Last revised on December 23th, 2021, effective as of January 10th, 2022
The “Company”, “Databox”, “us”, “we” or “our” refers to Databox Inc., the owner and sponsor of the website and web applications, is a company incorporated in the State of California, USA.
Information you provide to us – You provide us information about yourself, such as your name and email address, when you register with us. If you correspond with us by email, by phone or via the website, we may retain the content of your messages, your email address or phone number and our responses.
Registration on our website – Individuals accessing our web applications are asked to register (sign up for a free/paid account) via our website. When you register, you will be asked to provide some limited personal data: your name, company affiliation and company email address. Also required is a unique password to access your account. (Please do not share your password with anyone.)
When you register and set up an account, and upon accessing our web applications, you will be asked to confirm your associated Profile Settings, which includes such information as how you wish to be contacted.
We do not collect “sensitive” or “special” categories of personal data.
User content – There may be public areas of the website or web applications where users can post messages, participate in public bulletin boards. Rules for posting user content is governed by our Terms of Service.
Information you provide automatically – When you access the website, we automatically collect certain personal and other information regarding, for example, the device you are using and how you interact with the website and web applications. Collected information may specifically include: (1) the browser types and versions used, (2) the operating system used by your device, (3) the website from which access our website (so-called referrers), (4) the sub-websites, (5) the date and time (so-called timestamp) of access to the Internet site, and (6) the Internet protocol address (IP address) associated with your device. We will store this information in server log files. We also automatically collect information about your use of the website and web applications, such as web requests, number of clicks, domain names, pages viewed and the amount of time spent on particular pages.
This information is needed to (1) deliver the content of our website and web applications correctly, (2) optimize the content of our website and web applications, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.
In addition, tracking information is collected as you navigate through our website or web applications. To help us serve your needs better, we use “cookies” to store and sometimes track user information. A cookie is a small amount of data that is sent to your browser from a web server and stored on your device’s hard drive. Cookies can be disabled or controlled by setting a preference within your browser. You may also be able to delete or opt out of cookies. Please see our Cookies Policy for more information.
In addition, log file information is automatically reported by your browser each time you access a web page. When you register with or view our website or web applications, our servers automatically record certain information that your browser sends whenever you visit any website.
Databox also analyzes anonymously collected data and statistics to improve your experience and to ensure and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by users.
Online Newsletter – The Databox newsletter, which is distributed via email, contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Databox may see if and when an email was opened by the recipient and which links in the email were called up (clicked on).
Company Information – You may provide other information about you and your company, such as your role, industry, company size, annual revenue, etc. Such information is securely stored and might be used for benchmarking and other targeting purposes. Databox may collect such information with the help of third-party sub-processors, to ensure a better experience and profiling. You may update or correct such information, at any time, by logging in to your account.
This personal data will not be passed on to third parties. You can elect to opt out of receiving our online newsletter at any time by clicking on the “Unsubscribe” link at the bottom of our emails or by contacting us directly at firstname.lastname@example.org.
Databox may use your data to calculate and provide benchmarking services. The data collected for participation in the benchmarks ecosystem shall, at any time, be anonymized and removed from any personal or sensitive information.
In addition, to ensure anonymity, benchmarks shall be calculated and available only, if Databox has at least 10 different sources of data within the selected cohort.
You may, at any time, decline to participate in benchmarks, by logging in to your account and opting-out.
In general, we use the personal data and other information collected to provide you with the best possible experience when using the Databox website and web applications. This information also helps us understand who uses our products, how to improve our services, to provide our help desk services, to contact you for customer service and billing purposes, and to facilitate the delivery of Databox marketing information about our products and services.
We use the personal data you submit to operate, maintain, and provide to you the features and functionality of our products and services. Any personal data or user content that you voluntarily disclose by posting to Databox may become available to the other users in your account. If you remove user content, copies may remain viewable in cached and archived pages, or if other users have copied or stored your user content.
We will use your registered email address to send you Databox-related notices about products or services you have requested, the status of your account or other administrative or technical information, including any notices required by law. We may also use your email address to send you other messages, such as newsletters, changes to features within Databox, or special offers. If you do not want to receive such email messages, you may opt-out at any time from your Profile Settings or by clicking on the “Unsubscribe” link at the bottom of our email. You can also opt out of receiving our marketing messages by contacting us at email@example.com. We do not share your email or other personal data with third parties for their marketing activities. We also do not implement targeted advertising, whether on our website or third-party websites.
As you use our website and web applications, you may interact with our business partners. In order to provide you with additional support, your name and email address may be shared with partners.
As we develop our business, we may buy or sell assets or business offerings. Customer and visitor information is generally one of the transferred business assets in these types of transactions. We may also transfer such information in the course of corporate divestitures, mergers, or dissolution.
Databox may disclose personal data where required to do so by law or subpoena or if we believe that such action is necessary to conform to the law, comply with legal process served on us or our affiliates, or investigate, prevent, or take action regarding suspected or actual illegal activities; to enforce our Terms of Service, take precautions against liability, to investigate and defend ourselves against any third-party claims or allegations, to assist government enforcement agencies, or to protect the security or integrity of our site; and to exercise or protect the rights, property, or personal safety of Databox, our users or others.
In addition, we may perform statistical analysis of customer usage in order to measure interest in, and use of, the various parts of the Website, and may share that information in the course of our business, but such shared information shall be in anonymous and/or aggregated form only (statistics, etc.), and will contain no personal data.
Databox does not rent or sell your personal data to others.
California “Shine The Light” – As provided by California Civil Code 1798.83, if you are a California resident, you have the right to receive (a) information identifying any third party company(ies) to whom we have disclosed your personal data to in the past year; and (b) a description of the categories of Personal data disclosed. To obtain such information, please email your request at firstname.lastname@example.org with “California Privacy Rights Request” in the subject line.
California Consumer Privacy Act – In providing its services to its clients, Databox may be considered a “service provider” for purposes of the California Consumer Privacy Act (“CCPA”). Databox may also use the services of third parties that may also be considered “service providers” under the CCPA. To the extent requested by our clients, we will assist with responding to requests from California consumers regarding their privacy rights under the CCPA. If we receive a request from a California consumer to know or to delete what personal data we collect on behalf of our client for which we perform services, we will direct the consumer to submit the request directly to our client. If possible, we will provide the consumer with contact information for the client. You can email us at email@example.com for more information regarding these rights.
We do not sell your personal data to third parties for any purpose.
Databox and our website and web applications are located and hosted in the United States and governed by US law. If you are outside the United States when you visit the website, web application or engage in communications with us via mail, e-mail or telephone, please be aware that your personal data may be transferred to, stored and processed in the United States where our servers are located. Any information you provide to us, or that we collect through your use of the websites or web applications will be stored, processed, and transferred within or to the United States. Please be aware that the United States and jurisdictions other than the one in which you are located may not provide the same level of data protection as considered adequate in your country. Note also that your personal data may be available to the US Government or its agencies under legal process in the United States.
The Legal Basis for Using EEA and UK Personal data
For residents of the European Economic Area (EEA) and United Kingdom (UK), we advise that your personal data will be transferred to and processed in the United States, which has data protection laws that are different from those in your country and may not be as protective. The United States has not sought or received a finding of “adequacy” from the European Union under Article 45 of the General Data Protection Regulation (“GDPR”). Our legal basis for collecting and using your personal data is to do so with your consent; where we need the personal data for performance of a contract or requested service, including to provide you with our Newsletter, or where the collection and use is in our or another’s legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect the personal data in question. If we collected your personal data with your consent, you may withdraw your consent at any time.
Our retention of your personal data and any subsequent communications are based on our legitimate interest in providing you with new and potentially relevant materials based on your geography, role, or company. As always, you can elect to opt out from receiving such future communications.
To the extent that we transfer Personal data from the EEA, to a jurisdiction outside the EEA that has not been adduced by the European Commission as providing adequate data protections (such as the United States), we will ensure that such personal data is safeguarded through appropriate contractual terms or other approved mechanisms.
Rights for EEA and UK Residents
In addition, if you are a resident of the EEA or United Kingdom you have the right to:
Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
If we ask you to provide personal data to us to comply with a legal requirement or enter into a contract, we will inform you of this and let you know whether providing us with your personal data is required and if not, the consequences of not sharing your personal data with us.
Similarly, if we collect and use your personal data in reliance on our or a third party’s legitimate interests and those interests are not already described above, we will let you know what those legitimate interests are.
To withdraw consent or exercise these rights, please contact us via email at firstname.lastname@example.org.
If you are not satisfied with our response, or believe we are processing your personal data in violation of the law, you have the right to lodge a complaint with the Supervisory Authority (also known as Data Protection Authority) or other appropriate governmental authority in your EEA Member State. You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en.
Personal data we collect is securely stored within our database on our own servers or databases hosted by cloud provider in secured environments. We use standard, industry-wide, commercially reasonable security practices such as encryption, firewalls and SSL (Secure Socket Layers – 256 bit) for protecting your information. A further description of our implemented security measures appears in our Security Policy.
We cannot, however, ensure or warrant the security of any information you transmit to Databox and you do so at your own risk. Once we receive your transmission of information, Databox makes commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Please do not provide your account password to another person. We cannot be responsible for a data breach or other incident if a password is used by unauthorized persons.
We will keep your personal data in active files or systems as long as needed to meet the purposes for which it was collected, to provide the services or products you requested, or as otherwise may be required by law.
Protecting the privacy of young children is especially important. Databox and its products and services are intended for adults 18 years or older. Since our content and services are not directed towards kids, children under 16 are not allowed to register with our website or to participate in public posting areas on our website. If you are under 16, please do not send any information about yourself to us, including your name, address, telephone number, or email address. No one under age 16 is allowed to provide any personal data to or on Databox. If we discover that we have collected personal data from a child under the age of 16 without parental consent, Databox will delete that information as soon as possible, but no later than in 30 days.
Your user content is kept private in your network. Databox does not monitor the user content you post on the website. We do not have administrative tools to view our users’ messages, and access to the database is only granted to our technicians on a case-by-case basis to troubleshoot specific technical issues, or as may be required by law. The rules for posting user content are in our Terms of Service.
We will reveal a user’s personal data without his/her prior permission only when we have reason to believe that the disclosure of this information is required to establish the identity of, to contact or to initiate legal proceedings against a person or persons who are suspected of infringing rights or property belonging to Databox or to others who could be harmed by the user’s activities or of persons who could (deliberately or otherwise) transgress upon these rights and property. We also may disclose personal data when we have good reason to believe that this is legally required.
You may update or correct your account information and email preferences at any time by logging in to your account. To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your Profile Settings or making corrections. You are responsible for maintaining the secrecy of your unique password and account information at all times.
You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your information may exist in a non-erasable form that will be difficult or impossible for us to locate. Promptly after receiving your request, all personal data stored in databases we actively use, and other readily searchable media will be updated, corrected, changed or deleted, as appropriate, as soon as and to the extent reasonably and technically practicable.
You may, of course, decline to submit your personal data through Databox, in which case Databox may not be able to provide certain services to you.
You should be aware that if you voluntarily disclose personal data in public areas, on public bulletin boards or within the website, that information might be collected and disseminated by third parties, and result in, among other things, unsolicited inquiries, messages, and offers from third-parties. Please understand that any information that is disclosed in these areas becomes public information and this third-party conduct is out of the control of Databox.
Please also be aware that if you voluntarily disclose personal data in your account, all users who are authorized to access such areas (users in your account) will have access to such personal data, and that information might be collected and disseminated by those users, and may result in, among other things, unsolicited inquiries, messages, and offers from such users. Databox urges you to exercise caution when deciding to disclose any personal data on the web application or website.
The website or web applications may also contain links to other websites owned or controlled by third parties. We are not responsible for the privacy practices or the content of such third-party websites. Before accessing any website, it is suggested you review the applicable privacy and other policies.
However, we will not make changes that result in significant additional uses or disclosures of your personal data without notifying you of such changes via email at least 14 days before such changes would apply.
By email: email@example.com
By postal mail or courier:
6 Liberty Square
Boston, MA 02109
Latest from our blog
Popular Blog Posts
POPULAR DASHBOARD EXAMPLES & TEMPLATES