Privacy notice

Last updated October 7, 2024

Your privacy is important to Christie^® Digital Systems USA, Inc. together with its affiliates and subsidiaries (“Christie Digital,” “we,” “us,” or “our”). This Privacy Notice explains the types of information we may collect from you or that you may provide when you visit our websites, including https://www.christiedigital.com, https://www.christiemarketplace.com, https://www.christieavenue.com, https://www.viveaudio.com, https://www.lamptolaser.com, and https://www.christieuniversity.com (our “Websites”), use our online or digital services or otherwise interact with us and that link to or reference this Privacy Notice (collectively, the “Services”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. This Privacy Notice does not apply to information collected through any other means, including on any other website operated by a third party.

Please read this Privacy Notice carefully. If any term in this Privacy Notice is unacceptable to you, please do not use our Services or provide us with any personal information.

In this Privacy Notice, when we talk about “personal information,” also referred to as “personal data,” we mean any information that is related to an identified or identifiable natural person.

This Privacy Notice does not apply to any products, services, websites, mobile applications, or content (including advertising) offered by third parties or that may be linked to or from the Services. Data collected by these third parties is covered by their own privacy notices.

TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE USE YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. CONTROLS FOR DO-NOT-TRACK FEATURES
10. CHANGES TO THIS PRIVACY NOTICE
12. YOUR CHOICES
13. CONTACT US
14. YOUR PRIVACY RIGHTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you provide to us
In Short: We collect personal information that you provide to us.

Depending on your relationship with us, we or our third-party service providers acting on our behalf, may collect certain types of personal information from you, including personal information that you voluntarily provide to us when you register for an account with the Services, express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, when you apply for a position to work for our company, or otherwise when you contact or interact with us. The personal information we collect includes the following:

Personal Details: Name, phone number, email address, mailing address, company name, job title, other professional and employment information, information related to your transactions and interactions with us, and other contact information;
Commercial Information: Records of products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies;
Financial Information: Billing and payment information (e.g., bank account number, credit or debit card number or any other financial information for payment purposes). Financial information is stored and processed by our third-party service providers, including our payment processors;
Account Information: Account login credentials such as usernames and passwords; and
Views and Opinions: Feedback, survey responses, and other information included within your interactions with us or otherwise provided via the Services.

Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

As with many businesses, we may use automatic data collection technologies when you visit, use, or navigate the Services, including cookies, flash cookies, web beacons and pixels. This information may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily used to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

The information we collect includes:

Log and Usage Data: Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
Device Data: We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data: We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Cookies

The technologies we use for automatic data collection include cookies (i.e., browser cookies), flash cookies, and web beacons. We may store cookies (e.g., locally stored objects) on your device when you use our Services. These technologies help us speed up your future activities and improve your experience by remembering the information that you have already provided to us. Third parties operating on our behalf may also use these technologies to provide us with anonymous data and information regarding the use of our Websites. You may block or delete these technologies from your device. However, by disabling such technologies, you may not have access to the entire set of features of our Websites. For more information about cookies, including links to web browser instructions for disabling and managing such technologies, visit https://optout.networkadvertising.org.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://www.christiedigital.com/about/cookie-notice.

Google Analytics

We share your information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

You may prevent the use of Google Analytics by disabling cookies as described above. You may also prevent Google Analytics from recording the data generated by the cookie and pertaining to your use of our Services (including your IP address), or processing this data, by downloading and installing the following browser plug-in available through Google at the following link: https://tools.google.com/dlpage/gaoptout.

Information we collect from other sources

We may collect personal information about you from our affiliates and our partners and their service providers and contractors. For example, this may include your current job position, business address, company name, and position title provided by your employer. We also may obtain information you have made publicly available, including from websites and online services you use, consumer research platforms, and/or business contact databases.

2. HOW DO WE USE YOUR INFORMATION?

In Short: We use your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To provide the Services to you. We process your information to provide you with the Services, including those related to our training programs, and in the context of your business relationship with us including to perform our contractual obligations.
To facilitate account creation and authentication and otherwise manage user accounts. We process your information so you can create and manage your account, as well as to send you information related to your account.
To respond to user inquiries/offer support to users. We process your information to respond to your inquiries, including requests for demos, and solve any potential issues you might have with a requested service.
To send administrative and transactional information to you. We process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
To fulfill and manage your orders. We process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
To enable user-to-user communications. We process your information if you choose to use any of our offerings that allow for communication with another user.
To request feedback. We process your information when necessary to request feedback and to contact you about your use of our Services.
To send you marketing and promotional communications. We process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences, including communications to which you have subscribed. You can opt out of our marketing emails at any time. For more information, see the “YOUR CHOICES” section below.
To deliver targeted advertising to you. We process your information to develop and display personalized content and advertising tailored to your interests, location, and more. For more information see our Cookie Notice: https://www.christiedigital.com/about/cookie-notice.
To protect our Services. We process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
To identify usage trends. We process information about how you use our Services to better understand how they are being used so we can improve them.
To determine the effectiveness of our marketing and promotional campaigns. We process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

Applicable law requires us to explain the valid legal bases we rely on in order to process your personal information. As such, we rely on the following legal bases to process your personal information:

Consent. We process your personal information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
Performance of a contract. We process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
Legitimate interests. We process your personal information when it is necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we process your personal information for some of the purposes described in order to:
- Send users information about special offers and discounts on our products and services based on users opt-in selection
  Analyze how our Services are used so we can improve them to engage and retain users
- Support our marketing activities
- Diagnose problems and/or prevent fraudulent activities
- Understand how our users use our products and services so we can improve user experience
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

4. WHEN AND WITH WHOM DO WE DISCLOSE YOUR INFORMATION?

In Short: We may disclose information in specific situations described in this section and/or with the following third parties.

We may disclose information about you as follows and as otherwise described in this Privacy Notice or at the time of collection:

With companies and vendors that perform services for us, including email service providers, payment processors, training program providers, fraud prevention vendors, analytics providers, advertising partners, and other service providers.
With our business partners to offer you certain products, services or promotions.
To accountants, auditors, lawyers, and other outside professional advisors to Christie Digital, subject to appropriate contractual obligations of confidentiality.
Where required by law, court order, or subpoena if we believe disclosure is in accordance with, or required by, applicable law or legal process or where necessary to prevent, detect, or prosecute criminal offenses or to protect the rights, property, and safety of Christie Digital or others.
In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Between and among Christie Digital and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership.
With your consent or at your direction.

We may also process and disclose information to third parties if the information has been de-identified or aggregated in a way so it cannot be used to identify you.

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We transfer, store, and process your information in countries other than your own.

Our servers are located in Canada. If you are accessing our Services from outside Canada, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may disclose your personal information (see “WHEN AND WITH WHOM DO WE DISCLOSE YOUR INFORMATION?” above), in Canada, and other countries.

European Commission’s Standard Contractual Clauses:

We have implemented measures to protect your personal information, including by using the European Commission’s Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers. These clauses require all recipients to protect all personal information that they process originating from the EEA or UK in accordance with European data protection laws and regulations. Our Standard Contractual Clauses can be provided upon request. You can make such a request by contacting us by using the contact details provided in the “CONTACT US” section below. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by applicable law.

We will only keep your personal information for as long as it is necessary to provide the Services, including for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by applicable law (such as tax, accounting, or other legal requirements). When determining the retention period, we take into account criteria, such as the type of services requested by or provided to you, the nature and length of our relationship with you, use of our Services, and the impact on the Services if we delete your personal information.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at webmaster@christiedigital.com.

9. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

10. CHANGES TO THIS PRIVACY NOTICE

In Short: We will update this Privacy Notice as necessary under applicable law.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently. Your use of the Services after such change(s) will be deemed your acknowledgement of the new notice.

11. YOUR CHOICES

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence. You may also make certain choices related to our use of online tracking technologies and marketing and promotional communications.

Marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided in the “CONTACT US” section below. If you opt out, we may still send you non-promotional emails, such as those about your account, your use of the Services, or our ongoing business relations.
Account information: To review or change the information in your account or terminate your account, please visit https://www.christiedigital.com/lp/data-subject-action-request or contact us at https://www.christiedigital.com/help-center/contact-us. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or as otherwise permitted under applicable law.
Cookies and other tracking technologies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies by visiting your browser’s settings. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookie Notice: https://www.christiedigital.com/about/cookie-notice.

12. CONTACT US

If you have questions or comments about this Privacy Notice, or to exercise certain privacy rights described in “YOUR PRIVACY RIGHTS” section below, please contact us at:

Phone: +1 (714) 236-8610
E-mail: webmaster@christiedigital.com
Postal Mail: 10550 Camden Drive, Cypress, California, USA 90630

13. YOUR PRIVACY RIGHTS

In Short: Depending on your state or country of residence, you may have certain rights related to our collection, processing, disclosure, storage or otherwise use of your personal information under applicable law.

Residents of the EU/EEA/UK/Switzerland

If you are a resident of the EU/EEA/UK/Switzerland, you may have certain rights under applicable law, including:

Right to Access. You have the right to request access to your personal information, which includes the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and where that is the case, access to the personal information and information related to how it is processed.

Right to Rectification. You have the right to ask us to rectify any inaccurate personal information about you and to have incomplete personal information completed.

Right to Delete. You have the right to ask us to delete your personal information if: (i) we no longer need it for the purposes for which we collected it; (ii) we have been using it with no valid legal basis; (iii) we are obligated to erase it to comply with a legal obligation to which we are subject; (iv) we need your consent to use the information and you withdraw consent; or (v) you object to us processing your personal information where our legal basis for doing so is our legitimate interests and there are no overriding legitimate grounds for the processing.

Right to Restrict or Object. You have the right to restrict or object to processing concerning your personal information, which includes restricting us from continuing to process your personal information under certain circumstances (e.g., where you contest the accuracy of your personal information, processing is unlawful, your personal information is no longer needed for the purposes of processing, or you have otherwise objected to processing related to automated individual decision-making).
Right to Data Portability. You have the right to data portability, which includes certain rights to have your personal information transmitted from us to another controller.

Right to Withdraw. Where data processing is based on your consent, you have the right to withdraw your consent at any time.

Right to Complain. The right to lodge a complaint with the competent supervisory authority. If you are located in the EU/EEA or UK, you may contact your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Any requests related to the above rights may be made by contacting us at the information provided in the “CONTACT US” section above.

Residents of California

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (Civil Code Section 1798.100, et seq.) (“California Law”), provides eligible California residents with specific rights with respect to our collection, retention, disclosing, selling, sharing, and use of personal information. This section supplements this Privacy Notice and applies solely to eligible residents of the State of California. Any terms used but not defined in this section have the same meaning as defined in California Law.

Collection of Personal Information

In the preceding twelve (12) months, we have collected the following categories of personal information about you from the sources described in the “WHAT INFORMATION DO WE COLLECT” section above:

Identifiers: Contact details, including name, phone number, email address, mailing address, unique personal identifier, online identifier, Internet Protocol address, and account name.
Personal information as defined in the California Customer Records statute: Name, contact information, billing and payment information (e.g., bank account number, credit or debit card number or any other financial information for payment purposes), education, employment, and employment history.
Commercial information: Transaction information and purchase history.
Internet or other similar network activity: Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements.
Geolocation data: Device location.
Inferences drawn from collected personal information: Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, your preferences and characteristics.

Use of Your Personal Information

The business or commercial purpose for collecting the information described above is disclosed in the “HOW DO WE USE YOUR INFORMATION” section above.

Disclosure of Personal Information

In the preceding twelve (12) months, we may have disclosed your personal information for a business or commercial purpose described in the “HOW DO WE USE YOUR INFORMATION” section above to the categories of third parties described in the “WHEN AND WITH WHOM DO WE DISCLOSE YOUR INFORMATION” section above.

Sales and Shares of Personal Information

We do not sell your personal information for monetary profit. However, we engage in certain information disclosure activities that may be considered “sales” or “sharing” under California Law. In the last twelve (12) months, we have sold or shared the following personal information:

Category	Business or Commercial Purpose	Categories of Third Parties to Whom Personal Information was Disclosed That May be Considered a “Sale/Sharing” Under California Law
Identifiers.	To provide you with personal advertising and content	Advertisers and advertising networks
Internet or other similar network activity.	To provide you with personal advertising and content	Advertisers and advertising networks

We do not knowingly sell or share the personal information of consumers under 16 years of age.

California Privacy Rights

The following section describes rights provided to California residents under California Law and explains how to exercise those rights. Your California Law rights include:

Right to Know or Access. You have the right to request that we disclose to you your personal information that we collected, used, disclosed, shared, and sold.
Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Identity Verification”), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
Right to Correct Inaccurate Personal Information. You have the right to request that we correct any of your personal information that we maintain about you that is inaccurate.
Right to Opt Out of Sales or Sharing of Personal Information. We do not sell your personal information for monetary profit. However, we may engage in certain information disclosure activities that may be considered “sales” or “sharing” under California Law. If we sell your personal information to or share such information with third parties, you may have the right to opt-out of the sale or sharing of such information. To exercise the right to opt out, you (or your authorized representative) may submit a request to us by visiting the Do Not Sell or Share My Personal Information link on the homepage.
- If you have an opt-out preference signal enabled (e.g., the Global Privacy Control), you will automatically be opted out of the sale or sharing of your information, but we may ask you to confirm your preference if you have previously consented to the sale or sharing of your personal information. To download and use a browser supporting the opt-out preference signal, please visit https://globalprivacycontrol.org/orgs. If you choose to you the opt-out preference signal, you will need to enable it for each supported browser or browser extension you use.
Right to Non-Discrimination. We will not discriminate against you for choosing to exercise any of your rights. If you exercise certain rights, understand that you may be unable to use or access certain features of the Services.

Exercising Your Rights

To exercise your rights under California Law, please submit a request by using the interactive form, available at https://www.christiedigital.com/about/dsar-form or by contacting us via the methods in the “CONTACT US” section above.

Identify Verification

We may require you to prove your identity to exercise certain rights. Depending on your request, we will ask for information such as your name, your telephone number, email address, and/or date of last communication with us. We may also ask you to provide a signed declaration confirming your identity. We will only use personal information provided in your consumer request to verify your identity or authority to make the request.
Only you, your parent, guardian (if you are under 13 years or age), conservator, a person to whom you have given power of attorney, or an authorized agent may make a verifiable consumer request related to your personal information. You may, however, make a verifiable consumer request on behalf of your minor child if necessary. Your verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative. We cannot respond to your request if we cannot verify your identity or authority to make the request. You may only make a verifiable consumer request for your right to access twice within a 12-month period.

California “Shine The Light” Law

In addition to your rights under California Law, California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure, if any, of their personal information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of personal information disclosed and the names and addresses of all third parties that received personal information for their direct marketing purposes during the immediately prior calendar year (e.g., requests made in 2024 will receive information about 2023 sharing activities). To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California address for our response. You may make this request in writing by contacting us via the methods in the “CONTACT US” section above.

Residents of Other U.S. States

For eligible residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia, you also have rights with respect to the personal information that we collect about you. This section supplements this Privacy Notice and applies solely to eligible residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia. Any terms not defined in this section have the same meaning as defined under applicable Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia privacy law, including the Colorado Privacy Act, Connecticut Data Privacy Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act. Subject to certain exceptions, if you are an eligible resident of one of these states, you have certain privacy rights which may include, depending on your state of residency:

Right to Know/Access. You have the right to confirm whether we processes your personal information and access such personal information. You also have the right to obtain your personal information in a portable, and to the extent reasonably feasible, readily usable format that you can transmit without hinderance. In addition, eligible Oregon residents have the right to confirm the categories of personal information we process or have processed, as well as a list of specific third parties to which we have disclosed any personal information.

Right to Delete. You have the right to request that we delete the personal information you have provided to us or that we have otherwise obtained about you.

Right to Correct. You have the right to request that we correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information.

Right to Opt Out. You have the right to opt out of the processing of your personal information for the purposes of (i) targeted advertising, (ii) the sale of your personal information and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. Please note that we do not engage in such profiling as defined under applicable law.

Right to Appeal. You have the right to appeal our decision with regard to your request to exercise any rights described herein.
You do not need to create an account with us to exercise your Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia privacy law rights. To exercise the rights described in this section, including your opt-out rights, please submit a request to us by using the interactive form, available at https://www.christiedigital.com/about/dsar-form or by contacting us via the methods in the “CONTACT US” section above.

Canadian Privacy Rights

If you are located in Canada, the Personal Information Protection and Electronic Documents Act and applicable provincial privacy legislation (collectively, “Canadian Privacy Laws”) govern the collection, use and disclosure of personal information by organizations in the course of commercial activities. If you are located in Canada, this Canadian Privacy Rights section applies to you. Additionally, in certain Canadian provinces, provincial privacy legislation will apply to you, namely, for the Province of Alberta - the Personal Information Protection Act (Alberta), for the Province of British Columbia – the Personal Information Protection Act (British Columbia) and for the Province of Quebec – the Act respecting the protection of personal information in the private sector also applies to you and the expression “Canadian Privacy Laws” therefore also includes reference to these provincial laws.

Consent

In Canada, consent is the legal basis upon which organizations may collect, use and disclose personal Information. Accordingly, personal information will only be collected, used, and disclosed by us for the purposes described above in this Privacy Notice under the heading “How Do We Use Your Information?” with your consent, including your implied consent made by your continued use of the Services.

If you provide personal information of a third party to us, you represent that you have complied with the requirements of Canadian Privacy Laws with regard to its collection before providing it to us and for us to use and disclose such information as set out in this Privacy Notice.

Online Behavioral Advertising

With respect to the information that we collect using cookies or similar technologies that we have described above, you can opt out of several third party ad servers’ and networks’ cookies simultaneously by using an opt-out tool created by the Digital Advertising Alliance of Canada and an opt-out tool created by the Network Advertising Initiative. Opting out of a network does not mean you will no longer receive online advertising. It does mean that the network from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.

Your Rights

Under Canadian Privacy Laws, you may have the following rights:

Right to Access and be Informed. Subject to certain exceptions, you have the right to access the personal information we maintain about you and to be informed about the personal information we collect, use, process, disclose, retain and have deleted about you. You may request additional information to clarify the extent of your consent. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
Right to an Accounting. You have the right to receive an accounting of the categories of third parties to whom we have disclosed your personal information.
Right to Correct. You have the right to correct or supplement the personal information we maintain about you if it is inaccurate or misleading and to have it completed if it is incomplete. Where appropriate, you also have the right to have personal information that you have corrected or supplemented transmitted to third parties who have had access to your personal information. If we refuse to rectify your personal information, we will attach a statement to the record that sets out the reason why we have refused to make the rectification.
Right to Withdraw Consent. You have the opportunity to withdraw your consent at any time to our collection, use or disclosure of your personal information, subject to reasonable prior notice and applicable legal and contractual restrictions. Depending on the nature of the personal information for which you choose to withdraw your consent, if you do withdraw your consent we may not be able to provide our products and services to you; we will explain the implications of withdrawing consent to you when we receive your notice of withdrawal. If you withdraw your consent in respect of any personal information that has been provided to third parties, we will advise such third parties of your withdrawal to the extent required by Canadian Privacy Laws.
Right to be Notified of a Data Breach. If you are in Quebec, you have the right to be informed of a confidentiality breach involving your personal information that may cause you a serious harm. If you are in the rest of Canada you have the right to be informed of a breach of security safeguards affecting your personal information where there is a real risk of significant harm to you.
Right to Lodge Complaints. You have the right to lodge a complaint about our collection, use or disclosure of your personal information with the Office of the Privacy Commissioner of Canada and any applicable provincial privacy commissioner’s office having jurisdiction.

If you are in Quebec, you may have the following additional rights:

Right to Delete. Under certain circumstances, you may request that we delete your personal information.
Right to Data Portability. You have the right to be provided in a structured, commonly used and machine-readable format, with a copy of your personal information or to have it transferred directly to another entity or person.

To exercise the above rights, please get in touch with us using the contact information provided in the “CONTACT US” section above. We will consider and process your request within a reasonable period of time and in any event within thirty days of receipt of your request or such longer time as we may be permitted under Canadian Privacy Laws. Please be aware that under certain circumstances, Canadian Privacy Laws may limit your exercise of these rights. We will also retain the personal information that has been the subject of an access request or a rectification request for as long as necessary to allow you to exhaust any recourse provided by law.

Business Transfers

Where we disclose your personal information in the event of a business transfer described in our Privacy Notice above, we will ensure that the information is treated confidentially by the parties to the transaction and that the information will be protected by security safeguards appropriate to its sensitivity. If the transfer is completed we will require that the parties to the transaction continue to treat your personal information in accordance with Canadian Privacy Laws.

Service Providers

Where we disclose personal information to services providers, we ensure that they are bound by contractual obligations to:

Use personal information only for providing the service;
Refrain from disclosing or communicating personal information without our consent;
Implement rigorous security measures;
Allow us to audit these measures;
Notify us immediately of a confidentiality breach; and
Destroy personal information at the end of the contract.

Electronic Marketing Messages

We may send electronic marketing messages for the purposes described above in this Privacy Notice, however, notwithstanding our opt-out procedures described herein, Canada’s anti-spam legislation contains special rules that regulate the way in which we may send these electronic messages to you. If you are located in Canada, we will only send electronic marketing messages to you if we have your prior opt-in consent, unless an exception or a specific form of implied consent applies.

Information Security and Governance

We are committed to protecting your personal information and have implemented policies and practices that govern our treatment of personal information, including:

a framework applicable to the use, communication, retention and destruction of personal information;
the roles and responsibilities of our employees throughout the life cycle of the personal information; and
a process for handling complaints concerning the protection of personal information.

If you are located in Canada, you may contact the Office of the Privacy Commissioner of Canada.

Residents of Australia

We collect and process your personal information under the obligations and conditions set by Australia’s Privacy Act 1988 (“Privacy Act”).
This Privacy Notice satisfies the notice requirements defined in the Privacy Act, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

offer you the products or services that you want
respond to or help with your requests
manage your account with us
confirm your identity and protect your account

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section “YOUR CHOICES.”

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner.

Privacy notice

Need help? Contact us.