BlackBerry Privacy Notice
This Privacy Notice (“Notice”) is effective starting August 13, 2020
BlackBerry Limited and its subsidiary companies and affiliates (“BlackBerry,” “we,” “our” or “us”), are committed to maintaining the privacy and security of your personal data. BlackBerry’s authorized collection and use of personal data is guided by our mission to provide trusted solutions that protect the security and privacy of our customers’ personal data.
This Notice describes how we use your personal data and respect your privacy rights.
This Notice explains how our products, services and technologies use your personal data. It applies to our collection, use, processing, transfer, storage and disclosure (“Process” or “Processing”) of your personal data when you visit our websites, register to attend an event, download and install any of our products, including consumer and mobile versions of our products, or utilize any of our services, both online and offline (collectively referred to as “BlackBerry Solutions”). This Notice further describes BlackBerry’s practices with respect to the Processing of your personal data.
Product specific notices associated with a particular BlackBerry Solutions provide additional information about BlackBerry’s Processing of your personal data (“Product Notices”) and are available from our Privacy Notice Frequently Asked Questions.
If you have any questions regarding this Notice, contact us.
This Notice covers the following topics:
- Why we collect and use your personal data
- What we collect and how we use your personal data
- Sources of personal data
- Sharing of your personal data
- International transfers of your personal data
- How we protect your personal data
- How long we store your personal data
- Marketing communications from BlackBerry
- Service-related communications from BlackBerry
- Your personal data rights
- Contact us
- Updates to our Privacy Notice
Why we collect and use your personal data
BlackBerry will only Process personal data when we have a fair and lawful basis for such activity, including:
- as necessary to provide information requested by you, such as when you request a whitepaper, register to attend a webinar, or make inquiries about our products and services
- as necessary to fulfill or perform a contract we enter into with you, or an organization you work for, such as when our products and services Process information about the computer or mobile device they are installed upon, including for purposes related to the billing, activation, provision, maintenance, support, trouble shooting, resolving of disputes, deactivation, upgrade or update of BlackBerry Solutions
- where you have given your consent, which you may revoke at any time, to Process your personal data for a specific purpose, such as subscribing to receive email or other communications from us about our products and services
- when we have a legal obligation, or the Processing is in the public interest or in furtherance of a vital interest
- the Processing is necessary to further our legitimate interests, which may include the improvement of our products or services, securing our systems and to protect against fraud
We collect information from you for the following purposes:
Service delivery and product improvement
- Enable the trial, purchase and delivery of our products and services
- Improve the performance of and develop new BlackBerry Solutions and optimize the utilization of our products and services
- Provide customer support, and respond to requests, questions and comments
Marketing, events, and promotions
- Deliver information about our products, services and promotions, including advertising
- Register you for webinars, events and conferences
- Improve the operation of our websites and effectiveness of marketing campaigns
- Administer contests, promotions, surveys and focus groups
Improve internal operations
- Analyze your use of our products and services to drive improvements
- Manage our sales and marketing activities, and measure corporate performance
- Manage business continuity and disaster recovery operations
Fraud prevention, security and compliance
- Protect the security and integrity of our products, services and data
- Prevent fraudulent transactions, protect our intellectual property and other assets
- Enforce BlackBerry’s legal rights and ensure it meets legal compliance obligations including corporate reporting, legal and regulatory compliance and fiduciary obligations
For more information about the legal bases we use to lawfully Process personal data, see our Privacy Notice Frequently Asked Questions.
What we collect and how we use your personal data
When visiting our websites
We automatically collect and aggregate information related to your use of our websites. We use technologies, such as cookies, to enable functionality, measure performance, and provide relevant information when you visit or return to our sites. This information helps our websites work correctly, provide information about our products and services, and supports our efforts to understand our customers’ interests.
We collect the following types of information from you when you visit our websites:
- Device and browser information: We collect information about the device and browser you use when visiting our websites, including information such as the Internet Protocol (IP) address of the device, your preferred language, the type of device you use, the device operating system and browser type.
- Geolocation: We may derive the approximate geographic location, such as country, region, state, or city based upon the IP address of the device used when visiting our website to analyze traffic and improve performance of our site.
- Browsing activity: We collect information about how you browse our websites, including the address of referring websites, the pages you visit, and the path you take through our websites.
- Cookie and related technologies: We use technologies, such as cookies and related technologies, to collect information about the use of our websites to determine the effectiveness of content or the email messages you’ve subscribed to.
- Social media features: Our websites allow you to share information on your social media platform of choice, such as Facebook, Twitter, and LinkedIn. These features are generally recognizable by their third-party logo and may collect your IP address, the page you are visiting on our site, and set a cookie to enable the feature to work properly when you use this functionality.
For more information on how to manage cookies on your devices, including how to opt-out of cookies, see Managing your tracking technology preferences.
When requesting information or registering for an event
You may sign up to receive information about our company, our products and services, industry news and information, access our partner portal and register to attend an event. Based on your consent, we may send you electronic communications to keep you informed of changes to our products and services.
Your personal data will be accessed by authorized BlackBerry personnel to deliver the requested information and market to you in compliance with this Privacy Notice. We may also provide your personal data to third-party service providers to help us deliver the information you requested, support event activities, or provide updates about BlackBerry products and services. Third-party service providers are not permitted to use your information for any other purposes and are required to adhere to personal data protection laws.
Personal data collected when requesting information from us
The personal data we collect to deliver the information you requested, or register you for an event, may include your name, job title, company name, email address, country, phone number and recent web activity.
You can update your information, review your communication preferences, or stop receiving further communications from us by following the instructions contained within each communication we send you.
If you are registering for an event that is co-sponsored by another organization, you will be informed at the time of registration what data will be shared with that organization.
When using our products and services
BlackBerry Solutions are designed to secure and protect your information by analyzing software and activity on a computer or mobile device to determine if malware is present, provide information about the security of the device and respond to potential security threats. In some cases, you may configure the BlackBerry Offering to upload potentially malicious computer code to our servers for further analysis. The BlackBerry Offering collects limited personal data to perform these functions. The uploaded potentially malicious computer code is de-identified and maintained separately from information that may identify an individual. Personal data may also be Processed by BlackBerry to enable us to provide support and billing.
When providing professional services to our clients, BlackBerry may collect personal data from our clients, users of our clients' networks and systems, and systems that connect to our clients' networks and systems. The collection and use of this personal data are limited to providing the professional service to the client. Authorized BlackBerry personnel will access personal data and we may transfer personal data to third-party service providers to help us provide these services.
Personal data collected by our products and services
As part of using our products and services we only collect that information that is necessary to perform those service, manage licenses, communicate with customers and to improve and develop BlackBerry Solutions.
Aggregated or anonymous data
BlackBerry may derive aggregated or anonymous data (i.e. data that is not associated with/linked to an identifiable individual or organization) from data collected through BlackBerry Solutions. BlackBerry may use aggregated/anonymous data for any lawful business purpose (including, without limitation, to develop and improve the BlackBerry Solutions and to create and distribute reports and other materials).
To find out more about the personal data collected by our products and services, see the Privacy Notice Frequently Asked Questions.
When purchasing consumer products from us
When purchasing consumer products from us and related offerings, we use PCI/DSS-compliant services provided by third-party service providers to process payments for your subscription. BlackBerry does not store or have access to your payment card information.
Our payment card providers
BlackBerry uses the following PCI/DSS-compliant payment services; Bright Market, LLC d/b/a FastSpring, Digital River, and Amazon.com Services LLC, which are based in the United States, to process your subscriptions to our consumer products. BlackBerry may change its payment service providers from time to time and will update this Notice accordingly.
Sources of personal data
Information collected directly from you
Before using BlackBerry Solutions, you may be required to agree to an applicable supplemental notice that may contain additional information regarding BlackBerry’s Processing of your personal data. Your agreement to such supplemental notice or use of the specified BlackBerry Solutions constitutes your consent for BlackBerry to Process your personal data for BlackBerry’s identified purposes.
If you provide BlackBerry with personal data about another person, you are responsible for, and agree to, ensuring that you have that individual’s consent to do so. All personal data provided to BlackBerry is subject to this Notice.
Information from third-parties
As part of our marketing activities, we may receive additional information from third-party service providers to supplement the information you provided directly to us, so we can provide more relevant information about our company, products and services to you. The information we receive is public information related to the organization or business you work for, such the size of your company, industry, and business mailing address.
Use of third-party cookies
Sharing of your personal data
We do not sell, lease, or trade the personal data we collect from you. We may transfer your personal data to other BlackBerry entities for the purposes outlined in this Notice. We may provide access or transfer your personal data to authorized BlackBerry personnel, and third-party service providers, including service providers and processors as defined under the California Consumer Privacy Act and the EU General Data Protection Regulation, respectively. This includes third-party service providers who help us market, provide support, maintain or service our products and services, or otherwise support our business operations.
The personal data shared with BlackBerry entities may include: your contact information, such as your name, e-mail address, telephone number, mailing address, country/region, company name, and job title, along with your recent interactions with our business applications, and event attendance.
BlackBerry also utilizes third-party service providers, such as advertising networks, to deliver targeted advertisements using aggregated personal data that is derived from profile data Processed by BlackBerry and provide such third-parties with general statistics relating to the advertisements delivered. Please visit Withdrawing your consent below for more information on managing marketing or commercial communications from BlackBerry.
BlackBerry requires our third-party service providers to take commercially reasonable steps to safeguard your personal data, comply with applicable laws and regulations, and to not use your personal data for other purposes unless you have provided consent, or an alternative lawful basis exists to do so.
Because BlackBerry must comply with applicable laws including local legislation, regulations and the orders of courts or other lawful authorities, other lawful requests, or official legal processes, we may sometimes be required to disclose your personal data to government agencies and law enforcement officials when it is necessary to respond to subpoenas, court orders, other legal process or as required by law or to prevent or take action regarding suspected illegal activities, fraud or software piracy, and situations involving potential threats to the physical safety of any person, or in cases where we believe our intellectual property rights may be violated. For more information, please visit BlackBerry’s Lawful Access Principles and other Corporate Responsibility Practices.
We may also provide access to, assign, or disclose your personal data, in connection with a corporate transaction, such as a merger, acquisition, or purchase all or a portion of our company assets.
Information sharing to support third-party offerings
BlackBerry uses contractual or other means to provide a comparable level of protection while the personal data is being Processed by our service providers. It is BlackBerry’s policy to enter into confidentiality obligations or employ other lawful data transfer mechanisms with any third-party that obtains confidential information including personal data from BlackBerry to ensure it is adequately protected.
Third-party offerings on BlackBerry mobile devices
BlackBerry does not own or operate all of the applications or services that you download and use on your computer or device or through other. For example, a Third-Party Offering might access on-device data such as contacts, calendar entries, email, location-based information, or it may access or share files or data stored on the device. You should review the privacy notices/policies and any agreements with such third-parties to understand how your personal data will be Processed by those entities, as BlackBerry is not responsible for your dealings with any third-parties or the use of any Third-Party Offering. BlackBerry does not directly control how such third-parties Process the personal data they collect in connection with the Third-Party Offerings you use.
International transfers of your personal data
BlackBerry is committed to ensuring continuity of adequate protection and lawful Processing of personal data regardless of the jurisdiction. BlackBerry may transfer your personal data outside of your country to a subsidiary, a third-party service provider, or business partner to operate our business and to fulfill the purposes described in this Notice. By using our websites or providing any personal data to us, where applicable law permits and unless otherwise specified in a separate specific notice, you consent to the transfer, Processing, and storage of such information outside of your country of residence where data protection standards may be different. We will always seek to localize personal data when possible. Several lawful bases exist for BlackBerry to ensure adequacy of data protection when engaging in cross border transfers.
Transfers to Canada from EU based on adequacy
BlackBerry is a Canadian company headquartered in Waterloo, Ontario. For lawful transfers of personal data to Canada from the EU, BlackBerry relies on the European Union’s recognition of the adequacy of Canada’s Privacy law, the Personal Information and Electronic Documents Act (“PIPEDA”) as a lawful basis for the transfer of personal data, which governs how BlackBerry can collect, use, and disclose personal data. Since 2001, PIPEDA has given Canada the benefit of an adequacy decision by the European Commission and transfers on the basis of an adequacy determination are authorized pursuant to Article 45 of the EU General Data Protection Regulation (“GDPR”). This decision is an acknowledgement by the Commission that PIPEDA affords an adequate level of personal data protection to customers that entrust personal data to BlackBerry.
Transfers under EU Standard Contractual Clauses
As a Data Processor under GDPR, BlackBerry regularly executes with its EU customers or customers with GDPR compliance obligations (Data Controllers) Data Protection Addenda that incorporate the EU’s Standard Contractual Clauses to ensure an adequate level of protection throughout the data Processing lifecycle. This includes BlackBerry’s use of third-party service providers, who are required to Process personal data under comparable terms and conditions.
How we protect your personal data
We are committed to ensuring that your personal data is secure. We take commercially reasonable measures, including physical, administrative and technical safeguards, to protect your personal data from unauthorized access, use, alteration, destruction and disclosure.
To find out more about our security practices, see our Privacy Notice Frequently Asked Questions.
How long we store your personal data
We retain your personal data for the period necessary to fulfill the purposes for which it was collected and for a reasonable period thereafter to comply with our legal obligations, and contractual and business operational requirements. ;With relation to personal data collected by our products and services, we retain information during the term of the agreement, based upon instructions provided by our customers, or for shorter periods of time as described in the applicable Product Notice or other product or service documentation. When personal data is no longer necessary or relevant for BlackBerry’s identified purposes, or required by applicable laws, BlackBerry will take steps to have it deleted, destroyed, erased, aggregated or made anonymous. Consistent with good business practice, BlackBerry continues to evolve our controls, schedules and practices for information and records retention and destruction which apply to your personal data. Non-personal data, such as samples of potentially malicious software or anonymized data, may be retained indefinitely for the purpose of improving the performance of our products and services.
- operate a secure website, such as provide a robust user experience;
- enable you to login to view content on secure areas of our websites;
- collect statistics regarding your website usage, such as time spent, pages viewed, and actions taken on our websites;
- allow us to measure and improve the effectiveness of our marketing activities;
- provide content to you that is more relevant to your interests, demographics or industry; or
- to deliver advertising about our products and services to you when you visit websites owned by other third-parties.
Please bear in mind that disabling cookies may reduce the functionality of our website.
For more information on cookies and other tracking technologies, see our Privacy Notice Frequently Asked Questions.
Our use of analytics services
BlackBerry uses services from third-party service providers to collect and analyze data from users about their use of our websites, products and services. We use this information to improve the quality and functionality of the services we provide, and to develop features that serve you or other users.
The types of information that we collect include the date and time a user accesses our website, products or services, the IP address the request came from, the features they use, and their frequency of use.
For more information on our use of Analytic Services, see our Privacy Notice Frequently Asked Questions.
Managing your tracking technologies preferences
You can manage how cookies are set by using the cookie consent tool on our websites or by adjusting how your device handles cookies by changing its privacy and security settings, but it may limit your use of certain features on our website.
If you do not want to have this information used to serve targeted advertising, you may opt-out by visiting:
- https://www.youronlinechoices.com/ (European Union visitors)
Please note that although you may opt out of targeted advertising, you will continue to see advertisements, however, these advertisements may not be as relevant to you as targeted advertisements.
For more information on ways to manage your tracking technology preferences, see our Privacy Notice Frequently Asked Questions.
Do Not Track (DNT)
Currently, we do not alter our data collection and use practices in response to Do Not Track signals.
Marketing communications from BlackBerry
BlackBerry may communicate information, surveys, marketing materials, advertisements or customized content which has been personalized to try to make it more relevant to you as part of your existing business relationship with BlackBerry. For example, we may do so where you have not unsubscribed from receiving such communications and it is permitted by law, where you have explicitly agreed to receive such communications, where you use free services which rely upon advertising (including targeted advertising based on profile information), or through utilizing aggregated data or data that has been made anonymous. BlackBerry may ask you from time to time if you would like to receive additional announcements, news, offers or event invitations regarding BlackBerry and BlackBerry Solutions. You may also choose to provide BlackBerry with personal data in response to various BlackBerry promotions. If you agree to participate in contests, surveys, giveaways, reviews, or other promotions that BlackBerry sponsors or co-sponsors, please ensure that you read the Notice that may be associated with these initiatives in order to obtain further details about how your personal data will be managed. An unsubscribe mechanism is included with every BlackBerry marketing or commercial communication. Please visit the section below in Withdrawing your consent for more information on managing marketing or commercial communications from BlackBerry.
Service-related communications from BlackBerry
BlackBerry may also send you certain service-related communications. For example, BlackBerry may send a welcome email or message when you first activate a BlackBerry Offering to inform you about the service and its terms, to notify you of important changes, to tell you how to manage your credentials or account, to provide service infrastructure notifications or information about upgrades or updates, to provide warranty information, product recall information, safety or security information, or for surveys of current or former users. Because such service-related communications are important to your use of BlackBerry Solutions, you may not opt-out of receiving these communications.
Your personal data rights
At BlackBerry we aim to provide the transparency you need to exercise your rights. Below you will find information on your personal data rights as well as how to make requests.
If you are a resident in the European Economic Area and covered by the GDPR, BlackBerry is the Data Controller of your personal data, except where our products and services have been deployed within an organization, such as your workplace or business, where BlackBerry would then act as a Data Processor under the GDPR.
If you are a resident of the State of California, your rights are addressed in this notice under Your California privacy rights and BlackBerry’s practices.
Depending on the jurisdiction where you are located, you may also have rights to contact your local data protection supervisory authority to lodge a complaint against BlackBerry.
Accessing your personal data
Upon written request, BlackBerry will inform you whether it holds personal data about you and provide you with your personal data within a reasonable timeframe and at minimal or no cost in accordance with applicable laws. If you identify an inaccuracy or incompleteness in your personal data, BlackBerry will amend your information and notify any third-parties as required by applicable laws.
Upon written request, and to the extent authorized under applicable law, BlackBerry will also erase any personal data it holds about you using reasonably appropriate technical measures when:
- it is no longer necessary to Process your personal data;
- you withdraw your consent to Processing unless some other lawful basis exists for BlackBerry to continue to Process your personal data;
- you object to the Processing and no overriding legitimate grounds exist for BlackBerry to Process your personal data;
- the personal data has not been lawfully Processed by BlackBerry; or
- you have a legal obligation imposed under EU or EU member state law to which BlackBerry is subject.
In certain situations, and depending on applicable laws, BlackBerry may not be able to provide access to the personal data it holds about you if access may adversely affect the rights and freedoms of others. For example, BlackBerry may not provide access to personal data if doing so:
- would likely reveal personal data about a third-party;
- would reveal BlackBerry or third-party confidential information;
- could reasonably be expected to threaten the life or security of another individual;
- includes information that is protected by solicitor or attorney client privilege; or
- includes information that was Processed in relation to the investigation of a breach of an agreement or a contravention of a law.
In order to safeguard your personal data from unauthorized access, BlackBerry may ask that you provide sufficient information to identify yourself prior to providing access to your personal data.
Depending on the circumstances and subject to applicable laws, BlackBerry may deny processing your request if:
- we are unable to verify and authenticate your identity;
- it is unreasonably repetitive or automated; or
- it would be overly broad, ill-defined, or require disproportionate effort which renders the request manifestly excessive.
Withdrawing your consent
At any time, you may withdraw your consent for BlackBerry to Process your personal data in accordance with this Privacy Notice, subject to legal or contractual restrictions and reasonable notice. For example, although you can use BlackBerry Solutions for some purposes without providing us with any personal data, BlackBerry may need to Process personal data for some services, including those that require payment or involve an ongoing relationship such as registration or subscription services. As such, BlackBerry may continue to use your personal data as may be required to provide you with requested services, and to the extent that BlackBerry is contractually obligated to do so or as necessary to enforce any contractual obligations you may have with BlackBerry. If you refuse to provide BlackBerry with the personal data it requires or later withdraw your consent to use and disclose this information, BlackBerry may no longer be able to provide you with your BlackBerry Solutions.
You may withdraw your consent at any time by notifying the Privacy Office at BlackBerry at firstname.lastname@example.org.
Marketing or commercial communications: You may unsubscribe from receiving marketing or commercial communications about BlackBerry or BlackBerry Solutions by:
- clicking the unsubscribe link at the end of any marketing or commercial communication from BlackBerry;
- by indicating your preference at www.blackberry.com/unsubscribe; or
- by writing to BlackBerry Privacy Office c/o BlackBerry (attention Legal Department), 2200 University Avenue East, Waterloo, Ontario, Canada, N2K 0A7 and advising what particular types of marketing or commercial communications you no longer wish to receive.
- use the cookie consent tool on our websites to modify your cookie preferences;
- remove or block browser cookies using the settings in your browser, but that may impact your ability to use certain BlackBerry Solutions as they may not work well or at all with cookies disabled.
Your California privacy rights and BlackBerry’s practices
If you are a California resident, California Civil Code Section 1798.83 permits you to request and obtain from us once a year, free of charge, information regarding the disclosure of your personal data by BlackBerry to third-parties for the third-parties’ direct marketing purposes. You may send an email requesting such information to email@example.com.
To the extent that BlackBerry Processes any personal information relating to a California-based end user of a customer, BlackBerry acts as a Service Provider as defined in the California Consumer Privacy Act (CCPA). Customers shall only disclose end user personal information to BlackBerry solely for: (i) a valid business purpose; and (ii) to permit BlackBerry to provide the BlackBerry Solutions to its customers.
BlackBerry will not (i) sell the personal information, (ii) retain, use, or disclose the personal information for a commercial purpose other than providing the BlackBerry Solutions; and (iii) retain, use, or disclose the personal information outside of the provision of the BlackBerry Solutions to Customer pursuant to a written agreement.
Your GDPR rights
To the extent allowed under the GDPR, if you are an EU resident, you have the right to request details of the personal data we have about you, update inaccurate information about you, request that your personal data be deleted, restrict Processing of your personal data, data portability, and object to the collection or use of personal data that we Process based on our legitimate interests as a company. In some cases, you may be directed to make your request to the organization who licensed our software or services. If you wish to exercise these rights, please submit a request to firstname.lastname@example.org.
For more information about your right of choice on how to control your personal data, see our Privacy Notice Frequently Asked Questions.
If you live in the European Economic Area and are dissatisfied with our use of your personal data, you have the right to lodge a complaint with your local supervisory authority. You may find contact details on ec.europa.eu.
We value your feedback. If there are any questions regarding this notice, or our collection and use of your personal data, you may contact us by email at email@example.com or by sending mail to one of the addresses below:
Attn: Data Protection Officer
2300 University Ave. E
Waterloo, ON, Canada
European Economic Area
BlackBerry Ireland Limited
Attn: Data Protection Officer
89/90 South Mall
Cork City, Ireland
Updates to our Privacy Notice
Each time you use BlackBerry website, products or services, the current version of this notice will apply. We reserve the right to change this Notice at any time to reflect changes in the law, the BlackBerry products and services we provide, our business and technology, and our data collection and use practices.
BlackBerry continues to make available information to help our users better understand BlackBerry’s Processing of personal data and how to exercise choices regarding the use of your personal data through various channels including this Privacy Notice, applicable Notices and additional information that may be made available from time to time on various BlackBerry websites or on your device.
If we make any material changes, to this Privacy Notice, BlackBerry will revise the “Last Updated” date that is indicated on the Privacy Notice and any material revisions will be noted.
Your continued use of the BlackBerry products, services or website following the posting of changes to this notice will be deemed your acceptance those changes.
Last Updated: August 13, 2020