This “Additional disclosures for California residents” section is intended to describe our practices and your rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”) (Civil Code Section 1798.100, et seq.) (collectively “California Law”). This section provides rights and other terms relating to your personal data that are in addition to those provided in this Policy (see above). These additional rights and other terms are only available to California residents about whom we collect personal data. This section takes precedence over the Policy with respect to your personal data for California residents if there is a conflict between the two. Any terms not defined in this section have the same meaning as defined in California Law. Additionally, any reference to personal data in this section has the same meaning as personal information as defined by California Law.
We do not sell, rent or lease your personal data we collect from you. We may share your personal data with third parties or allow them to collect personal data from our sites or services if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal data, or if you use BlackBerry sites or services to interact with third parties or direct us to disclose your personal data to third parties.
BlackBerry Solutions are not directed to individuals aged 16 and under or those not of the age of majority in your jurisdiction, and we request that these individuals, or others on their behalf, not provide us with their data. We do not knowingly sell or share the personal data of consumers under 16 years of age.
What Personal Data We Collect.
Over the past 12 months, we may have collected the following personal data from California residents:
For information on how we collect your personal data and the uses of the personal data, please refer to the “What we collect and how we use your personal data” section above.
How We Disclose, Share or Sell Your Personal Data.
Disclosures. We may disclose your personal data with third parties for a business or commercial purpose. In the past 12 months, we have disclosed your personal data with the following categories of third parties for a business or commercial purpose:
- Internally. We may disclose your personal data to our affiliates, business partners, employees, and other parties who require such data to assist us with establishing, maintaining, and managing our business relationship with you.
- With Our Service Providers or Contractors. We may disclose your personal data to our service providers or contractors (including third-party hosting providers) that provide services on our behalf, such as for email marketing, data analytics, promotions, newsletters, notices, and other communications, or that assist us in monitoring, improving, and hosting the Services.
- Advertisers and Advertising Networks. Our website may include social media plug-ins (such as the Facebook like button), widgets (such as the “Share” button), or other tools made available by third parties, such as social media companies, that may result in data being collected or shared between us and the third parties for various purposes, including to select and serve personalized advertisements to you and others. These third parties may set and access their own cookies, web beacons, and embedded scripts on your device, and they may otherwise collect or have access to data about you, including unique personal identifiers such as an IP address, and they may share that data with us. Your interactions with these third parties are governed by the third parties’ privacy policies.
- In the Event of a Business Transaction. If we are exploring or go through a business transition or financial transaction, such as a merger, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, securities offering, or sale of all or a portion of our assets, we may disclose your personal data to a party or parties in connection with exploring or concluding such transaction.
- For Legal Purposes. We will disclose your personal data when we think it is necessary to investigate or prevent actual or expected fraud, criminal activity, injury or damage to us or others; when otherwise required by law, regulation, subpoena, court order, warrant or similar legal process; or if necessary to assert or protect our rights or assets.
- With Your Consent or Authorization. To anyone for whom you have authorized disclosure of data in this Policy.
- Other. We may disclose your personal data for any other purpose disclosed by us when you provide the data.
We may retain all categories of your personal data (see above) for a period of time consistent with the original purpose of collection (see above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorized use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.
Your Rights and Choices under California Law
Below please find a description of key rights California residents have under California Law and an explanation of how to exercise those rights with us.
- Right to Know. If you are a California resident, you have the right to request that we disclose certain information to you about our collection and use of your personal data.
- Right to Delete. You have the right to request that we delete some or all of the personal data we have pertaining to you. Once we receive and confirm your verifiable consumer request, we will then delete (and direct our service providers to delete, if applicable) your personal data from our records, unless a lawful basis exists to retain it. We may deny your deletion request if we are unable to verify your identity or if we are not required to delete your personal data under the CCPA.
- Right to Correct Inaccurate Personal Data. You have the right to request that we correct any of the personal data that we maintain about you.
- Right to Opt Out of the Sale or Sharing of Personal Data. If BlackBerry sells or shares personal data about you to third parties, you may have the right to opt out and request that BlackBerry not sell or share your personal data.
- Right to Non-Discrimination. BlackBerry values the security and privacy of its customers and will not discriminate against you for exercising any of your California Law rights. If you exercise certain rights, understand that you may be unable to use or access certain features of the Services. Unless permitted by applicable law, we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of goods or services; or (iv) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, we will deny your request if (i) we cannot verify your identity or (ii) the disclosure creates a substantial, articulable, and unreasonable risk to the security of your personal data, your account with us, or the security of BlackBerry’s systems or infrastructure.
Exercising Your California Law Rights
You do not need to create an account with us to exercise your California Law privacy rights. To exercise the rights described above, please submit a consumer request to us by emailing: firstname.lastname@example.org.
To exercise your right to know, delete, or correct your personal data as described above, we need to verify your identity or authority to make the request and confirm the personal data relates to you. We will not provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Making a verifiable consumer request does not require you to create an account with us. We use personal data provided in a verifiable consumer request solely to verify the requestor's identity or authority to make the request.
These requests may be made only by you, your parent, guardian (if you are under 18 years or age), conservator, a person to whom you have given power of attorney pursuant to California Probate Code sections 4000 to 4465, or an authorized agent. As permitted under California Law, we may request that an individual submitting a request on behalf of a consumer submit proof that they are an authorized agent of the subject consumer, as well as verify the consumer’s identity. To protect your personal data, we reserve the right to deny a request from an agent that does not submit adequate proof that you authorized them to act for you.
We are only required to respond to a verifiable consumer Right to Know request twice within a 12-month period. The verifiable consumer request must provide sufficient information to allow us to verify you (or an authorized agent) are the person about whom we collected personal data.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Once we have verified a request from a California resident, we will confirm receipt of the request within 10 days and explain how we will process the request. We will then respond to the request within 45 days. We may require an additional 45 days (for a total of 90 days) to process your request, but in those situations, we will provide you a response and explanation for the reason it will take more than 45 days to respond to the request. Our responses will include required information under California Law.