CCPA – California Consumer Privacy Act

Definitions

Website

Refers to https://autson.com or Our Website.

Owner (or We)

Denotes the individual(s) or legal entity responsible for offering this Website to Users.

User (or You)

Refers to any individual or legal entity that accesses this Website.

This Privacy Notice for California Residents is an addition to the details in the Privacy Policy of the Website and is specifically applicable to all visitors, users, and others residing within the State of California. We created this notice to meet the requirements of the California Consumer Privacy Act of 2018 (CCPA), with any terms defined by the CCPA carrying the same significance in this notice.

Information We Collect

The Website gathers information that identifies, pertains to, describes, is referenced by, can be associated with, or can be reasonably linked, either directly or indirectly, to a specific consumer or device (“personal information”).

Specifically, the Website has acquired the following categories of personal information from its consumers over the previous 12 months:

Category Examples Collected
A. Identifiers. Includes a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. YES
B. Personal information categories specified in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Comprises a name, signature, Social Security number, physical traits or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, educational details, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. YES
C. Protected classification characteristics under California or federal law. Includes age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (which encompasses gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, and genetic information (including familial genetic details). YES
D. Commercial information. Records of personal property, products or services purchased, acquired, or considered, along with other purchasing histories or tendencies. YES
E. Biometric information. Includes genetic, physiological, behavioral, and biological traits, or activity patterns utilized to derive a template or other identifier or identifying information, such as fingerprints, faceprints, voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and data related to sleep, health, or exercise. YES
F. Internet or other similar network activity. Consists of browsing history, search history, and information on a consumer’s interaction with a Website, application, or advertisement. YES
G. Geolocation data. Refers to physical location or movement patterns. YES
H. Sensory data. Involves audio, electronic, visual, thermal, olfactory, or similar types of information. YES
I. Professional or employment-related information Encompasses current or past job history or performance evaluations. YES
J. Non-public education information (as per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Consists of education records directly associated with a student maintained by an educational institution.“`html
or party acting on its behalf, which may include grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.		 YES
K. Inferences drawn from other personal information. A profile that reflects a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES

Personal information does not encompass:

  • Information readily available from public government records.
  • Deidentified or aggregated consumer details.
  • Information that falls outside the CCPA’s scope, such as certain health or medical data and other types safeguarded by different statutes.

The categories of personal information outlined above are acquired from the following sources:

  • Direct interactions with you. For instance, from the forms you fill out or the products and services you buy.
  • Indirect interactions with you. For example, through observing your actions on our Website.

Utilization of Personal Information

The personal information collected may be utilized or disclosed for one or more of the following business objectives:

  • To fulfill or address the reason you provided the information. For example, if you share your name and contact details to obtain a price quote or inquire about our services, we will utilize that personal information to respond to your question. If personal information is supplied to acquire a product or service, it will be used to process your payment and facilitate the delivery. Furthermore, we might keep your information to enable future product orders or handle returns.
  • To manage your requests, purchases, transactions, and payments while preventing transactional fraud.
  • To provide support and respond to your inquiries, including investigating and addressing your concerns, as well as monitoring and enhancing our responses.
  • To comply with law enforcement requests and as mandated by applicable laws, court orders, or governmental regulations.
  • As detailed at the time of collecting your personal information or as otherwise stipulated in the CCPA.
  • To assess or perform a merger, divestiture, restructuring, reorganization, dissolution, or any sale or transfer of all or a portion of our assets or those of our affiliates, wherein personal information held about our Website users is included among the transferred assets.

We will refrain from collecting additional categories of personal information or utilizing the personal information we gather for materially different, unrelated, or incompatible purposes without notifying you.

Disclosing Personal Information

Personal information may be shared with a third party for business purposes. When such a disclosure occurs, we enter into a contract that defines the purpose and mandates the recipient to maintain the confidentiality of that personal information and restricts its use solely for fulfilling the contract.

The following categories of third parties may receive your personal information:

  • Service providers
  • Data Aggregators

Your Rights and Options

California residents are granted specific rights concerning their personal information under the CCPA. This section outlines your CCPA rights and details how to exercise those rights.

Rights to Access Specific Information and Data Portability

You possess the right to request the disclosure of certain information regarding our collection and use of your personal information over the past 12 months. Upon receiving and confirming your verifiable consumer request (refer to Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

  • The categories of personal
    “`certain categories of personal information that we have collected about you.
  • The sources from which your personal information was obtained.
  • The purpose of our business or commercial activities related to your personal information collection or sale.
  • The specific third parties we share your personal information with.
  • The specific pieces of personal information we have gathered about you, also known as a data portability request.
  • In cases where we sold or disclosed your personal information for a business purpose, we will provide two distinct lists specifying:
    • Sales, detailing the categories of personal information that each recipient purchased.
    • Disclosures for business purposes, identifying the categories of personal information that each recipient obtained.

Rights to Request Deletion

You hold the right to request the deletion of any personal information we have collected and retained about you, with some exceptions. Once we receive and confirm your verifiable consumer request (refer to Exercising Access, Data Portability, and Deletion Rights), we will delete your personal information from our records and instruct our service providers to do the same, unless a specific exception applies.

Your deletion request might be denied if keeping the information is essential for us or our service provider(s) to:

  • Complete the transaction for which we collected the personal information, fulfill a good or service you’ve requested, engage in actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise execute our contract with you.
  • Identify security incidents, protect against harmful, deceptive, fraudulent, or illegal activities, or take action against those responsible for such actions.
  • Debug products to diagnose and correct errors affecting existing intended functionality.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.), enabling only internal uses consistent with consumer expectations based on your relationship with us.
  • Fulfill a legal obligation.
  • Engage in other internal and lawful usages of that information that align with the context in which you provided it.

Exercising Your Rights of Access, Data Portability, and Deletion

To exercise the access, data portability, and deletion rights outlined above, please send us a verifiable consumer request through one of the following methods:

Only you or an individual registered with the California Secretary of State and authorized by you can submit a verifiable consumer request concerning your personal information. Additionally, you can submit a verifiable consumer request on behalf of your minor child.

Requests for access or data portability may only be made twice within a 12-month period. Your verifiable consumer request must:

  • Include sufficient information that allows us to reasonably confirm your identity as the person about whom we have gathered personal information or as an authorized representative.
  • Detail your request in a manner that enables us to properly comprehend, assess, and respond to it.

We cannot respond to your request or provide you with personal information if we are unable to verify your identity or authority to submit the request and confirm that the personal information pertains to you.

Submitting a verifiable consumer request does not necessitate creating an account with us.

The personal information provided in a verifiable consumer request will solely be utilized to verify the identity or authority of the requestor making the request.

Timing and Format of Response

We strive to respond to a verifiable consumer request within forty-five (45) days upon its receipt. Should we require additional time…You will receive a written explanation of the reason for any delay and the duration of the extension.

Our written reply will be sent via mail or electronically, based on your preference.

Any information we disclose will pertain only to the 12-month span before receiving your verifiable consumer request. Additionally, our response will clarify the reasons for our inability to fulfill a request, if necessary. For requests concerning data portability, we will choose a format that allows easy use of your personal information, enabling you to transfer the data from one entity to another seamlessly.

We will not impose any fees for processing or responding to your verifiable consumer request unless it is excessive, repetitive, or evidently unfounded. Should we decide that a fee is warranted, we will explain the rationale behind that decision and provide a cost estimate before proceeding with your request.

Personal Information Sales

We will not sell your personal information to any external parties. Should we foresee the sale of your personal information in the future, we will ensure to provide you with the opt-out and opt-in rights mandated by the CCPA.

Non-Discrimination

Exercising your CCPA rights will not result in discrimination against you. Unless allowed by the CCPA, we will refrain from:

  • Denying you goods or services.
  • Charging varying prices or rates for goods or services, including offering discounts or other advantages, or applying penalties.
  • Providing dissimilar levels or quality of goods or services.
  • Implying that you may receive different pricing or rates for goods or services or a different level or quality of goods or services.

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code Section § 1798.83) allows users of our Website who are California residents to request specific information related to our sharing of personal information with third parties for marketing purposes. To submit such a request, please send an email to [email protected].

Changes to Our Privacy Notice

We hold the right to modify this privacy notice at our discretion and at any time. Changes made to this privacy notice will be posted on our Website, along with updated effective dates. Your continued usage of our Website after changes have been made signifies your acceptance of these modifications.

Contact Information

For inquiries or feedback regarding this notice, our data collection and usage practices outlined below and in our Privacy Policy, your choices and rights concerning such usage, or if you wish to exercise your rights under California law, please feel free to reach out to us at:

Last Updated: November 18, 2024