Ping Website Privacy Notice

Updated: October 2018

 

Ping Identity Corporation (“Ping Identity,” “we,” “us,” “our”) values privacy, and we want you (“user,” “you”) to have the information you need to make your own decisions about your privacy.

 

This Privacy Notice (“Notice”) describes how we collect, use, share, and protect information about you, as well as the choices you may make about how we use this information. This Notice only applies to information that can be used to identify an individual (“Personal Information”) and which we collect through various channels, both online and offline, in the context of our sales and marketing activities, our hiring activities, and our service offerings “(Service Offerings”). This Notice also tells you how we can verify the accuracy of your Personal Information and how you can request that we delete or update it.

 

Please note that the website, https://www.pingidentity.com (referred to herein as the “site”), contains links to other sites. Unless specifically stated otherwise, the collection and use of your Personal Information at other sites, linked to https://www.pingidentity.com, are not governed by this Notice. In addition, the site is not intended for children under the age of 13, and Ping Identity does not knowingly collect or use Personal Information from children under the age of 13.

 

Please read the following to learn more about our privacy practices before providing us with any Personal Information. If you have questions about this Notice, please e-mail us at privacy@pingidentity.com.


TYPES OF PERSONAL INFORMATION WE COLLECT

 

1.  Ping Identity Website

 

There are three manners in which we collect your Personal Information for uses related to our marketing activities.

 

Information You Provide

 

When you access, use and/or interact with us through a channel (detailed below), including in connection with activities that require sign-in or subscription, we collect business information and Personal Information you voluntarily provide us. This includes but is not limited to:

 

  • information about you in the context of your professional activities, such as your name, professional email address, and professional telephone number;
  • information about your company such as the name, size and location, as well as your role within the company; and
  • your login credentials for the site.

 

Providing this information is completely voluntary. Though you will still have access, for example, to the site without providing requested information, you may not be able to use certain services or features that require such information to function.

 

Interactions through channels include, but are not limited to:

 

  • our site;
  • completion and submission of online (registration) forms (such as events, webinars, webinar recordings, asset downloads) as part of joint marketing activities with business partners;
  • completion of lead sheets or other similar forms at events (either in paper format or electronically); handing over your business card or badge attendance at a Ping Identity hosted event; or visiting a Ping Identity booth at a trade show or industry or association event;
  • sales inquiries which you initiate (online chat, or dedicated online “contact-us” form);
  • tele-sales (cold or warm calls) and information you provide during phone calls with sales representatives and tele-sales representatives;
  • subscription to marketing communications and/or submission of marketing preference in the Ping Identity Preference Center;
  • completion of questionnaires and surveys;
  • participation in sweepstakes and contests; and
  • other conversation data triggered by the above direct interactions (such as follow-up calls and emails, thank-you emails, confirmation emails and the like).

 

Automatically Collected Information

 

We may use cookies and other technologies to collect information about you when you visit our site or use our website-based services. This may include information such as your IP address, device type, unique device identification numbers, browser-type, broad geographic location and other technical information. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered Personal Information under applicable data protection laws.

 

Collecting this information enables us to better understand the visitors who come to our site, where they come from, and what content on our site is of interest to them.  We use this information for our internal analytics purposes and to improve the quality and relevance of our site to our visitors.

 

For more information about cookies and other technologies we may use to collect information about you, please see the separate Cookie Policy. This Notice does not cover the use of cookies by other sites, of which we do not have access or control.

 

Information Collected Through Third Party Sources

 

We also obtain Personal Information about you from third party sources as permitted by applicable law, such as:

 

  • information collected by our marketing service providers on our behalf, which are a variety of marketing lead generation and content syndication service providers, marketing opt-out lists and/or professional event organizers;
  • information shared with us by our business partners as part of their referral activities; and
  • public databases or other data you may have made publicly available, such as social media posts on professional networks and social media platforms.

 

2.  Ping Identity Hiring Activities

 

As part of our hiring activities, we collect and maintain different types of Personal information about you in accordance with applicable law. Some examples include:

 

  • Name, gender, home address and telephone number, date of birth, marital status, and employee identification number.
  • Residency and work permit status, military status, nationality and passport information.
  • Social security or other taxpayer/government identification number.
  • Payroll information, banking details.
  • Wage and benefit information.
  • Retirement account information.
  • Sick pay, Paid Time Off (“ PTO”), retirement accounts, pensions, insurance and other benefits information (including the gender, age, nationality and passport information for any spouse, minor children or other eligible dependents and beneficiaries).
  • Information from interviews and phone-screenings you may have had, if any.
  • Date of hire, date(s) of promotions(s), work history, technical skills, educational background, professional certifications and registrations, language capabilities, and training records.
  • Beneficiary and emergency contact information.
  • Results of credit and criminal background checks, drug and alcohol testing, health certifications, driver’s license number, vehicle registration and driving history.
  • Information required for us to comply with the requests and directions of law enforcement authorities or court orders (e.g., child support and debt payment information).
  • Acknowledgements regarding our policies, including employee handbooks, ethics and/or conflicts of interest policies and computer and other corporate resource usage policies.
  • Information captured on security systems, including Closed Circuit Television (“CCTV”) and key card entry systems.
  • Voicemails, e-mails, correspondence, documents, and other work product and communications created, stored or transmitted using our networks, applications, devices, computers or communications equipment.
  • Letters of offer and acceptance of employment.
  • Resume or CV, cover letter, previous and/or relevant work experience or other experience, education, transcripts, or other information you provide to us in support of the application and/or recruitment process.

 

Generally, we collect employee-related Personal Information directly from you in circumstances where you provide us with such information (e.g., during the onboarding process, signing up for direct deposit, enrolling in benefits or services). However, in some instances, the Personal Information wecollect has been inferred about you based on other information you provide us, through your interactions with us, or from third parties. When we collect your Personal Information from third parties it is either because you have given us express permission to do so, your permission was implied by your actions (e.g., your use of a third-party employee service made available to you by us), or because you provided explicit or implicit permission to the third party to provide the Personal Information to us.

 

We reserve the right to monitor the use of our premises, equipment, devices, computers, network, applications, software, and similar assets and resources. In the event such monitoring occurs, it may result in the collection of Personal Information about you.

 

3.  Ping Identity Service Offerings

 

Ping Identity facilitates the transfer of information for our customers in connection with our Service Offerings. Ping Identity has no direct relationship with the individual users/employees of our customers, and the type of information that is processed by Ping Identity’s Service Offering is at the sole discretion of our customers. Such information may include Personal Information of users/employees.

 

Ping Identity’s Service Offerings may use cookies and other technologies (for more information please see our Cookie Policy.) Furthermore, our Service Offerings may also collect certain Personal Information such as your IP address, device type, unique device identification numbers, browser-type, broad geographic location and other technical information to allow functionality defined by our customers. In some countries, including countries in the EEA, this information may be considered Personal Information. Lastly, in the event a customer contacts our support organization, we may collect certain Personal Information in connection with troubleshooting activities.

 


HOW WE USE PERSONAL INFORMATION

 

We will only use and share your Personal Information as described in this Notice. The Personal Information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the time of request.

 

1.  The Basis On Which We Collect Personal Information

 

If you are a website visitor, candidate, employee or customer from the EEA, our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect and use it.  

 

We collect Personal Information from you only (i) where we need the Personal Information to perform a contract with you (to provide the marketing products and services you use, as part of our employment relationship, etc.), (ii) where the processing is in our legitimate interests and not overridden by your rights (when we fulfill your inquiry, for example), or (iii) where we have your consent to do so.  In some cases, we may also have a legal obligation to collect Personal Information from you or may otherwise need the Personal Information to protect your vital interests or those of another person.

 

If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not (as well as of the possible consequences if you do not provide your Personal Information).  

 

If we collect and use your Personal Information in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our platform and communicate with you as necessary to provide our marketing products and services and for our legitimate commercial interest - for example, to respond to your queries, improve our platform, undertake marketing, or for the purpose of detecting or preventing illegal activities.  We may have other legitimate interests and, if appropriate, we will make clear to you at the relevant time what those legitimate interests are.

 

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Information, please contact us via privacy@pingidentity.com.

 

2. Purposes of Processing

 

We use and process Personal Information for the purposes set forth herein:

 

  • To provide the marketing related products, as requested:
    • If you engage in marketing activities with us, we will use the Personal Information which you provide us to allow access to the requested marketing products, such as registration to an event or access to webinars, newsletters or other marketing assets. We may also engage with you through other channels such as chat-functionalities or other web appearances.
    • If you engage in marketing activities with us, we will also confirm your preferences via email or through our preference center and send you information about new products, events and services. For example, when you have registered to attend a Ping Identity event, even if you have unsubscribed from our email marketing and promotional messages, we may still send you emails about related items for this specific event.

     

  • To operate and improve our marketing channels and services, to keep you up to date on such channels and services, and to follow-up on a referral or request your feedback:
    • Questionnaires and surveys: we may invite you to participate in questionnaires and surveys. If Personal Information is included in questionnaires and surveys, we may use such Personal Information for marketing research and to improve our products and services.
    • Recording of calls and chats for quality improvement purposes: in case of telephone calls or chat sessions, we may record such calls (after informing you accordingly during that call and before the recording starts) or chat sessions to improve the quality of our services.
    • To keep you up-to-date and request feedback: within an existing business relationship between you and Ping Identity, we may inform you, where permitted in accordance with applicable laws, about our marketing products or services (including webinars, seminars, conferences or events) which are similar or relate to such products and services you have already engaged in with Ping Identity. In addition, when you have attended a webinar, seminar or event of Ping Identity, we may contact you for feedback regarding the improvement of the relevant webinar, seminar, event, good or service.

     

  • To provide updates about Ping Identity’s marketing products and services:
    • We use your Personal Information collected through marketing channels to (i) keep you up to date on the latest product announcements, product updates, unique offers, and other information regarding Ping Identity products and services (including marketing-related information or newsletters) as well as events of Ping Identity and partners’ offer and (ii) display relevant content on our channels and provide a personalized experience and implement the preferences you request.

     

  • To accommodate your special requirements:
    • In connection with the registration for and providing access to an event, conference or seminar we may ask for information about your health for the purpose of identifying and being considerate of individuals with disabilities or special dietary requirements throughout the event. Any such use of information is based on your consent which shall be collected upon your registration to the event, conference or seminar.

     

  • For our hiring activities and to execute your employment contract with us and any related services and benefits:
    • As part of these activities, we might process your Personal Information to manage all aspects of your employment relationship with us, including, but not limited to the establishment, maintenance, and termination of employment relationships. Examples of activities related to this include: determining eligibility for initial employment, including the verification of references and qualifications; pay and benefit administration; the issuance and management of stock options and restricted stock units; corporate travel and other reimbursable expenses; development and training; absence monitoring; project management; auditing, compliance, and risk management activities; conflict of interest reporting; employee communications; performance evaluation; disciplinary actions; grievance and internal investigation activities; career management, including the assessment of qualifications for a particular job or task; processing employee work-related claims (e.g., worker compensation, insurance claims); succession planning; relocation assistance; obtaining and maintaining insurance; the provision of employee related services; and other general operations, administrative, financial, and human resources related purposes.
    • We might also use your Personal Information to maintain our directories of employees; for employee engagement programs, including surveys; to protect the safety and security of our workforce, guests, property, and assets (including controlling and facilitating access to and monitoring activity on and in our premises and activity using our computers, devices, networks, communications and other assets and resources); to investigate and respond to claims against us; to maintain emergency contact and beneficiary details; and to comply with applicable laws (e.g. health and safety, employment laws, office of foreign asset controls regulations, tax laws), including judicial or administrative orders regarding individual employees (e.g., garnishments, child support payments), etc.

     

  • To communicate with you in connection with our Service Offerings:
    • We will send customers non-marketing email communications if this is in accordance with their communications preferences. Customers may choose to opt-out from receiving other communications at any time by following the link provided on all email communications with instructions on how to opt-out.
    • When it is necessary to do so, we may send you service-related announcements via email: for example, if our service is temporarily suspended for maintenance. Generally, you may not opt out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to deactivate your account by e-mailing privacy@pingidentity.com.
    • Please note that even if you unsubscribe from promotional email messages, we may still need to contact you with transactional information related to the products and services you have ordered or specifically requested via any of the channels.

     

  • To provide customer requested functionality for Service Offerings:
    • Collection of Personal Information enables us to better understand the users who utilize our Service Offerings. We use this information for our internal analytics purposes and to improve the quality of our Service Offerings.

     

  • To ensure compliance:
    • The processing of your Personal Information is based on the country’s law where you reside (as determined by your country selection at the time of registration) and your underlying preferences are stored and exchanged between Ping Identity’s group entities as necessary to ensure compliance.

 

3.  Sharing Your Personal Information

 

We rely on third-party service providers to perform a variety of services on our behalf. In so doing, we may need to share your Personal Information with them. Please note that we only provide our service providers with the Personal Information they need to perform their services and we require that they protect this information and not use it for any other purpose. These third parties are also not permitted to use your Personal Information for their own promotional or business purposes.

 

While Ping Identity will never sell or rent information about you or your use of this site to other companies, we may at times disclose parts of your information to trusted business partners with whom we have a strategic partnership, or our investors.

 

Please also note that our sponsors, co-sponsors and/or exhibitors may directly request your information at their conference booths or presentations. You should review their privacy policies to learn how they use Personal Information.

 

Your information may also be transferred to another company in connection with a corporate transaction, such as a divestiture, merger, acquisition, consolidation, or asset sale (or the negotiation thereof) of a substantial amount or all of the assets of Ping Identity, or in the unlikely event of bankruptcy. We may assign or transfer your information as part of the transaction.

 

In addition, Ping Identity may use or disclose any information available to it, if required to do so by law, or if necessary to conform with the requirements of the law or to comply with legal process served upon us, to protect or defend our legal rights, or to investigate, prevent, or take legal action regarding suspected fraud, threats to physical safety, or other illegal activity.

 

Finally, with respect to Personal Information we collect as part of our hiring activities, we disclose your Personal Information to our private equity sponsor, Vista Equity Partners, and its affiliates, including Vista Consulting Group (collectively, “Vista”), for administration, research, database development and business operation purposes, in line with the terms of this Notice. Vista processes your Personal Information on the basis of its legitimate interests in overseeing the recruitment process and, if applicable, your employment relationship with Ping Identity. If you have consented to us doing so, we also share your Personal Information with other Vista portfolio companies for the purpose of being considered for other job opportunities in the pooling system, both inside and outside the EEA. Please find a full list of all Vista portfolio companies at: https://www.vistaequitypartners.com/companies/.

 

4.  International Data Transfers

 

Your Personal Information might be transferred to, and processed in, countries other than the country in which you are resident.  

 

Ping Identity shares data with other entities within the Ping Identity group. We have implemented the European Commission’s Standard Contractual Clauses for transfers of Personal Information between our group companies, which require all group companies to protect Personal Information they process from the EEA in accordance with European Union data protection law.  In connection with the our recruitment processes, we transfer your Personal Information outside of the EEA to Hirebridge, LLC and Criteria Corp., which provide applicant tracking services. Hirebridge, LLC and CriteriaCorp. both comply with the EU-U.S. Privacy Shield Framework and ensure that your Personal Information is adequately protected while outside of the EEA.

 

We have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Notice when we share your Personal Information with third parties (as detailed above under “Sharing Your Personal Information”). These safeguards include transferring your Personal Information to third parties who are located in a country which the European Commission has determined has data protection laws that are at least as protective as those in Europe, and transferring your Personal Information to third parties who have entered into Standard Contractual Clauses or equivalent (according to EU Commission Decision 87/2010/EC or any future replacement) with us, in order to contractually ensure that your Personal Information is subject to a level of data protection which applies in Europe. For more information about these safeguards, please contact us at privacy@pingidentity.com.

 

YOUR DATA RIGHTS

 

We take steps to make sure your Personal Information is accurately maintained. You may view the Personal Information you provide to us to make corrections or modify your information at any time, subject to the final paragraph of this section.

 

In addition, if you are a resident of the EEA, you have the following data protection rights:

 

  • If you wish to access, correct, update or request deletion of your Personal Information, you can do so at any time by contacting us using the contact details provided below. You can require Ping Identity to confirm at any time that we are processing your Personal Information, or to have access to the Personal Information we may have about you. You may also request information about: the purpose of the processing; the categories of Personal Information concerned; who else outside Ping Identity might have received your data from Ping Identity; what the source of the information was (if you did not provide it directly to us); and how long it will be stored. Reasonable access to your Personal Information will be provided at no cost to you upon request and subject to a reasonable proof of identity. If access cannot be provided within a reasonable time frame, Ping Identity will provide you with a date when the information will be provided. If for some reason access is denied, we will provide an explanation as to why that happened;
  •  

  • In addition, you can object to processing of your Personal Information, ask us to restrict processing of your Personal Information, or request portability of your Personal Information. Again, you can exercise these rights by contacting us using the contact details provided below:
    • You can object to Ping Identity processing your Personal Information in cases where we rely on the ground of our legitimate interest to process it. Should you choose to exercise this right, we will cease using your Personal Information and remove it from our systems unless such Personal Information is permitted to be used by Ping Identity for another purpose set out in this Notice or we determine and demonstrate a compelling legitimate interest to continue processing your Personal Information;
    • You can exercise your right to restrict the processing of your Personal Information where, for example, you believe that the Personal Information we hold about you is not accurate or lawfully held; or where you object against the processing of your Personal Information by Ping Identity on the ground of legitimate interest - in such case you have a right to restrict processing of your Personal Information while we verify if we have a prevailing interest in processing your Personal Information; and
    • If you wish to request a copy of the Personal Information you provided us, you need to clearly state which Personal Information you require from Ping Identity, in which format, and whether the Personal Information shall be provided to you or another recipient. We will carefully review your request and discuss with you how it can be best implemented.

     

  • In certain circumstances, you may also have a right to have your Personal Information erased. For example, if it is no longer necessary for the purposes for which it was originally collected (also called the “Right to Be Forgotten”).
  •  

  • If we have collected and processed your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent. This means that we will not process the Personal Information subject to this consent any longer unless legally required to do so. In case we are required to retain your Personal Information for legal reasons, such data will be restricted from further processing and only retained for the term required by law. Furthermore, if your use of Ping Identity’s Service Offerings require your prior consent, we will not be (any longer) able to provide the relevant product or service to you after withdrawal of your consent.

 

If you would like to exercise your rights under this Notice, you may contact us at privacy@pingidentity.com or 1001 17th Street, Suite 100, Denver, Colorado 80202, USA, attn: Privacy Department. We will respond to reasonable requests as soon as reasonably practicable.

 

Finally, with respect to Personal Information processed by Ping Identity on behalf of our customers as part of our Service Offerings, an individual who seeks to exercise their rights under this heading should direct their query to their employer or service provider, as appropriate. If the employer or service provider requests that Ping Identity remove the data, we will respond to their request within 30 business days.


CUSTOMER SERVICE AND RECOURSE

 

If you have concerns about this Notice, its implementation, or other related inquiries or concerns, please contact us at privacy@pingidentity.com. Any improper collection or misuse of information in violation of this Notice should be reported by e-mail to privacy@pingidentity.com. Ping Identity takes seriously any reported violations, and will investigate such violations and correct any misinformation.

 

If you are a resident of the EEA, you have the right to complain to a relevant data protection authority about our collection and use of your Personal Information.  For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA and certain non-European countries (including the US and Canada) are available here.


CHANGES IN THIS NOTICE

 

We reserve the right to modify this Notice at any time, so please review it frequently. If we decide to change our Notice, we will post the changes to the Notice here and other places we deem appropriate.  We will obtain your consent to any material changes if required by applicable law.


CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL INFORMATION

 

Ping Identity will use appropriate technical and organizational measures to secure the Personal Information users provide to us. We have implemented reasonable information security policies, rules and technical measures to protect the Personal Information we have under our control from unauthorized access, improper use or disclosure, unauthorized modification, and unlawful destruction or accidental loss.

 

All our employees, contractors and data processors who have access to, and are associated with, the processing of your Personal Information are obligated to keep the information confidential and not use it for any other purpose than to carry out the services they are performing for us.


DATA RETENTION

 

We retain Personal Information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). 

 

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

 

With regard to Personal Information processed as part of our Service Offerings, Ping Identity will retain any information we process on behalf of our customers for as long as needed to provide services to our customer or as otherwise required by law, or until you object to Ping Identity’s use of your Personal Information (if our use of your Personal Information is based on a legitimate interest) or you withdraw your consent (if our use of your Personal Information is based on your consent). Ping Identity will retain and use this information solely as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements.


CONTACT US

 

Unless it is in respect of Ping Identity’s Service Offerings, the controller of your personal information is Ping Identity Corporation. In light of our GDPR obligations, we have appointed a Data Protection Officer (DPO) who can be contacted using the contact details listed below.

 

If you have questions specifically about this Notice, or to legal issues pertaining to the practices of the site or your use of the site, please contact us using the following details:

 

E-mail Address: privacy@pingidentity.com

Mailing Address: 1001 17th Street, Suite 100, Denver, CO 80202

 

Archived - Privacy Policy (September 28, 2018)