United States Regional Privacy Notice

Your Consumer Request Rights Under U.S. Privacy Laws

Where applicable and subject to exceptions you, have the right to request:

1. that we disclose to you what Personal Information we collect, use, disclose, and sell, including the right to request that we provide to you the categories and specific pieces of Personal Information we have collected about you (“Right to Know”);
2. that we delete information we have collected from you.
3. that we correct inaccurate Personal Information we hold about you (“Right to Correct”);
4. to opt-out from the sharing of your Personal Information and Sensitive Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising) (“Right to Opt-Out of Sharing”);
5. to opt-out from the sale of their Personal Information and Sensitive Personal Information (“Right to Opt-Out of Sale”). To opt-out of cookies and other tracking technologies set by Granicus and its third party business partners that are potentially “sales” under the CPRA, open the Cookie Preference Center and Cookie Policy; and
6. that we limit the use or disclosure of your Sensitive Personal Information to the purposes set forth in the statute, including the use which is necessary and anticipated to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services (“Right to Limit the Use and Disclosure of Sensitive Personal Information”), Under the CPRA Regulations, a business must only provide the Right to Limit The Use and Disclosure of Sensitive Personal Information when such use does not fall within the list of exceptions outlined in CPRA § 7027, subsection (l). Granicus’ use and disclosure of Sensitive Personal Information falls within this list of exceptions and we therefore do not offer such opt-out right at this time.
7. California and Delaware law require to indicate whether we honor “Do Not Track” settings in your browser concerning targeted advertising. We adhere to the standards set out in this Privacy Notice and does not monitor or respond to Do Not Track browser requests.

Submitting a Request and Verification

In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it.

Before Granicus is able to respond to any request, we may ask to verify your identity by providing us with certain information or identification. In some instances, we may decline to honor your request. For example, we may decline to honor your request if we cannot verify your identity or confirm that the Personal Information that we maintain relates to you, or if we cannot verify that you have the authority to make a request on behalf of another individual. In other instances, we may decline to honor your request where an exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of another consumer or where the Personal Information that we maintain about you is not subject to the CCPA’s access or deletion rights, such as information relating to our employees and contractors that is used for our employment and vendor management purposes.

When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request. If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request. Pursuant to the CPRA, we will not require you to verify your identity, beyond asking for the information necessary to complete your request, when you exercise your Right to Opt-Out of Sharing, Right to Opt-Out of Sale, or Right to Limit the Use and Disclosure of Sensitive Personal Information.

Authorized Agents

If you are an authorized representative submitting a request on a user’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and needs to be clear about the permission granted. Alternatively, you may submit a copy of a power of attorney under Probate Code sections 4000-4465. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit a request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

California consumers have the right to not receive discriminatory treatment for exercising CCPA and CPRA rights. We will not discriminate against you for exercising your CCPA and CPRA rights.

Data Retention

Grancius will not retain Personal Information for longer than is reasonably necessary for each disclosed purpose outlined in this California Privacy Notice. We store personal information for as long as necessary for the purposes for which it was collected or which you subsequently authorize it and otherwise to carry out the purposes described in this Privacy Notice.

Users Younger than 16

Granicus does not knowingly collect or sell Personal Information of users younger than 16 years of age.