“Personal information” means all information about an identified or identifiable individual. In some jurisdictions, the term “personal data” is used in local privacy laws rather than the term “personal information”. Optiva uses the terms “personal information” and “personal data” interchangeably.
Personal Information Optiva collects from you includes but is not limited to:
However, Optiva also does business in other countries, and non-Canadians also use the Site, the Products and the Services. Many of these other countries have their own laws applicable to the protection of personal information, which may or may not conflict with or contain more restrictive legal obligations than PIPEDA (including, for example, the European Union’s General Data Protection Regulation, known as “GDPR”).
INFORMATION ABOUT OUR CUSTOMERS’ USERS
Optiva is responsible for personal information under its control, and will take all reasonable steps to handle such personal information fairly and to ensure compliance with applicable laws in relation to the collection, use, disclosure and protection of personal information.
Identifying Purposes: Why We Collect Your Information
Optiva collects, uses and discloses to certain third parties, personal information for the following primary purposes:
The paragraphs below provide further information about what types of personal information we collect and how we use and disclose it for each of the Products, Services, and the Site.
Products and Services
Optiva may also collect personal information from customers as required to provide support and delivery of Optiva Products and Services. A customer’s use of Optiva or an affiliate’s Products and Services is governed by the terms of the contract between Optiva or an affiliate and the customer.
For Optiva’s customers, our Products generally do not collect personal information. Rather, they facilitate the collection of information by our customers. These Products generally serve as charging and subscriber management solutions that allow communications service providers to better serve their subscribers and end-users and maximize revenue and perform administrative functions.
Optiva may also collect and store certain information that is automatically collected by our cloud and managed services solutions or provided by its users. Such information will be kept private by Optiva and is not for public distribution.
In addition, Optiva may share your contact or product information with its Original Equipment Manufacturer (OEM) partners if you contact Optiva for assistance and Optiva needs to work with the OEM in order to assist you. Finally, we may share certain personal information with our external service providers to assist us with the delivery of email campaigns, and for product renewal and upgrade purposes.
Additionally, data sub-processors utilized by Optiva are subjected to Optiva’s due diligence process and required to make contractual assurances that they will take adequate precautions to protect your data. Optiva will require such service providers to adopt adequate technical and organizational security measures to ensure the processing of personal data only as instructed by Optiva and for no other purposes.
Optiva will try to collect personal information directly from the individual concerned unless authorized by that individual to collect it from a third party or as otherwise permitted by law.
If personal information is collected for any other purposes than described above (unless the purpose for collecting personal information is obvious and you provide your personal information for that purposes, or unless otherwise permitted or required by laws), Optiva will communicate the purpose of collecting the personal information to you at the time of collection, either orally or in writing, as well as its use and how it may be disclosed.
If personal information is gathered in writing, the purpose of its collection will be communicated through printed materials, the Site or email. If personal information is gathered orally, Optiva will provide an oral explanation of the purpose for the collection and use.
If you visit our Site and request information, request or subscribe to marketing materials, download content (such as whitepapers or webinars), contact us, place an order or register, we will collect personal information that you voluntarily provide to us (including your IP address, name, title, address, email address and telephone number, and contact preferences) in order to respond to your request or inquiry.
Links to Third Party Sites
Optiva’s Site may contain links to third party sites, and we recommend and encourage you to read the privacy policies posted on those third party sites. Optiva is not responsible for the privacy policies or practices of any third party.
Third Party Services
Google Analytics. We use Google Analytics, which is a web analytics service offered by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com) that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our website. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
If consent to process your personal information is required by applicable privacy laws, Optiva will obtain your consent before collecting, processing, storing, using or disclosing your personal information. Please note that under certain legal and medical circumstances it may be impossible or impractical to obtain an individual’s consent. We will make reasonable efforts to ensure you understand how your personal information may be used or disclosed.
The form of consent can vary, depending on the sensitivity of the information and the circumstances. Consent may be express or implied depending on the nature of the personal information or the use, and depending on applicable local privacy laws. In addition to writing, your consent may also be expressed verbally or electronically. When determining the appropriate form of consent, Optiva will be guided by what a reasonable person would consider fair and appropriate in the circumstances.
In general, you can choose not to provide us with some or all of your personal information at any time. However, should you make this choice we may not be able to provide you with the Product, Service or information that you requested or that could be offered to you. Upon request we will explain your options of refusing or withdrawing consent to the collection, use, and disclosure of your personal information. All communications with respect to the withdrawal of consent should be made in writing and addressed to Optiva’s Data Privacy Officer.
Optiva does not collect personal information indiscriminately. Rather, we limit our collection of personal information to only what is necessary for the legitimate purpose we have identified. We employ fair and lawful means in the collection of personal information.
Limited Use, Disclosure and Retention
Optiva may share personal information with our employees, contractors, consultants, affiliates, service providers, business partners and other parties who require such information to assist us with providing you with the Services.
Optiva is headquartered in Canada, but does business globally. The use, collection and disclosure of personal information may involve Optiva transferring personal information across borders. If this occurs, we will comply with all applicable trans-border data flow privacy laws. By accessing our Sites and using our Products and Services, you consent to any such transfer of information outside of your country. Those countries may have laws which are different, and potentially not as protective, as the laws of your own country.
Optiva will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required for Optiva’s legitimate business purposes, or to comply with applicable legal, tax or regulatory requirements. After this time, any personal information you have provided to us will be destroyed, deleted or made anonymous.
Optiva may use and disclose aggregated and anonymous or de-identified information to third parties, including the general public. For example, we may analyze and publish reports on usage trends or statistics from across our global customer base for information or marketing purposes, but only after we have removed any personal information that would identify or be associated with any particular individual or customer. This type of aggregated and anonymous or de-identified data can help Optiva to improve our Products, Services and advertising, and it can be used by customers and the public to better understand trends in the industry. We will never sell this aggregated data.
Optiva will make reasonable efforts to ensure that the personal information collected and used by us is accurate, complete and up-to-date to meet the purposes for which it is collected and used. Optiva does not routinely update personal information unless it is necessary to meet the purposes for which it is collected. Optiva therefore relies on you and its customers to keep your personal information accurate and current.
You may request correction to your personal information in order to ensure its accuracy and completeness. Any request to correct personal information must be made in writing to Optiva’s Privacy Officer and must provide sufficient detail to identify the personal information and the correction being sought.
If your personal information is demonstrated to be inaccurate or incomplete, we will correct the information as required and send the corrected information to any third party to whom we disclosed the personal information in the previous year. If the correction is not made, we will note your correction request in the relevant records.
Safeguarding Personal Information
Optiva will make reasonable security arrangements and use appropriate technical and organizational measures to protect all personal information under our control (regardless of the format in which it is held) against unauthorized access, loss, theft, collection, use, disclosure, duplication, modification, disposal or similar risks, by both individuals outside of Optiva as well as within. The types of security safeguards that we use vary, depending on the nature and sensitivity of the personal information, the harm that might result from its improper use or loss, and how it is stored (e.g. in paper or electronically). Optiva’s security safeguards include locked filing cabinets, physically secured offices where personal information is held, limited employee access, the use of IDs, passwords, restricted servers, firewalls and encryption for electronic files, as well as contractual requirements for service providers to provide comparable security measures.
Optiva will use appropriate security measures when disposing of and destroying personal information, such as shredding documents and deleting electronically stored information, in order to prevent unauthorized access.
Optiva will also continually review and update our security policies and controls as technology changes to ensure ongoing personal information security.
Requests for Access
You have the right to access your personal information, subject to limited exceptions under applicable laws such as solicitor-client privilege, disclosure that would reveal personal information about another person, legal obligations and proprietary rights. Optiva’s Privacy Officer will assist you with your request. This includes:
All requests should be made in writing (by mail, fax or email), provide sufficient detail to identify the information being sought, and be directed to Optiva’s Privacy Officer. Optiva’s Privacy Officer may require further information defining the request more succinctly.
We will respond to written requests within a reasonable time frame, of receiving such request. We will either make the requested information available within that time period, or provide written notice of an extension where additional time is required to fulfill the request. If Optiva cannot fulfill your request in full or in part, Optiva will provide you with a response in writing that explains the reason for the denial of access.
Optiva may charge a minimal fee for providing access to personal information, where permitted under applicable law. Where a fee applies, we will inform you of the cost and request further directions from you on whether or not we should proceed with your request.
Individual Rights (European Economic Area and Switzerland)
This section applies specifically to individuals residing in the European Economic Area (“EEA”) or Switzerland.
Optiva generally acts as the data processor and Optiva customers are the data controllers with respect to any personal information that Optiva processes through your use of the Services. Optiva will comply with its obligations as a data controller processing personal information on behalf of its customers.
Optiva may also act as a data controller with respect to human resources data received from its own personnel located in the EEA or Switzerland.
If you reside in the EEA or Switzerland, you may have the right to exercise additional rights available to you under applicable laws, including:
If you would like to exercise any of the above rights, please contact our support team or contact our Privacy Officer (see our contact details in the Section below). We will consider your request in accordance with applicable laws. To protect your privacy and security, we may take steps to verify your identity before complying with the request.
You also have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
If you are an individual who believes that one of Optiva’s customers has collected personal information about you through its use of the Services or Products, and you wish to exercise any of the above rights your request should be directed to that customer, not to Optiva.
Lawfulness (European Economic Area and Switzerland)
With respect to personal information collected from the European Economic Area or Switzerland, our legal basis for collecting and using the personal information will depend on the personal information concerned and the specific context in which we collect it. Optiva will normally collect personal information from you only where:
(a) we have your consent to do so for one or more specific purposes;
(b) we need the personal information to perform a contract with you (e.g. to deliver the services you have requested) or in order to take steps at your request prior to entering into a contract;
(c) where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms);
(d) processing is necessary for compliance with a legal obligation to which we are subject;
(e) processing is necessary in order to protect your vital interests of or those of another natural person; or
(f) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Optiva.
We offer those who provide personal contact information a means to choose how we use the information provided. You may manage your receipt of marketing and non- transactional communications by clicking on the “unsubscribe” link located on the bottom of our marketing emails.
The Site, the Products and the Services are not intended for use by minors. Optiva does not knowingly collect information about minors and believes that minors should obtain their parents’ or legal guardians’ consent before providing any personal information. If you believe that we have mistakenly or unintentionally collected a minor’s personal information, please contact Optiva’s Privacy Officer. By using the Site, the Products or the Services, you represent that you are over the age of majority.
Optiva does not currently respond to browser “Do Not Track” (DNT) signals or other mechanisms. Third parties may collect personal data about your online activities over time and across sites when you visit the Site or use the Services.
If you are a California resident, California Civil Code Section 1798.83 permits you to request certain information regarding our disclosure of personal data to third parties for the third parties’ direct marketing purposes. To make such a request, please contact us by sending an e-mail to.
Our Site, Products, and Services are not intended to appeal to minors. However, if you are a California resident under the age of 18, and a registered user of our Site, Products or Services, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an e-mail with a detailed description of the specific content or information to firstname.lastname@example.org.
Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.
Under California law, California residents who have an established business relationship with us may opt-out of our disclosing personal data about them to third parties for their marketing purposes.
2233 Argentia Rd., East Tower, Suite 302
Mississauga, Ontario L5N 2X7
Please provide specific details about the inquiry or complaint must be provided. We will investigate and respond in accordance with the section above as well as applicable laws.
Last Updated: 28 May 2020