Pour la version Française de notre Politique de confidentialité, veuillez visiter https://corp.flipp.com/legal-politique-de-confidentialite/. In case of discrepancy between the original English version of this Privacy Policy and the French version, the English version prevails.
PLEASE READ THIS FLIPP OPERATIONS INC. PRIVACY POLICY (“PRIVACY POLICY”) WHICH IS PART OF THE FLIPP OPERATIONS INC. LICENSED APPLICATIONS TERMS AND CONDITIONS OF USE AND LICENSED APPLICATION END USER LICENSE AGREEMENT (COLLECTIVELY “TERMS OF USE”) CAREFULLY. THIS PRIVACY POLICY PERTAINS TO YOUR (“YOU”) ACCESSING AND USING THE FLIPP.COM WEBSITE, THE REEBEE.COM WEBSITE, ANY DOMAIN OWNED & OPERATED BY FLIPP THAT LINKS TO THIS PRIVACY POLICY, THE FLIPP IPHONE/IPAD APP, THE REEBEE IPHONE/IPAD APP, THE FLIPP ANDROID APP, THE REEBEE ANDROID APP, FLIPP SERVICES OFFERED THROUGH THIRD PARTIES, INTERACTIONS BETWEEN USERS, FLIPP, CONSUMER PACKAGED GOODS COMPANIES (“CPGs”), FOODSERVICES COMPANIES, AND RETAILERS IN STORES AND AT THE POINT OF PURCHASE, AND FLIPP SOCIAL MEDIA ACCOUNTS INCLUDING ALL CONTENT AVAILABLE THROUGH THESE VARIOUS PLATFORMS (COLLECTIVELY “SERVICE”). ANY REFERENCE TO ‘FLIPP’ OR ‘WE’ OR ‘US’ HEREIN SHALL REFER TO FLIPP OPERATIONS INC. AND/OR ANY OR ALL OF ITS AFFILIATES.
The Service is operated by Flipp Operations Inc. (“We” or “Us”). This Privacy Policy describes the information collected during registration for and through Your use of the Service, how We use it, how We share it, how We protect it, and the choices You can make about Your information. All references throughout this Privacy Policy to “Flipp” shall include all Flipp affiliates, and all services, applications or platforms owned and operated by Flipp and/or such affiliates.
ATTENTION: PLEASE READ OUR PRIVACY POLICY CAREFULLY BEFORE DOWNLOADING OR USING THE SERVICE. DOWNLOADING OR USING THE SERVICE INDICATES THAT YOU ACCEPT AND AGREE TO BE BOUND BY THIS PRIVACY POLICY IN FULL. IF YOU DO NOT ACCEPT THIS PRIVACY POLICY, DO NOT DOWNLOAD OR USE THE SERVICE. You acknowledge (a) that You have read and understood this Privacy Policy; and (b) this Privacy Policy shall have the same force and effect as a signed agreement.
Unless explicitly stated otherwise, any new features that augment or enhance the current Service shall be subject to this Privacy Policy.
Please review the Privacy Policy each time You use the Service. BY USING THE SERVICE, YOU AGREE TO BE BOUND BY THE MOST RECENT VERSION OF THE PRIVACY POLICY. If We materially change this Privacy Policy, We’ll let You know by showing it to You again when You access the Service and/or updating the apps.
Please note that the Service is hosted in the United States and Flipp is headquartered in Canada, and additionally Flipp uses service providers in the United States, Europe, and Canada. Therefore, Your information, including any personal information provided pursuant to the Service, may be processed and stored in the United States, Europe, and Canada. As a result, United States or European federal and state governments, Canadian federal or provincial courts or law enforcement or regulatory agencies may be able to obtain disclosure of Your information through laws applicable in the United States, Europe, and Canada. Additionally, some of our service providers use subcontractors or service providers outside of these listed jurisdictions, so there are limited instances in which processing and storage of your personal information may occur outside of the United States, Europe, and Canada. Your use of the Service or Your submission of any information to Us will constitute Your consent to the transfer of Your information outside of Your country of residence, which may provide for different data protection rules than in Your country. Please contact Us at privacy@flipp.com if You have any questions about how Your information may be processed or stored in the United States, Europe, or Canada.
As permitted by law, Your consent may be implied by Your use of the Service and Your acceptance of, and agreement to, this Privacy Policy. We may seek consent to use and disclose Your personal information after it has been collected in those cases where We wish to use the information for a new or different purpose where You have not already consented to such a use of Your personal information.
In most cases and subject to legal and contractual restrictions, You are free to refuse or withdraw Your consent at any time upon reasonable, advance notice to privacy@flipp.com. It should be noted that in certain circumstances, the Service can only be offered if you provide Us with Your personal information. Consequently, if You choose not provide Us with the required personal information, we may not be able to offer You the Service.
We may collect identifiers from You when You register for and use the Service, contact or interact with us, fill out a form, and voluntarily provide Us with Your comments and other content in connection with using the Service. When calling us, Your telephone number and name may be collected.
When You register on the Website or the Apps, We may collect identifiers including Your name, email address, telephone number, address, IP address, password, and any other information that You provide in the registration process. We may associate commercial information with you including shopping lists, receipts and any other information You provide with Your registered profile.
When You submit a “Contact Us” form, We collect identifiers including Your name, phone number, email address, and any other information You choose to provide to Us.
When You create a support ticket, We collect identifiers including Your email address and any other information You choose to provide to Us.
When You enter contests or respond to promotions, We may collect identifiers and commercial information included in Your entry information such as name, email address, physical address, phone number, age, photo, videos, social account information and any other information You provide.
When You add a loyalty card to your account, redeem a coupon or otherwise interact with a company with which You have a loyalty account, We may collect commercial information and identifiers including Your Loyalty ID and/or Loyalty account number.
When You apply for a job through the Service, We may collect identifiers, education information, and professional or employment-related information including: Your name, email address, telephone number, current employer, social media account links, and any information You provide through Your responses to questions posed or in Your cover letter, resume or otherwise through the Careers/Job Openings section of the Flipp.com Website.
We may automatically collect identifiers, commercial information, audio, electronic, visual, or other similar information, geolocation information, internet or other electronic network activity information, and inferences drawn from all of the above, regarding each user of our Service, including: Your location, Wi-Fi, Bluetooth, NFC (near field communication) or other connection information, network connection information, Internet Protocol (IP) address, telephone number, browser and device information, advertising identifiers, the domain name of Your Internet search provider, the Service features You use, and the time of Your use. For App users, We may read, modify or delete content on Your device and enable Your device to take pictures or videos (such as to submit a photo of a receipt in connection with claiming a rebate). We may also collect information about Your access to and use of the Services via third party service providers, as described in the Third Parties that Provide Content, Advertising Services, or Functionality on or for Our Service section below.
We may collect information including identifiers, geolocation, and commercial information about You from third party sources including, but not limited to, social media companies, advertising partners, measurement partners, third party websites, retailers, CPGs, and food service companies, and our employment services provider(s). This information includes Your personal information (such as Your address, e-mail address, social media identifiers, device or advertiser IDs, IP address, and customer or account IDs), location data, online activity (including purchase history), and the same types of information we collect when You use the Service through our Website or Apps. Examples of specific partners and the kinds of information we collect can be found in this section.
The Website and the Apps provide connections with Facebook, Twitter, Google, Pinterest, and LinkedIn. If You connect with Facebook through the Service, We receive Your public profile (which includes Your Facebook User ID, Your profile photo, Your public information, and Your friends’ User IDs), Your language, Your country, and whether You are in an age group, for instance, under 18, between 18-20, or 21 and over, and any other information Facebook provides. We can also access, store, and update the information You share through Facebook. If You connect with Twitter through the Service, We receive Your Twitter identity (which includes Your Twitter avatar and user name and Your followers’ user names). We can also access, store, and update the information You share through Twitter. If You sign in through Google, We receive Your public profile and Your email address. If you sign in through Pinterest, we receive your public profile information.
We may receive information about You from other digital advertising companies with which We work (“Advertising Partners”) to help Us deliver ads to You and recognize You across browsers and devices. This may include pseudonymous advertiser identifiers that some companies or third party ad platforms choose to share with us, such as Your “Customer ID” with a company or an identifier associated with a hashed version of Your email address. We may work with these Advertising Partners to synchronize their unique, anonymous identifiers to our own to enhance data points about a particular unique browser or device.
Flipp works with LiveRamp which allows companies to integrate their customer records with online advertising (also known as CRM onboarding). We may receive a hashed version of Your information from LiveRamp, to enable better targeted advertising where LiveRamp already possesses Your email address, device ID, or other advertising ID.
Through our marketing automation service provider, Salesforce, we collect information including IP address, operating system, browser, pages visited when You indicate interest in our services through their service. Information about Salesforce’s privacy practices is available here: https://www.salesforce.com/company/privacy/. We also use Zendesk for marketing automation services and through them collect IP address, email, name and pages visited when you contact us through their service. Information about Zendesk’s privacy practices are available here: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/ and here: https://support.zendesk.com/hc/en-us/articles/4408837672346-Default-Data-Types-Captured-by-Zendesk-Services.
When you participate in our community engagement panel provided in association with Alida, We may receive information about You to assist us with reviewing and responding to any feedback or comments You provide. Alida’s privacy policy is here: https://www.alida.com/privacy-policy, and information about their cookie policy and opt-out can be found here: https://www.alida.com/cookie-policy.
When You access the Service through a third party website, such as a retailer or media company, We may receive the same types of information about You as We receive when You use the Service through our website or Apps.
We may also receive information about You from our partners, such as their CRM data about You or transaction information collected at the point of purchase. We may receive Your location information when You enter or are near one of our partners’ stores such as Your device’s GPS, Bluetooth, NFC or other communications signal and information about nearby WiFi networks, cell towers, and other communications infrastructure.
We use various third-party tools, including Greenhouse and GoodTime, for online employment applications. Greenhouse’s privacy policy is available here: https://www.greenhouse.com/privacy-policy. GoodTime’s privacy policy is available here: Privacy Policy (Marketing). We may receive personal information about You from Greenhouse or GoodTime as described in Section III(B) below.
We may combine all of the information We collect from or about You and draw inferences from such information, and further use it in the manner described in this Privacy Policy.
As explained elsewhere in this Privacy Policy, personal information We collect may be processed by our partners in providing related services to the Service (such as administration services, technical services relating to the maintenance, servicing, and upgrading of the products, software, hosting services, data migration services and analytical services, among others).
For the purposes of the California Consumer Privacy Act of 2018 (the “CCPA 2018“), as amended by the California Privacy Rights Act of 2020 (the “CRPA“, and together with the CCPA 2018, the “CCPA“), We collect and use your identifiers, commercial information, and geolocation information for internal business purposes including:
Information may be disclosed to third parties in accordance with our Privacy Policy, including our service providers and business partners, employment service providers, partners, media companies, and advertising partners. In certain instances and jurisdictions, this disclosure may be deemed to be a sale of your personal information. This information includes Your personal information (such as Your address, e-mail address, social media identifiers, device or advertiser IDs, IP address, and customer or account IDs), location data, and information about Your use of the Service. Examples of specific partners and the kinds of information we disclose can be found in this section. Please note that a user may choose not to share certain information as described in Your Choices Regarding Your Information below, and certain jurisdictions have specific rights that are also called out in Section XIV below.
A. Third Party Service Providers and Business Partners
We may use third party service providers and business partners to perform functions in connection with the Service, such as coupon processing, rebate processing and payment, site analytics, remarketing, and functions related to analyzing and improving the Service usefulness, reliability, user experience, and operation, advertising, storing data, providing users with products and services, and as otherwise described in this Privacy Policy. We also may share users’ personal information with advertisers for their direct marketing and promotional purposes and so they can provide services to you. We may use remarketing cookies or pixels from Google and Facebook and share some of your personal information with Facebook and Google for use in advertising. For information on how you can disable these cookies, see Section IIIE below.
We use Alida as our community engagement partner, and we may share some of your personal information and information about your interactions with the Services with Alida if you choose to participate in a community panel. Alida’s privacy policy is here, and information about their cookie policy and opt-out can be found here.
B. Job Openings
We use a third-party service provider, Greenhouse, to collect information on the Job Openings Page and the storage, sharing, and use of that information is governed by its privacy policy, which you can review here. We also use third-party service providers at other stages in the job application process, such as GoodTime. Through GoodTime, you may be asked to provide your mobile phone number so that we can send you SMS messages regarding your application status. Your mobile number provided to us through GoodTime will not be used for any other purpose, and will not be shared with third parties for marketing or promotional purposes.
If you are interested in pursuing career opportunities within the United States or Canada, you can review and apply for job openings listed in an online jobs database. If you elect to proceed, you will be seamlessly linked to a website maintained by Greenhouse, headquartered in New York, U.S. During the interview process, we also use GoodTime, a third-party scheduling platform, to coordinate interviews between you and our hiring teams. As we are not responsible for the content, data collection or privacy policies of Greenhouse or GoodTime, we urge you to read the privacy and security policies of Greenhouse and GoodTime (see links above) before providing any personal information.
If you choose to apply online for a posted job that is linked to the Greenhouse website or the GoodTime tool, you will be required to provide your name, email address, current employer, a resume, phone number, and potentially other types of information, as well as responses to questions posed on the site. Your responses to these questions will be used in evaluating your qualifications for a position and, in the case of GoodTime, for scheduling an interview and providing you with updates on your application process, in each case, as applicable. Please do not include your social security number/social insurance number, credit card or bank account numbers, and non-work related personal information such as eye color, marital status, etc.
At the beginning of the application process, you will be asked to provide your email address. If you do not have an email address, please contact Human Resources at 1-844-204-2900 or HR@flipp.com.
The personal information that you submit to Greenhouse while online may be accessed and downloaded by Flipp professionals located in the U.S. and Canada through a secured connection to the Greenhouse database and used for evaluating your qualifications for the job for which you have applied and other jobs that may suit your experience and qualifications. In addition, the provisions of this policy relating to use of information apply to any information that may be accessed or downloaded by Flipp from the Greenhouse database or the GoodTime database.
You may receive emails, text messages, and other similar communications from Greenhouse and/or GoodTime about your application, such as an email thanking you for submitting your resume or a text updating you on the status of your application.
Other than with Greenhouse or GoodTime, we do not share resume or application information with third parties without specific authorization from you.
C. Advertisers
We may share your information with advertisers and their service providers who use our services, including but not limited when you read and interact with an advertiser’s flyer, advertising, coupons or rebates, when you enter or are near an advertiser’s physical location, when you make purchases at an advertiser, and when you use a loyalty or reward program of an advertiser. We do not control the privacy practices of our advertisers or their service providers. Please contact the advertiser directly if you want to learn about its privacy practices or submit any requests.
D. Third Parties that Incorporate our Technology into their own Mobile Applications or Websites
In addition to partners, other companies such as media companies, incorporate our technology into their services. We may share your information with such companies when you interact with the Service.
E. Third Parties that Provide Content, Advertising Services, or Functionality on or for Our Service.
Some of the content, advertising, and functionality on our Service may be provided by third parties that are not affiliated with us. Such third parties include:
F. Cookies and Similar Technologies
These and other third parties may collect or receive information about your use of the Service, including through the use of cookies, web beacons, pixels, and other technologies, and this information may be collected over time and combined with information collected on different websites and online services, which may be used for remarketing and may track users across websites and apps and over time. For instance, Facebook and Google enable us to present users with retargeting advertising on other sites based on users’ previous interaction with the Service. You can instruct your browser to stop accepting cookies. But if you do not accept cookies, you may not be able to use all portions of all functionality of the Service.
(a) Cookies
We use cookies, which are small data files that are saved to your device when you visit our website and use the Service.
(i) Type of cookies we use
We may use both session cookies and persistent cookies. A session cookie is a temporary file which is only active while you are on the website and is erased once you close your browser. Unlike a session cookie, a persistent cookie is not deleted when you close your browser and will remain on your device indefinitely. We use cookies to identify when you return to our website, save login information (excluding passwords), track usage statistics and store your preferences.
(ii) Adjusting cookie settings on your browser
By default, most browsers will automatically accept cookies. However, you can disable cookies completely, or be prompted prior to a cookie being loaded, by adjusting your browser’s settings. Consult each individual browser’s “help” feature for more information.
(b) Web Beacons
Web beacons are small graphic images or other programming code (also known as “web bugs,” “1×1 GIFs” or “clear GIFs”) used to keep track of your navigation through the website and your electronic communication with us. We may include web beacons in our web pages and email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to our website, to monitor how users navigate the website, to count how many emails that were sent were actually opened or to count how many particular articles or links were actually viewed. Web beacons may be used to collect certain personal information (for example, the email address associated with an email message).
(c) Embedded Scripts
An embedded script is a programming code that is designed to collect information about your interactions with our website, such as information about the links on which you click. The code is temporarily downloaded onto your device from our web server or a third party service provider. The code is active only while you are connected to our website, and is deactivated or deleted once you disconnect from the website.
G. Business Changes
If we become involved in a merger, acquisition, sale of assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction or if the ownership of all or substantially all of our business otherwise changes, we may transfer your information to a third party or parties in connection therewith. Specifically, we may disclose information about you to third parties without your consent where we believe that such disclosure is necessary to determine whether to proceed with a prospective business transaction or to complete a transaction in progress, or where the information is necessary to carry on the activity that was the object of the transaction. A “business transaction” includes:
i. the purchase, sale or other acquisition or disposition of an organization or a part of an organization, or any of its assets; ii. the merger or amalgamation of two or more organizations; iii. the making of a loan or provision of other financing to an organization or a part of an organization; iv. the creating of a charge on, or the taking of a security interest in or a security on, any assets or securities of an organization; v. the lease or licensing of any of an organization’s assets; and vi. any other prescribed arrangement between two or more organizations to conduct a business activity.
H. Affiliates
We may also share your information with our affiliates for purposes consistent with this Privacy Policy. Our affiliates will be required to maintain that information in accordance with this Privacy Policy.
I. Investigations and Law
We may disclose information about you to third parties without your consent if we believe that such disclosure is necessary to:
Where obliged or permitted to disclose information without consent, we will not disclose more information than is required.
K. Aggregated Information
We may share aggregated information relating to users of the Service with affiliated or unaffiliated third parties. This aggregated information does not contain personal information about any user.
We implement a variety of physical, procedural and technical security measures with respect to our offices and information storage systems and facilities to protect the safety and prevent any loss, misuse, unauthorized access to, disclosure, or modification of Your personal information when You enter, submit, or access Your personal information. We further protect Your personal information by restricting access to it to those employees that require access to the information in order that We may provide the Service.
Please keep Your account and device passwords secure to help ensure the safety of Your personal information.
While We take reasonable measures to protect the information You submit via the Service against loss, theft and unauthorized use, disclosure, or modification, We cannot guarantee its absolute security. No Internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through the Service may not be secure. You should use caution whenever submitting information through the Service and take special care in deciding with which information You provide us.
We cannot guarantee that transmissions of Your personal information will be fully secure and that third parties will never be able to defeat our security measures or the security measures of our partners. WE ASSUME NO LIABILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO TRANSMISSION ERRORS, THIRD-PARTY ACCESS OR CAUSES BEYOND OUR CONTROL.
We will retain Your information for as long as You use the Service and for a reasonable time thereafter. The length of time we retain information varies, depending on the purpose for which it was collected and the nature of the information. Please note that some or all of the information We have collected may be required in order for the Service to function properly.
When Your personal information is no longer required for Our purposes, we have procedures to destroy, delete, erase or convert it into an anonymous form.
This Privacy Policy applies only to the Service. The Service may contain links to other websites or apps or may forward users to other websites or apps that We may not own or operate. The links from the Service do not imply that We endorse or have reviewed these websites or apps. The policies and procedures We describe here do not apply to these websites or apps. WE NEITHER CAN CONTROL NOR GUARANTEE, REPRESENT OR WARRANT THAT THE PRIVACY PRACTICES, CONTENT OR INFORMATION CONTAINED IN SUCH THIRD-PARTY WEBSITES OR APPS IS ACCURATE, LEGAL, NON-INFRINGING OR INOFFENSIVE, OR THAT SUCH WEBSITES DO NOT CONTAIN VIRUSES OR OTHER MALICIOUS CODE OR WILL NOT OTHERWISE AFFECT YOUR COMPUTER. BY USING THE SERVICE TO LINK TO A THIRD-PARTY WEBSITE OR APP, YOU AGREE AND UNDERSTAND THAT WE SHALL NOT BE RESPONSIBLE OR LIABLE, DIRECTLY OR INDIRECTLY, FOR ANY DAMAGES OR LOSSES CAUSED OR ALLEGED TO BE CAUSED BY OR IN CONNECTION WITH YOUR USE OF, OR RELIANCE ON, THE SERVICE TO LINK TO A THIRD-PARTY WEBSITE OR APP.
We suggest contacting these websites or app providers directly for information on their privacy policies. Nonetheless, We seek to protect the integrity of our Service, and welcome any feedback about these linked websites and mobile applications.
When You connect with Facebook, Google, Pinterest, and Twitter through the service, Facebook, Google, Pinterest, and Twitter may provide Us with information as described in Section I above.
We permit the reasonable right of access and review of Your personal information held by us and will endeavour to provide the information to You within a reasonable time. Flipp may refuse access or Your right of access may be limited in accordance with exceptions to access required or permitted by law. To guard against fraudulent requests for access, we may require sufficient information to allow us to confirm that the person making the request is authorized to do so before granting access or making corrections.
We do not routinely update Your personal information but will amend or delete Your personal information when You have indicated to us that it is inaccurate or incomplete.
You can withdraw Your consent to Our use of Your personal information at any time. Withdrawal of consent does not operate retroactively and may affect Your ability to use our Services.
You have choices regarding the use of information by the Service.
Through cookies We place on Your browser or device, We and our partners may collect information about Your online activity after You leave the Service. Just like any other usage information We collect, this information allows Us to improve the Service and customize Your online experience, and otherwise as described in this privacy policy. Your browser may offer You a “Do Not Track” option, which allows You to signal to operators of websites and mobile applications and services (including behavioral advertising services) that You do not wish such operators to track certain of Your online activities over time and/or across different websites and mobile applications and services. The Service does not support Do Not Track requests at this time, which means that We collect information about Your online activity both while You are using the Service and after You leave the Service.
We do not knowingly collect personal information from an individual under age 18. If You are under the age of 18, please do not submit any personal information through the Service. If You have reason to believe that We may have accidentally received personal information from an individual under age 18, please contact Us immediately at privacy@flipp.com.
Please also visit the Flipp Terms of Use (also applicable to the reebee App and any other aspect of the Service) at https://corp.flipp.com/terms which states the terms, disclaimers, and limitations of liability governing Your use of the Service.
We reserve the right to update or modify this Privacy Policy at any time and from time to time. Please review this Privacy Policy periodically, and especially before You provide any information. This Privacy Policy was made effective on the date indicated below.
In the event of questions about: (i) access to Your personal information; (ii) our collection, use, management or disclosure of personal information or Your withdrawal of consent; or (iii) this Policy; please contact Us by e-mail privacy@flipp.com or by writing Us at 350-3250 Bloor Street West, East Tower, Bloor Islington Place, Toronto, ON M8X 2X9. We will investigate all complaints and if a complaint is justified, we will take all reasonable steps to resolve the issue.
Consumers have certain rights with respect to the collection and use of their personal information. Those rights vary by state. We provide detailed information below regarding the data subject rights available to consumers. Consumers can find more detail below and by referencing the applicable statute in their respective states.
Certain states require that we permit residents to request from a business, with whom the resident has an established business relationship, certain information about the types of personal information the business has shared with third parties for those third parties’ direct marketing purposes and the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year. Consumers may make one request each year by emailing Us at privacy@flipp.com or writing Us at 350-3250 Bloor Street West, East Tower, Bloor Islington Place, Toronto, ON M8X 2X9.
Consumers also have the right to request that we (a) delete all personal information; (b) provide a copy of all personal information we collected; or (c) opt them out of any sale of their personal information (see: DO NOT SELL MY PERSONAL INFORMATION). If you would like to exercise one of these rights, please fill out the form found HERE (also available from within the Flipp mobile application), or reach out to ccparequests@flipp.com (for California residents) or privacy@flipp.com for assistance. Consumers can also opt out of the sharing of their personal information by visiting the links provided above under the Ad Choices / Do Not Share My Personal Information heading. Please note that certain consumers may also have the right to appeal a decision we make about their data subject requests. If appeal rights apply to you and you choose to appeal a decision, please email privacy@flipp.com stating in the subject line that your request is an “Appeal” and describing, in the body of the email, the date and nature of your original request.
Consumers can Limit the Use of Their Sensitive Personal Information by opening the ‘Settings’ page on the Flipp or reebee application and tapping the icon under ‘Location’ to turn off precise geolocation tracking.
You shall not be discriminated against as a result of your choice to exercise these rights, however certain account and personalization functionality may be lost as a result of your request to delete your information or opt-out of sale of your information.
In accordance with applicable law, we are required to verify your identity before processing a request for deletion or request for information. We will attempt to do so based on your account information (where applicable) and the information you provide when submitting the request, however there may be instances where we do not have sufficient personal information about you in order to reasonably verify your identity. In such cases, we will let you know and treat a request for deletion as a do not sell request, as required by applicable law.
For information on the number of CCPA requests received by Flipp, please see HERE.
For residents in Quebec, you can contact Our Privacy Officer by emailing privacy@flipp.com, using the subject line “Quebec Privacy Matter”.
A continuación, tras el texto en inglés, encontrarás la versión en español de esta sección de nuestra Política de Privacidad.
Flipp Operations Inc. is the data controller responsible for the use and protection of Your personal data pursuant to the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”) and its Regulations. This section constitutes the comprehensive privacy notice applicable to data subjects located in Mexican territory.
What personal data do we process? In order to fulfil the purposes described in this privacy notice, We process the following categories of personal data of data subjects located in Mexico: (i) identification data and online identifiers, including IP addresses, device identifiers, advertising identifiers, persistent user identifiers (userId), and User Agent strings; (ii) geolocation data, including approximate geographic location derived from the IP address and, where applicable, precise device location data; (iii) behavioural data and Internet activity information, including pages visited, sections consulted, interactions with advertising content, browsing patterns, search history, timestamps with millisecond precision, and referrer URLs; (iv) data relating to lifestyle habits, consumption, and purchasing behaviour; and (v) data derived from device recognition techniques (device fingerprinting), used for user recognition across sessions and advertising frequency management. Flipp does not process sensitive personal data within the meaning of Article 3, Section VI of the LFPDPPP in the context of the Service directed at users in Mexico.
For what purposes do we use your personal data? Your personal data will be used for the following primary purposes that are necessary for the provision of the Service You request: (i) to provide, operate, and improve the Service, including the personalisation of content and the user experience; (ii) to verify the user’s identity and manage their account; (iii) to detect and prevent fraud, unlawful activities, and security breaches; (iv) to comply with applicable legal obligations; and (v) to determine the user’s approximate geographic location for the delivery of content and advertising relevant to their region.
In addition, we will use Your personal information for the following secondary purposes that are not necessary for the provision of the Service, but which enable and facilitate the provision of a better experience: (a) to create behavioural and psychographic profiles for the segmentation and personalisation of interest-based advertising; (b) algorithmic optimisation of advertising content and measurement of campaign performance; (c) synchronisation of identifiers with advertising partners for the delivery of targeted advertising across multiple platforms and devices; and (d) generation of attribution reports and audience analysis for advertisers.
Should You not wish your personal data to be processed for the additional purposes set out in items (a) to (d) above, you may communicate your objection at any time by contacting us through the means indicated in the ARCO Rights section of this notice.
Differentiated processing — Storage of IP addresses for physical attribution measurement (footfall measurement): physical attribution measurement functionality (footfall measurement) in the Mexican market stores your IP address data for a maximum period of twelve (12) months for the specific purpose of attributing visits to advertisers’ physical premises to prior interactions with digital advertising content. This processing constitutes a differentiated purpose with respect to the transient use of the IP address for geolocation verification, and requires your express and separate consent, which will be requested through a specific, non-pre-checked mechanism.
With whom do we share your information and for what purposes? We inform You that Your personal data are transferred outside Mexican territory to the following persons, companies, and organisations, for the purposes indicated below:
Recipient | Country | Purpose |
Flipp Operations Inc. | Canada | Central operation and administration of the Service, data storage, analysis, and improvement of the Service |
Amazon Web Services, Inc. (AWS) | United States of America | Cloud computing infrastructure, data storage, and data processing |
LiveRamp Holdings, Inc. | United States of America | Customer data integration for targeted advertising, attribution, and campaign measurement |
Kevel (formerly Adzerk, Inc.) | United States of America | Delivery and management of digital advertising, campaign optimisation |
LaunchDarkly (Catamorphic Co.) | United States of America | Feature management and controlled deployment of Service functionalities |
ABCS Insights | United States of America | Footfall measurement |
Shopfully S.p.A. | European Union | Central operation and administration of the Service, data storage, analysis, and improvement of the Service |
Shopfully Marketing S.L.U. | European Union | Central operation and administration of the Service, data storage, analysis, and improvement of the Service |
Shopfully Bulgaria EAD | European Union | Central operation and administration of the Service, data storage, analysis, and improvement of the Service |
The international transfers described in the table above are formalised by means of contractual clauses or other legal instruments under which the recipients assume the same obligations as those applicable to Us as data controller, pursuant to Articles 35 and 36 of the LFPDPPP. Such transfers are carried out without requiring the data subject’s consent in the cases provided for in Article 36 of the LFPDPPP, in particular where they are necessary for the maintenance and performance of the legal relationship between Us and the data subject, or where they involve transfers to group companies operating under the same internal processes and policies. In cases where the transfer does not fall within any of the aforementioned exceptions, We will obtain your consent prior to carrying out the transfer, in accordance with the terms set out in this notice.
How can you exercise your ARCO rights? You have the right to know what personal data We hold about You, for what purposes We use it, and the conditions under which we use it (Access). You also have the right to request the correction of your personal information where it is out of date, inaccurate, or incomplete (Rectification); to request that We remove it from our records or databases where You consider that it is not being used in accordance with the principles, duties, and obligations set out in applicable law (Cancellation); and to object to the use of Your personal data for specific purposes (Objection). These rights are collectively known as ARCO rights.
To exercise any of Your ARCO rights, You or Your legal representative must submit the corresponding request by means of a free-form written communication or by email to privacy@flipp.com, indicating in the subject line “ARCO Request — Mexico”. The request must include: (i) the data subject’s full name and address or other means for receiving notifications; (ii) documents evidencing the identity of the data subject or, where applicable, the authority and identity of their representative; (iii) a clear and precise description of the personal data in respect of which the ARCO right is sought to be exercised; (iv) a description of the right sought to be exercised; and (v) any other element that may facilitate the location of the personal data.
We will communicate to the data subject the decision adopted within a maximum period of twenty (20) business days from the date on which the request was received. Where the request is upheld, the decision will be given effect within the fifteen (15) business days following the date on which the response is communicated. These time limits may be extended on one occasion by an equal period, where the circumstances of the case so justify.
The exercise of ARCO rights is free of charge; charges may only be made to recover the costs of reproduction, copies, or postage, in accordance with Article 34 of the LFPDPPP. The department responsible for processing ARCO rights requests is Flipp’s Privacy Department, which may be contacted by email at privacy@flipp.com.
How can You limit the use or disclosure of your personal information and withdraw your consent? You may withdraw the consent that You may have granted us for the processing of Your personal data, as well as object to the processing of Your data for the secondary or ancillary purposes described in this notice, at any time and without retroactive effect, by submitting a request to privacy@flipp.com with the subject line “Withdrawal of Consent — Mexico” or “Objection to Processing — Mexico”, as applicable. Please note that, in certain cases, the withdrawal of Your consent or objection to processing may mean that We are unable to continue providing the Service you requested, or that Your relationship with us comes to an end, to the extent that the processing is necessary for the provision of the Service.
In addition, to limit the use of your information for advertising purposes, You may visit the following resources: (i) Digital Advertising Alliance: http://youradchoices.ca/choices/ or www.aboutads.info; (ii) LiveRamp browser opt-out: http://liveramp.com/opt_out/; and (iii) LiveRamp mobile opt-out: http://liveramp.com/mobile-opt-out/.
How can You find out about changes to this privacy notice? This privacy notice may be subject to modifications, changes, or updates arising from new legal requirements, Our own needs in connection with the products or services We offer, Our privacy practices, changes to Our business model, or other causes. We undertake to keep You informed of any changes to this privacy notice by publishing the updated version at https://corp.flipp.com/privacy-policy/.
Where the changes are material and require Your consent, We will notify You through the contact details we hold on record or by means of a visible notice upon accessing the Service. If You consider that Your right to the protection of personal data has been infringed by any act or omission on Our part, or You suspect a breach of the provisions of the LFPDPPP, and other applicable legislation, You may lodge a complaint or report with the Secretaría Anticorrupción y Buen Gobierno, the competent authority for personal data protection in Mexico.
**************
Flipp Operations Inc. es el responsable del tratamiento encargado del uso y protección de Sus datos personales en términos de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (“LFPDPPP”) y su Reglamento. La presente sección constituye el aviso de privacidad integral aplicable a los titulares ubicados en territorio mexicano.
¿Qué datos personales tratamos? Para cumplir con las finalidades descritas en el presente aviso de privacidad, tratamos las siguientes categorías de datos personales de los titulares ubicados en México: (i) datos de identificación e identificadores en línea, incluyendo direcciones IP, identificadores de dispositivo, identificadores publicitarios, identificadores persistentes de usuario (userId) y cadenas de User Agent; (ii) datos de geolocalización, incluyendo la ubicación geográfica aproximada derivada de la dirección IP y, en su caso, datos de ubicación precisa del dispositivo; (iii) datos de comportamiento e información de actividad en Internet, incluyendo páginas visitadas, secciones consultadas, interacciones con contenido publicitario, patrones de navegación, historial de búsqueda, marcas temporales con precisión de milisegundos y URLs de referencia (referrer); (iv) datos relativos a hábitos de estilo de vida, consumo y comportamiento de compra; y (v) datos derivados de técnicas de reconocimiento de dispositivo (device fingerprinting), utilizados para el reconocimiento del usuario a lo largo de distintas sesiones y para la gestión de la frecuencia publicitaria. Flipp no trata datos personales sensibles en el sentido del artículo 3, fracción VI, de la LFPDPPP en el contexto del Servicio dirigido a usuarios en México.
¿Para qué fines utilizamos sus datos personales? Sus datos personales serán utilizados para las siguientes finalidades primarias que son necesarias para la prestación del Servicio que Usted solicita: (i) proporcionar, operar y mejorar el Servicio, incluyendo la personalización del contenido y la experiencia de usuario; (ii) verificar la identidad del usuario y administrar su cuenta; (iii) detectar y prevenir fraudes, actividades ilícitas y violaciones de seguridad; (iv) cumplir con las obligaciones legales aplicables; y (v) determinar la ubicación geográfica aproximada del usuario para la entrega de contenido y publicidad relevante para su región.
Adicionalmente, utilizaremos Su información personal para las siguientes finalidades secundarias que no son necesarias para la prestación del Servicio, pero que nos permiten y facilitan brindarle una mejor experiencia: (a) crear perfiles conductuales y psicográficos para la segmentación y personalización de publicidad basada en intereses; (b) optimización algorítmica del contenido publicitario y medición del desempeño de las campañas; (c) sincronización de identificadores con socios publicitarios para la entrega de publicidad dirigida a través de múltiples plataformas y dispositivos; y (d) generación de reportes de atribución y análisis de audiencias para anunciantes.
En caso de que Usted no desee que sus datos personales sean tratados para las finalidades adicionales señaladas en los incisos (a) a (d) anteriores, podrá manifestar su negativa en cualquier momento, contactándonos a través de los medios indicados en el apartado de Derechos ARCO del presente aviso.
Tratamiento diferenciado — Almacenamiento de direcciones IP para la medición de atribución física (footfall measurement): la funcionalidad de medición de atribución física (footfall measurement) en el mercado mexicano almacena los datos de Su dirección IP por un plazo máximo de doce (12) meses con la finalidad específica de atribuir las visitas a los establecimientos físicos de los anunciantes a interacciones previas con contenido publicitario digital. Este tratamiento constituye una finalidad diferenciada respecto del uso transitorio de la dirección IP para fines de verificación de geolocalización, y requiere Su consentimiento expreso y por separado, el cual será recabado a través de un mecanismo específico y no pre-marcado.
¿Con quién compartimos Su información y para qué fines? Le informamos que Sus datos personales son transferidos fuera del territorio mexicano a las siguientes personas, empresas y organizaciones, para los fines que a continuación se indican:
Destinatario | País | Finalidad |
Flipp Operations Inc. (oficinas centrales) | Canadá | Operación y administración central del Servicio, almacenamiento de datos, análisis y mejora del Servicio |
Amazon Web Services, Inc. (AWS) | Estados Unidos de América | Infraestructura de cómputo en la nube, almacenamiento y procesamiento de datos |
LiveRamp Holdings, Inc. | Estados Unidos de América | Integración de datos de clientes para publicidad dirigida, atribución y medición de campañas |
Kevel (formerly Adzerk, Inc.) | Estados Unidos de América | Entrega y gestión de publicidad digital, optimización de campañas |
LaunchDarkly (Catamorphic Co.) | Estados Unidos de América | Gestión de funcionalidades y despliegue controlado de funcionalidades del Servicio |
Las transferencias internacionales descritas en la tabla anterior se formalizan mediante cláusulas contractuales u otros instrumentos jurídicos a través de los cuales los receptores asumen las mismas obligaciones que las aplicables a Nosotros como responsables del tratamiento, en términos de los artículos 35 y 36 de la LFPDPPP. Dichas transferencias se realizan sin requerir el consentimiento del titular en los supuestos previstos en el artículo 36 de la LFPDPPP, en particular cuando sean necesarias para el mantenimiento o cumplimiento de la relación jurídica entre Nosotros y el titular, o cuando se trate de transferencias a sociedades del mismo grupo que operan bajo los mismos procesos y políticas internas. En aquellos casos en que la transferencia no se encuadre en ninguno de los supuestos de excepción antes señalados, obtendremos Su consentimiento previo a la realización de la misma, en los términos establecidos en el presente aviso.
¿Cómo puede ejercer Sus derechos ARCO? Usted tiene derecho a conocer qué datos personales tenemos de Usted, para qué los utilizamos y las condiciones del uso que les damos (Acceso). Asimismo, tiene derecho a solicitar la corrección de Su información personal en caso de que esté desactualizada, sea inexacta o se encuentre incompleta (Rectificación); a solicitar que la eliminemos de nuestros registros o bases de datos cuando considere que la misma no está siendo utilizada conforme a los principios, deberes y obligaciones previstos en la normativa aplicable (Cancelación); así como a oponerse al uso de Sus datos personales para fines específicos (Oposición). Estos derechos se conocen en su conjunto como derechos ARCO.
Para el ejercicio de cualquiera de Sus derechos ARCO, Usted o su representante legal deberán presentar la solicitud respectiva mediante comunicación libre por escrito o por correo electrónico dirigido a privacy@flipp.com, indicando en el asunto “Solicitud ARCO — México”. La solicitud deberá contener: (i) el nombre completo y domicilio del titular u otro medio para recibir notificaciones; (ii) los documentos que acrediten la identidad del titular o, en su caso, la personalidad e identidad de su representante; (iii) la descripción clara y precisa de los datos personales respecto de los que se busca ejercer el derecho ARCO; (iv) la descripción del derecho que se pretende ejercer; y (v) cualquier otro elemento que facilite la localización de los datos personales.
Comunicaremos al titular la determinación adoptada en un plazo máximo de veinte (20) días hábiles contados a partir de la fecha en que se haya recibido la solicitud. En caso de que la solicitud resulte procedente, la misma se hará efectiva dentro de los quince (15) días hábiles siguientes a la fecha en que se comunique la respuesta. Los plazos antes referidos podrán ser ampliados en una sola ocasión por un periodo igual, cuando las circunstancias del caso así lo justifiquen.
El ejercicio de los derechos ARCO es gratuito; únicamente podrán realizarse cobros para recuperar los costos de reproducción, copias o envío, de conformidad con el artículo 34 de la LFPDPPP. El departamento responsable de dar trámite a las solicitudes para el ejercicio de los derechos ARCO es el Departamento de Privacidad de Flipp, con el cual podrá ponerse en contacto a través del correo electrónico privacy@flipp.com.
¿Cómo puede limitar el uso o divulgación de Su información personal y revocar Su consentimiento? Usted podrá revocar el consentimiento que, en su caso, nos haya otorgado para el tratamiento de Sus datos personales, así como oponerse al tratamiento de Sus datos para las finalidades secundarias o accesorias descritas en el presente aviso, en cualquier momento y sin efectos retroactivos, mediante solicitud dirigida a privacy@flipp.com con el asunto “Revocación del Consentimiento — México” u “Oposición al Tratamiento — México”, según corresponda. Le informamos que, en determinados supuestos, la revocación de Su consentimiento o la oposición al tratamiento podrá implicar que no podamos seguir prestándole el Servicio que solicitó, o que concluya Su relación con Nosotros, en la medida en que dicho tratamiento sea necesario para la prestación del Servicio.
Adicionalmente, para limitar el uso de Su información con fines publicitarios, Usted podrá consultar los siguientes recursos: (i) Digital Advertising Alliance: http://youradchoices.ca/choices/ o www.aboutads.info; (ii) mecanismo de exclusión (opt-out) de LiveRamp para navegadores: http://liveramp.com/opt_out/; y (iii) mecanismo de exclusión (opt-out) de LiveRamp para dispositivos móviles: http://liveramp.com/mobile-opt-out/.
¿Cómo puede conocer los cambios al presente aviso de privacidad? El presente aviso de privacidad podrá sufrir modificaciones, cambios o actualizaciones derivadas de nuevos requerimientos legales, de Nuestras propias necesidades por los productos o servicios que ofrecemos, de Nuestras prácticas de privacidad, de cambios en Nuestro modelo de negocio o por otras causas. Nos comprometemos a mantenerlo informado sobre cualquier cambio al presente aviso de privacidad mediante la publicación de la versión actualizada en https://corp.flipp.com/privacy-policy/.
Cuando los cambios sean sustanciales y requieran Su consentimiento, le notificaremos a través de los datos de contacto que tengamos registrados o mediante un aviso visible al momento de acceder al Servicio. En caso de que Usted considere que Su derecho a la protección de datos personales ha sido vulnerado por alguna conducta u omisión de Nuestra parte, o presuma alguna violación a las disposiciones de la LFPDPPP y demás normativa aplicable, podrá interponer la queja o denuncia correspondiente ante la Secretaría Anticorrupción y Buen Gobierno, autoridad competente en materia de protección de datos personales en México.
A continuación, tras el texto en inglés, encontrarás la versión en español de esta sección de nuestra Política de Privacidad.
Scope and Purpose: this section applies exclusively to data subjects located in the Republic of Colombia whose personal data is collected, stored, used, or transferred by Us in connection with the operation of NativeX on the websites and applications of Media Partners incorporated or operating in Colombia. This section supplements Flipp’s Global Privacy Policy and, in the event of any conflict between this section and the Global Policy regarding Colombian data subjects, this section shall prevail.
Legal Basis — Applicable Law: the collection and processing of personal data of Colombian data subjects is governed by:
Identity and Contact Details of the Data Controller: for the purposes of Colombian law, the entity responsible for the processing of Personal Data (Responsable del Tratamiento) is: Flipp Operations Inc., 350-3250 Bloor St. West, East Tower, Toronto, ON M8X 2X9, Canada, CRA No. 722791704RT0001.
For any inquiries, requests, or complaints regarding the processing of Your Personal Data, you may contact Flipp at privacy@flipp.com.
Personal Data Collected: in connection with the operation of NativeX, We may collect the following categories of personal data from Colombian data subjects: IP addresses; geo-location data; data collected through tracking technologies (cookies, device identifiers); user-provided search terms; data on browsing habits, consumption patterns and behaviour.
Purposes of Processing: We process the above personal data for the following purposes:
Prior, Express and Informed Consent: in accordance with Article 9 of Law 1581 of 2012, the processing of personal data of Colombian data subjects requires the prior, express and informed authorization (autorización) of the data subject. This authorization is collected by the Media Partners through the consent mechanism implemented on their websites or applications, prior to any collection of personal data by Us. The Media Partners are solely responsible for collecting and retaining proof of such authorization.
Rights of Data Subjects: in accordance with Article 8 of Law 1581 of 2012, You have the following rights:
To exercise any of the above rights, You may submit a request to privacy@flipp.com. We will process requests within the following statutory timeframes:
International Data Transfers: Your personal data be transferred to and processed by Our sub-processors located outside Colombia, including in Canada, the United States and the European Union. Such transfers are carried out in accordance with the requirements of Title VIII of Law 1581 of 2012 and include appropriate contractual safeguards to ensure an adequate level of data protection equivalent to that provided under Colombian law.
Data Retention: We retain Your personal data for no longer than is necessary to fulfill the purposes described in paragraph “Purpose of Processing” of this section, unless a longer retention period is required by applicable Colombian law or regulation.
Personal Data Breaches: in the event of a security breach affecting Your personal data, We will notify the Colombian Superintendence of Industry and Commerce (SIC) in accordance with the timeframes and requirements established by External Circular 002 of 2015.
Supervisory Authority: the Supervisory Authority responsible for overseeing compliance with Colombian data protection law is: Superintendencia de Industria y Comercio (SIC), www.sic.gov.co, Carrera 13 No. 27-00, Bogotá D.C., Colombia.
*****************
Alcance y Finalidad: esta sección aplica exclusivamente a los titulares de datos ubicados en la República de Colombia cuyos datos personales sean recolectados, almacenados, usados o transferidos por Nosotros en relación con la operación de NativeX en los sitios web y aplicaciones de los Aliados de Medios (Media Partners) constituidos u operando en Colombia. Esta sección complementa la Política Global de Privacidad de Flipp y, en caso de cualquier conflicto entre esta sección y la Política Global respecto de los titulares colombianos, prevalecerá lo dispuesto en esta sección.
Fundamento Legal — Normativa Aplicable: la recolección y el tratamiento de datos personales de titulares colombianos se rige por:
Identidad y Datos de Contacto del Responsable del Tratamiento: para efectos de la ley colombiana, la entidad responsable del Tratamiento de los Datos Personales (Responsable del Tratamiento) es: Flipp Operations Inc., 350-3250 Bloor St. West, East Tower, Toronto, ON M8X 2X9, Canadá, CRA No. 722791704RT0001.
Para cualquier consulta, solicitud o reclamo relacionado con el Tratamiento de Sus Datos Personales, puede contactar a Flipp a través del correo privacy@flipp.com.
Datos Personales Recolectados: en relación con la operación de NativeX, podremos recolectar las siguientes categorías de datos personales de los titulares colombianos: direcciones IP; datos de geolocalización; datos recolectados a través de tecnologías de rastreo (cookies, identificadores de dispositivo); términos de búsqueda proporcionados por el usuario; datos sobre hábitos de navegación, patrones de consumo y comportamiento.
Finalidades del Tratamiento: tratamos los datos personales antes mencionados para las siguientes finalidades:
Autorización Previa, Expresa e Informada: de conformidad con el artículo 9 de la Ley 1581 de 2012, el Tratamiento de datos personales de titulares colombianos requiere la autorización previa, expresa e informada del Titular. Esta autorización es recolectada por los Aliados de Medios a través del mecanismo de consentimiento implementado en sus sitios web o aplicaciones, con anterioridad a cualquier recolección de datos personales por parte Nuestra. Los Aliados de Medios son los únicos responsables de recolectar y conservar la prueba de dicha autorización.
Derechos de los Titulares: de conformidad con el artículo 8 de la Ley 1581 de 2012, Usted tiene los siguientes derechos:
Para ejercer cualquiera de los derechos antes mencionados, Usted puede enviar una solicitud al correo privacy@flipp.com. Atenderemos las solicitudes dentro de los siguientes plazos legales:
Transferencias Internacionales de Datos: Sus datos personales podrán ser transferidos y tratados por Nuestros subencargados ubicados fuera de Colombia, incluyendo Canadá, los Estados Unidos y la Unión Europea. Dichas transferencias se realizan de conformidad con los requisitos del Título VIII de la Ley 1581 de 2012 e incluyen las garantías contractuales apropiadas para asegurar un nivel adecuado de protección de datos equivalente al previsto por la ley colombiana.
Conservación de los Datos: conservaremos Sus datos personales por el tiempo estrictamente necesario para cumplir con las finalidades descritas en el apartado “Finalidades del Tratamiento” de esta sección, salvo que un período de conservación mayor sea exigido por la ley o reglamentación colombiana aplicable.
Incidentes de Seguridad sobre Datos Personales: en caso de ocurrir un incidente de seguridad que afecte Sus datos personales, notificaremos a la Superintendencia de Industria y Comercio (SIC) de conformidad con los plazos y requisitos establecidos en la Circular Externa 002 de 2015.
Autoridad de Control: la Autoridad de Control responsable de vigilar el cumplimiento de la ley colombiana de protección de datos es: Superintendencia de Industria y Comercio (SIC), www.sic.gov.co, Carrera 13 No. 27-00, Bogotá D.C., Colombia.
Conservación de Datos: Flipp conserva los Datos Personales de los Titulares colombianos durante el tiempo estrictamente necesario para cumplir las finalidades descritas en el apartado “Finalidades del Tratamiento” de esta sección, salvo que la legislación o regulación colombiana aplicable exija un período de conservación más prolongado.
Incidentes de Seguridad de Datos Personales: en caso de una vulneración de seguridad que afecte los Datos Personales de los Titulares colombianos, Flipp notificará a la Superintendencia de Industria y Comercio de Colombia (SIC) de conformidad con los plazos y requisitos establecidos en la Circular Externa 002 de 2015.
Autoridad de Control: la Autoridad de Control responsable de supervisar el cumplimiento de la legislación colombiana en materia de protección de datos es: Superintendencia de Industria y Comercio (SIC), www.sic.gov.co, Carrera 13 No. 27-00, Bogotá D.C., Colombia.
A seguir, após o texto em inglês, você encontrará a versão em português desta seção da nossa Política de Privacidade.
For individuals located in Brazil, personal data processing is carried out in accordance with the Lei Geral de Proteção de Dados Pessoais (Law No. 13.709/2018, “LGPD”). Where required, we process personal data based on an appropriate legal basis, which may include consent, performance of a contract or related procedures, compliance with legal or regulatory obligations, legitimate interests, or other lawful bases permitted under applicable law.
Where processing is based on consent, such consent will be obtained in a free, informed and unambiguous manner for specific purposes and may be withdrawn at any time, without affecting the lawfulness of prior processing.
Under LGPD, users located in Brazil have specific rights regarding their personal data. We provide the following mechanisms for You to exercise Your rights:
Where personal data is transferred outside of Brazil, We will ensure that such transfers are carried out in compliance with applicable data protection laws and are subject to appropriate safeguards to ensure an adequate level of protection of personal data.
To exercise any of these rights, please contact privacy@flipp.com with the subject line “LGPD – Brazil Request”. We will respond to Your request within the legal timeframe.
*****************
Para indivíduos localizados no Brasil, o tratamento de dados pessoais é realizado em conformidade com a Lei Geral de Proteção de Dados Pessoais (Lei nº 13.709/2018, “LGPD”). Quando exigido, tratamos dados pessoais com base em hipótese legal apropriada, que pode incluir o consentimento, a execução de contrato ou de procedimentos preliminares a ele relacionados, o cumprimento de obrigação legal ou regulatória, os legítimos interesses, ou outras bases legais permitidas pela legislação aplicável.
Quando o tratamento for baseado no consentimento, este será obtido de forma livre, informada e inequívoca para finalidades específicas e poderá ser revogado a qualquer momento, sem prejuízo da licitude do tratamento realizado anteriormente.
Nos termos da LGPD, os usuários localizados no Brasil possuem direitos específicos em relação aos seus dados pessoais. Disponibilizamos os seguintes mecanismos para que Você exerça Seus direitos:
Quando os dados pessoais forem transferidos para fora do Brasil, garantiremos que tais transferências sejam realizadas em conformidade com as leis de proteção de dados aplicáveis e estejam sujeitas a salvaguardas apropriadas para assegurar um nível adequado de proteção dos dados pessoais.
Para exercer qualquer um desses direitos, entre em contato por meio do e-mail privacy@flipp.com com o assunto “LGPD – Solicitação Brasil”. Responderemos à Sua solicitação dentro do prazo legal.
Last updated May 19, 2026
