Privacy Information for California Residents

Last updated May 24, 2024

This subsection applies only to “personal information” about California residents, as that term is defined in the California Consumer Privacy Act, as amended (“CCPA”), and it supplements the information in the rest of our Privacy Notice above. Data about individuals who are not residents of California is handled differently and is not subject to the same rights described below. This section does not apply to data that is exempt from the CCPA, such as publicly available information. Californians who wish to exercise the rights described here with respect to Processor Data, where Picarro processes data on behalf of a customer, should contact the customer on whose behalf we handle the data.

Categories of personal information we collect and disclose

During the 12 months leading up to the effective date of this Privacy Notice and on an ongoing basis, Picarro has collected all of the following information from and about California residents:

Identifiers, such as:

Contact details and professional details, such as name, email address, address, and phone number
Online identifiers, such as IP address and account ID information

Professional or employment related data (such as title and name of company)

Commercial information, such as:

Information about users’ experience with our products, services, events and online forums and communities,
Information about actual or prospective customer personnel’s other interactions with Picarro, e.g., procurement, customer service, and point of sale data
Information about actual or prospective users’ interests
Certain data we handle in connection with training and certification programs, such as testing results.
Other business-related data collected on our websites (such as online forum registrations) and elsewhere for our own business (such as at events)

Audio or video information, such recordings of meetings, or photographs collected from certification candidates for identity verification and security checks

Financial data, such as payment information for Picarro products, services and investor relations-related data

Certain internet or other network or device activity (such as IP addresses, device identifiers, cookie data, device attributes, device usage information, browsing information, and metadata)

Account login credentials

Other information that identifies or can be reasonably associated with an individual

Inferences drawn from any of the above

We intend to retain this information until we determine retention no longer is necessary for the purposes described further below. Because we may collect and use the same category of personal information for different purposes and in different contexts, there is not typically a fixed retention period that always will apply to a particular category of personal information.

Picarro uses personal information as follows:

To provide our products, services, events, websites, communities, training, certifications, and other business offerings
For marketing, advertising, and other communications (including customizing and tailoring all of them for the particular recipient)
To manage our relationships with customers, partners, suppliers, event attendees, and others
For surveys and other market research
To analyze, improve, and create Picarro services and other business offerings
To enforce the legal terms that govern our business and online properties
To provide security and business continuity
To comply with law and protect rights, safety, and property
For other purposes requested or permitted by our customers or users, or as reasonably required to perform our business

CCPA “sale” of California personal information

Picarro does not sell personal information as the term “sell” is traditionally understood. But “sell” under the CCPA is broadly defined. As described further below, some of our disclosures of personal information qualify under the CCPA as what it defines as a “sale” or “sharing” of personal information. In many cases, for example, “sale” includes the disclosure of personal information to third parties in exchange for something of value, even if no money changes hands. For example, disclosing an advertising or device identifier to a third party to receive their services may be considered a “sale” under the CCPA in some cases. During the 12 months leading up to the effective date of this Privacy Policy, we have “sold” and “shared” (as those terms are defined under the CCPA) what the CCPA calls “identifiers” (like IP addresses), “internet or other electronic network activity information” (like information regarding an individual’s browsing interactions on Picarro.com), and “commercial information” (like the fact that a browser visited a page directed to people who are considering purchasing from us) to third parties that assist us, such as marketing providers and analytics providers. This practice continues today. To our knowledge, we do not “sell” or “share” (as those terms are defined under the CCPA) the personal information of individuals under 16 years of age.

Californians have a right to ask us not to “sell” or “share” certain personal information as that term is defined in under the CCPA. You can make such a request by performing BOTH of the following steps:

send us an email at privacy@picarro.com with that request;
Use "Do Not Sell or Share My Personal Information" link to exercise your right to opt-out.

Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this section.

Other Disclosures of Personal Information

In the last 12 months, we disclosed California personal information to third parties as follows:

Category of personal information	Categories of third parties to which it is disclosed
Identifiers (such as name, address, email address and other contact information)	Our affiliates.
	Our customers.
	Third parties that assist us, such as our resellers, event providers, payment processors, marketing providers, testing providers, analytics providers, providers of technical services (e.g., providers of data storage, data backup, and CRM systems), and other subcontractors.
	Joint marketing partners.
	Security researchers.
	computer emergency response teams
	Employers and others who seek verification of an individual’s claimed certification status.
	Entities involved in dispute resolution (such as an arbitrator or an opposing party).
	Entities involved in potential or actual significant corporate transactions or events.
	Governmental entities.
Commercial information, (such as information about an individual’s interests and interactions with us, our partners, or our customers, including transaction data)	Same as first row in this chart.
Financial data (such as payment information)	Affiliates, third parties that assist us, and governmental entities, entities involved in dispute resolution (such as an arbitrator or an opposing party), entities involved in potential or actual significant corporate transactions or events.
Audio and visual information (such as CCTV images or recordings of calls or meetings)	Affiliates, third parties that assist us, and governmental entities
Internet or other network or device activity (such as IP addresses, device identifiers, cookie data, device attributes, device usage information, browsing information, and metadata)	Same as first row in this chart.
Geolocation information	Affiliates, third parties that assist us, and governmental entities, joint marketing partners, researchers.
Account login credentials	Affiliates, third parties that assist us, researchers.
Professional or employment related data (such as title)	Same as first row in this chart.
Other information that identifies or can be reasonably associated with an individual	Same as first row in this chart.
Inferences drawn from any of the above	Same as first row in this chart.

We do not use or disclose “sensitive personal information” covered by this Notice and as defined in the CCPA in a manner that requires us to offer a special right to limit our use of this data under the CCPA.

CCPA Right to Access, Correct, or Delete Personal Information

If you are a California resident, California law also may permit you to request that we:

Provide access to and/or a copy of certain information we hold about you;
Delete certain information we have about you;
Correct certain personal information we have about you; and
Inform you about the categories of personal information we have collected about you in the preceding 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we have disclosed certain personal information, and more specific detail about what categories of information were "sold," "shared" or disclosed to particular categories of third parties, similar to the detail above this section of the Privacy Policy;

Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you, so we may reject a deletion request for that information while providing services to you.

To request to exercise any of these rights and receive the fastest response, please email us at privacy@Picarro.com. We reserve the right to require verification of your identify before we fulfill a request, which may include requiring you to login to an existing Picarro account, providing us with information that matches our records for you, responding to an email we send, or taking other steps relevant to your relationship with us and the nature of your request.

For security and legal reasons, however, Picarro reserves the right not to accept requests that require us to access third-party websites or services.

You have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA.