Effective Date: March 1, 2025
PRIVACY STATEMENT - CALIFORNIA
This Addendum supplements the information contained in the SCALIBIT.COM Privacy Notice and applies to Website visitors, Customers, Users, Registrants, End Users, Affiliates and other individuals (incl. households) who are residents of the State of California, USA (“consumer”, “you”, “your”).
For avoidance of doubt, the term “data subject” used in the Privacy Notice shall correspond to the term “consumer” used herein and the term “personal data” in the Privacy Notice shall be equivalent to the term “personal information” used herein. All other terms which are not explicitly defined in this Addendum shall have the meaning as set forth in the Privacy Notice.
This Addendum is drafted in compliance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CPRA”), together hereinafter referred to as the “CCPA”, and other relevant California privacy laws and its purpose is to provide additional privacy disclosures and to inform you of your additional rights as a California resident.
SCALIBIT supports the CCPA and all SCALIBIT services comply with its provisions.
1. Categories of Personal Information We Collect
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (“personal information”).
Section 2 (“Categories of data subjects and types of personal data”) of the Privacy Notice describes in detail what categories of personal information we have collected from consumers within the last twelve (12) months.
Sensitive personal information
Some of the personal information we collect may be considered “sensitive” within the meaning of Section 1798.140 (ae) of the CCPA. We may collect the following sensitive personal information: social security, driver’s license, state identification card, or passport number; account log-in information; debit card or credit card number; contents of a consumer’s mail, email, and text messages unless we are the intended recipient of the communication.
2. Sources of Personal Information Collection
Apart from you, being the main source of information we collect about you, we may also collect personal information from publicly accessible sources (e.g. companies trade register, WHOIS, local national list(s) of sanctioned persons) and/or third parties, such as our affiliates, trusted partners, including but not limited to marketing, advertising, security service providers, etc.
3. Purposes for Collection of Personal Information, incl. Sensitive Personal Information
The business and commercial purposes for which we collect, use and disclose personal information, incl. sensitive personal information about consumers are described in detail in Section 4. (“Purposes of and legal basis for data processing”) of the Privacy Notice.
4. Disclosing of Personal Information to Third Parties
We may disclose personal information to the categories of third parties and for the disclosure purposes as set forth in Section 7 (“Sharing of Personal Data”) of the Privacy Notice.
5. Data Retention Periods
The periods for which we retain your personal information are described in Section 25. (“Retention of Personal Data”) of the Privacy Notice.
6. Children
The Site is not for use by children under the age of 18 years and SCALIBIT does not knowingly collect, store, use or share the personal information of children under 18 years.
IF YOU ARE A CALIFORNIA RESIDENT UNDER THE AGE OF 18, DO NOT SHARE ANY PERSONAL INFORMATION ON THE SITE, IN POSTS OR VIA MESSAGING. If you do post any personal information, you can remove it using Services functionality. This removal may not be complete given the nature of the Internet. Contact us at privacy@scalibit.com for assistance.
7. Sale and Share of Personal Information
In the course of provision of our Services we do not sell any personal information related to consumers.
SCALIBIT has taken substantial steps to identify whether any of our activities as well as our data sharing arrangements would constitute a “sale” or “share” under the CCPA. Due to the complexities and ambiguities in the CCPA, we evaluate some of our third-party relationships periodically.
Under the CCPA, “sell,” “selling,” “sale,” or “sold,’’ means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration. Therefore, it does not necessarily mean money was exchanged for the transfer of personal information, but the transfer may still be considered a “sale”. “Share” is defined as sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.
8. Consumer Rights Under the CCPA
The CCPA provides consumers with specific rights with respect to their personal information as follows
8.1. Right to opt-out from sale or share of personal information
Right to opt-out from sale of personal data: If you are a US resident, you have the right to opt-out from the sale of your personal data. Although we do not sell your personal data (as defined in the applicable US privacy laws), you may submit a request and/or direct a query you may have related to the sale of personal data at any time via email to privacy@scalibit.com.
A consumer shall have the right, at any time, to direct SCALIBIT not to sell or share the consumer’s personal information (“the right to opt-out”). Such a request of the consumer shall be respected for at least twelve (12) months before requesting that the consumer authorizes again the sale or share of the consumer’s personal information. In order to process the consumer’s request, SCALIBIT may use any personal information collected from the consumer in connection with the submission of the consumer’s opt-out request solely for the purposes of complying with the opt-out request.
To exercise your right to opt-out from sale or share or any other right under the CCPA, you may submit a request at any time via email to privacy@scalibit.com. At a minimum, you must provide us with your names and email address you have used when engaging with us. We reserve the right to request additional information in order to identify you and process your request. We will keep a record of this request. Please note that we will not discriminate against you if you exercise your rights under the CCPA.
8.2. Right to know request. Right to access and data portability
Pursuant to the CCPA, you have a right to request information about the collection, use, and disclosure of your personal information performed by SCALIBIT over the preceding twelve (12) months, as well as to ask to provide you with these specific information:
-
Categories and specific pieces of personal information we have collected about you;
-
Categories of sources from which we collect personal information about you;
-
Purposes for collecting, using, selling or sharing personal information;
-
Categories of third parties to whom we disclose personal information;
-
If applicable, categories of personal information sold, shared or disclosed about you and the categories of third parties to whom the personal information was sold, shared or disclosed, by category or categories of personal information for each category of third parties to whom the personal information was sold.
8.3. Right to delete request
You have a right to request that we delete a part of or all your personal information, subject to certain exceptions (i.e., when the information is necessary to: complete a transition or provide a service requested by you; debug or repair expected product functionality; detect or investigate cyber threats, etc.). Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies.
8.4. Right to correct inaccurate personal information
You have the right to request that we correct inaccuracies in the personal information we have collected about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
8.5. Right to limit the use and disclosure of sensitive personal information.
The CCPA grants you the right to instruct a business to limit its use or disclosure of your sensitive personal information to that use which is necessary to perform the services reasonably expected by you in your request for those services and to perform certain activities permitted by the CCPA. Please note that we do not use or disclose sensitive personal data for any purposes other than those necessary to provide you with our services or as permitted by the CCPA.
8.6. Right to remain non-discriminated
SCALIBIT shall not discriminate against a consumer because the latter exercised any of the consumer’s rights under the CCPA, including, but not limited to, by:
-
Denying any services to the consumer;
-
Charging different prices or rates for services, including through the use of discounts or other benefits or imposing penalties;
-
Providing a different level or quality of services to the consumer;
-
Suggesting that the consumer will receive a different price or rate for services or a different level or quality of services.
9. Exercising Your Rights
If you wish to exercise any of your rights under the CCPA, please submit your request to the following email address: privacy@scalibit.com.
You can exercise any of your rights by submitting a request to the email address specified in the “Contact information” section of this Notice. We will review and address your request(s) within one month as of the date of receipt. Please note that if your request is particularly complex or you have made a number of requests, it may take us longer than a month to respond to you. In this case, we will notify you and keep you updated. Please note that we may ask you to provide us with additional information necessary to verify your identity prior to our response. However, in certain circumstances such as to comply with the applicable legislation, we may be unable to honour your request, for which you will be duly notified.
In addition to the above rights, you can also access, correct, and delete certain personal data associated with your account through the “Owner Profile Details” Section in your Client Area.
As per the CCPA SCALIBIT shall take into consideration the following requirements when answering a consumer’s request:
-
The consumer shall place a verifiable consumer request. SCALIBIT is not obliged to respond to the request if it cannot verify that the consumer making the request is the consumer about whom SCALIBIT has collected information or is a person authorised by the consumer to act on consumer’s behalf;
-
The consumer may also designate an authorised agent to make a request on his/her behalf;
-
SCALIBIT shall respond to the request within 45 (forty-five) days of receiving it. The time period for response may be extended once by an additional 45 (forty-five) days when reasonably necessary, and upon notification to the consumer.
With respect to your right to know and data portability - SCALIBIT is obliged to provide the required information no more than twice in 12 (twelve) months. The provision of information by SCALIBIT is generally free of charge. The disclosure shall cover the 12-month period preceding the receipt of the verifiable consumer request and shall be made in writing and delivered through the consumer’s Client Area, if the consumer maintains an account with us, or by mail or electronically at the consumer’s option if the consumer does not maintain an account with us, in a readily useable format that allows the consumer to transmit this information from one entity to another without hindrance. SCALIBIT may require authentication of the consumer that is reasonable in light of the nature of the personal information requested, but shall not require the consumer to create an account in order to make a verifiable consumer request. If the consumer maintains an account with SCALIBIT, we may require the consumer to submit the request through its Client Area.
10. Contact Information
If you have additional questions regarding your rights under the CCPA, please refer to the SCALIBIT Privacy Notice and contact us at privacy@scalibit.com.
