GOGETSSL PRIVACY NOTICE

  • Tuesday, 10th January, 2023
  • 10:23am

介绍

本 GoGetSSL® 隐私声明(“声明”)的目的是告知与 GoGetSSL® 共享个人信息的商业客户和其他个人(“您”或“您的”)的代表(“我们”,“我们的”)我们如何收集和处理个人信息以及您对与我们共享的个人信息可能拥有的权利。

对于中华人民共和国(“PRC”)和日本的居民,请参阅下面“ 其他特定司法管辖区信息”部分。

我们是谁

GoGetSSL® 是与 DigiCert Ireland Limited(DigiCert, Inc. 的子公司)有关联的网站(在此统称为“DigiCert”),由 DigiCert, Inc. 的子公司 Rapid Web Services, LLC 运营。DigiCert Ireland Limited 的主要地址为 Block 21, Beckett Way, Parkwest Business Park, Dublin 12, D12 C9YE, Ireland。

数据控制者信息

 · DigiCert, Inc. 将充当您与 GoGetSSL® 共享并由其处理的个人信息的数据控制者。DigiCert, Inc. 总部位于 2801 North Thanksgiving Way, Suite 500, Lehi, Utah 84043。

· 同样,GoGetSSL® 和我们尊贵的合作伙伴将作为联合控制者,负责处理从 GoGetSSL® 转移到我们尊贵的合作伙伴的个人信息,目的是为您提供您从我们尊贵的合作伙伴处请求或购买的证书服务和相关产品。我们鼓励您仔细阅读我们尊贵合作伙伴网站上发布的隐私政策,以了解他们的隐私和安全做法。

本隐私声明涵盖的内容

本通知适用于所有收集和处理您的个人信息的 DigiCert 员工、代理、网络、服务器、产品、网站、移动应用程序、在线服务、平台、设备和/或技术,这些 ...设备和/或技术收集和处理您与 GoGetSSL® 共享的个人信息。

处理目的

我们处理您的个人信息的目的是为您提供专家支持服务,并让您了解与数字证书和其他产品相关的供应商及其价格。有关更多信息,请参阅下文“ 我们如何使用您的信息”

处理的合法依据

我们仅在适用法律具有依据或理由的情况下处理您的个人信息。 

对于我们商业客户的代理和代表,我们根据为您所代表的客户提供服务的合法利益来处理您的个人信息,通过提供我们的商业客户所要求或购买的产品和/或服务,并执行处理您的个人信息所必需的服务。 

For other customers, as applicable and depending on your location and/or the service or product you have requested or purchased, we may process your personal information to take steps to enter a written agreement and/or fulfill our obligations under a written agreement with you.

Where required, we may also obtain your affirmative, express consent to process your personal information.

WHAT PERSONAL INFORMATION DO WE COLLECT?

During the previous 12-months and/or while you engage GoGetSSL® services, we collect and/or process the following personal information, respectively: 

 

·        Business Contact Information

If as part of your application process you indicated that you are a business customer, we collect your first and last name, identity code, and business email address, business address, telephone and fax number(s), IP address, usernames and related account information, job title, employer, and certain payment details.

·        Residential Contact Information

If as part of your application you indicated that you are a private customer, we collect your first and last name, identity code, personal email address, residential address, telephone and fax number(s), IP address, usernames and related account information, job title, employer, and certain payment details.

 

COOKIES & TRACKING TECHNOLOGIES

Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser. Cookies enable the site's or service provider's systems to recognize your browser and capture and remember certain information.

We use cookies to help us remember and process the items in your shopping cart and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

 

DO WE COLLECT VALIDATION OR BIOMETRIC INFORMATION?

 

·         Validation data:  GoGetSSL® sites do not collect or process validation data.  Instead, validation data will be collected and processed by the certificate authority that owns the product-brand that you purchase.

 

·         Biometric data:  GoGetSSL® sites do not collect or process biometric data.  However, for our European customers and potentially customers in other areas, if you engage certificate services powered by DigiCert and choose to use our Remote Identity Verification (“RIV”) process, then DigiCert collects biometric data as part of that process.  For our European customers, please note that biometric data is processed and stored in the Netherlands and Switzerland.  For more information on DigiCert’s privacy practices related to RIV, please see DigiCert’s Remote Identity Verification Privacy Notice here.

 

HOW DO WE USE YOUR INFORMATION?

We use your personal information to provide certificate services and related products that you have requested.  We may also use your personal information for the following purposes:

·         Providing products and services:  we use your information to provide you with our products and services you have requested or purchased.

·         Improving our website:  we continually improve our website based on your information and feedback.

·         Providing better customer service:  your information helps us better respond to your requests and needs.

·         Processing transactions:  your information helps us to process your orders and expedite certificate issuance.

·         Promotional communications:  we may also use your personal information to communicate promotional materials.  Where required, we obtain your consent to send you promotional communications.

·         Security:  we use your information to detect, prevent, and address technical issues and to monitor the usage of our service.

·         Facilitating live chat:  provide live chat services in response to sales and technical questions.

CATEGORIES OF SOURCES FROM WHICH WE COLLECT YOUR INFORMATION:

 As part of our products and/or services we provide, we may collect personal information from you, or through our website, email, live chat, blog or for our customers who have an account with us, through the customer account. 

DISCLOSURES TO THIRD PARTIES

Depending on the products and/or services you have requested or purchased, during the previous 12 months and/or while you engage GoGetSSL® services, we may disclose your personal information to our valued partners, to our service providers (not including services from DigiCert, which is already the controller of data you provide us), and to other third parties who process personal information to provide you the services that you have requested or purchased.  

We do not sell your data to third parties, and our third parties to whom we do disclose your information are subject to requirements that are at least as restrictive as this Notice.  Where required by applicable law, such third parties are bound by data processing agreements that restrict usage of your information to fulfilling one or more of purposes outlined below:

Disclosures to DigiCert and Valued Partners

·         For our customers who choose to engage the services provided by our valued partners, we will share only the information necessary to facilitate the transaction with DigiCert or our valued partner.    

Disclosures to Service Providers

·         IT service providers:  We may share your information with third parties that provide us with SaaS services, including customer relationship management and other database and application software.

·         Analytics/optimization firms:  We may share your information with analytics and search engine providers that help us improve and optimize our networks, products, websites, mobile applications, platforms, devices, and/or other online services and technology.

·         Payment processors:  We may share your information with payment processors that help process your credit card payments.  We follow Payment Card Industry Security Standards (PCI-DSS) when handling credit card information.

·         External auditors:  We may share your information with external auditors that audit our accounting practices and financial statements, information security practices, compliance programs, and other essential parts of our global infrastructure.  Such audits evaluate, confirm, and verify processes related to the quality and security of products and services to ensure GoGetSSL® management systems have been effectively implemented.  As part of the audit process, auditors may contact you to verify information related to the services you have purchased.

Disclosures to Other Third Parties

·         Marketing and advertising Firms:  We may share your information with marketing firms, advertisers, and advertising networks that send you advertisements across our platforms about our products and services.

·         Blogs:  Our websites may offer publicly accessible blogs or community forums.  Any information you provide in our blogs can be read, collected, and used by others who access them.  To request removal of your personal information from our blog or community forums, please contact us at [email protected].  In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

·         Law enforcement:  When required by formal judicial or other lawful and mandatory process, we may share your personal information with law enforcement agencies, public authorities, other government agencies, or other parties who are able to obtain a lawful order compelling our production of such information.

We accept liability for all onward transfers of personal data to third parties.

 INFORMATION SECURITY

The security of your personal information is of the utmost importance to us.  We have implemented and maintain internal technical and organizational measures in accordance with industry best practices and applicable data protection laws. 

Among other security measures, we have industry-standard encryption for data at rest and data in transit.  While our security practices align with commercially reasonable protocols, we cannot guarantee absolute security of your personal information.  For questions about our security practices, please contact [email protected].

 WHERE DO WE STORE YOUR INFORMATION AND FOR HOW LONG?

For our European customers, GoGetSSL® stores your information in our data centers in Netherlands and Switzerland.  Certain payment information related to your transaction may also be transferred to and stored in the United States.  For more information on where we process and store your information, please visit DigiCert’s Privacy Center.

 We retain personal information only for legitimate business purposes and as long as necessary to fulfill our commitment to provide products and/or services to you (or the business customer you represent). 

 Third-Party Sub-Processors

 We maintain a list of third-party processors, some of which may process your personal information on our behalf for the purpose of providing you with the products or services you have requested.  You may view our list of sub-processors here.

YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL INFORMATION

You may have certain rights regarding your personal information.  You may submit a request to access your information, request portability, request deletion, restrict processing of your personal information, request correction, and, in certain cases, you may object to us processing your personal information and submit a request to withdraw processing.   

Exercising Your Rights

You may exercise your rights with respect to your personal information by emailing our data privacy officer at [email protected].

Verification of Your Identity

Prior to responding to a request listed above, we will ask you to answer a few questions about yourself to help us verify your identity.  In the event more documentation is necessary to verify your identity, we will notify you.

What if We Cannot Verify Your Identity?

If we can’t verify your identity, we will notify you.  Any request may be denied if we have reason to believe the request is fraudulent.

 THE EU-U.S. DATA PRIVACY FRAMEWORK, UK EXTENSION, AND SWISS-US DATA PRIVACY FRAMEWORK

Digicert, Inc. (“DigiCert”) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  DigiCert has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  DigiCert has certified to the U.S. Department of Commerce that they adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view DigiCert’s certification, please visit https://www.dataprivacyframework.gov/.

DigiCert is responsible for the processing of personal data they receive, under each Data Privacy Framework, and subsequent transfers to a third party acting as an agent on their behalf.  Both DigiCert comply with the Data Privacy Framework Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to the Data Privacy Framework, DigiCert is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.  In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

OTHER JURISDICTION-SPECIFIC INFORMATION

 

Country

Privacy Addenda

China (PRC) Residents

Please see the China Privacy Addendum to this Notice.

 

Japan Residents

Please see our Japan Privacy Addendum to this Notice.

 

All Other Countries

 

Please see our DigiCert Privacy Center to see if we have information regarding the privacy laws in your country.

 

FILING A COMPLAINT

For GoGetSSL® customers, you may file a complaint regarding our privacy practices by emailing [email protected].  Before we respond to your complaint, we will ask you to verify your identity.

根据欧盟-美国 DPF、英国对欧盟-美国 DPF 的扩展以及瑞士-美国 DPF,DigiCert 承诺解决与我们收集和使用您的个人数据有关的 DPF 原则相关投诉。如果欧盟、英国和瑞士个人对我们根据欧盟-美国 DPF、英国对欧盟-美国 DPF 的扩展以及瑞士-美国 DPF 处理收到的个人数据有任何疑问或投诉,请首先通过 [email protected]联系 DigiCert 。   

如果您对隐私或数据使用存在未解决的疑虑,而我们未能令人满意地解决,请联系我们位于美国的第三方争议解决提供商(免费):https:  //feedback-form.truste.com/watchdog/request

在某些情况下,当其他争议解决程序已用尽时,您可能有权援引具有约束力的仲裁,更详细的信息请参阅数据隐私框架网站 https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf 

儿童隐私

GoGetSSL® 网站、平台和应用程序 不会故意收集 18 岁以下儿童的个人信息,也不针对儿童。如果您认为我们可能拥有 18 岁以下儿童的个人信息,请联系 GoGetSSL®:  [email protected]。  

适用性

我们的 产品和服务的使用条款和条件 可能会取代本通知中有关使用我们的产品和服务的条款。

本通知的变更

如果我们决定更改本声明,我们将在此页面上发布这些更改。对于本声明的重大变更,我们将向相关方发送电子邮件通知。

联系我们

如果对本隐私政策或我们收集的有关您的数据有任何疑问,请通过 [email protected] 或以下方式与我们联系:

DigiCert 数据隐私官

DigiCert 公司

收件人:数据隐私官 Aaron Olsen

北感恩路 2801 号,500 室

美国犹他州莱希 84043

免费电话:1-800-896-7973(美国和加拿大)

直拨电话:1-801-701-9600

免费传真电话:1-866-842-0223(美国和加拿大)

传真直达:1-801-705-0481

[email protected]


欧洲数据保护联络

DigiCert 爱尔兰有限公司

收件人:欧洲数据保护联络人 Richard Hall

贝克特路 21 号

帕克西商业园

爱尔兰都柏林 12

电话:+353 1803 5400

传真:+353 1861 7990

[email protected]


英国代表

DigiCert英国有限公司

收件人:英国代表

转交:Worldwide Corporate Advisors Llp

150 少数民族

伦敦 EC3N 1LS 英国

« Back