DRIVEN BASE

Addendum for California Consumer Privacy Act

Last Updated: 14th, June, 2023

If you are a California “consumer” within the meaning of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), this Addendum for California Consumer Privacy Act (“CCPA Addendum”) applies to you. The CCPA Addendum supplements our privacy policy (the “Policy”) and prevails over any conflicting provisions in the Policy.

This CCPA Addendum uses certain terms that have the meanings given to them in the CCPA, including:

“Personal Information,” which means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

“Sensitive Personal Information,” which means (1) personal information that reveals: (A) your social security, driver’s license, state identification card, or passport number; (B) your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (C) your precise geolocation; (D) your racial or ethnic origin, religious or philosophical beliefs, or union membership; (E) the contents of your mail, email, and text messages unless we are the intended recipient of the communication; and (F) your genetic data; and (2)(A) the processing of biometric information for the purpose of uniquely identifying you; (B) personal information collected and analyzed concerning your health; and (C) personal information collected and analyzed concerning your sex life or sexual orientation.

“Sell,” “selling,” “sale,” or “sold,” which means the selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, your Personal Information by us to a third party for monetary or other valuable consideration.

“Share,” “shared,” or “sharing,” which means the sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, your Personal Information by us to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

1. Our Collection, Use, and Disclosure of Personal Information

A. Categories, Sources, and Purposes of Your Personal Information Collected or to Be Collected

The table below describes the categories of Personal Information (as listed in the CCPA) that we may collect, and have collected during the 12-month period prior to the effective date of this CCPA Addendum.

Category of Personal Information Collected Example
Identifiers Name, Address, E-Mail Address, Phone Number, Fax Number, IP Address, Information submitted through Forms on our Website (if they are identified or associated with you) and Access Data including Cookies
Information that identifies,
relates to, describes, or is capable of being associated with, a Particular Individual.
Address, Country, Region, Postal Code, Email Address, Phone Number, IP Address, Location Name,
Commercial Information Products or Services you purchased or own, Requested Category, Company, Interested Products
Internet or Network Activity Information Access Data including Access Logs, Web Beacons (also known as Pixels), Cookies, Online Identifiers, IP Address, Device Identifiers, Client Identifiers
Professional or Employment-Related Information. Company, Department
Inferences drawn from any of the information identified above. Website Analytics Data
Sensitive Personal Information Social Security Number, Passport Number, Precise Geolocation

Business or Commercial Purposes. The business or commercial purposes for which the categories of Personal Information will be collected and used, or was collected or used during the 12-month period prior to the effective date of this CCPA Addendum, is as described in “4. Legal Basis for and Purpose of Processing Personal Data” in the Policy.
We do not use or disclose your Sensitive Personal Information for purposes other than those specified in the CCPA. In addition, we do not collect or process your Sensitive Personal Information for the purpose of inferring characteristics about you.

Categories of Sources. The categories of sources from which Personal Information was collected during the 12-month period prior to the effective date of this CCPA Addendum are as described in “3. How We Collect Your Personal Data” in the Policy.

Retention Period. Unless indicated otherwise, we will retain your Personal Information that we collect about you for the period necessary to process such Personal Information, except to the extent that we are required by law to retain the information for a longer period of time, in which case we will retain it for the period required by law.

B. Disclosure of Your Personal Information

(A) Sale of Your Personal Information

The table below describes: (i) the categories of Personal Information (as listed in the CCPA) that we may have sold during the 12-month period prior to the effective date of this CCPA Addendum; and (ii) the categories of third parties to whom we have sold such Personal Information during the 12-month period prior to the effective date of this CCPA Addendum.

Category of Personal Information Sold Example Third Parties to Whom Personal Information Was Sold in the Last 12 Months
Identifiers Access Data including Cookies, IP Address Data Analytics Providers
Internet or Network Activity Information Access Data including Access Logs, Web Beacons, Cookies, Online Identifiers, IP Address, Device Identifiers, Client Identifiers Data Analytics Providers

Business or Commercial Purpose. The following is a list of the business or commercial purposes for which Personal Information was sold during the 12-month period prior to the effective date of this CCPA Addendum:

  • Data analytics

Children’s Personal Information and Opt-In Right. We do not sell, and have not sold, the Personal Information of minors under 16 years of age without their affirmative authorization if we have actual knowledge of the individual’s age.

(B) Sharing of Personal Information

The table below describes: (i) the categories of Personal Information (as listed in the CCPA) that we may have disclosed for our operational business purposes during the 12-month period prior to the effective date of this CCPA Addendum; and (ii) the categories of third parties to whom we have disclosed such Personal Information for our operational business purposes during the 12-month period prior to the effective date of this CCPA Addendum.

Category of Personal Information Disclosed Example Third Parties to whom Personal Information Was Disclosed in the Last 12 Months
Identifiers Access Data, including Cookies and IP Address Advertising networks
Internet or Network Activity Information Access Data including Access Logs, Web Beacons, Cookies, Online Identifiers, IP Address, Device Identifiers, Client Identifiers Advertising networks

Business or Commercial Purpose. The following is a list of the business or commercial purposes for which Personal Information was shared during the 12-month period prior to the effective date of this CCPA Addendum: none

  • Targeted advertising

Children’s Personal Information and Opt-In Right. We do not share, and have not shared, the Personal Information of minors under 16 years of age without their affirmative authorization if we have actual knowledge of the individual’s age.

(C) Disclosure of Personal Information for a Business Purpose

The table below describes: (i) the categories of Personal Information (as listed in the CCPA) that we may have disclosed for our operational business purposes during the 12-month period prior to the effective date of this CCPA Addendum; and (ii) the categories of third parties to whom we have disclosed such Personal Information for our operational business purposes during the 12-month period prior to the effective date of this CCPA Addendum.

Category of Personal Information Disclosed Example Third Parties to Whom Personal Information Was Disclosed in the Last 12 Months
Identifiers Name, Address, E-Mail Address, Phone Number, IP Address and Access Data including Cookies Our Employees,
Affiliates,
Service Providers including Internet Service Providers, Web Analytics Service Providers, and Cloud Service Providers
Information that identifies,
relates to, describes, or is capable of being associated with, a Particular Individual.
Address, Country, Region, Postal Code, Email Address, IP Address, Location Name, Commercial Customers, Affiliates
Internet or Network Activity Information Access Data including Access Logs, Web Beacons, Cookies, Online Identifiers, IP Address, Device Identifiers, Client Identifiers. Our Employees,
Affiliates,
Service Providers including Internet Service Providers, Web Analytics Service Providers, and Cloud Service Providers
Commercial Information Requested Category, Company,
Interested Products
Affiliates
Professional or Employment-Related Information. Company, Department Affiliates

Business or Commercial Purpose. The following is a list of the business or commercial purposes for which Personal Information was disclosed during the 12-month period prior to the effective date of this CCPA Addendum: none

2. Your Rights and Requests

If you are a California consumer, you have certain choices regarding your Personal Information, as described below:

  1. Access: You have the right to request, twice in a 12-month period, that we disclose to you the following information we have collected, used, disclosed, and sold about you during the 12 months preceding your request:

    1. The categories of Personal Information we collected about you;

    2. The categories of sources from which we collected such Personal Information;

    3. The business or commercial purpose(s) for collecting, selling, or sharing such Personal Information about you;

    4. The categories of third parties to whom we disclosed such Personal Information;

    5. The specific pieces of Personal Information we have collected about you;

    6. The categories of Personal Information we sold or shared with regard to you, and the categories of third parties to or with whom such Personal Information was sold or shared; and

    7. The categories of Personal Information we disclosed for a business purpose with regard to you, and the categories of third parties to whom such Personal Information was disclosed for a business purpose.

  2. Deletion: You have the right to request that we delete certain Personal Information we collected from you.

  3. Correction: You have the right to request that we correct inaccurate Personal Information we maintain about you.

  4. Opt-out: You have the right to opt-out of the sale or sharing of Personal Information.

  5. Limitation: You have the right to limit the use or disclosure of Sensitive Personal Information to certain purposes.

How to Submit a Request. To make an access, deletion, or correction request (described above), please contact us by any of the following means:

To prevent your Personal Information from being sold or shared, you can contact us via the link below as well as toll-free phone number and contact form to allow you to submit your opt-out request above.

We do not process opt-out preference signals.

To limit the use or disclosure of your Sensitive Personal Information to certain purposes, you can contact us via the link below as well as via the toll-free phone number and contact form to allow you to submit your limitation request above.

Limit the Use of My Sensitive Personal Information

Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Personal Information or complying with your deletion request.
Upon receiving an access or deletion request from you, we will first verify your identity by requiring you to submit your name and e-mail address, and by matching the information you provide with what we already have on file.

If you use an authorized agent to make an access, deletion, or correction request on your behalf, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. Also, we may require you to either (1) verify your own identity directly with us (as described above) or (2) directly confirm with us that you provided the authorized agent permission to submit the request.

Additional Information. If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

3. Changes to this CCPA Addendum

We may change this CCPA Addendum from time to time. The date of “Last updated” at the top of this page states when this CCPA Addendum was last updated; any changes will become effective upon us posting the revised California Addendum.

We will post a prominent notice on the site to notify you of any significant changes to this CCPA Addendum and indicate the date it was most recently updated.

4. Contact Us

If you have any questions or concerns regarding this CCPA Addendum or our privacy practices, please contact us at our office address or contact form described in “2. Information about Us” in the Policy.