EFFECTIVE JULY 1, 2021 (see archived version)
TABLE OF CONTENTS
- Data is Exported to Servers in the United States
- Your Rights Under Local Law May Limit Your Protections
- Data Protection Addendum for Canada
- European Economic Area Data Controllers Mandatory DPA
- European Economic Area Data Subject Rights
- International Privacy Dispute Resolution through JAMS
- Privacy Shield Participation and Arbitration
Data is Exported to Servers in the United States
We transfer the information you submit or that we gather to the United States for the purposes described in our General Privacy Notice.
Your Rights Under Local Law May Limit Your Protections
Your country may assert oversight over your data or provide you with less protection than our General Privacy Notice. By signing up for a Boom Learning account, you acknowledge and accept the risk should the laws of the country in which you reside provide you or your students with less protection than this document with regards to your local government.
Data Protection Addendum for Canada
Our Canadian customers who require a data export agreement may download, complete and return the attached Data Protection Addendum ("DPA") or send their data export terms to our legal team.
European Economic Area Data Controllers Mandatory DPA
CUSTOMERS IN THE EUROPEAN ECONOMIC AREA (EEA) MUST ENTER INTO AN ADDITIONAL DATA PROTECTION ADDENDUM (“DPA”). For our customers subject to the GDPR or equivalent privacy regulations, including Swiss and UK customers, download, sign and return the attached Data Protection Act ("DPA"), which includes the standard contractual clauses for data export to the United States. Your use of our service to export data to the United States is inadequate unless you complete and return the DPA to our legal department.
European Economic Area Data Subject Rights
We value our EEA customers’ privacy and rights as data subjects. We have appointed Maetzler Rechtsanwalts GMBH & Co Kg (EEA) as our privacy representative. If you want to contact us via our representative or make use of your data subject rights (e.g., request to access or erase personal data), please visit: https://prighter.com/q/18732339
International Privacy Dispute Resolution through JAMS
You have the option of referring any complaint to our independent dispute resolution body: JAMS, an alternative dispute resolution provider with locations in the UK and US and online. Any matter referred to JAMS will be administered by JAMS in accordance with JAMS International Arbitration Rules. Online mediation is also an option. The services of JAMS are provided at no cost to you.
Privacy Shield Participation and Arbitration
We comply with the EU.-U.S. and Swiss - U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce. This framework relates to the collection, use, sharing and retention of personal information transferred from the European Union to the United States. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/. If there is any conflict between our privacy notices applicable to you and the Privacy Shield Principles, the Privacy Shield Principles shall govern. We have submitted to the oversight of the US Federal Trade Commission for the purposes of Privacy Shield Enforcement. We remain responsible for personal information we transfer to others who process it on our behalf. If you have a question, concern or complaint about our compliance or your rights, you can contact us. We will review your request in light of applicable laws.