Additional Information for EEA, Swiss and UK Residents
The Ping Identity Privacy Policy for Consumers and Professionals (our “Privacy Policy”) provides most of the information required by the EU General Data Protection Regulation and similar data protection laws in Switzerland and the United Kingdom. However, supplemental privacy notice gives EEA Swiss and UK residents the additional information required by these data protection laws.
1
Information about Ping Identity
This notice is being provided by Ping Identity Corporation and its EEA, Swiss and UK affiliates.
Ping Identity
1001 17th Street
Suite 100
Denver, CO 80202 USA
Ping Identity Corporation is based in the United States. Our representative in the UK is:
Ping Identity UK Limited
privacy@pingidentity.com
We have appointed a Data Protection Officer (DPO) who can be contacted at dpo_privacy@pingidentity.com
2
The Purposes and Legal Basis for Processing, including Legitimate Interests
Our Privacy Policy for Professionals and Consumers explains the reasons why we process your Personal Information. We only process Personal Information when we have a legal basis for the processing, such as:
- To fulfill a contract with you or with your company (including providing support and service);
- For closely-related purposes, such as payment processing, account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance; and
- With your consent (or provided you have not objected, as may be applicable), to respond to requests for information and to provide you with marketing communications.
We may also process your Personal Information for the purposes of our legitimate interests, provided that such processing shall not outweigh your rights and freedoms. In particular, we may process your Personal Information as needed to:
- Provided you have not objected, send you our own marketing materials;
- Protect you, Ping Identity or others from threats (such as security threats or fraud);
- Comply with the laws that are applicable to us around the world,
- Enable or administer our business, such as for quality control, analytics, consolidated reporting, and product development;
- Manage corporate transactions, such as mergers or acquisitions; and
- Understand and improve our business or customer relationships generally.
3
Automated Decision-Making and Profiling
We may use analytics for product development purposes, such as to understand product usage, or for security purposes, such as to identify unauthorized login attempts. We will not make automated decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology.
4
When You Are Required to Provide Personal Information to Ping Identity
In most cases, you are not required by law to provide any Personal Information to Ping Identity. You are required to provide certain Personal Information to enable us to enter into a contract with you, so that you can use our products and services. Our registration forms indicate which data elements are required for our contracts. If you do not provide these data elements, we cannot do business with you.
5
Your Rights
Ping Identity also respects your rights to access, correct and request erasure or restriction of your Personal Information as required by law. This means:
- You generally have a right to know whether Ping Identity maintains your Personal Information. If we do, you have the right to request a copy (subject to the rights of others), which may be provided in a portable format.
- If your information is incorrect or incomplete, you have the right to ask us to update it.
- You have the right to object to our processing of your Personal Information. If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time.
- You may ask us to delete or restrict your Personal Information.
You can exercise your rights by visiting Your Privacy Choices.
If you believe that we have processed your Personal Information inappropriately, you may also contact us at privacy@pingidentity.com. If we do not resolve your complaint, you can also contact our data protection officer or your data protection supervisory authority in your country of residence.
6
International Transfers
As noted in the Ping Identity Privacy Statement, your Personal Information may be transferred to, stored at or processed in the United States and other countries which may not have equivalent privacy or data protection laws.
We generally use approved Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the European Economic Area or Switzerland, but we may also make transfers to recipients with approved Binding Corporate Rules or other approved mechanism. We also participate in the US-EU and US-Swiss Privacy Shield Programs. Please see the Ping Identity Privacy Policy for additional information on our cross-border transfer safeguards. Please contact the privacy@pingidentity.com for a copy of the Standard Contractual Clauses.
7
Data Retention
We will retain your Personal Information for as long as the information is needed for the purposes set forth in Section 3 above and for any additional period that may be required or permitted by law. You may request that we delete your Personal Information by exercising Your Privacy Choices. Unless we have a compelling interest in retaining your information, it will be deleted it within 30 days of your request.