BlackBerry Privacy Notice Frequently Asked Questions
Last Updated: August 13, 2020
BlackBerry is committed to being transparent about how it collects, processes, and transfers personal data that has been entrusted to us. We provide the following FAQ to provide further transparency and to help you better understand how we collect and process your personal data. Please note this FAQ applies to the practices of BlackBerry and its affiliate companies.
- General Data Practices
- What is personal data?
- How do you collect personal data from me?
- What types of personal data do you collect?
- What do you use the data for?
- What legal bases do you rely on to process my personal data?
- How do I know that my personal data you maintain about me is safe?
- What sub-processors does BlackBerry use?
- How do I manage my email preferences or stop receiving email from BlackBerry?
- Will BlackBerry sell my data?
- What are my rights as a resident of California?
- BlackBerry Solutions
- Cookies and Other Tracking Technologies
General Data Practices
What is personal data?
The definition of personal data varies by different laws and regulations established around the world. Generally, personal data means any information relating to an identified or identifiable natural person. It includes your name, email address, telephone number, or mailing address, and other information that directly identifies who you are. It also includes information that may be used to uniquely identify you, or a device you use, such as a cookie, or unique identifier. Pursuant to some privacy regulations, the Internet Protocol (IP) address associated with a work computer may be considered personal data.
How do you collect personal data from me?
We collect personal data about you in two ways:
- Direct: This includes information you provide to us when registering to receive information on our website, such as when you register to attend an event or a webinar.
- Automatic: This includes binformation that is collected automatically, such as when you browse our website or use our products, services and software.
What types of personal data do you collect?
In general, we collect the following types of personal data.
- When you browse our websites we collect the following data from you automatically:
- Information about the browser and device you use to access our website
- The pages you visit, how you got to our site, and how long you stay on our website
- Using cookies and other tracking technologies, we measure the effectiveness of our marketing campaigns or the email messages you subscribed to
- When you request information or register for a webinar we collect:
- Your name, job title, company name, email address, country, phone number, and recent web activity
Data collected by BlackBerry’s software products, services and software are done on behalf the company or organization that has licensed our software. Details on the personal data collected by BlackBerry Solutions are provided later in these FAQs.
What do you use the data for?
BlackBerry is committed to only collecting and using personal data for lawful purposes. We use your data for the following purposes:
- service delivery and product improvement
- marketing, events, and promotions
- improve internal operations
- prevent fraud, security and compliance
What legal bases do you rely on to process my personal data?
BlackBerry relies upon several legal bases to process personal data, including your consent, which is revocable, our performance of a contract that we’ve entered into with you or the organization you work for, in compliance to legal obligations, protect the vital interest of an individual, performance of an activity in the public interest, as well as our own legitimate interests a company.
How we apply these legal bases to the purposes described in our Privacy Notice is as follows:
|Purpose||Consent||Contract||Legal Obligation||Vital or Public Interest||Legimate Interest|
|Service Delivery and Product Improvement|
|Enable the trial, purchase and delivery of our products and services||●||●|
|Improve the performance of and develop new BlackBerry Solutions and optimize the utilization of our products and services||●||●||●|
|Provide customer support, and respond to requests, questions and comments||●||●|
|Marketing, Events and Promotions|
|Deliver information about our products, services and promotions, including advertising||●||●|
|Register you for webinars, events and conferences||●|
|Improve the operation of our websites and effectiveness of marketing campaigns||●||●|
|Administer contests, promotions, surveys and focus groups||●|
|Improve Internal Operations|
|Analyze your use of our products and services to drive improvements||●|
|Manage our sales and marketing activities and measure corporate performance||●|
|Manage business continuity and disaster recovery operations||●||●|
|Fraud Prevention, Security and Compliance|
|Protect the security and integrity of our products, services and data||●||●||●|
|Prevent fraudulent transactions, protect our intellectual property and other assets||●||●||●|
|Enforce BlackBerry’s legal rights and ensure it meets legal compliance obligations including corporate reporting, legal and regulatory compliance and fiduciary obligations||●||●|
How do I know that my personal data you maintain about me is safe?
Blackberry is committed to protecting the personal data that you provide to us and has an established record of integrating secure practices. BlackBerry is certified to ISO/IEC 27001:2013 and ISO/IEC 27018:2015. BlackBerry uses BSI Group, an independent third-party, to certify and validate that BlackBerry has an appropriate Information Security Management System (ISMS) in place for the processes, systems, and infrastructure that support BlackBerry services. The BlackBerry ISMS Certificate of Registration is publicly available on the BlackBerry website.
BlackBerry also undergoes multiple AICPA Service Organization Control (SOC 2 Type 2) audits each year. These reports are made available to our clients and partners under a suitable non-disclosure agreement. Lastly, BlackBerry is Payment Card Industry Data Security Standard (PCI DSS) compliant and continues to work with independent external assessors ensure its continued compliance in this area.
Despite our taking reasonable security precautions and processes, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect all data we collect and process, we cannot guarantee the security of any data you transmit to or from our sites, and you do so at your own risk.
Learn more about BlackBerry’s information security and compliance certifications.
What sub-processors does BlackBerry use?
BlackBerry relies upon trusted third-party service providers to assist in providing our products and services. These third-parties agree to process personal data for specific activities on behalf of BlackBerry, and in accordance with customer instructions as communicated by BlackBerry, and the terms of a written contract.
|Amazon Web Services||End user contact information and personal data collected from our agent software||Provide the service as requested by customer and outlined in the written contract||Multiple locations (Australia, Brazil, Canada, Japan, Germany, and United States)|
|Atlassian Jira||Business contact information and interaction record||Provide customer care and customer relationship management||United States|
|CenturyLink||End user contact information||Provide the service as requested by customer and outlined in the written contract||United States|
|Critical Start||End user contact information and personal data collected from our agent software||Provide the service as requested by customer and outlined in the written contract||United States|
|Equinix||End user contact information and geo-location data||Provide the service as requested by customer and outlined in the written contract||United States|
|Gainsight||Business contact information||Measure customer satisfaction||United States|
|Internap||End user contact information||Provide the service as requested by customer and outlined in the written contract||United States|
|Microsoft Azure||End user contact information, geolocation data, WAN IP address||Provide the service as requested by customer and outlined in the written contract||Multiple locations (Canada, The Netherlands, Singapore, China, Hong Kong, Ireland, London, Australia)|
|Salesforce||Business contact information and interaction record||Provide customer care and customer relationship management||United States|
|SendGrid||Business contact information||Provide the service as requested by customer and outlined in the written contract||United States|
|Talkdesk||Business contact information and interaction record||Support customers use of our products and services||United States|
|ZenDesk||Business contact information and support communications||Support customers use of our products and services||United States|
How do I manage my email preferences or stop receiving email from BlackBerry?
You can update your information, review your communication preferences, or stop receiving further communications from us by following the instructions contained within each communication we send you. You may also update your marketing preferences at any time by going to http://www.blackberry.com/unsubscribe.
Will BlackBerry sell my data?
At BlackBerry our users are not our products. We will not sell, rent or lease your personal data we collect from you.
What are my rights as a resident of California?
If you are a resident of the State of California, you have the right to request that we disclose certain data to you about our collection and use of your personal data over the 12 months prior to receiving your request. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- Categories of personal data BlackBerry has collected about you
- Categories of sources for the personal data we collected about you
- Categories of third-parties with whom we shared personal data we collected about you
- Our business or commercial purpose for collecting that personal data, unless otherwise stated
- Our business or commercial purpose for sharing that personal data with third-parties, unless otherwise stated
- The specific pieces of personal data we collected about you (also called a data portability request)
BlackBerry values the security and privacy of its customers and will not discriminate against you for exercising any of your CCPA rights. In light of this, however, we will deny your request if (i) we cannot verify your identity or (ii) the disclosure creates a substantial, articulable, and unreasonable risk to the security of your personal data, your account with us, or the security of BlackBerry’s systems or infrastructure.
Deletion Request Rights
You have the right to request that we delete some or all of the personal data we have pertaining to you. Once we receive and confirm your verifiable consumer request, we will then delete (and direct our service providers to delete, if applicable) your personal data from our records, unless a lawful basis exists to retain it. We may deny your deletion request if we are unable to verify your identity or if we are not required to delete your personal data under the CCPA.
Exercising Access, Data Portability and Deletion Rights
To exercise the access, data portability or deletion rights described above, please submit a verifiable consumer request to us by submitting a request to firstname.lastname@example.org.
We are only required to respond to a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information to allow us to verify you (or an authorized agent) are the person about whom we collected personal data.
We will not provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Making a verifiable consumer request does not require you to create an account with us. We use personal data provided in a verifiable consumer request solely to verify the requestor's identity or authority to make the request.
Request Acknowledgement and Response Timing
We endeavor to acknowledge receipt of your request to know or deletion request within 2 business days. We will respond to a verifiable consumer request within 45 days of its receipt. If your request is complex and will require more time (up to 90 days), we will inform you promptly of the reason and extension period and will also explain the reasons we cannot comply with a request, if applicable.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
What personal data do your products and services collect?
For more information about the personal data collected by BlackBerry Solutions, please see the supplemental product privacy notices.
- BlackBerry 2FA
- BlackBerry AtHoc
- BlackBerry Dynamics Platform
- BlackBerry Gateway Privacy Notice - EA Release
- BlackBerry Messenger-Enterprise Privacy Notice
- BlackBerry Optics
- BlackBerry Persona Desktop Product Privacy Notice - EA release
- BlackBerry Persona Mobile Product Privacy Notice
- BlackBerry Protect Desktop Product Privacy Notice
- BlackBerry Protect Mobile for UEM Product Privacy Notice
- BlackBerry Radar
- BlackBerry UEM SaaS
- BlackBerry UEM OnPrem
- BlackBerry Workspaces
- QNX Acoustic Management Platform (AMP) and Hypervisor
- QNX Software Center
Cookies and Other Tracking Technologies
What are cookies?
A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. Cookies allow a website to identify a user's device whenever that user returns to the website and are commonly used to make websites work more efficiently and enrich the user experience, as well as to provide information about your use of the site.
What types of cookies does BlackBerry use?
BlackBerry uses the following types of cookies on our websites:
- Strictly Necessary: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. Disabling these cookie makes the features and service of the site unavailable.
- Functionality: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
- Performance: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
- Targeting: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
How long do cookies stay on my device?
There are two types of cookies that we may store on your device:
- Session cookies which exist for brief periods and are automatically deleted when you close your web browser.
- Persistent cookies are not deleted when you close your browser and expire when a pre-configured time has passed.
What analytics services do you use?
BlackBerry uses analytic services from the following third-party providers on our websites to deliver relevant experiences and marketing messages based on your likely interests.
Google Analytics: to collect, analyze and aggregate data so we can evaluate your use of our website, products and services so that we may improve the quality and functionality we provide to you. The data collected by Google Analytics will be transmitted to and stored by Google on servers located in the United States.
Learn more about how this analytics data may be used, and on how to control the use of your data.
Bizible: to collect, analyze and aggregate data to support so we can analyze marketing campaigns, perform marketing attribution and optimization. The data collected by Bizible will be transmitted to and stored on servers located in the United States.
Learn more about how to manage your preferences.
Adobe Analytics: to anonymously define new visitors, help analyze clickstream data, and track historical activity on the website, such as response to marketing campaigns or the length of the sales cycle.
Learn more about how to manage your preferences.
What other third-party cookies do you use?
We also use the following third-parties that may set cookies on your device:
|Marketo||To measure the effectiveness of email marketing campaigns||Marketo Privacy Notice|
|NextRoll||To display online advertising to users who have visited our site to encourage them to return and learn more about our products and services.||Opt-out instructions|
|To gain insight into users who visit our site and to improve targeting, based on LinkedIn profile data|
How can I manage cookies?
Most current browsers allow you to manage cookies stored on your computer. You may choose to reject all cookies, but this may result in our website not being accessible or having degraded functionality.