Why do we collect user information?
Our goal is to provide you with a personalized service, tailored to meet your interests. We are therefore continually looking for ways to improve our service and product offerings. In general, we collect information to help us in our marketing and promotional efforts, to analyze user behavior, and to customize and improve the content on our website. By gathering information about user interests and preferences, we can devise products and services that might specifically interest you and your end-users, and ultimately make our products and services a more complete solution.
What type of personal information do we collect?
When and with whom do we share this information?
Our policy is to maintain the confidentiality of the personally identifiable information of organizations and personnel except in cases when the law requires disclosure or when we have your permission to do so. Information may be exchanged among MIR3 and service providers as needed for business purposes, such as account administration, customer service, transaction processing, consumer reporting, processing and delivery of account statements, research and analysis, and delivery of products and services. MIR3 will use contractual or other measures to require service providers to maintain a level of privacy protection comparable to our own practices.
From time to time, we may share aggregated statistics of user behavior (e.g., customers, traffic patterns, etc.) with our partners. This information is collected through surveys, transactions, and promotions. The information will not identify any individual personally, so the aggregate statistics will not contain any personally identifiable information. MIR3 does not sell, lease, rent, or barter personally identifiable information (names, addresses, phone numbers, etc.) to any companies or persons outside MIR3. We will disclose personally identifiable information to government officials and law enforcement agencies when it is required by law (e.g., in compliance with a subpoena or court order) or if we believe in good faith that such action is appropriate and necessary to protect and defend the rights of MIR3, or to protect the safety of MIR3 users and the general public. Because of the uncertain regulatory environment associated with privacy issues, we may also be forced to disclose personally identifiable and other information to the U.S. government.
For requests from law enforcement agencies outside the U.S., with the exception of emergency circumstances (defined in the Electronic Communications Privacy Act 1986, as amended), MIR3 will only provide content in response to a search warrant issued pursuant to the Mutual Legal Assistance Treaty process or through other cooperative efforts with the United States Department of Justice.
Please note that your information may be processed in countries other than your country of residence and may be transferred to, processed in, or shared within the United States, countries of the European Union, or elsewhere.
Our website has stringent security measures in place to protect the loss, misuse, and alteration of information under our control. We use secure technology, privacy protection controls, and restrictions on employee access in order to safeguard your information. Please note, while we will continually make every effort to implement safeguards to protect your personal information, the very nature of the Internet makes it impossible to give a 100% guarantee on the security of transmitted data. MIR3 makes no warranties or representations as to the security and confidentiality of any data you transmit. Any data you transmit to MIR3 is at your own risk.
MIR3 does not track its customers over time and across third-party websites to provide targeted advertising and therefore does not respond to Do-Not-Track (DNT) signals. However, some third-party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you.
MIR3 Privacy Shield Statement
MIR3 complies with the EU-U.S. Privacy Shield Framework including the Supplemental Principles and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union (“EU”) and Switzerland to MIR3 in the United States (“U.S.”). MIR3 has certified that it adheres to the Privacy Shield Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, and recourse, enforcement and liability. To learn more about the Privacy Shield program, and to view MIR3’s certification, please visit https://www.privacyshield.gov/. If you have questions or complaints regarding our Policy or practices, please contact us at firstname.lastname@example.org.
MIR3 is a provider of SaaS services that allows companies, government agencies, educational institution, and other organizations (“Customers”) to send emergency communications and important messages (“Notifications”) across their global enterprise (the “Service Subscription”) and related support services (the “Support Service”) as well as expert services, including professional services, training and certification (the “Expert Services”). The Service Subscription, Support Service and the Expert Services are collectively referred to as the “Service.”
In connection with the Service, Customers identify personnel as authorized users to be Administrators, capable of submitting and managing their Company Data, which may include Personal Data about their employees, clients or other individuals to the Service. Customer authorized users also include Initiators, capable of creating and issuing Notifications to Company Data contacts stored in the Service through the user interface or WebServices API. Recipients are capable of receiving Notification from the Service.
MIR3 hosts and processes the Company Data, including any Personal Data contained within the Service, based upon the direction and the instructions of its Customers.
MIR3 accesses the Company Data, including any Personal Data contained within the Service, as necessary to provide the Service, including updating the Subscription Service and addressing customer support issues.
MIR3 also obtains certain Personal Data, such as contact information, about Customers’ personnel in connection with the Service and maintaining MIR3’s relationships with the Customers.
In addition, MIR3 obtains Personal Data directly from individuals who visit and provide Personal Data through the MIR3 Website.
As an agent processing Personal Data on behalf of its Customers, MIR3 does not own or control the Personal Data that it processes on behalf of its Customers and does not have a direct relationship with the individuals whose Personal Data may be processed in connection with providing the Service. In these circumstances, MIR3’s Customers are responsible for providing appropriate notice to the relevant individuals and obtaining any requisite consent.
As an agent processing Personal Data on behalf of its Customers, MIR3 does not own or control the Personal Data that it processes on behalf of its Customers and does not have a direct relationship with the individuals whose Personal Data may be processed in connection with providing the Service. In these circumstances, Customers are responsible for providing the relevant individuals with certain choices with respect to the Customers’ use or disclosure of the individuals’ Personal Data. The MIR3 Service is not intended to transmit Sensitive Data, or Personal Health Information, or financial-related information (including nonpublic information collected by financial institutions subject to regulations specific to the conduct of financial services) or other Personal Data sensitive in nature. Where required by law, Customers who upload sensitive Personal Data into the Service are responsible for obtaining affirmative or explicit consent from the individuals.
With respect to Personal Data MIR3 may obtain directly from individuals through our Website, we offer individuals the opportunity to choose whether MIR3 may disclose their Personal Data to certain third parties. MIR3 will not use Personal Data for purposes beyond the scope that the information was originally collected or subsequently authorized by the individual and we will not retain Personal Data for longer than necessary or in accordance with the Customer Agreement. Individuals may contact MIR3 as indicated below regarding the company’s use or disclosure of their Personal Data.
MIR3 may disclose Personal Data without offering an opportunity to opt out (i) to service providers the company has retained to perform services on its behalf, (ii) if it is required to do so by law or legal process, (iii) to law enforcement or other government authorities, or (iv) when MIR3 believes disclosure is necessary prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity. MIR3 also reserves the right to transfer Personal Data in the event it sells or transfers all or a portion of its business or assets (including in the event of a reorganization, dissolution or liquidation).
ACCOUNTABILITY FOR ONWARD TRANSFER
MIR3 takes reasonable precautions to protect Personal Data from loss, misuse and unauthorized access, disclosure, alteration and destruction. Customers are also responsible for maintaining and implementing security controls to protect Company Data in accordance with the Customer Agreement.
DATA INTEGRITY AND PURPOSE LIMITATION
As an agent processing Personal Data on behalf of its Customers, MIR3 does not own or control the Personal Data that it processes on behalf of its Customers and does not have a direct relationship with the individuals whose Personal Data may be processed in connection with providing the Service. In these circumstances, Customers are responsible for ensuring that the Personal Data that may be provided by individuals to the relevant Customers is accurate, complete and current. MIR3 depends on the relevant Customers to update and correct Personal Data to the extent necessary for the purposes for which the information was collected or subsequently authorized by the relevant individuals.
With respect to Personal Data MIR3 may obtain directly from individuals through its Website, MIR3 takes reasonable steps to ensure that the Personal Data the company processes is (i) relevant for the purposes for which it is to be used, (ii) reliable for its intended use, and (iii) accurate, complete and current. Individuals may contact MIR3 as indicated below to request that MIR3 update or correct their Personal Data.
As an agent processing Personal Data on behalf of its Customers, MIR3 does not own or control the Personal Data that it processes on behalf of its Customers and does not have a direct relationship with the individuals whose Personal Data may be processed in connection with providing the Service. Individuals who seek access or who seek to correct, amend, or delete Personal Data that MIR3 maintains on behalf of Customers in connection with providing the Service should make such requests directly to the relevant Customer. To the extent practicable, when an individual is unable to contact the appropriate Customer, or does not obtain a response from the Customer, MIR3 will provide reasonable assistance in forwarding the individual’s request to the Customer.
Where appropriate, MIR3 provides individuals with reasonable access to the Personal Data MIR3 maintains about them in connection with the Website. MIR3 also provides a reasonable opportunity for individuals to correct, amend or delete their Personal Data where it is inaccurate, as appropriate.
MIR3 may limit or deny access to Personal Data where providing such access is unreasonably burdensome or expensive under the circumstances, or as otherwise permitted by the Principles. The right to access Personal Data also may be limited in some circumstances by local law requirements. Individuals may request access to their Personal Data by contacting MIR3 as indicated below.
RECOURSE, ENFORCEMENT AND LIABILITY
MIR3 has established procedures for periodically verifying implementation of and compliance with the Principles. MIR3 conducts an annual self-assessment of its practices with respect to Personal Data to verify that the attestations and assertions the company makes about its privacy practices are true and that the company’s privacy practices have been implemented as represented.
As an agent processing Personal Data on behalf of its Customers, MIR3 does not own or control the Personal Data that it processes on behalf of its Customers and does not have a direct relationship with the individuals whose Personal Data may be processed in connection with providing the Service. In these circumstances, individuals should submit complaints concerning the processing of their Personal Data to the relevant Customer, in accordance with the Customer’s dispute resolution process. MIR3 will participate in this process to the extent required by law and at the request of the Customer or the individual.
Individuals may file a complaint concerning MIR3’s processing of their Personal Data with MIR3 at the link below. MIR3 will respond to any such complaints within forty-five (45) days. In the event that MIR3 fails to responds or its response is insufficient or does not address the concern, MIR3 has registered with JAMS to provide independent third party dispute resolution at no cost to the complaining party. To contact JAMS and/or learn more about the company’s dispute resolution services, including instructions for submitting a complaint, please visit: submitting a complaint, please visit: https://www.jamsadr.com/eu-us-privacy-shield. Complaining parties may also, in absence of a resolution by MIR3 and JAMS and under certain and limited conditions, seek to engage in binding arbitration through the Privacy Shield Panel.
MIR3 will cooperate with the United States Federal Trade Commissions and any data protection authorities of the EU Member States (“DPAs”) and/or the Swiss Federal Data Protection and Information Commissioner (“Commissioner”) in the investigation and resolution of complaints that cannot be resolved between MIR3 and the complainant that are brought to a relevant DPA.
MIR3 also commits to periodically reviewing and verifying the accuracy of this Policy and the company’s compliance with the Principles, and remedying issues identified. All employees of MIR3 that have access to Personal Data covered by this Policy in the U.S. are responsible for conducting themselves in accordance with this Policy. Failure of an MIR3 employee to comply with this Policy may result in disciplinary action up to and including termination.
Individuals may address any questions or concerns regarding our Privacy Shield certification or our practices concerning Personal Data by emailing us at privacy@MIR3.com; or by writing to us at:
3398 Carmel Mountain Road, San Diego, California 92121