subject rights, we may ask you to provide information that will enable us to verify your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
If you designate an authorized agent to exercise your rights on your behalf, we may require that you or the authorized agent do the following:
- Verify your identity with us directly.
- Provide proof of your signed written permission for the authorized agent to submit a request on your behalf.
We may deny a request from an agent purportedly acting on your behalf if we request, and the agent does not submit, proof that he, she, or it has been authorized by you to act on your behalf.
We respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we may extend the timeframe by up to two further months, but we will notify you and keep you updated if this is the case.
Special Category Data
We do not collect any Special Categories of personal information about you (this includes personal information that reveals, for example, your race or ethnicity, religious or other beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data), nor do we collect any information about criminal convictions and offences.
International Data Transfers
We may transfer your personal information to countries outside the EEA, CH and/or UK. We will process your personal information in accordance with applicable law and with this Policy and this EEA/CH/UK Supplement regardless of where your personal information is stored or accessed.
Whenever we transfer your personal information out of the EEA, CH and/or UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- Where possible, we will only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information.
- Where we use certain service providers, we may use specific contractual terms approved for use in the EEA, CH and/or the UK which give personal information the same protection it has in the EEA, CH and/or UK.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA, CH and/or UK.
Contacting Us
If you have any questions or comments about this EEA/CH/UK Supplement or if you wish to make an individual rights request, please feel free to contact us by email at data@inductiveautomation.com.
If you have any complaints regarding our privacy practices, you have the right to contact and make a complaint with your national data protection authority.
- EEA: A list of EU supervisory authorities is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
- UK: The relevant UK supervisory authority is the UK Information Commissioner’s Officer at https://ico.org.uk/.
- CH: The Federal Data Protection and Information Commissioner (FDPIC) is the CH supervisory authority and is available at https://www.edoeb.admin.ch/edoeb/en/home.html.