Effective Date: 16 April 2021
[Last Revised: 16 April 2021]
We respect your right to privacy and will only process your Personal Data in accordance with applicable data protection and privacy laws.
This Policy explains how Chuck collects, stores, uses and discloses information from you when you submit Content to and use Chuck products, services, mobile applications and Sites. This Policy applies to users of the Chuck “Service”, defined as the services, APIs, and functionality we make available through our the Site, via private sites or repositories, or through third party sites that utilize our services and functionality, as well as through the Chuck App.
This Policy does not apply to Sites, applications, or services that do not display or link to this Policy or that display or link to different privacy statements; nor does this Policy apply to practices of companies that we do not control or to people we do not employ or manage.
It may be possible for you to browse certain parts of the Site without telling us who you are or revealing any information that enables us to directly identify you as an individual. However, you may lose anonymity once you give us Personal Data about you.
As well as Personal Data, we also collect some information that is not personally identifying, including aggregate information, which is data we collect about use of the Service or about a group or category of users from which it is not possible to identify you (“Nonpersonal Data”; together with Personal Data, collectively “Information”).
When you register for an account, and in the course of your use of the Service, we collect and process the following Personal Data attributable to you as a user:
When you use our Service, we automatically collect Nonpersonal Data sent to us by your computer, mobile device or other access device, such as a device ID or unique identifier, device type, model and brand, geo-location information, computer, network and connection information, access times, operating system and browser version, type and language, app crash data, and the Site you visited before our Site. We also collect Nonpersonal Data about your usage and activity on the Service. This Policy does not restrict or limit our collection and use of Nonpersonal Data.
Here is a list of the cookies that will be used and installed as essential, as well as those analytics cookies that may be used and installed on your computer or device with your consent (optional).
User authentication—these cookies allow us to customize the Website based on your login status (i.e. whether you’re signed in or signed out of your Chuck account).
Site analytics—these cookies help us to understand how visitors use our Site, so we can improve how the Site works.
If any Personal Data attributable to you is included in submitted Content, we will process such Personal Data in order to properly provide our Service. This processing is done on the basis of our legitimate interest of providing our Service. In order to protect your personal integrity, we automatically remove any faces and vehicle license plates in any submitted Content before it is made available as Chuck Content.
We only store your Personal Data as long as it is needed for the purpose for which it was collected. In relation to our registered users we will keep your submitted Personal Data only as long as you are registered as a user. However, after you de-register as a user we may process such Personal Data as is necessary for us to fulfill an agreement with you, or such Personal Data as we are required to keep by law.
In order for us to provide our Service and for the purposes described in this policy, we will keep any submitted Content, as well as data and statistics regarding your use of the Service and geolocational data included in the Content, indefinitely. However, at your request, we will remove all information in relation to such Content, data and/or statistics, which connects it to you as a user.
Your choices regarding our use of your Personal Data for marketing purposes
If you no longer wish to receive marketing-related emails from us on a going-forward basis, you may opt-out of receiving these marketing-related emails by following the unsubscribe instructions in any such message, or by emailing us at email@example.com. We aim to comply with such request(s) as soon as reasonably practicable. Please note that if you do opt-out of receiving marketing-related emails from us, we may still send you administrative messages; you cannot opt-out from receiving administrative messages.
We may use and provide data and information to our partners and customers for commercial purposes after we have removed your name or any other Personal Data from it, or have combined it with other people’s data in a way that it is no longer associated with you.
We also may combine your Information with information we collect from other sources to improve our products and services. Nothing in this Policy should be construed to prevent us from charging a fee to parties who wish to access Chuck Content or to use the Service.
You have the option of submitting Content anonymously as the user name and e-mail address you submit may be created specifically to avoid identifying you as an individual. If you do not submit a valid e-mail address however, this may interfere with your use of the Service through a loss of relevant notifications. Moreover, we cannot guarantee absolute anonymity and make no guarantee that other users will never be able to determine your identity, such as (without limitation) by observations of your activity, the manner in which you express yourself, and other patterns of conduct or behavior. Moreover, all of your activities on the Service will be traceable by others users to your username, from which your actual identity may be known. Notices may be sent to other users regarding suspicious activity and policy violations and refer to usernames and specific items. Please understand that if your username identifies you or is linked to an e-mail address, other users will be able to personally identify your activities.
Further, we may use Personal Data to respond to legal requirements, in connection with a merger, sale of assets, or other similar corporate transactions, to respond to claims that Content violates the rights of others, or to protect the rights, property, or safety or any person.
We do not disclose, sell or rent your Personal Data to third parties for their marketing purposes without your prior consent. If you do consent but later change your mind, you may contact us and we will cease any such activity. We only share your Personal Data as follows:
(i) at your direction and control via your normal and intended operation of the Service, or with your consent, for example, when you agree to our sharing your Personal Data with other selected third parties for their own marketing purposes subject to their separate privacy policies;
(ii) with service providers, consultants or similar contractors, or third parties who provide services or content in connection with our Service in order to support or enhance our or such parties’ products and services or our or such parties’ business operations, or to make available and consummate initiated transactions;
(iv) under written obligations of confidentiality, in connection with or during negotiation of any merger, financing, acquisition, or dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company.
We may also share and disclose Nonpersonal Data for the same purposes as described above.
When other companies, e.g. our service providers, process your Personal Data on our behalf, we always enter into binding data processing agreements that ensure that your Personal Data always enjoys the same level of protection as under this Policy.
We apply appropriate technical and organizational safeguards and take all reasonable steps to help protect your Personal Data in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no one can create a completely secure Site, app or service and third parties may unlawfully intercept, steal or access transmissions or private communications. Therefore, we cannot guarantee that your Information or private communications that you transfer over the internet to us will always be secure or remain confidential.
Your password deserves careful thought and protection. Use unique numbers, letters, and special characters and do not disclose your password to anyone. You must not share your password or your personal sign-in credentials with others, and please remember that you are responsible for all actions taken in the name of your account. If you lose control of your password, you may lose substantial control over your Personal Data and may be subject to legally binding actions taken on your behalf. If your password has been compromised for any reason, you should immediately access your profile to change your password and notify us immediately at firstname.lastname@example.org.
We may process Information on servers located in a number of countries. Accordingly, we may share Information with our service providers and affiliated companies for such companies to carry out any of the activities specified in this Policy. We may also subcontract processing to or share Information with third parties located in countries other than your home country. Information collected within the European Economic Area, for example, may be transferred to, and processed by our affiliates or other third parties identified above that are located in, a country outside of the EEA. However, regardless of country, we will always process Information in accordance with this Policy. In respect to our service providers, we will always enter into a data processing agreement that ensure that their processing gives the same level of protection to your Personal Data as this Policy.
In addition to the above, any transfer of Personal Data from the EEA to a third country outside the EEA, will only be made if permitted by the applicable EU Personal Data protection regulation. This means that we will only initiate such transfer of Personal Data if the receiving country outside the EEA has been deemed by the EU Commission to ensure an appropriate level of protection, if we have entered into the Commission’s standard data protection clauses with the receiving company, or if there are other safeguards in place that permits such a transfer.
The Services are not directed at or intended for children under thirteen (13) years of age, and we do not knowingly collect Personal Data from such children. If you believe that we might have any Personal Data from a child under 13 years of age, please contact us at email@example.com.
We may amend this Policy from time to time. If we make any changes to this Policy, we will post the amended terms on the Site, change the “Last Revised” date above, and where appropriate, notify you by email or via our other notification mechanisms.
You have the right to ask us not to process your Personal Data for marketing or promotional purposes. We will usually inform you (before collecting your Personal Data) if we intend to use your Personal Data for such purposes or if we intend to disclose your information to any third party for such purposes. You may also opt out of receiving promotional emails from us by following the instructions in the emails themselves or by emailing firstname.lastname@example.org. If you opt out, we may still send you non-promotional emails, such as emails about your accounts or our ongoing business relations.
You can see, review and change your Personal Data by logging into the Service or by contacting us at email@example.com. You should promptly update your Personal Data if it changes or is inaccurate.
You have the right to receive confirmation on whether or not we process Personal Data concerning you, and in such cases get access to such Personal Data and also information regarding the Personal Data and how we process it.
You have the right to have inaccurate Personal Data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete Personal Data about you completed.
You have, under certain circumstances, the right to have Personal Data concerning you erased, for example if the Personal Data are no longer necessary in relation to the purposes for which they were collected or if the Personal Data have been unlawfully processed.
You have the right to withdraw a consent provided by you at any time by contacting us. If your consent is withdrawn, we will no longer process your Personal Data for the purpose that you had given your consent to.
In some circumstances you have the right to obtain restriction of the processing of your Personal Data. For example if you contest the accuracy of the Personal Data, you can also require that we restrict the processing of your Personal Data for such a period that enables us to verify the accuracy of the Personal Data.
You have the right to object to processing of your Personal Data that is based on our compelling legitimate interests. If this is done, we must provide compelling legitimate grounds for the processing which overrides your interests, rights and freedoms, in order to proceed with the processing of your Personal Data.
You have the right to receive the Personal Data relating to you and that you have provided to us, in a commonly used electronic format. You have the right to transmit that data to another controller (data portability).
You may always contact Chuck at firstname.lastname@example.org if you have any questions or comments regarding our processing of your Personal Data. You also have the right to complain about the processing of your Personal Data by lodging a complaint to the relevant data protection authority.
You may delete your account any time by emailing email@example.com. Deletion is your sole means of terminating your account.
In addition to the above, you may opt-out of providing Information via the Chuck App to Chuck at any time by uninstalling the application using the standard uninstall process available on your mobile device or via the mobile application marketplace or store.
Please note that once you make a public posting, you may not be able to change or remove it.
If you have any questions about this Policy, please contact us at firstname.lastname@example.org.
CALIFORNIA PRIVACY RIGHTS
If you are a California resident, California law may provide you with certain rights regarding our use of information about you.
Personal Information we collect
We collect certain “Personal Information,” as defined by the CCPA and as listed in section B of the main body of the Policy.
Personal Information does not include: (a) publicly available information from government records; and (b) deidentified information or aggregate consumer information.
We obtain the categories of Personal Information listed in section B of the main body of the Policy listed above from the following categories of sources:
Our use of Personal Information
We may use and have disclosed the Personal Information we collect for the following purposes:
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes as those set out above or in section D in the main body of the Policy above, without providing you notice.
We do not sell Personal Information as the term “sell” is defined in the CCPA.
Sharing Personal Information
We may disclose any or all of the categories above of your Personal Information to third parties for a business purpose, as set forth in this policy, and we have done so in the last 12 months.
We disclose your Personal Information for a business purpose to the categories of third parties set out in section E in the main body of the Policy above.
Your rights and choices
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you (unless an exception applies):
We do not provide these Personal Data access and portability rights for B2B Personal Information to the extent such an exception remains in effect under the CCPA.
Deletion request rights
California residents have the right under the CCPA to request that we delete any of their Personal Information that we have collected and retained, subject to certain exceptions. Once we receive and confirm a verifiable consumer request (see below), we will delete (and direct our service providers to delete) relevant Personal Information from our records, unless an exception applies (such as the B2B exception referenced above).
We may deny California residents’ deletion request if doing so is permitted or required by applicable law, or if retaining the Personal Information is necessary for us or our service provider(s) to:
Verifiable consumer request
To exercise the access, Personal Data portability, and deletion rights under the CCPA described above, please submit to us a verifiable consumer request as set forth above.
Only a California resident may make a verifiable consumer request related to their Personal Information. A California resident may also make a verifiable consumer request on behalf of their minor child.
A verifiable consumer request for Personal Data access or portability can only be made twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify the California resident about whom we collected Personal Information or an authorized representative, and contain sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
Making a verifiable consumer request does not require you to create an account on our Site. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We will endeavour to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For Personal Data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the Personal Information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will not discriminate against you for exercising any of your CCPA rights. Except as permitted by the CCPA, we will not: