Tarmac Privacy Policy

Updated: 1st May, 2020.

This Privacy Policy explains how Tarmac, LLC (“Tarmac”, “Company”, or “We”) will collect, use, share, and protect your personal data. Personal data is any information relating to an identified or identifiable person for example, your name, address, phone number, email address, and IP address.

Tarmac will process your personal data in a transparent and lawful way. Any personal data you provide when using this website or services will be used only in accordance with this privacy statement.

We may change this statement from time to time to reflect privacy or security updates. If we make material changes, we will notify you via email, or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact Us

If you have any questions about this statement or if you would like to exercise any rights you may have in relation to your personal data, please contact us at gdpr@tarmac.io. If you have additional questions or need to escalate an issue, use the below details for our Data

Protection Officer (DPO).
Full name of legal entity: Tarmac LLC
Name of DPO: Brent Kastner
Email address: dpo@tarmac.io
Postal address: 1025 Lake Beach Drive, Shoreview MN 55126

What Personal Data Does Tarmac Collect, and for What Purpose?

As part of our marketing efforts, we may collect your personal data such as your name, place of employment and address, job position, e-mail address, and phone number. This data is generally gathered directly from you through forms on our website, or over the phone and is used to communicate and personalize such communications with you, including offering services that we believe may be of interest to someone in your position.

Information about your chosen subscriptions are used to better provide you with relevant e-mail content. We may also gather data about you from publicly accessible sources, such as your LinkedIn profile, or we may receive such information from third party lists. In certain situations, such as when you authorize a social network to pre-fill a form on our website or if you interact with social media buttons on our website, we may receive publicly available data from your social media profile (such as first name, last name, e-mail address, date of birth, gender, job title, and company).

We also gather certain data automatically upon your visit to our website, including Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site and e-mails (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or click-stream data to analyze trends in the aggregate and administer the site. Your IP address may also be utilized to infer your location, which we may use to send you more relevant content.

Legal Basis of Collecting and Processing Data

We will use your personal data when the law allows us to. Most commonly, for marketing purposes, we will process your personal data in the following circumstances:

Where you consent; or
Where it is necessary for our legitimate interests (i.e. we have a business or commercial reason for using your information) and your interests and your fundamental rights do not override those interests.

Our legitimate interests may include:

Providing high quality customer service.
Complying with laws or regulations that apply to us.
Developing services and what we charge for them.
Defining customers for our services.
Seeking your consent when we need it to contact you.
Providing our customers with relevant marketing, and other high-quality services.
Keeping our marketing updated and relevant.

Change of Legal Basis

We will only use your personal data for the uses and purposes set out above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original uses and purposes. If we need to use your personal data for an unrelated purpose, we will notify you and will explain the legal basis which allows us to do so.

Profiling

We will not use your personal data for decisions based solely on automated processing if the decision has legal effects concerning you or if it significantly affects you, unless you gave your explicit consent for this processing.

Sharing of Information

Except as described here or in any of our other applicable privacy policies, we will not sell, distribute, lease, or provide any of your personal data to any third parties unless we have your permission to do so or are required by law. We share your personal data with the following categories of recipient:

Agents and subcontractors. We may disclose your personal data with our agents or subcontractors for the purposes identified above. In these cases, the agent or subcontractor will be obligated to use that personal data in accordance with the terms of this privacy statement.Your data may be shared with these types of agents and subcontractors:
- Data de-duplication and rerouting service provider
- Customer Relationship Management (CRM) service provider
- Marketing automation and analytics provider
Third parties as permitted or required by law. This may include disclosing your personal data to regulators, or law enforcement authorities. We may transfer and disclose the data we collect about you to comply with a legal obligation, including responding to a court order, to prevent fraud, to comply with an inquiry by a government agency or other regulator, to address security or technical issues, to respond to an emergency, or as necessary for other legal purposes.
As part of a business transaction. In relation to an ongoing or proposed business transaction such as a transfer of the ownership or operation of Tarmac LLC or any companies in its group to another organization, if we merge with or are acquired by another organization, or if we liquidate our assets, your personal data may be transferred to a successor organization. If such a transfer occurs, the successor organization’s use of your data will still be subject to this statement and the privacy preferences you have expressed to us.

International Data Transfers

All personal information we collect through the Services is currently processed in the United States by us or by a party acting on our behalf. When you provide personal information to us through the Services, you consent to the transfer of your data to, and processing of your data in, the United States. The Services are currently hosted in the United States.

California Privacy Rights

California residents who provide certain types of personal information in obtaining services for personal, family or household use are entitled to request and obtain from us once a calendar year information about certain types of personal information we shared, if any, with other businesses for their own direct marketing uses. To obtain this information, please send an email message to dpo@tarmac.io with “Request for California Privacy Information” on the subject line and in the body of your message. To learn more about California residents’ rights under the California Consumer Privacy Act.

Do Not Track

Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For all the details, including how to turn on Do Not Track, visit www.donottrack.us.

Children

We do not knowingly collect or maintain personal information from any person under the age of thirteen. No parts of our Services are directed to or designed to attract anyone under the age of thirteen.

Security

We are committed to ensuring that your personal data is secure. To prevent unauthorized access or disclosure, we have put appropriate technical and organizational measures in place to safeguard and secure your personal data.

If a data breach does occur, we will do everything in our power to limit the damage. In case of a high-risk data breach, and depending on the circumstances, we will inform you about remedial actions to prevent any further damage. We will also inform the relevant supervisory authority or authorities of the breach.

Unfortunately, no security measures are completely secure. We therefore cannot guarantee that your personal data will not be disclosed, misused or lost by accident or by the unauthorized acts of others. Further, we cannot control dissemination of personal data you post in the public domain and you should have no expectation of privacy in respect of such data.

The procedures and related standards include limiting access to data and regularly testing and auditing our security practices and technologies.

Data Retention

How long we retain your data depends on the type of data and the purpose for which we process your data. Your data will not be retained for a period longer than necessary for the purpose for which we have processed your data, plus any statutory period during which we need to retain the data to resolve any legal claims.

Data processed for marketing purposes will be retained for as long as you remain a customer. However, certain opportunity data (information about potential or consummated sales) related to your account will be retained for up to 5 years after you cease being a customer. If you have subscribed to receive marketing information from Tarmac but have ceased engaging with Tarmac emails or offered content, your personal data will be erased after 5 years of non-engagement. Please note that it may not always be possible to completely remove or delete all your personal data from our databases without some residual data because of backups and other reasons.

To determine the appropriate retention period for the information we collect from you, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the data, whether we can achieve those purposes through other means, and the applicable legal requirements.

Data Subject Rights

To exercise any of the following rights, please contact gdpr@tarmac.io. If you need to escalate a matter or feel that your issue is unresolved, please contact our DPO. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Right to Request Access: You have the right to request details of your personal data that we hold. Upon request, we will provide a copy of such personal data within a reasonable timeframe.
Right to Rectification: If you believe that any personal data we are holding on you is incorrect or incomplete, please contact us as soon as possible at the address above. We will promptly correct any personal data found to be incorrect, though we may need to verify the accuracy of the new data you provide to us.
Right to Object: You may choose to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data which override your rights and freedoms. You also have the right to object in cases where we are processing your personal data for direct marketing purposes. We will provide you with appropriate choices to opt-in or opt-out as set out above in this statement.

Please note that your objection may be overridden by the legitimate interests of Tarmac to process and collect your personal data.

Right to Erasure

To the extent legally permissible, you may be entitled to have certain personal data erased in the following circumstances:

The personal data is no longer necessary in relation to the purposes for which it was collected or processed.
You object to the collection or use of your personal data and there are no overriding legitimate grounds for the processing.
The personal data has been unlawfully processed.
The personal data has reached the defined retention period or for compliance with a legal obligation to which Tarmac is subject.

You can exercise this right by emailing us at gdpr@Tarmac.io.

Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Right to Restriction of Processing

You may have the right to restrict further processing of your personal data in the following situations:

You contest the accuracy of the personal data.
The processing of the data is unlawful.
The personal data has reached the defined retention period, but you require the personal data to establish, exercise, or defend legal claims.
You object to the processing of data pursuant to the right to object as described above. The processing may be restricted pending the verification of whether Tarmac’s legitimate grounds override your rights as a data subject.

Right to Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format. Tarmac will assist in the transmission of such data to another entity, upon request, to the extent technically feasible. Note that this right only applies to automated information which you initially provided consent for us to use, or where we need the info to perform a contract with you.

Right to Revoke Consent

If you have consented to the processing of your personal data via the explicit checkbox located in the forms you filled out, you have the right to revoke such consent by unchecking the consent checkbox and unsubscribing from all emails. However, if you withdraw your consent, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

Right to Make a Complaint

You have the right to make a complaint at any time to the relevant data protection supervisory authority in which you reside.