This addendum supplements our Privacy Notice and applies only to California Residents. To the extent the California Consumer Privacy Act of 2018, Cal. Civ. Code §§ 1798.100 et. seq (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”) is applicable, this Section is only applicable to you if you are a resident of the state of California (“California Residents”), and only applies to personal information for which Company is a “Business” (as defined in the CCPA, as amended). “Personal Information” means information that identifies, relates to, describes, could reasonably be associated with, or could be reasonably linked directly or indirectly with a particular California consumer or household. Personal Information does not include (i) publicly available information from government records; (ii) deidentified or aggregated consumer information; or (iii) information excluded from the scope of the CCPA, as amended, such as:
CCPA applies to Personal Information we collect from California Residents on or through our services and through other means (such as information collected offline or in person).
As a Business, we may need to collect certain Personal Information from you. If you do not provide the information that we ask for, we may not be able to provide you with the requested services. Sensitive Personal Information is a subset of Personal Information that requires greater security protections and standards of care in handling. For more information please click here and scroll to definition of “Sensitive personal information.” With respect to Personal Information for which you are a “Business” and inriver is a “Service Provider,” as defined in the CCPA, please see the applicable Service Agreement or Terms of Service, as the case may be.
This California Privacy Addendum and the Privacy Notice explain our practices for collecting, using, sharing, maintaining, protecting, and disclosing such information.
Please note that we do not currently recognize automated browser signals regarding tracking mechanisms, which may include ‘Do Not Track’ instructions.
Your Colorado Privacy Rights
This addendum supplements our Privacy Notice and applies only to Colorado Residents. If you are a Colorado resident, the Colorado Privacy Act (“CPA“) provides you with specific rights regarding your personal data, subject to certain exceptions. The CPA also does not apply to certain types of personal data maintained in compliance with specific federal privacy laws, such the Health Insurance Portability and Accountability Act and the Fair Credit Reporting Act, or for certain governmental purposes. For a complete list see CRS §6-1-1304.
The CPA defines “Personal Data” as any non-public information that can be linked or reasonably linked to an individual and does not include de-identified data. “Sensitive Data Inference(s)” means inferences made by a controller of Personal Data, “alone or in combination with other data, which are used to indicate an individual’s racial or ethnic origin; religious beliefs; mental or physical health condition or diagnosis; sex life or sexual orientation; or citizenship or citizenship status.”
The CPA provides Colorado Residents with the following rights with respect to their Personal Data:
We will not discriminate against you for exercising your rights. To exercise any of your rights, please send us an email at legal@inriver.com or you can also send a request in writing to:
inriver Inc.
Attn: DPO/Compliance
125 South Wacker Drive, #1550
Chicago, IL 60606
To appeal a decision regarding a consumer request please contact us as described above. We will respond within 45 days of your appeal, and any such time may be extended for an additional 60 days if reasonably necessary. We will notify you of any extension within the initial 45-day period. If you still have an unresolved complaint, please direct your complaint to the Colorado Attorney General here Contact the Office of the Colorado Attorney General – Colorado Attorney General | Colorado Attorney General (coag.gov) or call 720-508-6000.
Your Virginia Privacy Rights
This addendum supplements our Privacy Notice and applies only to Virginia Residents. If you are a Virginia resident, the Virginia Consumer Data Protection Act – Va. Code Ann. §§ 59.1-575 to 59.1-584 (“VCDPA”) provides you with specific rights regarding your personal data, subject to certain exceptions. We collect the type of data described in our Privacy Notice, which includes personal data and sensitive data, as defined by the VCDPA, in the manner described herein and in the Privacy Notice. VCDPA defines “Personal Data” as any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal Data does not include de-identified data or publicly available information. Personal Data that is excluded from the scope of the VCDPA includes:
If you do not provide the information that we ask for, we may not be able to provide you with the requested services. Sensitive data is a category of Personal Data that requires greater security protections and standards of care in handling. “Sensitive Data” is defined by the VCDPA as 1) Personal Data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status; 2) the processing of genetic or biometric data for the purpose of uniquely identifying a natural person; 3) the personal data collected from a known child; or 4) precise geolocation data. Subject to limited exceptions, we will only process your Sensitive Data with your consent.
Rights of Virginia Consumers
If you are a Virginia resident the VCDPA provides you with specific rights regarding your Personal Data, subject to certain exceptions. These rights are explained below:
Verification on Consumer Request and Timeline
To exercise any of your rights, please send us an email legal@inriver.com or you can also send a request in writing to:
inriver Inc.
Attn: DPO/Compliance
125 South Wacker Drive, #1550
Chicago, IL 60606
If we are unable to provide you with the requested information, you can appeal our decision by contacting us at legal@inriver.com and within sixty (60) days of receipt of your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may also contact the Attorney General here to submit a complaint.
We keep this Privacy Notice under regular review and will place any updates on this website or notify you via the services or products. The Privacy Notice was last updated on April 20, 2023.