Categories of Personal Information (PI) | Categories of Third Parties to Whom Such PI is Disclosed | Specific Business or Commercial Purpose for Disclosure |
---|
Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers), or information that identifies, relates to, describes, or is capable of being associated with, a particular individual | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☒ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☒ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☒ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Characteristics of protected classifications under California or federal law. | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☒ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☐ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies) | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☒ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☐ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Biometric information | - ☒ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☐ email marketers/email marketing partners;
- ☐ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☐ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☐ gov’t entities;
- ☐ operating systems and platforms;
- ☐ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| N/A |
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement) | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☒ advertising networks;
- ☒ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☒ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☒ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Geolocation data | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☒ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☒ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Audio, electronic, visual, thermal, olfactory, or similar information (sensory data) | - ☒ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☐ email marketers/email marketing partners;
- ☐ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☐ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☐ gov’t entities;
- ☐ operating systems and platforms;
- ☐ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| N/A |
Professional or employment-related information | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☐ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☒ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☐ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☒ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Education information | - ☒ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☐ email marketers/email marketing partners;
- ☐ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☐ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☐ gov’t entities;
- ☐ operating systems and platforms;
- ☐ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| N/A |
Inferences drawn from any of the above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, behavior, etc. | - ☐ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☒ email marketers/email marketing partners;
- ☒ email service providers;
- ☐ offline marketing partners;
- ☐ advertising networks;
- ☐ payment processors;
- ☐ data hygiene companies;
- ☐ ISPs;
- ☐ data analytics providers;
- ☐ gov’t entities;
- ☐ operating systems and platforms;
- ☒ social networks;
- ☐ data brokers;
- ☐ acquirer of assets;
- ☐ others? (detail)
| - ☐ Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
- ☐ Helping to ensure security and integrity;
- ☐ Debugging to identify and repair errors that impair existing intended functionality.
- ☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
- ☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- ☐ Undertaking internal research for technological development and demonstration.
- ☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
|
Sensitive personal information | - ☒ not applicable (not disclosed)
- ☐ direct lead buyers;
- ☐ email marketers/email marketing partners;
- ☐ email service providers;
- ☐ offline marketing partners;
|