Chauster

1. TRANSPARENCY

WE ARE COMMITTED TO PROVIDING YOU WITH INFORMATION ABOUT WHAT DATA IS BEING COLLECTED ABOUT YOU, HOW IT WILL BE USED, AND TO WHOM WE DISCLOSE IT.

A. The data we collect
Personal data, or personal information, means any information about an individual from which that person can be identified, either directly or indirectly. The data we collect about you depends on the Services you use, how you use them, and the information you provide to us. We collect data (1) when you or your employer provide it directly to us, (2) automatically through technology when you use the Services, and (3) from other sources.

Data you or your employer provide directly to us
You or your employer may provide data to us when you use the Services, such as when you register for an account, participate in one of our programs, or communicate with us. This data may include:

Identity Data includes first name, last name, username or similar identifier, title, and your employer.
Contact Data includes business addresses, corporate or personal email addresses, and telephone numbers.
Marketing and Profile Data includes your interests and preferences in receiving marketing from us and selecting third parties, your communication preferences, and survey responses.
 

Customer Service and Inquiry Data, such as information you provide us when you contact customer support or ask us a question about our Services.
 

User-Generated Content, such as information you provide to our instructors and coaches in connection with your participation in our Business Services.
 

Data is collected automatically when you use the Services
 

When you use our Services, we may automatically collect certain data using a variety of tools, including server logs, cookies, and other technologies. This data may include:

Device and Network Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
 

Usage Data includes information about how you use the Services, such as which Services you use, content accessed within the Services, date and time of use, amount of time spent on the Services, navigation within the Services, and entering and exiting URLs.
 

Data from other sources
 

We may also collect data about you from other sources, such as information you post publicly on social media platforms.

De-Identified Data. We may also aggregate or de-identify personal data such that it does not directly or indirectly reveal your identity (“De-Identified Data”). For example, we may aggregate information about the use of our websites to calculate the percentage of users accessing specific website features. We may use and disclose such De-Identified Data for any purpose. However, if we combine or connect De-Identified Data with your data so that it can directly or indirectly identify you, we treat the combined data by this Privacy Notice.

We do not collect any Special Categories of Personal Data about you – also considered sensitive data. Special Categories of Personal Data include but are not limited to, details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, or political opinions. Nor do we collect any information about criminal convictions and offenses.

B. What we do with your data
 

How we use your data depends on your relationship with us and the Services that you use:

Data collected from Learners under an enterprise (employer) account
We process data collected from individuals in their capacity as learners associated with enterprise accounts by the relevant customer’s instructions and in fulfillment of the contractual relationship with such customers. This data may include the learner’s identity data, contact data, device and network data, and usage data. Consistent with our contractual commitments, we use this data to provide the Services to learners, support, and troubleshoot, analyze and improve the Services, secure our Services, and for legal and compliance purposes, or as otherwise requested by the customer.

Data collected from learners with a direct relationship with Chauster
 

We process data collected from individuals in their capacity as learners who have a direct relationship with us under our

contractual relationship. This data may include the learner’s identity data, contact data, device and network data, usage data, and customer service and inquiry data. We may use this data to provide the Services, support and troubleshoot the Services, analyze and improve the Services, market our other Services to you, communicate with you about the Services (such as updates or notices about changes to our terms or policies), to secure the Services, and for legal and compliance purposes, or for other purposes for which we seek your consent.

Data collected from website visitors and others
 

We process data collected from individuals outside of their capacity as learners (such as visitors to our website) for a variety of purposes. This data may include any of the data listed in Section 1.An above. We may use this data to provide the Services, support and troubleshoot the Services, analyze and improve the Services, provide you with information about our other Services, communicate with you about the Services (such as updates or notices about changes to our terms or policies), to market and advertise our Services, to personalize the Services, to secure the Services, and for legal and compliance purposes, or for other purposes for which we seek your consent.

C. Disclosure of your data
 

We disclose your data in the following ways:

Within the Chauster family of companies: We disclose your data within the Chauster family of companies under common ownership and/or control to provide and enhance the Services and to operate our business.
 

With your employer. If you are a learner using a Chauster Business Services account provided by your employer, information about your activity on Chauster is accessible to and may be disclosed to, your employer. Please note that this does not apply to information we collect from individuals who have established an independent relationship with us.
With our service providers. Chauster may share your data with vendors and other partners that provide services on our behalf. We require all service providers to respect the security of your data and to treat it by the law. We do not allow our third-party service providers to use your data for their purposes and only permit them to process your data for specified purposes and by our instructions.
 

Online advertising partners. We work with third-party online advertising partners that, where permitted by law and consistent with any consent or opt-out elections you have made, collect information both on our Services and on third-party platforms to help tailor and serve your advertisements online. These partners may use cookies, pixel tags, and similar technologies on many online services, including ours, to collect information to serve you more relevant ads. You can learn more about how we and our partners use cookies and similar technologies, and about your rights and choices concerning cookies, by reviewing our [Cookie Policy] and following the instructions in the "Individual Rights and Choices" section below.
Business transfers. We may also share your data with third parties to whom we may choose to sell, transfer, or merge all or parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your data in the same way as set out in this Privacy Notice.
Legal, compliance, security, and safety. We may also disclose your data as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
 

Please note that Chauster is a global company and serves customers and individuals around the world. As such, when we disclose data as described above, we may transfer data to other jurisdictions that may have data protection laws that differ from those in your home country. When we transfer, store, or process your data, we take reasonable steps to protect your data by this Privacy Notice and applicable laws. For instance, we may implement Standard Contractual Clauses to govern the transfer of your data or other means recognized by applicable laws.

D. Using artificial intelligence (AI)
 

Chauster leverages AI technologies to improve our products and services, providing a better experience for our learners.

The use of AI and similar emerging technologies must be done by our code of conduct and AI-related policies and procedures – in compliance with applicable laws and regulations. Our policies and procedures ensure that any use of AI is done ethically and responsibly. Generally, and except in a very limited set of circumstances, personal data is not used or processed using AI.

2. PURPOSE SPECIFICATION
 

CHAUSTER COLLECTS AND USES PERSONAL DATA FOR SPECIFIC PURPOSES AND DOES NOT USE THE DATA IN WAYS THAT ARE INCOMPATIBLE WITH THOSE PURPOSES.
 

We will only use your data for the purposes stated in this Privacy Notice, for other purposes, we have specifically disclosed to you, or for which we seek your consent.

Our Services are not intended for children, and we do not knowingly collect data relating to children. If you become aware that a child has provided us with information, please contact us immediately at privacy@Chauster.com so we can delete such information from our system.

The laws in some jurisdictions require us to tell you about the legal bases we rely on to use or disclose your “personal data” as such term is defined under applicable law. To the extent that those laws apply, our legal grounds are as follows:

To honor our contractual commitments: Much of our processing of personal data is to meet our contractual obligations to our customers, or to take steps at customers’ requests in anticipation of entering a contract with them. For example, we handle personal data on this basis to provide learners with the Services.
 

Legitimate interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as providing customer support and troubleshooting and protecting and securing our Services.
 

Consent: Where required by law, and in some other cases, we handle personal data based on your implied or express consent, such as when we seek your consent to engage in direct marketing where legally required.
 

Legal compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.
 

Vital interest: To protect the vital interests of the individual or others.
 

3. DATA MINIMIZATION
 

WE COLLECT AND RETAIN THE PERSONAL DATA WE DEEM NECESSARY FOR THE PURPOSES FOR WHICH IT WAS COLLECTED AND FOR THE LENGTH OF TIME REQUIRED FOR OUR LEGITIMATE BUSINESS AND LEGAL PURPOSES.
 

We will only retain your data for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask us to delete your data – see, “Individual rights” (below) for further information.

4. ACCURACY
 

WE TAKE REASONABLE STEPS TO ENSURE THAT PERSONAL DATA IS ACCURATE AND UP TO DATE.
 

Where Chauster acts as a controller of data, Chauster takes reasonable steps to ensure that personal data is accurate and up to date. We have implemented technical and organizational measures to ensure the information we collect remains accurate

Users have the right to update or correct their data, and Chauster provides mechanisms to enable users to do so – see, “Individual rights” (below) for further information. The personal data we hold about you must be accurate and current. Please keep us informed if your data changes during your relationship with us.

5. SECURITY
 

CHAUSTER TAKES APPROPRIATE MEASURES TO PROTECT PERSONAL DATA FROM UNAUTHORIZED ACCESS, USE, DISCLOSURE, ALTERATION, AND DESTRUCTION.
 

Chauster takes a variety of measures to protect personal data from unauthorized access, use, disclosure, alteration, and destruction, including encryption, access controls, and monitoring. Chauster conducts regular security assessments and maintains an incident response and notification plan in the event of a data breach. However, please note that no transmission of data across the internet can be guaranteed to be secure.

In addition, we limit access to your data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your data on our instructions, and they are subject to a duty of confidentiality.

Our website, products, and services may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy and security practices or statements. When you leave our environment, we encourage you to read the privacy policy of every website you visit.

6. INDIVIDUAL RIGHTS AND CHOICES
 

This section explains your rights and choices concerning your data where Chauster acts as a data controller; e.g., for learners with whom we have a direct relationship and website visitors. If you are a learner using a Chauster Business Services account, please contact your employer to exercise your rights under applicable law. We cooperate with our enterprise account customers to respond to individual requests by our contractual obligations.

A. Exercising your rights and choices
 

Chauster provides mechanisms to enable users to exercise their rights under applicable law concerning their data and to make requests concerning their data. If you wish to make any of the requests set out below, please fill out our form [hyperlink] and select the type of request you are making.

Access: Request access to your data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
 

Correction: Request correction of the personal data that we hold about you. This enables you to request correction of any incomplete or inaccurate data, though we may need to verify the accuracy of the new data you provide to us.
Deletion: Request erasure of your data. This enables you to ask us to delete or remove personal data. You also have the right to ask us to delete or remove your data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
 

Objection: Object to processing of your data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You may also object to where we are processing your data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
 

Restriction: Request restriction of processing of your data. This enables you to ask us to suspend the processing of your data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have to override legitimate grounds to use it.
 

Transfer: Request transfer of your data to you or a third party. To the extent required by law, we will provide to you, or a third party you have chosen, your data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
 

Please note that these rights are not absolute and are subject to certain exceptions. If we cannot act on your request, we will explain the reason(s) why. For example, a request might impact the rights of another person or another company. Depending on applicable law, you may have the right to appeal our decision to deny your request; if you would like to exercise this right, please email us at Support@Chauster.com.

B. No Fee Usually Required
You will not have to pay a fee to access your data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

C. What We May Need from You
We may need to request specific information from you to help us confirm your identity and ensure your right to access your data (or to exercise any of your other rights), which may include verification of your contact information and about the Services you use. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information about your request to speed up our response.

D. Time Limit to Respond
We try to respond to all verified requests within one month of our receiving them. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests.

E. Data Protection Officer
We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions about this privacy notice. If you have any questions about this privacy notice, contact our DPO at dpo@Chauster.com. You may also contact us by telephone at (866) 754-5435, or by mail to Chauster Corporation, Attn: DPO, 300 Innovative Way, Suite 201, Nashua, New Hampshire 03062, U.S.A. with any general questions about our websites.

F. Complaints
If you have any concerns or complaints about our data processing activities, we urge you to first try to resolve your issue directly with us by contacting our Data Protection Officer via dpo@Chauster.com or the contact information provided above. However, you also may have the right to make a complaint to the data protection supervisory authority in the country where you are based.

G. Marketing Opt Out
You can ask us or third parties to stop sending you marketing messages at any time by checking or unchecking relevant boxes to adjust your marketing preferences or by following the “Unsubscribe” links on any marketing message sent to you.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us because of a product/service purchase, warranty registration, product/service experience, or other transactions.

H. Sale/Targeted Advertising Opt-Out Rights
Under the laws in certain US states, you also have the right to opt out of our processing or disclosure of your information for online targeted advertising purposes. Note that certain US states also allow you to opt out of the "sale" of your information to third parties in exchange for valuable consideration (monetary or otherwise). While we do not sell your data in exchange for money, we may use online advertising and related analytics tools that result in the disclosure of your information to our third-party partners and that are subject to this opt-out right. You can opt out of these activities by clicking "Your Privacy Choices."

7. ACCOUNTABILITY
CHAUSTER IS RESPONSIBLE FOR IMPLEMENTING PROCESSES TO COMPLY WITH THE DATA PRIVACY PRINCIPLES DISCUSSED IN THIS PRIVACY NOTICE.
A. Chauster’s role and responsibilities
Chauster is responsible for complying with data protection laws and regulations and has designated a DPO to oversee compliance. Chauster has implemented policies and procedures to ensure compliance with data protection laws and regulations, including regular audits and employee training. Chauster also conducts due diligence on its vendors and partners to ensure that they comply with applicable data protection laws and regulations.

Your use of Chauster Business Services is administered by your employer under a business-to-business (“B2B”) contract between Chauster and your employer. Chauster is the processor of and is responsible for, processing personal data in connection with the performance of its contractual duties and the provisions of the Chauster Business Services to its corporate clients (“B2B” relationship). The agreement between Chauster and its business customer, your employer, takes precedence when in conflict with this Privacy Notice. It follows that your employer may have access to your data processed by a Chauster Business Service and that your employer may have its privacy policy applicable to your use of one or more Chauster Business Services. Your employer – as the controller of your data – administers your use of the applicable Charter Business Services. Accordingly, please contact your employer with any privacy questions related to your use of Chauster Business Services or about your employer’s privacy policy governing the same.

Chauster is the controller of, and responsible for, the contact information we collect in connection with the provisions of direct-to-consumer services (“B2C”), and also our marketing initiatives and employment opportunities that often originate with our website located at Chauster.com.