Effective on May 23, 2018
Who does this policy apply to?
This policy applies to:
- visitors to users of our website at www.puppet.com, and other Puppet websites like forge.puppet.com, learn.puppet.com, and buy.puppet.com, etc. (together "the Site")
- people who register for or attend our exams or events
- individuals who sign up through the Site or otherwise to receive newsletters and other marketing or sales updates about Puppet and our products and services
- individuals who choose to take part in contests, surveys and other promotions which may take place through the Site or otherwise
- individuals who take part in our online community available through the Site
- individuals who purchase or inquire about our products and services through the Site, by telephone or otherwise
Data protection law in Europe contains a number of "lawful bases" – which are really legal justifications which mean organizations like us are allowed to have your personal information in the first place. For our EU users, we have been careful to ensure we have a lawful basis for all data we have. More Details.
Information Collection and Use
We may collect personal data from customers both online and offline. Online, we may collect information through our Site, an affiliated site (such as a promotional microsite linked to our site), a Puppet page on a community website (such as Facebook, LinkedIn, Twitter, or the like) or through similar online avenues. In many cases, such information will be collected directly from you, such as through a transaction or inquiry (including via a telephone call) or your submission of a form, registration or communication to us. Information may also be gathered from our affiliates and from third-party sources including without limitation:
- Tradeshows – when you attend a trade show which we also attend and you visit our booth or stall, you may scan your badge or in some other way leave your details with us and we will follow up with you by email or phone call in relation to our products and services.
- The trade show organizer may on occasion provide us with your name and contact information in accordance with the disclosures they make to you and we will follow up by email or phone call in relation to our products and services.Partner hosted webinars – when you attend a webinar which we sponsor or participate in the organizer may provide us with your name and contact information in accordance with the disclosures they make to you.
- Third party platforms like Slack, and Google (via Google Groups), and Meet Up – when you choose to participate in groups we or our providers run on these platforms, we can view through the platforms who you are and may contact you in relation to our products and services.
- Event partners – when you attend an event which we sponsor the organizer may provide us with your name and contact information in accordance with the disclosures they make to you and we will follow up by email or phone call in relation to our products and services.
- Where permitted under applicable law, we may obtain your details through providers of prospect data.
We may combine data collected from these disparate sources unless we tell you otherwise. More Details.
We may disclose personal data you provide to our affiliates and to consultants, service providers, contractors, and channel partners that we use to support our business and operations (e.g., delivery services, financial institutions, fulfillment services, technical support, advertising, public relations, media and marketing services, competitions and contest-related services, e-commerce and other web-related services such as web hosting and web monitoring services and event-related services such as online and offline data capture) who have agreed to keep the information confidential and use it only to provide the applicable service(s). In some cases, we work with other companies who help to gather information from you or help us to communicate with you. Where consultants, service providers and consultants process the personal data of EU or UK users outside the European Economic Area, and in particular in the United States our policy is to have an appropriate legal mechanism in place to ensure that transfer of personal data is in compliance with European data protection law, typically model clauses or standard contractual clauses.
Where the law allows it and with your agreement, we may share customers’ personal data with affiliates or selected third-party partners to enable them to market their or other selected third parties’ products and services to you.
We may also disclose personal data to third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others') rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations. Likewise, we may disclose or transfer personal data to third parties in connection with the sale, assignment or other transfer of our business.
We may make full use of all information that is de-identified or otherwise not in personally identifiable form.
We retain personal information for as long as we have a lawful basis to keep it; this includes when we require it in order to meet our contractual obligations, to establish or defend our legal rights or resolve any legal proceedings. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.
We take appropriate steps to protect personal data from loss, misuse and unauthorized access, disclosure, alteration or destruction, whether in transmission or storage. Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. Moreover, you are responsible for maintaining the confidentiality of any user name and password you use.
It’s Your Choice: Contact Preferences
Puppet wants to keep in touch with you in ways that you find to be beneficial. If you don’t want Puppet to use your contact information to communicate with you for promotional purposes (such as to tell you about other products and services that might be of interest), please tell us that when you provide your contact information, or you can also let us know your preference later, by contacting us as specified in the “Contact Us” section below. Keep in mind that these preferences regarding promotional contacts do not mean that Puppet might not contact you for other reasons connected to the service you request or receive, such as those related to an order you placed, an inquiry you made, a newsletter to which you may have subscribed, a membership you undertook, an event for which you registered, a legally required notice and so on.
California Privacy Rights
Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice describing what categories of personal customer information Puppet shares with third parties or corporate affiliates for those third parties or corporate affiliates' direct marketing purposes. That notice will identify the categories of information shared and will include a list of the third parties and affiliates with which it was shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to the following address:
308 SW 2nd Ave
Portland, OR 97204
In your request, please specify that you want a "Your California Privacy Rights Notice ". Please allow 30 days for a response.
EU Data Subject Rights
You have the right under certain circumstances:
- to be provided with a copy of your personal data held by us;
- to request the rectification or erasure of your personal data held by us;
- to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
- to request that your provided personal data be moved to a third party
You can also exercise the rights listed above at any time by contacting us at [email protected].
If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html). The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.
308 SW 2nd Ave
Portland, OR 97204
Or at [email protected].
More Details: Puppet Affiliates' Roles
Puppet, Inc. is the US-based parent company and is responsible for the operation and design of the Site and for setting global strategy of Puppet's marketing activities and the selection and configuration of IT systems. Puppet, Inc. has subsidiaries in various countries including Puppet Labs Limited in the UK, Puppet Labs Australia Pty. Ltd. In Australia, Puppet Labs s.r.o. in the Czech Republic, Puppet Pte. Ltd. in Singapore, Puppet Labs S.R.L. in Romania, and Puppet Kabushiki Kaisha in Japan.
More Details: EU users and our "lawful basis" for using their data
Data protection law in Europe contains a number of "lawful bases" – which are really legal justifications which mean organizations like us are allowed to have your personal information in the first place. For our EU users, we have been careful to ensure we have a lawful basis for all data we have. Our lawful bases include:
Performing the contract we have with you
In certain circumstances, we need your personal data to comply with our contractual obligation to deliver Puppet software products and services. For example, if you want to use Puppet software products and order or download them through our Site, we need your name and contact details so we can communicate with you and provide the software.
Sometimes the law says we need to collect and use your data. For example, we can pass on details of people involved in fraud or other criminal activity to law enforcement and tax laws require us to retain records of orders and payments for Puppet software and related services, which can include contact details at our corporate clients.
This is a technical term in data protection law which really means we have a good and fair reason to use your data and we do so in ways which does not hurt your interests and rights.
We sometimes require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
For example, we will send your promotional communications about our service, subject to your legal rights to control whether we do so.
We do analyze how users interact with our Site and the Puppet software so we can understand better what elements of the design are working well and which are not working so well. This allows to improve and develop the quality of the online experience we offer all our users.
Where we talk about the different data we collect and how we use it in this policy, we aim to mention which lawful basis applies.
More Details: Personal Data Collection
We collect personal data about our customers in a number of ways. In this section, we describe what types of personal data we collect, the ways we collect it and how we use it. While we have tried to be complete, this list is not necessarily exhaustive, given that these activities can vary from time to time. When we collect information, we will tell you at the point of collection what information is required and what information is optional.
The types of personal data collected by us include the following, depending on how you access or use our services:
- Contact information, including name, title, street address (home, work, billing, shipping), postal code, country, telephone numbers (home, work, cell, etc.), email address, company name and other similar information.
- Personal/demographic information, including occupation, level of education, and the like.
- Authentication information, including user IDs, log-in names, passwords, password reminders, etc. (in addition to other personal data such as contact information and the like).
- Transactional and financial information, including products or services you purchase, inquire about or request, payment information, debit/credit card information.
- Participation information, including event attendance, webinar attendance, competitions/contest entries (including all information submitted on an entry), information provided when requesting or receiving discounts/coupons/rebates, registrations, information relating to use of online communities and all other user submissions and content you provide.
We use the information to provide and promote our products and services to you, allow you to attend events and webinars and enter contests and promotions, maintain our business records and other purposes set out in our policy. Providing the information is not mandatory, but we do need to collect in order to do these things. We say in our online forms if any of the information we ask for is not required.
Note that using our website as a registered user enables information that is passively collected as you navigate the site to be associated with personal data actively collected from you on the site.
More Details: Passive Information Collection
We, or our third party providers, also collect and use information automatically generated as users interact with the Site or our software products, which includes the browser and operating systems types and versions used, installer commands, web interface clicks, mouse gestures, data relating to the submission of online forms (but not the content of the forms), IP addresses, and page views, URLs visited within our software products, error messages and related data about software errors (“Telemetry Data”). Puppet may use and share the Telemetry Data with third parties, like our cloud-based support management system to help Puppet improve the user experience and the Site.
The Telemetry Data collected and used by Puppet is de-identified so that it does not reveal the name, role, contact details or other real world identifiers of users and Puppet does not collect or use any information from content that users process within or uploads to our software platform. If Puppet is collecting Telemetry Data from the Site, the Customer may opt-out of this functionality at any time.
The Site may also use IP addresses for the same purposes identified above, as well as to analyze trends, administer the site, track users' movements and gather broad demographic information for aggregate use.
We also engage one or more third party service providers to serve online advertisements on our behalf. They may use a “pixel tag” which triggers a cookie to collect information about your visits to the Site and to other websites, and they may use that information and share and combine it with other information with their partners to show you advertisements for goods and services you might be interested in on the Website and on other websites and apps and social media platforms like Facebook and LinkedIn including by observing the kinds of products and subject-matter you are interested in and certain demographic information about you.
We may use web beacons (also known as Internet tags or clear GIFs) on our websites to access and set cookies and otherwise help us to better understand how users are moving through our websites. Information provided by the web beacon includes the computer’s IP address, the type of browser being used and the time that the web beacon was viewed. We may also use web beacons in emails and newsletters so that we know when such communications have been opened and to otherwise help us tailor our communications to individual users.
More Details: Uses of Information
We use personal data about customers in contexts that include the following:
- Conducting and following up on transactions. We may use personal information to conduct transactions with you, process your order, contact you about your order and so on. We do this in our legitimate interests in promoting and selling our software and related services, and customer management and engagement.
- Registration, such as for events, memberships, accounts (i.e., log-ins and passwords, etc.). Customers may be given an opportunity to register for a variety of reasons, including to receive promotional communications/offers; to attend an event (e.g., a conference or training seminar); to join/participate in an online community, blog, chatroom or other interactive areas or to otherwise provide user-generated content; to take an exam for a Puppet certification; and so on. Such activities may entail collection of name, title, contact information, user name and password, experiences with our products and personal information/preferences related to the subject matter of the particular activity. In some cases, you will select a user ID and password when you register and you will use this to gain access to certain registration-restricted areas.
- To participate in online training sessions. When you register for or attend an online training session offered by Puppet, you may provide information such as your name, location, and contact details. Additionally, you may have the option of active participation in the class, whether through online chat rooms, audio or video interactions, screen sharing, and other interactions. We use the comments and other information you provide through registration and interaction to provide you with the benefits of the interactive online training session.
- To follow up with you after you have completed a form, business reply card or survey, whether online or offline. When you attend an event where Puppet is present, you might fill in an optional form, telling us your name, title, email address, whether you attended past events, your postal code, comments, whether you would like us to contact you in the future and/or other information. Likewise, you might choose to participate in an online or offline survey (anonymously or with name/contact information) where you provide demographic information and survey-specific preference data. We use the personal data you provide to improve our products, services and website content and otherwise to more effectively communicate with you.
- To allow you to contact us with questions, comments or concerns and to address your communications. We provide a number of ways for you to contact us to ask questions, provide comments or share concerns. Depending on the circumstances, we may collect your name, title, contact information, message type, case number (if tied to a previous issue), comments and other types of data relevant to the specific situation (e.g., product involved, use of the product, any problems with the product and the like).
- To provide materials you request. We provide a number of ways for you to request materials from us, such as newsletters, brochures, product literature and the like. We may collect and use contact name, title, contact information, preferences, and other information relevant to responding to your request.
- To permit your participation in contests, competitions and other promotions. To participate in competitions, contests and other similar promotions, we often collect name, title, contact information, and other information related to the particular activity. We will indicate which information is required (e.g., to contact winners, to verify eligibility to participate, etc.) and which is optional (e.g., demographic information, preferences, etc., designed to help us better understand you and address your interests).
More Details – Cookies and related technologies
- Strictly necessary site operation purposes enabling you to navigate round the website, managing your login session so you can move easily from one page to another within the site and your page requests are loaded in smooth and secure manner these cookies are also essential for you to access secure areas of the website for example to use shopping baskets or make payments, and measuring load times and performance of the website;
- Google Tag Manager: we use Google Tag Manager. This service allows website tags to be managed via an interface. Tags are small elements of code that are used, for example, to measure traffic and visitor behavior, to understand the effect of online advertising and social channels, to set up remarketing and orientation towards target groups, and to test and optimize websites. Google Tag Manager only implements tags. This means that no cookies are used and, as a result, no personal data is recorded. We list it here for completeness and to be transparent about the tools we use. If deactivation has been performed at a domain or cookie level, this remains in place for all tracking tags if these are implemented with Google Tag Manager.
- collecting statistical information about how you use the site so that we can improve the site;
- remembering that you have used the site before; this means we can identify the number of unique visitors we receive to different parts of the site and identify where leads originate;
This helps us for our legitimate interests of improving the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- storing your preferences and selections;
- customizing elements of the layout and/or content of the pages of the site for you;
- Working with partners to manage our advertising on other sites. This may involve gathering information about the pages through our advertising partners, on the website that you visit, and also other information about other websites that you visit, so as to place you in a "market segment". This information is then used to place our advertisements based on your browsing activities and interests on other sites you visit. For more information about this type of behavioral advertising, and about how to turn this feature off please visit www.networkadvertising.org or for our EU users, http://www.youronlinechoices.eu. Without these cookies, advertisements you encounter will be less relevant to you and to your interests.
- Targeting/Advertising cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information subject to your choices and preferences to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
We may also work with advertising networks that gather information about the content on the Site you visit and on information on other websites and services you visit. This may result in you seeing advertisements on our Site or our advertisements when you visit other websites and services of third parties. For more information about how to turn this feature off see below or visit www.networkadvertising.org, or for our EU users http://www.youronlinechoices.eu.
Social media and digital advertising partners - cookies and widgets
We use social media platforms to advertise to you online and to monitor the success of our advertising (for instance by receiving reports when you click on our ads on Facebook, LinkedIn and others). We summarise the main cookies and other technology used to make the Site work together with social media below:
- DoubleClick: Google's Doubleclick re-targeting cookie lets us serve personalized adverts to you when you're browsing other websites and social media platforms. You can control advert personalization on Google and partner websites here: https://policies.google.com/technologies/ads?hl=en-GB&gl=uk.
- Google Ad Words: Google Ad Words serves cookies or pixel tags/java script tags are designed to collect your IP address together with other usage related information (such as the products you visited, date and time of your visit) in order to analyze your interests and searches when visiting our Website and to serve you advertisements tailored to your interests and searches when you are visiting our Website or other websites. .You can set preferences for how Google advertises to you here: https://support.google.com/ads/answer/2662922?hl=en.
- Facebook Custom Audience: This service from Facebook enables us to display personalized ads to people on our email lists when they visit Facebook. We provide personal information such as your email address and phone number in encrypted form to Facebook (so they cannot be seen by anyone at Facebook) to enable Facebook to determine if you are a registered account holder with Facebook.
- Twitter Advertising: Twitter advertising and remarketing: We advertise on Twitter and our advertising content will be tailored to your interests on the basis of your browsing behaviour and the pages you have consulted on this and other websites. In order to improve the relevance of our marketing content, the cookie may therefore transmit such data to Twitter, who will use it to understand your interests better including to benefit their other advertising customers. If you decide that you do not wish your browsing data to be collected, you can find comprehensive information on Twitter’s advertising policy and the steps you can take to protect your privacy at: https://support.twitter.com/articles/20170514
For Microsoft Internet Explorer:
- Choose the menu “tools” then “Internet Options”
- Click on the “privacy” tab
- Select the setting the appropriate setting
For Google Chrome:
- Choose Settings> Advanced
- Under "Privacy and security," click “Content settings”.
- Click “Cookies”
- Choose Preferences > Privacy
- Click on “Remove all Website Data”
For Mozilla Firefox:
- Choose the menu “tools” then “Options”
- Click on the icon “privacy”
- Find the menu “cookie” and select the relevant options
For Opera 6.0 and further:
- Choose the menu Files”> “Preferences”