Last Updated: 3/25/2021
This statement extends the Outmatch Website Privacy Statement with additional information relevant to certain geography-specific laws or regulations. The use of “Outmatch”, “we”, “us”, or “our” within this Statement are all references to Outmatch, Inc. and its relevant affiliates and subsidiaries.
1. United States:
Notice to California Residents
If you are a California resident, California law provides you with certain rights. These rights may be limited or inapplicable by law if you are an employee, contractor, or job applicant of Outmatch.
If Outmatch receives your information solely in context of fulfilling an Agreement with one or more of our customers, we will not use or disclose your information, except as necessary to accomplish the business purpose for which we received your information. In these circumstances, Outmatch’s Customer remains primarily responsible for your information. As a result, we may re-direct a query about our use of your information to our Customer for response. Details can be found in our Platform Privacy Statement.
- Identifiers
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
- Protected classification characteristics under California or federal law
- Internet or other similar network activity
- Sensory data
- Professional or employment-related information
- Inferences drawn from other personal information
- Identifiers
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
- Internet or other similar network activity
- Inferences drawn from other personal information
The following CCPA categories of data are NOT captured by Outmatch:
- Commercial information
- Biometric information
- Geolocation data
- Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))
1.1 Your Right to Opt-Out:
California Civil Code Section 1798.83 permits you to opt out of the disclosure of your personal information by Outmatch to third parties for those third parties’ direct marketing purposes. We do not disclose your personal information to third parties for the third parties’ direct marketing purposes. If that should change, subject to certain limitations, you will have the right to direct us not to disclose your personal information.
We do not sell personal information to third parties. If that should change, subject to certain limitations, you will have the right to direct us not to sell your personal information.
You can contact Outmatch about your opt-out rights by sending us an email privacy@outmatch.com or by sending a written request to us. Please see “How to Contact Us” in the Outmatch Website Privacy Statement.
Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted (if applicable) and that there may be circumstances in which the law does not require or allow removal, even when requested.
1.2 Your Right to Access Specific Information and Data Portability:
You may request that we disclose certain information to you about our collection and use of your personal information in the past 12 months. Once we receive and confirm your personal information request, we will disclose to you up to the limits permitted under applicable law:
- The categories and specific pieces of personal information we collected about you;
- The categories of sources for the personal information we collected about you;
- Our business or commercial purpose for collecting that personal information;
- The categories of third parties with whom we share that personal information; and
- If we sold or disclosed your personal information for a business purpose, two separate lists identifying: (a) the categories of your personal information collected and sold, and the categories of the third parties to whom the data was sold; and (b) the categories of your personal information that was disclosed for business purposes.
1.3 Your Right to Request Deletion:
You may request that we delete any of the personal information that we collected from you and retained, subject to certain exceptions. We may deny your request if the information that you are requesting we delete relates to your past, current or prospective employment with Outmatch, including but not limited to information necessary to administer Outmatch’s employee benefits programs.
We may also deny your request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our agreement with you;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Debug products to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
- Comply with California Penal Code Section 1546 et seq. (the California Electronic Communications Privacy Act);
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
- Comply with a legal obligation; or
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
1.4 Your Right to Non-Discrimination
Unless permitted or required by law, if you exercise any of your rights under the CCPA, we will not:
- Deny you goods or services;
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
- Provide you a different level or quality of goods or services; or
- Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services.
1.5 How to Exercise Your CCPA Rights
To exercise any of the CCPA rights described above beginning on January 1, 2020, please submit a verifiable personal information request to us by sending us an email privacy@outmatch.com or by sending a written request to us. Please see “How to Contact Us” in the Outmatch Website Privacy Statement.
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may submit a personal information request. If you elect to use an authorized agent to make a request on your behalf, Outmatch may require additional information from the authorized agent. At this time, the CCPA does not provide employees or representatives of our business partners with the right to make information requests.
You may submit up to two personal information requests within a 12-month period. The verifiable personal information request must:
Either (a) be submitted via your account with one of our sites; or (b) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or an authorized representative; and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
1.6 Response Timing and Format
We endeavor to respond to a personal information request within 30 days of our receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response electronically. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
We do not charge a fee to process or respond to your personal information request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
2. Europe:
2.1 Your Rights Under GDPR
Outmatch processes personal information for the purposes described in this Statement. If we use personal information for purposes other than as described in this Statement, we will provide you with specific notice at the time of collection or before we use your data for such new purposes. In addition, we will respond to requests to fulfill your rights as data subjects in the European Union, as required under EU Regulation 2016/679 General Data Protection Regulation (“GDPR”).
Generally, you have certain rights regarding the personal information that we maintain about you, which in certain circumstances, you will be able to exercise. These rights are as follows:
- You may request a copy of the personal information that we maintain about you. If we maintain your personal information based on your consent or so that we could enter into a contract with you, you can also request that we provide you a copy of your data in a structured, commonly used, and machine readable format.
- If your personal information is incorrect, you may request that we correct, amend or delete personal information that is inaccurate or incomplete.
- You may request that we erase or restrict the processing of your personal information if there is disagreement about its accuracy or legitimate usage.
- When our legal basis for processing your information is your consent, you may withdraw your consent at any time.
- You may object to the processing of your personal information in certain circumstances when we (i) process your information for the purposes of our legitimate interests, (ii) use your personal information for direct marketing; or (iii) use your personal information for statistical purposes.
2.2 How to Exercise Your GDPR Rights
Individuals who desire to make an individual rights request in accordance with the GDPR are directed to make such a request by contacting Outmatch’s privacy team (please see “How to Contact Us” in the Outmatch Website Privacy Statement). Such requests will first need to be verified by ‘reasonable means’ and an individual will be asked to specify the information the request relates to. Subject to applicable law, we will comply with your request as soon as practicable, and in any event, within one month after receiving a valid request. If your request is particularly complicated, we may have to extend this period to 2 months. Access and correction may be done for free, unless requests are repetitive, excessive or unfounded, in which case we may charge you the administrative costs we have incurred handling the request.
3. Asia:
3.1 Adherence to APEC
Outmatch abides by the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules System. The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies.