Privacy Notice

When you visit or use the Site and/or Services, we collect and retain information that you, as a customer or potential customer, provide through the Site or Services, as well as information that is automatically or passively collected from you, your device, or your browser.

We collect information that you provide directly to us. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page ), request newsletters or other marketing communications, request customer support, provide other information in connection with a job opening, enter login information, or otherwise communicate with us.

If you post information on the Site, including on a bulletin board, in a chat room, or community forum, it becomes generally available to the public. Laserfiche does not control or limit the use by visitors of the Site. By posting information on the Site, you understand that Laserfiche may use the information in connection with its business. Therefore, you should not post any information you consider private or sensitive.

We automatically collect information for business and commercial purposes about your device and how your device interacts with our Site and the Services. We may use service providers to collect this information. Some examples of information we automatically collect include the following:

We use various technologies to collect this information (“Tracking Technologies”), as further discussed below under the “Cookies, Other Tracking Technologies, Interest-Based Advertising, And Choices Regarding the Same” heading.

We provide products and services for our customers and collect and process information about individuals (including through Tracking Technologies) at the direction of and on behalf of our customers (“Customer Data“). Customer Data has historically included contact data, demographic data, content, service use data, device connectivity and configuration data, and precise and non-precise location data, among other information. Our processing of Customer Data is governed by the terms of our Cloud Subscription Agreement with each customer. To the extent we combine Customer Data with information we have collected about you through the Site, we will treat the combined information in accordance with the practices described in this Notice, plus any additional restrictions imposed by our customers. We are not responsible for how our customers treat the information we collect on their behalf as a processor or service provider, and we recommend you review each customer’s own privacy notice. For more information on your rights and choices regarding Customer Data, please see the “Your Privacy Choices” heading below.

We may obtain information from other third-party sources that we combine with information collected through the Site. These third-party sources vary over time, but include:

For example, if you log into a social media website through our Site, we may have access to certain information from that website, in accordance with the procedures and practices of that social media website. You should carefully review the privacy policies and terms of use of these third parties.

We infer information from other information we collect, including to generate information about your likely preferences or other characteristics.

Some of the information we collect may be considered sensitive under applicable law. See additional disclosures in your region for details.

Laserfiche collects and uses the information you provide in connection with our Site and Services for a variety of purposes, in accordance with the practices described in this Notice, which may include:

We also use information about you for the following purposes:

For more information about how we use and disclose your information for personalized advertising, please see the “Cookies, Other Tracking Technologies, Interest-Based Advertising, and Choices Regarding the Same” heading below.

We may use publicly available information (as that term is defined by applicable law) or information that does not identify you (including information that has been de-identified or aggregated, as those terms are defined by applicable law), for any purpose without obligation to you except as prohibited by applicable law.

Laserfiche will disclose information we have collected about you in accordance with the practices described in this Notice. The types of persons to whom we disclose information include, but are not limited to, the following:

We will occasionally hire service providers or contract with third-party consultants to provide limited services on our behalf. Laserfiche will only provide those service providers and other third-party consultants the information they need to deliver services, and, to the extent required by law. They are prohibited from using that information for any other purpose. We may permit these service providers or third-party consultants to use publicly available information (as that term is defined by applicable law) or information that does not identify you (including information that has been de-identified or aggregated, as those terms are defined by applicable law) to the extent permitted by applicable law.

We also disclose information about you to the following categories of recipients:

We will disclose your information to respond to duly authorized requests from governmental authorities as required by law, or in circumstances in which we believe disclosure is necessary or reasonably appropriate to protect the rights, property, or safety of us or others. Please note that Laserfiche is required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Laserfiche also discloses your personal information when: (a) we are required to do so by law, regulation, warrant, subpoena or court order, (b) we are required in urgent circumstances to protect the personal safety of Laserfiche employees, users of Laserfiche products or services, or members of the public, (c) it is necessary to enforce our Terms of Use, or to exercise, establish or defend our legal rights, or (d) such disclosure may be part of a sale of all (or substantially all) of the assets of Laserfiche or an affiliated entity where customer information might be included among the transferred assets.

Some of the hyperlinks on our Site may lead to third-party services that are not controlled by or affiliated with Laserfiche. These links are provided solely as a convenience to you and not as an endorsement by Laserfiche of the content on such third-party services. Third-party services are subject to the terms of use and privacy policies of each applicable third-party entity, including what information they disclose with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. For example, Office Online is a Microsoft service and use of Office Online is subject to Microsoft’s terms of use and privacy policy. Laserfiche is not responsible for and does not endorse, guarantee or monitor the content, availability, viewpoints, products or services that are offered or expressed through any third-party services and does not make any representations or warranties regarding the content or accuracy of any content on these third-party websites, including third-party privacy policies. We encourage you to familiarize yourself with and consult each applicable third-party entity’s terms of use and privacy policies.

Without limiting the foregoing, in our sole discretion, we may disclose aggregated information which does not identify you or de-identified information (as those terms are defined under applicable law) about you with third parties or affiliates for any legitimate business purpose or with your consent, except as prohibited by applicable law.

Do-Not-Track (“DNT”) is a preference that can be set in your browser to notify websites you visit that you do not want them to collect certain information about you. Laserfiche does not respond to DNT signals at this time and will not do so unless and until the law is interpreted to require such response. As discussed in this Notice, we and third parties may track your visits to our Site or use of our Services for purposes such as to provide Interest-based Advertising. To the extent you have specific rights in your region with respect to certain preference signals, such as Global Privacy Control, please see your region-specific terms for details.

Please see our Cookie Statement for more information about how we use cookies and similar tracking technologies. In addition to the technologies listed in our Cookie Statement, we use the following to collect information:

As discussed in our Cookie Statement, we also work with ad serving services, advertisers, and other third parties to serve advertisements on the Site, Services, and/or on third-party services. These third parties may use Tracking Technologies on our Sites, Services, and third-party services (including in emails and advertisements) to track your activities across time and services for purposes of associating the different devices you use and delivering relevant ads and/or other content to you on the Site, Services, and third-party services or third-party devices after you have left the Services (“Interest-based Advertising”).

Some of the third parties that collect information from or about you on the Site or Services in order to provide more relevant advertising to you participate in the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. This program offers a centralized location where users can make choices about the use of their information for online behavioral advertising. To learn more about the DAA and your opt-out options for their members, please visit (i) for website opt-out, http://www.aboutads.info/choices; and (ii) for mobile app opt-out, http://www.aboutads.info/appchoices. In addition, some of these third parties may be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and your opt-out options for their members, please visit http://www.networkadvertising.org/choices/. Please note that if you opt-out of online behavioral advertising using any of these methods, the opt-out will only apply to the specific browser or device from which you opt-out. Further, opting-out only means that the selected members should no longer deliver certain Interest-based Advertising to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). We are not responsible for effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

Most browsers accept cookies by default. You may instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.

Please be aware that if you disable or remove Tracking Technologies some parts of the Services may not function correctly.

For further information about the types of Tracking Technologies we use, why, and how you can control such Tracking Technologies, please see our Cookie Statement.

Occasionally, portions of the Site may allow you to post information that other visitors to the Site will be able to access (i.e., a “bulletin board” or interactive “chat”). If you choose to post information on a bulletin board or through a chat session, it becomes available to the public, and Laserfiche has no ability to control or limit the use of information that is available to the public. Laserfiche and its affiliates will utilize any information you post through the Site in connection with the operation of its business. Laserfiche encourages you not to post any information you consider private or sensitive on the Site. To request removal of your information from such bulletin boards or chat sessions, please contact us using the contact details provided under the “Contact Us” heading below. In some cases, we may not be able to remove your information, in which case we will let you know if we are unable to and why.

Jurisdictional Rights
Consumers in California, Nevada, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia, and data subjects in the European Economic Area, Switzerland or United Kingdom may have additional rights as set forth in the sections entitled “California Privacy Rights,” “Nevada Privacy Rights,” “Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia Privacy Rights,” and “European Privacy Rights” below. For more information about choices regarding Tracking Technologies, see the section on “Cookies, Other Tracking Technologies, Interest-Based Advertising, And Choices Regarding the Same” above.
Your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country. Please see the “International Transfers” section below for more information.

Marketing Communications

You have the right to opt-out of marketing communications from us at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you, or by emailing us at the email address set forth in the section entitled “Contact Us” below with the word UNSUBSCRIBE in the subject field of your email. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or Laserfiche’s ongoing business relations.

You can also opt out of receiving calls to your phone number at any time by requesting to opt-out during any call you receive from us or contacting us as set out in the “Contact Us” heading below and specifying you would like to opt-out of calls.
To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us using the contact details under the “Contact Us” heading below.

Please note that by opting in to allow Laserfiche and its event sponsors/industry partners to receive your contact information through an event in accordance with this Notice, you will be subject to each event sponsor/industry partner’s communications and privacy policy and must opt-out with them directly.

We have implemented and maintain reasonable industry standard controls, intrusion detection network monitoring, and reasonable security measures designed to protect the personal information that you submit through the Services and Site. These measures include physical access controls, access authorization controls, and firewalls. We also periodically review our information collection, storage, and processing practices to help prevent loss, misuse, unauthorized access, alteration, or other destruction of information we collect. When accessing secure sections of the Site, we use Transport Layer Security (TLS) encryption to secure the communication of information passing between your browser and our servers. Additionally, only authorized administrators, Laserfiche employees and third-party contractors have access to systems containing such information.

Although we take reasonable security measures to protect your information, we cannot guarantee the security of your personal information transmitted to the Site. The transmission of information via the internet is never 100% secure, and we cannot ensure or warrant the security of any information you transmit to us. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Site, products, or Services, you are responsible for keeping this password confidential. Please do not share your password with anyone.

Laserfiche is headquartered in the United States. Data centers for Laserfiche Cloud Services are located in the United States, Canada, and Ireland, respectively. Operationally, we have on-premises computer facilities in the United States, Canada, Hong Kong and other regions. Our affiliated subsidiaries, third-party service providers, and partners operate around the world. This means that when we collect your personal information, we may process it in any of these jurisdictions. The laws governing our processing of personal information in such jurisdictions may differ from those in the jurisdictions in which you are located. Regardless of where your personal information is processed, we will treat all personal information in accordance with applicable data protection laws and this Notice.
If you are located in the EEA, United Kingdom or Switzerland, we will protect your personal information when it is transferred outside of such locations by processing it in a country that provides an adequate level of protection (click here for a list of countries deemed adequate by the European Commission) or by implementing appropriate safeguards to protect your personal information, including through the use of standard contractual clauses or another lawful transfer mechanisms approved by the European Commission and/or the United Kingdom or Swiss authorities (as applicable). For more information about the lawful transfer mechanisms we rely on, please contact us using the contact details under “How to Contact Us” within the “European Economic Area, Switzerland, and United Kingdom” section below.

Laserfiche complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data transferred from the European Union and Switzerland to the United States. Laserfiche has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF, from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF, and from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Notice and the Principles, the Principles shall govern personal data processed in reliance of the Data Privacy Framework (“DPF”). To learn more about the DPF, and to view our certification, please visit https://www.dataprivacyframework.gov/s/participant-search.

Laserfiche’s responsibility for personal data it receives in reliance on the DPF and subsequent transfers of that personal data to third parties is detailed in the Principles. Where Laserfiche relies on the Principles for onward transfers from the EU and Switzerland, including the onward transfer liability provisions, Laserfiche remains responsible under the Principles for third-party agents processing personal data on its behalf. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Laserfiche commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF in the context of the employment relationship.

With respect to personal data received or transferred pursuant to the DPF, we are subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Laserfiche commits to resolving complaints about your privacy and our collection and use of your personal data in reliance on the DPF within 45 days of receiving your complaint. Individuals with questions or complaints regarding this Notice should first submit inquiries by contacting us using the contact details provided under the “Contact Us” heading below. Laserfiche has further committed to refer unresolved complaints regarding personal data transferred in reliance on the DPF to the American Arbitration Association, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact, or visit the American Arbitration Association for more information or to file a complaint. When filing by mail or email, please complete the appropriate DPF Notice of Arbitration Form located in the link below and forward to the International Centre for Dispute Resolution.

International Centre for Dispute Resolution Case Filing Services
1101 Laurel Oak Road, Suite 100
Voorhees, NJ 08043
United States
Phone: +1.212.484.4181
Email box: casefiling@adr.org

For any questions or for further information about this program, the ICDR’s International Arbitration Rules, or with additional language versions of the ICDR’s International Arbitration Rules, please contact the International Centre for Dispute Resolution at +1.212.484.4181 or by visiting the website https://www.icdr.org/dpf. The services of the American Arbitration Association are provided at no cost to you.

Under certain limited circumstances, data subjects, as defined by the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, of the European Union, may invoke binding arbitration as a last resort if all other forms of dispute resolution have been unsuccessful. To learn more about this method of resolution and its availability to you, please visit https://www.dataprivacyframework.gov/s/.

The Site and Services are intended for a general audience and not directed to children under sixteen (16) years of age. We do not market products or services to children, and we do not knowingly collect personal information from children any time, including as defined by the U.S. Children’s Privacy Protection Act (“COPPA”).

If you are under the age of 16, please do not provide personal information of any kind whatsoever and please do not use Laserfiche Site and Services or participate in Laserfiche’s surveys, contests, events, and other promotions. If you are a parent or guardian and believe Laserfiche has collected such information without parental consent, please contact us as set below in the section entitled “Contact Us” and we will remove such data to the extent required by COPPA or other applicable law.

We retain personal information we collect from you where we have an ongoing legitimate business need to do so. For example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements.

Laserfiche may change this Notice from time to time, at Laserfiche’s sole discretion. When we update our Notice, we take appropriate measures to inform you, consistent with the significance of the changes we make. If the changes are material, we will notify you or offer you choice if and to the extent this is required by applicable data protection laws. You can see when this Notice was last updated by checking the “effective” date displayed at the top of this Notice. Laserfiche recommends that you review this Notice regularly for any revisions. Your continued use of the Site or Services after such revisions will constitute your acknowledgement of the amended Notice.

Notice at Collection

California provides additional rights to California residents, including rights through the California Consumer Privacy Act as replaced by the California Privacy Rights Act (“CPRA”). This section addresses those additional rights and only applies to California residents.

Additionally, we acknowledge that you may have rights under California law in connection with the personal information we process on behalf of our customers. If personal information about you has been processed by us as a service provider on behalf of a customer and you wish to exercise any rights you have with such personal information, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal information. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request.

• Collection. We have collected the following categories of personal information (as that term is defined in the CPRA) in the past 12 months:
  • Identifiers, including your name, postal address, email address, and online identifiers (such as IP address).
  • Consumer records, including your phone number, billing address, and credit or debit card information.
  • Characteristics of protected classifications under California and/or federal law, including your gender.
  • Commercial or transactions information, including records of products or services purchased, obtained, or considered.
  • Internet activity, including browsing your history, search history, and interactions with a website, email, application, or advertisement.
  • Non-precise geolocation data, including your location derived from an IP address.
  • Precise location data
  • Professional, employment or education-related information.
  • Inferences drawn from any of the information identified in this section.
• Disclosure. For more details about the personal information Laserfiche collects from you and the sources from which we obtain personal information, please review the section entitled “How Laserfiche Uses and Discloses the Information We Collect” above.
• Purpose. We collect, use, and disclose this personal information for the business and commercial purposes set out in the section entitled “How Laserfiche Uses and Discloses the Information We Collect” above. Please see this section above for more details.
• Sales and Shares. Laserfiche does not sell personal information as the term “sell” is traditionally understood. However, some of our disclosures of your personal information may be considered a “sale” or a “share” as those terms are defined by the CPRA. A “sale” is broadly defined under the CPRA to include a disclosure for something of value, and a “share” is broadly defined under the CPRA to include a disclosure for cross-context behavioral advertising. We collect, sell, or share the following categories of personal information for commercial purposes: identifiers, characteristics, commercial or transactions information, internet activity, non-precise geolocation data, and inferences drawn. The categories of third parties to whom we sell or share your personal information include, where applicable, vendors and other parties involved in cross-context behavioral advertising. For details about your rights regarding sales and shares, please see the “Do Not Sell or Share My Personal Information” section below. Laserfiche does not knowingly sell or share the personal information of minors under 16 years old who are California residents.
• Sensitive Personal Information. Some of the personal information we collect may be considered sensitive personal information (as described in the CCPA). For further details of the sensitive personal information we collect (if any) and how we obtain this information, please review the section entitled “Information We Collect” above. We collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CPRA or without the purpose of inferring characteristics about consumers. Further, we do not “sell” or “share” your sensitive personal information as those terms are defined by the CPRA.
• Data Retention. We retain each category of personal information, including sensitive personal information, for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

Requests

• Right to Know, Correct, and Delete.
• Know. You have the right to know certain details about our data practices. In particular, you may request the following from us:
  • The categories of personal information we have collected about you.
  • The categories of sources from which the personal information was collected.
  • The categories of personal information about you that we disclosed for a business purpose or sold or shared.
  • The categories of third parties to whom the personal information was disclosed for a business purpose or sold or shared.
  • The business or commercial purpose for collecting or selling or sharing the personal information.
  • The specific pieces of personal information we have collected about you.
• Correct. You have the right to correct inaccurate personal information we maintain about you.
• Delete. You have the right to delete personal information that we have collected about you.

These rights are subject to certain exceptions and also apply to sensitive personal information. To exercise any of these rights, California consumers should submit a request through our online form available here or call our toll free number at 800-985-8533. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 business days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know, correct, or delete.

• Do Not Sell or Share My Personal Information.
  To the extent that using third party cookies and other tracking technologies to serve retargeted or interest-based advertising constitutes a “sale” or “share” of personal information under the CPRA, you may opt-out of such “sales” or “shares” by visiting our cookie consent platform below and opting out of any third party advertising cookies, by clicking on the “Your Privacy Choices” link at the bottom of the page, or by turning on a recognized opt-out preference signal in your browser or extension such as Global Privacy Control. When you submit an opt-out through any method, the opt-out will only apply to sales and shares from the specific browser from which you sent the signal because the connection between your browser identifier and other personal information we have about you is not known to us. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please also submit a request through our form here (specifying the right you wish to exercise).
• Shine The Light Customer Rights
  Consumers in the State of California may request a list of categorized third parties and in some cases affiliates to whom we may have disclosed their personal information specifically for those third parties’ and/or affiliates’ own marketing purposes, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit a written request to the email or address provided in the section entitled “ Contact Us” above. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are not required to respond to requests made by means other than through the provided e-mail address or mail address.

Authorized Agent
You may also designate an authorized agent to submit such requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

Right to Non-Discrimination
You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of personal information for monetary consideration by the business to a third party for the third party to license or sell the personal information to other third parties. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please submit a request through our online form available here.

Data Practices

These additional rights and disclosures apply only to residents of Colorado, Connecticut, Utah, and Virginia. Terms have the meaning ascribed to them in the Colorado Privacy Act (“CPA”), the Montana Consumer Data Privacy Act (“MCDPA”), the Oregon Consumer Privacy Act (“OCPA”), the Texas Data Privacy and Security Act (“TDSPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and the Virginia Consumer Data Protection Act (“VCDPA”), as applicable. Information regarding the collection, use, disclosure, and retention of your personal information are set out in the main Privacy Policy above.

Some of our disclosures of personal data may be considered a “sale” under applicable law, which is often defined to include a disclosure for something of value. We also may process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Some of the personal data we collect may be considered sensitive personal data under applicable law. We collect sensitive personal data with your consent.

Requests

You have the following rights under applicable law:

If you are an Oregon resident, you also have the right to:

To exercise any of these rights, please submit a request through our online form available here. Please note these rights are subject to exceptions. We will respond to your request within 45 days. We may require specific information from you to help us confirm your identity and process your request. If we cannot verify your identity, we may deny your request in accordance with applicable law. If personal data about you has been processed by us as a processor on behalf of a customer and you wish to exercise any rights you have with such personal data, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your personal data. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request.

Sales and Targeted Advertising

You have the right to opt-out of us selling your personal data or processing your personal data for purposes of targeted advertising. To exercise this right, please submit a request through our online form available here or turn on a recognized opt-out preference signal, such as Global Privacy Control. When you submit an opt-out, the opt-out will only apply to the specific browser from which you sent the signal because the connection between your browser identifier and other personal information we have about you is not known to us. If you want the opt-out to apply to information we have about you in our systems, such as your email address, please also submit a request through our form here (specifying the right you wish to exercise).

Consent

You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us at the email or postal address set out in the How to Contact Us section below (specifying the consent you wish to withdraw). If you withdraw consent, you may not be able to receive certain services related to that consent.

Right to Non-Discrimination

You have the right not to be discriminated against for exercising any of your rights.

Authorized Agents

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

Right to Appeal

If we refuse to take action on your request, you may appeal our decision within a reasonable period of time by contacting us at privacy@laserfiche.com and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint as follows:

For the purpose of this Notice, “Europe” means the European Economic Area (“EEA“), Switzerland, and the United Kingdom.

Legal basis for processing personal information
Please see the “How Laserfiche Uses and Discloses the Information We Collect” section above for more details about the purposes for which we process your personal information.

Data protection laws in Europe require a legal basis for processing personal information. Our legal bases include: (a) you have given consent to the processing for one or more specific purposes; (b) processing is necessary for the performance of a contract with you; (c) processing is necessary for compliance with a legal obligation, for example when providing personal information to a law enforcement agency or where we have an accounting or tax obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.

If you are a visitor from Europe, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
In rare situations, we may also need to share your personal information with others to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

More information about the legal basis on which we rely in connection with each of our processing purposes (described in the section “How Laserfiche Uses and Discloses the Information We Collect” above), is set out below.

Purpose and legal basis for processing

If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to Contact Us” heading below.

Your European Privacy Rights
Depending on your location and how you interact with Laserfiche, you may have the following rights regarding the personal information we collect and use about you on our Site and Services:

Laserfiche is committed to cooperating and complying with European data protection authorities’ advice with respect to any human resources data transferred from Europe in the context of the employment relationship.

To exercise any of these rights, please fill out this form or contact us as set out in the “How to Contact Us” section below and specify which right you are seeking to exercise. We will respond to your request within a month of receipt of your request. If we require more time, we will inform you of the reason and extension period in writing. We may require additional information from you to allow us to confirm your identity and process your request.

If personal information about you has been processed by us as a processor on behalf of a customer (acting as a controller) and you wish to exercise any rights you have in connection with such personal information, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of the customer on whose behalf we processed your personal information. We will refer your request to that customer and will support them to the extent required by applicable law in responding to your request.

Data Retention
We will retain your personal information for only so long as we need it in order to fulfil our processing purposes or where we otherwise need to retain it to comply with our legal obligations.

When we have no ongoing legitimate business need or legal reason to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

How to Contact Us
If you have any concerns or questions about the information provided in this “European Economic Area, Switzerland, and United Kingdom” section, please do not hesitate to get in touch with us using the following details:

By mail:
Compulink Management Center, Inc. d/b/a Laserfiche
ATTN: Data Protection Officer
3443 Long Beach Blvd.
Long Beach, CA 90807
USA

By email: privacy@laserfiche.com

Data Protection Officer: privacy@laserfiche.com

We are committed to working with you to obtain a resolution of any concern about our privacy practices. If, however, you believe that we have not been able to assist with your concern, you have the right to lodge a complaint with a European data protection authority.

If you have any concerns or questions about the information provided in this Notice, or want to exercise your data protection rights, please contact us using the following details:

By mail:

Compulink Management Center, Inc. d/b/a Laserfiche
ATTN: Data Protection Officer
3443 Long Beach Blvd.
Long Beach, CA 90807
USA

By email: privacy@laserfiche.com