- Personal Data – any information relating to an identified or identifiable natural person.
- Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
- Data Subject – a natural person whose Personal Data is being Processed.
- Child – a natural person under 16 years of age.
- Data Controller – a natural person or organization that determines the purposes and means of the processing of Personal Data.
- We/us/OutsideRush.com (either capitalized or not) – a website owned and operated by Wiregrass Digital LLC, a company incorporated in Alabama, United States.
Data Protection Principles
We promise to follow the following data protection principles:
- Processing is lawful, fair, transparent. Our Processing activities have lawful grounds. We always consider your rights before Processing Personal Data. We will provide you information regarding Processing upon request.
- Processing is limited to its purpose. Our Processing activities fit the purpose for which Personal Data was gathered.
- Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose.
- Processing is limited to a time period. We will not store your personal data for longer than needed.
- We will do our best to ensure the accuracy of data.
- We will do our best to ensure the integrity and confidentiality of data.
Data Subject’s Rights
The Data Subject has the following rights:
- Right to information – meaning you have the right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
- Right to access – meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered. To request this information, send an email to firstname.lastname@example.org with the subject line “Personal Data Request.”
- Right to rectification – meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
- Right to erasure – meaning in certain circumstances you can request for your Personal Data to be erased from our records. To request Personal Data Erasure, send an email to email@example.com with the subject line “Personal Data Erasure.”
- Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
- Right to object to processing – meaning in certain cases you have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
- Right to object to automated Processing – meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
- Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
- Right to lodge a complaint – in the event we refuse your request under the Rights of Access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us.
- Right for the help of supervisory authority – meaning you have the right for the help of a supervisory authority and the right for other legal remedies such as claiming damages.
- Right to withdraw consent – you have the right to withdraw any given consent for the Processing of your Personal Data.
Data We Gather
Information you have provided us with:
This includes your e-mail address and name – mainly information that is necessary for delivering you a service or to enhance your customer experience with us. We save the information you provide in order for you to perform other activities on the website, to send you content and notifications by email, or respond to questions you send us. We also collect information about visitors who write comments. This typically includes the information provided by the commenter such as their name, email address, and the comment itself. We do not store commenters’ IP Addresses.
Information automatically collected about you:
This includes information that is automatically stored by cookies and other session tools. For example, your device type, or the country you are browsing from. This information is used to improve your customer experience. When you use our services or look at the contents of our website, your activities may be logged.
Information from our partners:
We gather information from our trusted processing partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds. See the list of our partners here. If you wish to opt-out of their services, visit their privacy policies, and follow the instructions provided.
Publicly available information:
We might gather information about you that is publicly available.
How we use your Personal Data
We do not sell our users’ private Personal Data. We have never sold our users’ private Personal Data and have no intention of selling it in the future.
We use your Personal Data in order to:
- Provide our service and content to you. This includes, for example, recording and posting your comments; providing you with other products and services that you have requested; providing you with promotional items at your request and communicating with you in relation to those products and services; communicating and interacting with you; and notifying you of changes to any services.
- Enhance your customer experience.
- Fulfill an obligation under law or contract
We use your Personal Data on legitimate grounds and/or with your Consent.
On the grounds of entering a contract or fulfilling contractual obligations, we Process your Personal Data for the following purposes:
- To identify you
- To provide you a service or to send/offer you a product
- To communicate by email or ship items to you
- For payments or invoicing
On the grounds of legitimate interest, we Process your Personal Data for the following purposes:
- To send you offers (from us and/or our carefully selected partners)
- To administer and analyze our client base (behavior and history) in order to improve the quality, variety, and availability of content, products, and services offered and provided.
- To conduct surveys concerning client satisfaction or interests
If you have not informed us otherwise, we consider offering you products/content/ services that are similar or same to your purchasing history/browsing behavior to be our legitimate interest.
With your consent we Process your Personal Data for the following purposes:
- To send you newsletters and campaign offers (from us and/or our carefully selected partners)
- For other purposes we have asked your consent for
We Process your Personal Data in order to fulfill obligations rising from law and/or use your Personal Data for options provided by law. We reserve the right to anonymize Personal Data gathered and to use any such data. We will use data outside the scope of this Policy only when it is anonymized. We save your billing information and other information gathered about you for as long as needed for accounting purposes or other obligations deriving from law, but not longer than 7 years.
We might process your Personal Data for additional purposes that are not mentioned here but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that:
- The link between purposes, context and nature of Personal Data is suitable for further Processing
- The further Processing would not harm your interests and
- There would be appropriate safeguard for Processing.
We will inform you of any further Processing and purposes.
Who Else Can Access Your Personal Data
We only work with Processing partners who can ensure an adequate level of protection to your Personal Data. Personal Data about you is in some cases provided to our trusted processing partners in order to either make providing the service to you possible or to enhance your customer experience.
Processing partners that may receive Personal Data:
- Google.com (Apps): Website Email hosting
- ConstantContact.com: Email newsletters
- MailChimp.com: Email newsletters
- Mailgun.com: Email notifications
- MailMunch.com: Online form management
- SiteGround.com: Website and database hosting
- WPXhosting.com: Website and database hosting
- CookieBot.com: Privacy Management
- Cloudflare.com: DNS, security, and caching services
- Namecheap: DNS
- US Postal Service: Shipping
- Paypal.com: Payment services and invoicing
- YouTube: Video hosting
- Vimeo: Video hosting
Processing partners that do not receive Personal Data:
- Google Analytics: Website analytics
- Clicky.com: Website analytics
- Statcounter.com: Website analytics
Connected third parties that do not receive Personal Data:
- Amazon.com: Affiliate marketing program
- AvantLink.com: Affiliate marketing network
- CommisionJunction.com: Affiliate marketing network
- Shareasale.com: Affiliate marketing network
- Rakuten.com: Affiliate marketing network
- ImpactRadius.com: Affiliate marketing network
- Refersion.com: Affiliate marketing network
- Affiliatly: Affiliate marketing network
We disclose your Personal Data to third parties or public officials when we are legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it.
How We Secure Your Data
We do our best to keep your Personal Data safe. We use safe protocols for communication and transferring data (such as HTTPS). We use anonymizing and pseudonymizing where suitable. We monitor our systems for possible vulnerabilities and attacks. We use strong passwords and secure internet connections. We host our website with a managed service provider that has stringent security protocols.
Even though we try our best we cannot guarantee the security of information. However, we promise to notify the suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.
If you have an account with us, note that you must keep your username and password secret.
We do not intend to collect or knowingly collect information from children. We do not target children with our services. Children (persons under the age of 14) are not eligible to use the OutsideRush.com web site without the supervision of their parents. If you are under the age of 14 please do not submit any personal information to us. If you are under the age of 14 please only use the OutsideRush.com web site under the supervision of your parents or guardian. If you are under 13, please do not provide us with any information about yourself. If we discover that we have collected any Personally Identifiable Information regarding a child 12 or under, we will delete the information as soon as possible.
Cookies and Other Technologies We Use
A cookie is a tiny text file stored on your computer. Cookies store information that is used to help make sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may hinder your use of certain functions.
- Necessary cookies – These cookies are required for you to be able to use some important features on our website, such as logging in. These cookies don’t collect any personal information.
- Functionality cookies – These cookies provide functionality that makes using our service more convenient and makes providing more personalized features possible. For example, they might remember your name and e-mail in comment forms, so you don’t have to re-enter this information next time when commenting.
- Analytics cookies – These cookies are used to track the use and performance of our website and services
- Advertising cookies – These cookies are used to deliver advertisements that are relevant to you and to your interests. In addition, they are used to limit the number of times you see an advertisement. They are usually placed on the website by advertising networks with the website operator’s permission. These cookies remember that you have visited a website and this information is shared with other organizations such as advertisers. Often targeting or advertising cookies will be linked to site functionality provided by the other organization.
You can remove cookies stored in your computer via your browser settings. Alternatively, you can control some 3rd party cookies by using a privacy enhancement platform such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, visit allaboutcookies.org.
To request access to the data collected from/about you by the website, please send an email to firstname.lastname@example.org with the subject line “Personal Data Request.” This will help expedite your request.
To request Personal Data Erasure, send an email to email@example.com with the subject line “Personal Data Erasure.” This will help expedite your request.
The California Consumer Protection Act (“CCPA”)
The following section on CCPA, Cal. Civ. Code § 1798.100 which is effective January 1, 2020, applies to California residents who have certain rights regarding the personal information (as defined in the CCPA) collected by OutsideRush.com. It does not cover personal information not subject to the CCPA rights identified below, such as personal information we collect from our contractors. Likewise, the CCPA does not extend all the rights identified below to personal information collected from employees, owners, directors, officers, or contractors of businesses in the receipt of business-related services.
- “Personal information” or “PI” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or household.
- “Consumer” is a California resident, a natural person who is a California resident for other than temporary or transitory purposes, or someone who is domiciled in California but is currently outside the State for a temporary or transitory purpose.
- “Sale” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by OutsideRush.com to another business or a third party for monetary or other valuable consideration.
California residents have the following rights under CCPA
1. Right to Opt Out: You have the right, at any time, to direct us to not sell your PI. Under the CCPA, a sale is broadly defined such that it may include allowing third parties to receive certain information, such as cookies, IP addresses, and/or browsing behavior, to deliver targeted advertising on OutsideRush.com or other services.
(1a.) We Do Not Sell PI: OutsideRush.com does not sell your PI and has no intention of selling your PI in the future. For example, we do not provide information based on your PI for targeted advertising such as an IP address, email address, name, browsing history, geolocation information, or social media information, nor do we sponsor raffles, sweepstakes, or promotions with third parties in exchange for your email address or other PI for direct marketing purposes.
(1b.) Pre-existing Opt-out: Because OutsideRush.com does not sell PI, it shall be deemed that you have already validly submitted a request to Opt Out.
2. Right to Know or Right to be Informed: Subject to certain exceptions, you have the right to know what specific pieces of PI OutsideRush.com has collected about you in the 12 months preceding your request, along with the categories of sources of that PI, our business or commercial purpose for disclosing your PI, and the categories of third parties with whom we share your PI. You may make this request no more than twice per 12-month period.
3. Right to Request Deletion: You have the right to request deletion of the PI OutsideRush.com has collected from you, subject to certain exceptions under the CCPA including, without limitation:
(3a.) Complying with OutsideRush’s legal or compliance obligations,
(3b.) Detecting fraudulent behavior or security incidents, and
(3c.) Other reasons that are in connection with our lawful internal uses that are consistent with your relationship with us and the context in which the information was collected.
Exercising Your Rights under CCPA
You can exercise any of your rights under CCPA by emailing us at firstname.lastname@example.org.
We will take reasonable steps to verify your identity before responding to a request, which may include the following:
1. If you are exercising your Right to Delete or a similar right that does not require the disclosure of specific pieces of information about you:
(1a.) If you are writing to us from the email address that OutsideRush.com has on record for you, then to complete the verification process, we will ask you to confirm the action you wish us to take before we proceed (such as confirming you would like us to delete your information).
(1b.) If you are not writing to us from the email address that OutsideRush.com has on record for you, then to complete the verification process, we will ask you to provide 3 specific pieces of data that we have on file for you, such as your name, a physical mail address, or a record of a previous transaction.
2. If you are exercising your Right to Know or a similar right that does require disclosure of specific pieces of information about you:
(2a.) If you are writing to us from the email address that OutsideRush.com has on file for you, then to complete the verification process, we will ask you to both: 1) confirm the action you wish us to take before we proceed and 2) also provide a statement that you “declare under penalty of perjury that you are the person about whom the Right to Know request has been made.”
(2b.) If you are not writing to us from the email address that OutsideRush.com has on file for you, then to complete the verification process, we will ask you to both: 1) provide 3 specific pieces of data that we have on file for you and 2) also provide a statement that you “declare under penalty of perjury that you are the person about whom the Right to Know request has been made.”
3. You are also permitted to designate an authorized agent to submit certain requests on your behalf. For an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity according to the above methods before processing the authorized agent’s request.
4. If we are not able to successfully verify you according to the above methods, then we will not be able to comply with your request.
OutsideRush.com will not discriminate against you if you exercise your rights under CCPA. However, if your request requires us to delete information, please be advised that this will inhibit some OutsideRush.com functionality. Subsequent interaction with OutsideRush.com after deletion may require new requests for your PI.
Other rights of California Residents
If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please send an email to email@example.com. Pursuant to California Civil Code Section 1798.83(c)(2), we do not share your personal information with third parties’ direct marketing use unless you elect that we do so.
If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please email us at firstname.lastname@example.org with a detailed description of the specific content or information. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.
Last modification was made 1/1/20