GDPR POLICY

Last Updated: December 24, 2019

This PRIVACY NOTICE FOR RESIDENTS OF THE EUROPEAN UNION (EU) supplements the information contained in AARDVARK’s Privacy Policy and only applies solely to visitors, users, and others who reside in any one of the EU States (“consumers” and “you”). We adopt this policy to comply with the General Data Protection Regulation (DGPR). This policy will explain how AARVDARK uses the personal data we collect from you when you use our website and explain how to exercise your rights.

AARDVARK, located at 1935 Puddingstone Drive, La Verne, CA 91750, is responsible for processing your personal data.

“Personal data” refers to any information relating to an identified or identifiable natural person who may be identified personally, directly or indirectly, in particular by means of an identifier, such as a surname, first name, an identification number, location data or an online username. The data we collect may therefore include your strictly personal data, insofar as it allows you to be identified as a particular person.

Conversely, some data does not allow us to identify you directly, such as your profession or your browsing data (the type of browser, terminal and operating system, the path followed on the website, etc.) but is nevertheless considered as Personal Data because it is attached and/or attributable to the former.

KEY PRINCIPLES OF THE GDPR

Lawfulness, fairness, and transparency: Personal data shall be processed lawfully, fairly and in a transparent manner in relation to individuals.

Purpose limitation: Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes.

Data minimization: Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy: Personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.

Storage limitation: Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures required by the GDPR in order to safeguard the rights and freedoms of individuals.

Integrity and confidentiality: Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Accountability: AARDVARK shall be responsible for, and be able to, demonstrate compliance with these key principles.

TOPICS IN THIS POLICY:

What personal data do we collect?

How do we collect your personal data?
How do we use your personal data?
How do we store your personal data?
Marketing

What are your personal data protection rights?
What are cookies?
How do we use cookies?
What types of cookies do we use?
How to manage cookies?

Privacy policies of other websites
Changes to our privacy policy
How to contact us

WHAT PERSONAL DATA DO WE COLLECT?

AARDVARK collects the following data:

CATEGORY	EXAMPLES	COLLECTED
A. Identifiers	A real name, alias, postal address, unique personal identifier, IP address, email address, account name, social security number, driver’s license number, or other similar identifiers.	YES
B. Personal information categories listed in the California Civil Code §1798.80(e)	A name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or Federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information	Identifying physiological, biological or behavioral characteristics, including DNA, other identifying information such as fingerprints, handprints, faceprints, voiceprints, iris or retina scans, other physical patterns such as vein, keystroke, gait, and sleep, heath, or exercise data.	NO
F. Internet or other electronic network information	Browsing history, search history, and information regarding an individual’s interaction with a website, application, or advertisement.	YES
G. Geolocation data	Information that can be used to identify physical location.	YES
H. Audio, electronic, visual. thermal, olfactory, or other similar information	Sensory data	NO
I. Professional or employment-related information	Current or past job history or performance evaluations	NO
J. Non-public Education Information per the Family Educational Rights and Privacy Act in 20 U.S.C. §1232g	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

HOW DO WE COLLECT YOUR PERSONAL DATA?

We obtain the categories of personal data listed above from the following sources:

Directly from our consumers when they engage us.
Indirectly from our consumers in the course of providing services to them.
Directly and indirectly from activity on our website. For example, from submissions through our website services, account creation, or website usage details collected automatically.

HOW DO WE USE YOUR PERSONAL DATA?

AARDVARK collects personal data from consumers for one or more of the following business purposes:

To comply with federal, state, and local laws.
To respond to law enforcement requests as required by applicable law, court order, or governmental regulations.
To perform the services requested of us by our consumers.

To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and AARDVARK, including for billing and collections.
To improve our Website and present its contents to you.
For research and analysis of our Website traffic.
As necessary or appropriate to protect the rights, property, or safety of AARDVARK, our consumers, or others.

As described to you when collecting your personal information or as otherwise set forth in the CCPA.

AARDVARK will not collect additional personal data or use the personal data we collected for materially different, unrelated, or incompatible purposes without first providing you notice.

AARDVARK may disclose your personal data to a third party for a business purpose (i.e. to a vendor/manufacturer that will be providing the product or service requested by the consumer).

In the past twelve (12) months, AARDVARK has not sold any personal data.

HOW DO WE STORE YOUR DATA

AARDVARK has implemented appropriate technical and organizational measures to ensure the level of security of stored personal data is appropriate to any risk of breach. In the event of a personal data breach, we will report it within 72 hours after discovery to the supervisory authority.

MARKETING

AARDVARK would like to send you information about products and services of ours that we think you might like. If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop AARDVARK from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, please email our Privacy Officer at privacy@aardvarktactical.com.

WHAT ARE YOUR PERSONAL DATA RIGHTS?

AARDVARK would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to be informed: You have the right to a clear understanding of what personal data is being processed, why, and who the data may be passed to.
The right to access: You have the right to request AARDVARK for copies of your personal data. While this service is usually offered free of charge, AARDVARK reserves the right to charge you a small fee for this service is it is deemed excessive, repetitive, or manifestly unfounded.
The right to rectification: You have the right to request that AARDVARK correct any information you believe is inaccurate. You also have the right to request AARDVARK to complete the information you believe is incomplete.
The right to erasure: You have the right to request that AARDVARK erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that AARDVARK restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to AARDVARK’s processing of your personal data, under certain conditions.
The right to data portability: You have the right to request that AARDVARK transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Rights in relation to automated decision making and profiling: You have the right to not be subject to a decision based solely on automated processing.

If you make a request under your rights, AARDVARK has 30 days to respond to your request. If you would like to exercise any of these rights, please contact us by either:

Calling us at 1-800-997-3773

Emailing our Privacy Officer at privacy@aardvarktactical.com

Writing to us at:

AARDVARK

1935 Puddingstone Drive

Attn: Director of Policy & Regulatory Compliance

La Verne, CA 91750

WHAT ARE COOKIES?

AARDVARK uses a technology called “cookies” to store session information to facilitate your experience. A cookie is a small amount of data, which often includes an anonymous unique identifier, which is sent to your browser from a website and stored on your computer’s hard drive.

For further information, visit www.allaboutcookies.org.

HOW DO WE USE COOKIES?

AARDVARK uses cookies in a range of ways to improve your experience on our website, including:

Keeping you signed in during a session

Understanding how you use our website; analyze trends, to administer the website, and to track Visitors’ and Users’ movements around the websites.

WHAT TYPES OF COOKIES DO WE USE?

We use cookies that expire 24 hours after the first visit. If you create an account and login, an additional cookie is set in the browser for 30 days. Logging out at any time will destroy this cookie, however the 24 hour cookie will remain until the end of its session unless you revoke it manually.

You may revoke cookies manually at any time in your browsers settings, however, when you visit the Website and/or login again, cookies will be set again until 1) their session time is completed or 2) you manually revoke again.

HOW TO MANAGE COOKIES

You can disable cookies in your browser settings. Instructions on how to do this in several different browsers can be found below. However, in a few cases, some of our website features may not function as a result.

You can disable cookies by following the links below:

Internet Explorer™: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

Safari™: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html

Chrome™: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647

Firefox™: https://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies

Opera™: http://help.opera.com/Windows/10.20/fr/cookies.html

PRIVACY POLICIES OF OTHER WEBSITES

Please be aware that third party websites that may be accessed through our site may use cookies in addition to those described here. Please check the applicable Privacy Policy/Cookie Policy of those sites.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this GDPR policy or our Privacy Policy at our discretion and at any time. When we make changes to either of these policies, we will make notice of this by the revision date of the policy on our Website(s).

HOW TO CONTACT US

If you have any questions or comments about this policy, the ways in which we collect and use your personal data, your choices and rights regarding such use, or wish to exercise your rights under the GDPR, please do not hesitate to contact AARDVARK at: