Privacy

Your Rights

EU Residents

Your principal rights under the EU General Data Protection Regulation (“GDPR”) if you are an EU-resident user who is a natural person are set forth below. Rights under other data protection laws may vary. Rights under the GDPR are as follows:

• the right to be informed;
• the right to access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to complain to a supervisory authority; and
• the right to withdraw consent.

You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned, how we use your data, and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.

In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary for compliance with a legal obligation, or for the establishment, exercise or defense of legal claims.

In some circumstances you have the right to restrict the processing of your personal data. Those circumstances include where you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defense of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it with your consent; for the establishment, exercise or defense of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

You have the right to object to our processing of your personal data on grounds relating to your particular situation. We may continue to process your personal data if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.

To the extent that the legal basis for our processing of your personal data is:

• (a) consent; or
• (b) that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract,

and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

If you consider that our processing of your personal data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. If you are an EU resident, you may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.

To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

California Residents

Your principal rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”) if you are a California-resident user who is a natural person are set forth below. Rights under other data protection laws may vary. Rights under CCPA / CPRA are as follows:

• the right to know and access;
• the right to delete;
• the right to opt-out of sale or sharing;
• the right to correct inaccurate personal information; and
• the right to limit use and disclosure of sensitive personal information.

Under CCPA / CPRA, California-based users have the right to ask businesses about the pieces of personal information they have collected related to them, where that information came from, how the business uses that information, the types of third parties the business discloses information to, and the types of information disclosed to those third parties. They also have the right to correct or delete their information, opt out of the sale or sharing of their information, and to limit the use and disclosure of sensitive personal information. Under CCPA/ CPRA, sharing is defined as disclosing a consumer’s personal information to a third party for the purpose of cross-context behavioral advertising.

Synergex does not:

• Collect sensitive personal information. If sensitive personal information is given in error, it will be removed from Synergex system(s) promptly once the error is identified.
• Sell personal information for monetary consideration.
• Share personal information with third parties other than service providers under strict confidentiality agreements (which does not classify as sharing under CCPA / CPRA), or without express consent for each instance of sharing.
• Target their services at users considered minors in the state of California.

Because Synergex does not collect sensitive personal information or share personal information without consent for each potential instance of sharing, Synergex does not provide explicit mechanisms through its websites to prevent selling / sharing of personal data or to limit the use of sensitive personal information. However, if any of the above were to change, Synergex would provide a means to limit such things in accordance with CCPA / CCPRA.

If you have any questions or concerns regarding the above, you may contact us via the method(s) below. Requests related to any of the above rights will be responded to within 45 days, with the possibility of extending another 45 days with written notice of that extension.

CCPA / CPRA Notice-at-Collection

Below is a table listing the data that Synergex collects. Information you voluntarily provide to us, such as in free-form fields, may contain other categories of personal information not described below.

Personal information we collect	CCPA categories	Categories of third parties to whom we disclose for a business purpose	Third parties to whom we “sell” or “share”
Name Employer	Identifiers Employment Information	Affiliated companies and partners Service providers Professional advisors Authorities and others Business transferees Payment processors Other Users
Resource Center profile information, which includes: Name Email Employer Hobbies, Interests, Bio (if provided) Profile Photo (if provided)	Identifiers Employment Information Customer Record Information	Affiliated companies and partners Service providers Professional advisors Authorities and others Business transferees Other users
Address Payment Details (Bank + Card Information, etc.) Transaction History	Identifiers Employment Information Commercial Information	Affiliated companies and partners Service providers Professional advisors Authorities and others Business transferees Payment processors
Job Title Birthdate Shirt Size Phone Communication information including developer support and customer service communications Browser Type Language Resource Center download history Derived data (from above)	Identifiers Employment Information Customer Record Information Internet and Network Activity	Affiliated companies and partners Service providers Professional advisors Authorities and others Business transferees
IP Address	Internet and Network Activity Geolocation Data	Affiliated companies and partners Service providers Professional advisors Authorities and others Business transferees	Shared with YouTube/Google via embedded videos Shared with Google via reCAPTCHA
Cookies (non-essential)	Internet and Network Activity		Shared with YouTube/Google via embedded videos Shared with Google via reCAPTCHA
User interactions with embedded video players (YouTube)	Internet and Network Activity		Shared with YouTube/Google via embedded videos
User interactions with webpage challenges (reCAPTCHA)	Internet and Network Activity		Shared with Google via reCAPTCHA

Exercise Your Rights

You may exercise any of your rights in relation to your personal data by using the contact channels provided below. We will never discriminate against you for exercising any of your rights.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws, which may include a verification process to determine your identity and the rights that you are entitled to.

Notwithstanding the foregoing, we reserve the right to keep any information in our archives that we deem necessary to comply with our legal obligations, resolve disputes and enforce our agreements.