Collider's Privacy Policy

In this Privacy Policy, any use of the words "you", "yours" or similar expressions shall mean any user of this website and the app whatsoever. Terms such as "we", "us, "our" or similar expressions shall mean Collider Inc..

COLLIDER PRIVACY NOTICE

Effective as of 28 September 2023 (‘Effective Date’)
Publication Date: 28 September 2023

This Privacy Notice describes how Collider, its affiliated and associated entities, as further detailed below (collectively, ‘Collider’, ‘we’ and ‘us’) collects, uses, discloses, transfers, stores, retains or otherwise processes your personal data.
This Privacy Notice applies when:

You complete a contact request form on collider.site
You participate in any Collider Early Access Program
You interact with us in any other way, such as when you contact our customer support service, respond to our surveys, participate in our competitions, use our developer platform and similar

Our websites, services or documents refer to this Privacy Notice

The Privacy Notice collectively refers to the above as processing of your data in the context of provision of our ‘Services’. Our policy is to always process your personal data in accordance with applicable data protection laws and regulations.

Our Privacy Notice explains:

1. WHO WE ARE
2. PERSONAL DATA WE COLLECT ABOUT YOU
3. HOW WE USE YOUR PERSONAL DATA
4. RECIPIENTS WITH WHICH WE SHARE YOUR PERSONAL DATA
5. SOCIAL MEDIA NETWORKS
6   RIGHTS‍
7. ADDITIONAL DISCLOSURES FOR INDIVIDUALS RESIDING IN SELECT JURISDICTIONS
9. DATA RETENTION, DELETION AND ANONYMIATION
10. SECURITY
11. CHILDREN’S PERSONAL DATA
12. INTEGRATION WITH THIRD-PARTY WEBSITES AND SERVICES
13. AMENDMENTS TO THIS PRIVACY NOTICE1.

1. WHO WE ARE
For the purposes of this Privacy Notice, the ‘controller’ of your personal data is Collider LLC, a United States limited liability company registered in the State of Illinois [File No. 1177207-2 ], 333 North Green Street, Floor 8, Chicago IL 60607, United States.

As the controller Collider LLC decides why and how your personal data are handled by Collider when you use our Services. Collider LLC is responsible for handling your data in line with the applicable data protection rules. If you have any questions, comments or requests regarding this Privacy Notice, please reach out to us by contacting us at innovator@collider.site or to the above correspondence address. If you want to exercise your privacy rights, see further contact options in section 7 of this Privacy Notice.  We have also appointed a data protection officer whom you can contact at innovator@collider.site.

2. PERSONAL DATA WE COLLECT ABOUT YOUWhen we refer to ‘personal data’ in this Privacy Notice, we mean information that makes it possible for us to identify you either directly or indirectly. In some countries it is more common to use terms such as ‘personal information’, ‘personally identifiable information’ or ‘PII’. For the purposes of this Privacy Notice, these terms will be collectively referred to as ‘personal data’. We only collect the personal data provided by you on the contact form on our website.

3. HOW WE USE YOUR PERSONAL DATAWhen we process your personal data, we do so because we have specific and defined reasons (‘purposes’) to do so. In this section we provide more information regarding what these purposes are and which categories of personal data we process with respect to each of the processing purposes.We also must have a legal justification (‘legal basis’) to process your personal data. We may process your personal data when:

We have your consent: when you have given us your free, informed, unambiguous consent to process your personal data for a specific purpose. You are free to withdraw your consent at any time (see sections 7.1. and 7.2).

It is necessary for the performance of a contract between you and Collider: we rely on this legal basis when you request our Services and we need to process your personal data to deliver these Services in line with our Terms. We may also rely on this legal basis to process your personal data where it is necessary to take certain pre-contractual steps, such as to verify your eligibility for our Services.

It is necessary for compliance with a legal obligation: we may be subject to different legal or regulatory obligations in jurisdictions where we operate, which require that we process certain personal data for specific purposes.

It is necessary for the legitimate interests of Collider or a third party: we or a third party may have legitimate interests to process your personal data for various purposes that benefit Collider or third parties, such as other Collider users. Prior to relying on this legal basis, we balance the envisaged benefits of processing for Collider or third parties against your interests, rights and freedoms to determine if we can rely on this legal basis.
‍
If we intend to process your personal data for any purpose other than the purposes set out above, we will notify you of the purpose for such processing and will provide any other relevant information, either by updating this Privacy Notice or, in the case of material change, by notifying you by email or push notification.

4. RECIPIENTS WITH WHICH WE SHARE YOUR PERSONAL DATAWe do not share your data with third parties.  However, we may de-identify your data, and combine and aggregate your de-identified information with other information in a way that it no longer enables your identification and share that de-identified, aggregated information with other third parties not mentioned above – for example, with artists or content rights holders whose content we licence. Such de-identified and aggregated statistics may include demographic data, such as how many users constitute a particular age group, general locations of where groups of users reside and similar data.

5. SOCIAL MEDIA NETWORKS
We do not have access to the personal data which the operators of social networks use to create such insights. The selection and processing of your data for insights is performed exclusively by the operators of social networks. However, in some cases, when using these usage analysis and insight tools, we are jointly responsible (‘joint controllers’) with the operators of the social networks for processing your data to the extent indicated below.

6. YOUR PRIVACY RIGHTS

6.1. WHICH RIGHTS YOU HAVE

You have a number of rights when we process your personal data, as provided by applicable privacy laws. These include:
Right to be informed about how we process your personal data;  You have the right to know how we process your personal data. We provide such information through this Privacy Notice, through information on our Services and by answering your inquiries when you contact us. (See ‘Right of access to your personal data’).

Right of access to your personal data:  You can ask whether we process your personal data, and if we do, you can ask for a copy of your personal data and for information on certain other aspects of the processing, such as purposes of the processing; categories of the personal data processed; recipients or categories of recipients of the data; source of the data where we have not received your data directly from you; information about the existence of automated decision-making or profiling; and information about other privacy rights you have in relation to your personal data.

Right to rectification of inaccurate or incomplete personal data

Right to deletion (erasure) of your personal data:  You have the right to ask us to delete your personal data under certain circumstances, for example when:Your personal data are no longer necessary in relation to the purposes for which we have collected themYou withdraw your consent to processing of your personal data (see ‘Right to withdraw consent’) and there is no other legal ground for the processingYou object to the processing (see ‘Right to object’) and there are no overriding legitimate grounds for the processing or when you object to processing of your data for direct marketing purposesYour personal data were unlawfully processed by usThe erasure is mandated under a law to which we are subjectWe have collected the personal data of a child (see section 11.)Under some circumstances we are legally not required to comply with a deletion request. For more information in this regard see section 9.

Right to restriction of processing of your personal data
Under certain circumstances you may request that we stop processing some or all of your personal data temporarily. You may request the restriction of processing if:You have contested the accuracy of your personal data (see ‘Right to rectification of inaccurate or incomplete personal data’) for the period of verification of the accuracy of your personal dataWhen we unlawfully processed your personal data and instead of erasure of such data you request restriction of their useWhen we no longer need your personal data in relation to the purposes for which they were collected but you require such data for the establishment, exercise or defence of legal claimsWhen you have objected to the processing (see ‘Right to object’), pending the verification on our end whether our legitimate grounds override your interests.

Right to data portability:  You have the right to receive a copy of your personal data in a machine-readable (electronic) format and to have it sent to another service provider, if our legal basis for processing your personal data is your consent or performance of contract.

Right To Object

Right not to be subject to automated decision-making:  You have the right not to be subject to a decision based solely on automated processing (i.e., decisions made by machines without human involvement), including profiling, which would produce legal effects or similarly affect you significantly. Our processing of your data does not involve this type of automated decision-making.

Right to withdraw consent:  Where we rely on your consent to process your personal data for a particular purpose, you may withdraw your consent at any time. See the overview in section 3., which specifies for which purposes we rely on your consent as our legal basis. If you withdraw your consent, we will stop processing your personal data for the specific purpose(s). This does not affect the lawfulness of processing of your data before you have revoked the consent.

See also ‘Right to deletion (erasure) of your personal data’ that is related to the Right to withdraw consent.
Right to lodge a complaint:  If you reside in selected jurisdictions, you are entitled, in line with the local data protection law, to contact your local authorities regarding any question, concern or complaint you have relating to our processing of your personal data. Please refer to section 8. below to verify whether you have this right in your jurisdiction and how to exercise it.
Right of non-discrimination:  You have the right to not be discriminated against if you exercise any of your privacy rights outlined above. We will not discriminate against you or deny, charge different prices for, or provide a different quality of our Services if you choose to exercise these rights, although some of the functionality and features available on the Services may change or no longer be available to you.

7.2. HOW TO EXERCISE YOUR RIGHTS
You can request to exercise any of the above rights with an email to innovator@collider.site. Please note that when you make a request to exercise your rights, we may require that you provide information and follow procedures so that we can verify your identity. Where possible, we will attempt to match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it.

We will assess any request to exercise these rights on a case-by-case basis. We will respond to your request within the periods required by applicable data protection law. However, we may not always be able to comply fully with your request. We will notify you in that event.

8. ADDITIONAL DISCLOSURES FOR INDIVIDUALS RESIDING IN SELECT JURISDICTIONS

8.1. BRAZIL
This section is relevant if you reside in Brazil. Collider complies with the Brazilian General Data Protection Law (Law No. 13,709/2018) (the ‘LGPD’). This Privacy Notice includes all the necessary disclosures in line with the LGPD. You have privacy rights under the LGPD, which are outlined in section 7.1 of this Privacy Notice. You may contact us in line with section 7.2 to exercise any of these rights.You also have the right to information regarding the shared use of personal data, which means that you have the right to receive complete information about data sharing or data transfers between Collider and third parties. You can find the overview of the shared use of your personal data in section 4. of this Privacy Notice.

If you are not satisfied with how we handled your request to exercise your rights or you have any other questions or concerns about your rights or this Privacy Notice, please contact our data protection officer at innovator@collider.site.You also have the right to complain to your national data protection authority Autoridade Nacional de Proteção de Dados.We may share your personal data with third parties outside of Brazil, as provided in section 4. This may include transfers of your personal data to the United States, to the European Economic Area countries and to the United Kingdom.

8.2. CANADAThis section is relevant if you reside in Canada. Collider complies with the Canadian Personal Information Protection and Electronic Documents Act (‘PIPEDA’). This Privacy Notice includes all the necessary disclosures in line with the PIPEDA.
If you are dissatisfied with how we handled your privacy request, you have right to make a written submission to the Privacy Commissioner in your jurisdiction or to the Office of the Privacy Commissioner of Canada at the address below:

Office of the Privacy Commissioner of Canada
30 Victoria Street Gatineau
Quebec K1A 1H3
https://www.priv.gc.ca/en

8.3. THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOMThis section is relevant if you reside in any of the European Economic Area countries (the ‘EEA’) (i.e., Austria, Belgium, Bulgaria, Croatia, Republic of Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain and Sweden) or in the United Kingdom (the ‘UK’) and includes disclosures in line with the General Data Protection Regulation (Regulation (EU) 2016/679 and its UK equivalent, UK Data Protection Act 2018) (the ‘GDPR’).

8.3.1. Your privacy rightsThe GDPR gives you rights as described in section 7.1, which you can exercise in line with section 7.2.If you are not satisfied with how we handled your request to exercise any of your rights or you have any other questions or concerns about your rights or this Privacy Notice, please contact our data protection officer at Collider LLC, 333 North Green Street, Floor 8, Chicago IL 60607, United States  or at innovator@collider.site

You can find the overview of data protection authorities in different EEA countries here. The data protection authority for the UK is the Information Commissioner’s Office, which you may contact here.

8.3.2. International transfers of personal dataAs described in section 4. of this Privacy Notice, we share your data both internally with our affiliates and group companies, as well externally with our processors and other third parties. Some of these recipients are located in countries outside of the EEA and the UK, including in the United States and other countries, whose laws may not provide an equivalent level of protection for your personal data as is the level of protection guaranteed in the EEA and the UK.
These transfers are necessary and essential for us to provide our Services to you. Prior to your personal data being shared with third parties, we will take contractual or other steps reasonably necessary to ensure that your personal data is treated securely by such third parties.

To transfer your data, we rely on adequacy decisions issued by the European Commission as well as EU Standard Contractual Clauses that have been adopted by the European Commission and the UK International Data Transfer Addendum. For more information, including how to obtain a copy of these documents please contact us through our contact points provided in section 7.2. You can also access the Standard Contractual Clauses approved by the European Commission here.

8.4. UNITED STATES
This section supplements the Collider Privacy Notice and is applicable to residents of U.S. states that have adopted comprehensive privacy legislation. As of the Effective Date of this Privacy Notice, these states are California, Colorado, Connecticut, Utah and Virginia (“selected U.S. states”).

8.4.1. Personal data we collect about you and purposes for which we use personal dataIn the past 12 months, we have collected the categories of your personal data as described in section 2. of this Privacy Notice and used it for the purposes described in section 3. of this Privacy Notice.

8.4.2. Sources of personal dataWe may have obtained your personal data from a variety of sources, including directly from you, your device, from your use of our Services and from third parties, as described in section 2. of this Privacy
Notice.8.4.3. Disclosures of personal data to third partiesPlease refer to section 4. of this Privacy Notice for the categories of third parties to which we may have disclosed personal data..

8.4.4. Sale of your personal data and interest-based advertisingIn the past 12 months, Collider has not disclosed personal information in a manner that it considers a sale within the meaning of applicable state laws.
While we do not sell your personal data, Collider and third parties that provide advertising or other functionality on our behalf may use cookies and similar technologies to help us advertise our Services to you as informed by your interests. See the Collider Cookie Policy to learn more about interest-based advertising. You have the right to opt out of this sharing, as described below..

8.4.5. Your privacy rightsPlease refer to section 7.1 of this Privacy Notice to understand which privacy rights you may have. If you are a resident of a selected U.S. state and would like to exercise your rights as described above, please refer to the contact information provided in section 7.2.

To help protect your privacy and maintain security, we may take steps described in section 7.2 to verify your identity before granting you access to your personal information or honouring your other requests.You may designate an authorised agent to make a request on your behalf as permitted under law. Before we process that request, we may require that you provide the authorised agent with written permission to do so – for example, a power of attorney.

Right to opt out of sharing personal data for interest-based advertising: Before we place any targeting cookies on your device when you visit Collider websites or use Collider clients, we will present you with a cookie preference centre. You can opt out of targeted advertising through the cookie preference centre. You can also change your preferences any time by clicking on ‘Cookie Settings’ link at the bottom of our websites or you can opt out of certain targeted advertising on Collider mobile, desktop and web clients by modifying your cookie preferences through the ‘Privacy preferences’ button in the settings of your Collider client.

You may also adjust the privacy settings though your browser settings or through centralised solutions for interest-based advertising opt out from third-party advertisers who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s (DAA) Self-Regulatory Principles for Online Behavioural Advertising.
On your mobile device you may use "Limit Ad Tracking" on iOS or "Opt Out of Ads Personalization" on Android.

California rights:Right of access: In addition to the right of access described in section 7.1 above, California residents may have the right to request a copy of your personal data and information regarding:The categories and specific pieces of personal data we have collected about youThe categories of sources from which we have collected your personal dataThe business or commercial purpose for which we have collected or shared your personal dataThe categories of third parties to which we have disclosed your personal dataThe categories of personal data about you that we have disclosed disclosed for a business purpose, and the categories of third parties to which we have disclosed such information for a business purpose

Shine the Light: California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the preceding calendar year. We do not share personal information with third parties for their own direct marketing purposes.Do Not Track: Some web browsers transmit "do-not-track" signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. At this time our websites are not designed to respond to these signals or similar mechanisms from browsers.

9. DATA RETENTION, DELETION AND ANONYMISATION
Data retention:We will keep your personal data only for the period necessary to fulfill the purposes for which we collect and process your personal data, as described in this Privacy Notice and in accordance with applicable law. This means that the retention periods will vary according to the data category and the purpose we have to process your personal data. The retention periods for data are determined on a case-by-case basis that depends on the following factors:The nature of the personal data and why it is collected and processed. The length of time we will keep your personal data will generally be determined by how long we need that information to provide you with our Services and to provide customer support.

For example:As set out in this Privacy Policy, we require account data to deliver our Services. We need to keep it for the duration your Collider account exists so that we can maintain your account.Similarly, we will keep some of your usage data, such as your playlists or folders for the lifetime of your account.For so long as we are required by law to do so. We are subject to various legal obligations in countries in which we operate, such as bookkeeping, accounting, tax or audit obligations, which require that we keep certain data for specified periods.

For example, we will keep your information:To respond to a legal request or to comply with applicable law. We must keep your information where we have a legal obligation to do so. For example, if we receive a valid legal request, such as a preservation order or search warrant, related to your account, we preserve your information after you delete your account.To deal with and resolve requests, disputes or complaints.For litigation or regulatory matters. For example, we preserve your information related to a legal claim or complaint, such as where we are subject to a regulatory investigation or where we need to defend ourselves in legal proceedings about a claim related to your information or where we need to respond to a regulator in relation to a legal or regulatory complaint made by you or someone else.Issues relating to the safety, security and integrity of our Services and to protect rights, property and users. For example, we keep information where it is necessary to investigate misuse of our Services, such as fraud.


Data deletion and anonymisation:Subject to applicable law, after the lapse of the retention periods, we will delete or permanently anonymise your personal data so that it is no longer capable of identifying you.

If you request that we delete your Collider user account, we will treat your Collider account deletion request as a request for erasure (deletion) of your personal data (see section 7.1 ‘Right to deletion (erasure) of your personal data’) and we will delete or anonymise your personal data, so that it no longer identifies you, in accordance with applicable law.
Depending on the jurisdiction in which you reside, there may be circumstances in which we retain your personal data for lawful reasons after receiving a deletion request, for example if:

We have a legal obligation to keep some of your personal dataIt is necessary for the establishment, exercise or defence of legal claims (e.g. when there is an unresolved issue or claim relating to your Collider user account or your use of our Services)We have compelling legitimate grounds to retain some of your personal data that overrides your interests in having your data deleted (e.g., for fraud prevention purposes, to enforce our Terms and similar)We cannot verify your identity or confirm that the personal data that we maintain relates to you, or if we cannot verify that you have the authority to make a request on behalf of another individualThere is another exception under the applicable legislation in the country or state of your residence (e.g., exceptions applicable under the California Consumer Privacy Act)

In such cases, we will keep limited information about you in a protected form for the period necessary to fulfill processing under the applicable exception.

10. SECURITY
We strive to keep your data safe. While we think we have strong defenses in place, no one can ever guarantee that hackers won’t be able to break into our sites or steal your data while it is stored or flowing from you to us or vice versa.  We take reasonable measures, including administrative, technical, and physical safeguards to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. We hold information about you both at our own premises and with the assistance of third-party service providers.  Some of your personal data will be publicly accessible on Collider Services as described in section 6. Your data will be also accessible by our employees and third parties, as described in section 4., which require access for the purposes described in this Privacy Notice and only on a need-to-know basis.

We recommend that you always use strong passwords, that you change them regularly and that you do not use the same passwords for your Collider account as you already use to access other services or devices. We also recommend that you always access the Services and make payments from a secure computer or device. Any third-party services that you use to connect to your Collider account may also affect your information.

Please note that information collected by third parties may not have the same security protections as information you submit to us. We are not responsible for the functionality, privacy, or security measures of such third parties.

11. CHILDREN’S PERSONAL DATA
Our Services and their content are not directed at children under the age of 13. We do not knowingly collect or solicit any personal data from children under the age of 13 or knowingly allow such persons to register for our Services. If you are under the age of 13, please do not use our Services, do not browse our websites and do not send us any of your personal data. If we learn that we have collected personal data from a child under the age 13, we will promptly delete that information, in accordance with applicable law. If you are a parent or guardian and believe that we may have collected personal data from your child, please notify us immediately by sending an email to innovator@collider.site

If you are 13 – 17 years of age, you may use our Services in line with our Terms. We reserve the right to limit access to our Services for children aged 13 – 17 years, if their use of our Services or processing of personal data would be illegal or would require a consent of a parent or guardian, according to law applicable in their country of residence.

12. INTEGRATION WITH THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to third-party websites or services. We do not control and we are not responsible for the privacy practices employed by any websites or services linked to or from our Services, including the information or content contained within them. When you use a link to go from our Services to another website or service, our Privacy Notice does not apply to those third-party websites or services. Your browsing and interaction on any third party website or service, including those that have a link on our Services, are subject to that third party’s own rules and policies. In addition, we are not responsible and do not have control over any third parties that you authorise to access your personal data. If you are using a third-party website or service and you allow them to access your personal data, you do so at your own risk. Please refer to that third party’s privacy policy to understand how it processes your personal data.

13. AMENDMENTS TO THIS PRIVACY NOTICE
Our Services are subject to constant improvements and future changes may influence what personal data we process and how we collect, use, share, store or otherwise process it. We may develop other Services in the future which are currently not mentioned in this Privacy Notice. The Privacy Notice will apply to them accordingly, unless stated otherwise upon the launch of the new Services.

This Privacy Notice may be updated to reflect new changes in our Services, changes in legal framework or improvements in how we handle personal data. When we make material changes to the Privacy Notice, we will provide you with notice as appropriate under the circumstances, by sending you an email or notification within a Collider client. Unless stated otherwise, our most recent Privacy Notice applies to all information that we process about you.