Privacy Policy: Protecting Your Data, Securing Your Trust

Last Modified: October 1, 2024.

SensorUp Inc. (“SensorUp”, “us” or “we”), describe in this privacy policy (this “Policy”) our practices regarding the use and processing of personal information that we collect via the www.sensorup.com website and , our software-as-a-service platform, and all mobile websites and applications associated therewith (collectively, the “Site”). We use the terms “personal information” and “personal data” to mean any information relating to an identified or identifiable individual that we collect from users of the Site (“you”, “your”).

We may change this Policy from time to time at our sole discretion. We encourage you to review this Policy each time you use the Site to see if the Policy has been changed, as indicated by the “Last Modified” date set out above. We may require you to provide consent to the updated Policy before further use of the Site is permitted.

If you are located in the European Economic Area (“EEA”), please also see our Supplemental EEA Privacy Statement below. Should you have any questions regarding this Policy or wish to enforce any of your rights under this Policy, you can email our privacy officer at legal@sensorup.com, or by mail at: SensorUp Inc., 685 Centre Street SW, Calgary, Alberta T2G 1S5 Canada. You may also contact us as described at www.sensorup.com/contact.

What Types of Personal Information Do We Collect

Information You Actively Submit on our Site: If you fill out a form, send an email to us, or otherwise send us information through the Site, we collect personal information about you. The Site has webpages that allow you to submit a variety of personal information to us, including contact information such as your name, email address and physical address. In each instance, you will know what personal information we collect because you will actively submit it.

Information Automatically Collected by the Site: When you visit the Site, your browser or mobile device automatically provide to us certain technical information about your computer or device and how you arrived at the Site, including the URL that referred you, your browser type and version, your device type, your internet protocol (IP) address, your location, the pages you visit as you navigate through the Site (clickstream data), how long you stay on those pages, and the hyperlinks you click on (“Device Information”), some of which may constitute personal information. Any location information we collect is limited to your use of our platform. This Device Information is collected using various technologies including server logs, cookies, web beacons, and other tracking technologies. The personal information we collect from Device Information can depend on the individual settings of your device or browser that you use to access the Site. We recommend checking the policies of your device manufacturer or the browser’s provider to learn what Device Information may be shared with us.

Third-Party Integrations. We may integrate with or rely on third-party platforms and services to provide parts of the Site to you (“Third-Party Integrations”). For example, you may contact us via our social networking accounts. Any personal information accessible by us  via Third-Party Integrations that we can access will be subject to this Privacy Policy, but please note that such Personal Information will also be subject to the terms of the applicable Third-Party Integration.

Joint Marketing Partners: We collect personal information through joint marketing partners to help us offer our services to you. This personal information generally consists of business contact information such as email address, title, phone number and similar information.

Applying to Work with Us. If you would like to work with us and submit hiring materials to us (either directly or though a Third-Party Service or recruiter), we collect any personal information in your hiring materials, such as your resume, cover letter, transcripts or certifications. We ask you to only include information relevant to your job application. Any personal information you submit through a Third-Party Integration or recruiter will be subject to the privacy practices of those entities. If you are a current employee of SensorUp or its subsidiaries, please contact us for more information on how your employee personal information may be collected, stored, used and distributed.

How Do We Use Your Personal Information?

We use personal information that we collect about you as follows:
- Upon request, to create an account for you;
- To provide requested services and information;
- To respond appropriately to your inquiries and requests;
- To discharge our contractual obligations to you;
- To comply with any legal obligations that apply to us;
- If you submit an employment application,
to administer and evaluate your application and comply with legal obligations we have in relation to your application; and
- To secure, optimize and customize your experience on the Site.
- For other purposes for which we provide notice and obtain your consent at the time the personal information is collected

To the extent permitted by applicable law, we may use your personal information to contact you with sales and marketing communications. You may at any time choose to stop receiving marketing emails from us by using one of the unsubscribe options we provide. Please see the “Your Choices” section of this Policy for more information about opting out of communications. Service-related communications that SensorUp sends to our own customers are covered in the “OurClients” section of this Policy.

For How Long Do We Keep Your Personal Information?

We will only retain your personal information for as long as necessary to fulfill the purpose for which it was collected, such as the performance of your contract with us. In some cases, we may be required to retain personal information for a longer period of time based on laws or regulations that apply to our business or for other necessary business purposes. Where possible, we aim to anonymize the information or remove unnecessary identifiers from records that we may need to keep for periods beyond the original retention period.

To Whom Do We Disclose Your Personal Information?

We do not share your personal information with third parties, except in the following cases:

  • with your consent;
  • with our employees, contractors and service providers that act on our behalf and under our instructions to help us operate our business and meet out contractual obligations (e.g., data processors);
  •  if required or permitted bylaw, including as necessary to comply with the law, to protect the rights or safety of Site users or third parties (e.g., for fraud protection and credit risk reduction purposes; 
  • for protecting and defending the rights or property of SensorUp, its customers, other users, or members of the public; or 
  • with a buyer of all or substantially all of our assets relating to a particular business line or division, or in connection with a merger, acquisition, reorganization or restructuring, provided that the personal information disclosed continues to be used for the purposes permitted by this Policy by the entity acquiring the personal information.

We have put in place contractual and other organizational safeguards with such third parties to protect your personal information from unauthorized uses and disclosures. Such third parties have limited access to personal information solely for the purposes described herein, and they will be subject to contractual restrictions prohibiting them from using such personal information for any other purpose.  

Your Choices

You have a variety of choices regarding which personal information we may collect, process and use and for what purposes. Wherever reasonably practical, we will provide you with the ability to use the features of the Site without submitting personal information to us or to use a pseudonym. Some areas of the Site however, such as registration forms, require you to provide accurate and up to date personal information and your choice is to not use such areas and features. You can contact us to request that we correct or stop using your personal information, or to find out what personal information we have collected about you:

Email Communications – You may opt-out of receiving marketing and other promotional emails from us at any time by clicking the unsubscribe links embedded within the emails we send, or by contacting us directly at legal@sensorup.com.Some emails are transactional in nature, including emails we send to our clients regarding the services they have purchased, or are service-related, such as maintenance notifications, responses to support inquiries, billing notices, account management emails, and password reset emails. These emails do not provide the ability to opt-out.

Web Monitoring – If you wish to browse the Site without the use of automated technologies, there are a number of options available to you depending on the specific type of device you use to access the Site. Yo \u may disable the sharing of Device Information, but doing so may disable some features of the Site and may prevent us from providing you with the information and services you have requested.

Data Access, Correction and Deletion – You may request access to your personal information to have a general account of our uses of your personal information, to ensure that it is accurate and to make corrections, or to request that it be deleted. We will respond to your request as quickly as possible and will need to verify your identity before providing you with access to the personal information we hold about you.In some cases, we may be unable to accommodate your request due to legal or technological constraints (for example, if disclosure would result in the disclosure of the personal information of others).If we are unable to process your request for these or any other reasons, we will provide you with an explanation of the reason for denial. All requests should be sent by email to legal@sensorup.comor to the mailing address listed above

International Considerations and Data Transfers

Information collected on this Site may be stored or processed outside of the country you are visiting from. We process personal information in Canada and in the United States. Occasionally, we use service providers located in other jurisdictions to process data on our behalf and under our instructions. When transferring your personal information, we take appropriate measures to protect it in accordance with applicable laws and thisPolicy. Accordingly, your personal information may be available to foreign governments or their agencies under a lawful order, irrespective of the safeguards we have put in place for the protection of your personal information

Links

The Site contains links to websites not affiliated with us (“external websites”). Your use of an external website or any information or other content found on an external website is subject to and governed only by the terms and conditions of such website. SensorUp does not endorse or make any representations or warranties concerning, and will not in any way be liable for any content, products, services, or other materials available on or through an external website. SensorUp encourages you to review the privacy policies and terms of use of external websites before you submit any personal information to them.

Security

SensorUp has implemented commercially reasonable safeguards and precautions to protect your personal information, including technical and organizational measures against unauthorized access, improper use, alteration, unlawful or accidental destruction, and accidental loss. These measures include utilizing secure Transport Layer Security (“TLS”) connections for data collected via our Site, employee training, policies and secure facilities.Access to personal information is restricted to employees, contractors and third parties who reasonably require access to the personal information to carry out the stated purposes we have communicated to you and who are required to maintain the confidentiality and security of such information. Please note that despite our use of the safeguards described above, we cannot guarantee that personal information you submit to us will never be accessed, disclosed, altered or destroyed in a manner that is inconsistent with this Policy.

Children’s Data

This site is not intended for or directed at children and we do not knowingly collect personal information from any person under the age of 13. If we discover that we have inadvertently collected personal information from a person under 13 years of age, we will promptly take commercially reasonable measures to delete such information from our systems.

Supplemental EEA Privacy Statement

What Are Our Legal Bases for Processing Personal Data?

We process the personal data of users of our Site on several different legal bases, as follows:

Contract Performance: Use of our Site and various features thereof is subject to our Terms of Use and other applicable terms and conditions. We process the personal data of users of our Site as necessary to perform contractual obligations in respect of such users or take steps at such users’ request prior to entering into a contract, as may be applicable, pursuant to Article 6(1)(b) of the EU GDPR.

Legitimate Interests: We process the personal data of users of our Site as necessary to pursue the following legitimate interests, pursuant to Article 6(1)(f) of the EU GDPR: To provide a good user experience, to maintain, secure and improve our Site and products, to tailor our communications and services to our users, to market and promote our products and services and to support and provide requested services.

Legal Obligations: If we are subject to a lawful access request, engaged in a legal proceeding or suspect a user of illegal conduct, we may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process, pursuant to Article 6(1)(c) of the EU GDPR.

Consent: If we are required to obtain your consent to send you marketing communications, place certain cookies on your device, or engage in other processing activities associated with the Site, we may perform such processing on the basis of your consent if you have provided it, pursuant to Article 6(1)(a) of the EU GDPR. In such cases, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Providing your consent is voluntary, however we will not be able to provide you with a service for which we require your consent unless it is provided.

Vital Interests: In extenuating circumstances, we may need to process your personal data to protect the vital interests of you or another natural person, pursuant to Article 6(1)(d) of the EU GDPR.

Where Do We Transfer Personal Data and How Do We Protect Such Transfers?

We disclose your personal data to recipients in the following jurisdiction outside of the EEA which provide adequate protection to personal data according to the European Commission: Canada. In each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective (see Article 45 of the EU GDPR).

What Data Subject Rights Do You Have?

Under the conditions set out under the EU GDPR and any other national data protection laws in the EEA, you have the following rights:

Right of access: You have the right to obtain from us confirmation as to whether your personal data is being processed, and, where that is the case, to request access to the personal data. The access information includes, among other things, the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. You have the right to obtain a copy of the personal data undergoing processing. Subject to applicable law, we may charge a reasonable fee for copies, based on administrative costs.

Right to rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure: You have the right to ask us to erase your personal data to the extent it is not required for legally required purposes.

Right to restriction of processing: You have the right to request restriction of processing of your personal data, in which case, it would be marked and processed by us only for certain purposes.

Right to data portability: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit the personal data to another entity without hindrance from us.

Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. If you have a right to object and you exercise this right, your personal data will no longer be processed for such purposes by us. Exercising this right will not incur any cost. Such a right to object may not exist, in particular, if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Right to Submit Complaints: You have a right to lodge a complaint with a supervisory authority. Please note that these rights may be limited under the applicable national data protection law. To exercise your rights please contact us at legal@sensorup.com

Are You Required to Provide Personal Data?

You are not required to provide any personal data to us, but if you do not provide any personal data to us, you may not be able to use certain features of the Site, such as those available to customers, partners, participants on our platform, job applicants, among others. You can use the Site without consenting to cookies that are not strictly necessary, which will mean that your experience on the Site will be less tailored to you and certain features of the Site may not function as intended. You can also use the Site without consenting to receiving marketing communications from us, which will mean that you may not receive certain marketing communications.