Effective Date: May 22, 2018
Please contact us if you have any questions or comments about our privacy practices or this Privacy Statement. You can reach us online at helloblackbox.com, or by mail at:
43 West 23rd Street
New York, NY 10010
3. Types of Personal Information We Collect
BlackBox collects the following types of information about you (collectively, “Personal Information”):
4. Mechanisms for Collection of Personal Information
BlackBox collects Personal Information (i) upon a User’s creation of a User Account, (ii) upon logging into the Site, (iii) upon interaction on the Site, including without limitation when you subscribe for services by means of the Site, and (iv) when you communicate with BlackBox.
5. Purpose of Collection and Use of Personal Information
BlackBox may use Personal Information to:
6. Disclosure of Personal Information
We may disclose your Personal Information to:
7. Cookies and Related Technologies
You are free to decline our cookies if your browser or browser add-on permits, but doing so may interfere with your use of our Site. You should refer to the help sections of your browser, browser extensions, or installed applications for instructions on blocking, deleting, or disabling cookies.
8. Email Policies
BlackBox reserves the right to send you e-mail relating to your User Account, and to the BlackBox Service. You agree to receive such emails, but may opt out by emailing firstname.lastname@example.org.
9. No Responsibility for Privacy Practices of Third Parties
10. Interactions With Others
The Site may contain areas where you may be able to publicly post information, communicate with others such as by discussion boards or blogs, review Providers, and submit media content. Such use is subject to our User Terms, and may be viewed by the public at large. Any information, including Personal Information, which you post on such areas of the Site, will be public, and, therefore, anyone who accesses such postings will have the ability to read, collect and further disseminate such information. Transaction Information will be shared only with Providers whom you select to work with via the Site.
11. Accessing and Correcting Personal Information
You may correct or update certain of your Personal Information via your “My Account” screens on the Site.
You may close an account, but BlackBox will nevertheless retain your Personal Information so as to protect the business interests of BlackBox, BlackBox Affiliates, Customers, Providers and other Users. Those interests include the completion of transactions, maintaining records for financial reporting purposes, complying with our legal obligations, resolving disputes, and enforcing agreements.
13. Notice to Residents of Countries outside the United States of America
14. California Privacy Rights
Pursuant to Section 1798.83 of the California Civil Code, residents of California can obtain certain information about the types of Personal Information that companies with whom they have an established business relationship have shared with third parties for direct marketing purposes during the proceeding calendar year. In particular, the law provides that companies must inform Users about the categories of Personal Information that have been shared with third parties, the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. To request a copy of the information disclosure provided by BlackBox pursuant to Section 1798.83 of the California Civil Code, please contact us via email to email@example.com, or by writing us at the following address:
43 West 23rd Street
New York, NY 10010
15. Special Note for EU Individuals
The information we collect through the website is controlled by Blackbox, which is headquartered in the United States at 43 West 23rd Street, New York, NY 10010. As described above, we also act as a service provider (or data processor) on behalf of and in accordance with our Customer’s instructions. When we act as a service provider, if you have questions about the processing of your information or to exercise any applicable legal rights, please contact us via the means to do so provided below.
The legal bases for using your personal information
We collect, use, and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may be because:
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Your legal rights
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information:
Right to access, correct, and delete your personal information: You have the right to request access to the personal information that we hold about you and:(i) the source of your personal information; (ii) the purposes, legal basis and methods of processing; (iii) the data controller’s identity; and (iv) the entities or categories of entities to whom your personal information may be transferred.
You also have the right to request that we delete your information.
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.
Right to restrict the processing of your personal information: You have the right to restrict the use of your personal information when (i) you contest the accuracy of the data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal information for the relevant purposes, but we require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests verification as to whether we have a compelling interest to continue to use your data.
We can continue to use your personal information following a request for restriction, where:
Right to data portability: To the extent that we process your information (i) based on your consent or under a contract; and (ii) through automated means, you have the right to receive such personal information in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller.
Right to object to the processing of your personal information: You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction: You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the EEA.
Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information.
We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.
How to Exercise Your Rights: If you would like to exercise any of the rights described above, please send us a request at 43 West 23rd Street, New York, NY 10010. In your message, please indicate the right you would like to exercise and the information that you would like to access, review, correct, or delete.
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Cross-border Transfer of Information
Blackbox generally maintains servers and systems in the United States hosted by third party service providers. We also may subcontract the processing of your data to, or otherwise share your data with, other third parties in the United States or countries other than your country of residence. As a result, where the personal information that we collect through or in connection with our website is transferred to and processed in the United States or anywhere else outside the European Economic Area (EEA) for the purposes described above, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification mechanisms such as the EU - US Privacy Shield. You may have a right to details of the mechanisms under which your data is transferred outside the EEA.