Your rights regarding your personal data are set forth below. Depending on the nature of the right you are exercising your ability to make use of the Services may be effected. For example, Gurobi Optimization cannot delete all of the personal data held about you without deleting your Gurobi Optimization account.

For California Residents

The CCPA provides California residents with rights regarding their personal data. To exercise these rights, please contact us as set forth below. We may direct you to contact your Employer to exercise your data subject access request depending on the Services at issue related to your personal data.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal data over the past 12 months (the “right to know”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose to you the categories of personal data we collected about you; the categories of sources for the personal data we collected about you; our business or commercial purpose for collecting or selling that personal data; the categories of third parties with whom we share that personal data; if we sold or disclosed your personal data for a business purpose, two separate lists disclosing sales, identifying the personal data categories that each category of recipient purchased; and disclosures for a business purpose, identifying the personal data categories that each category of recipient obtained; and the specific pieces of personal data we collected about you (also called a data portability request).

Right to Correct

You have the right to request that we correct any inaccurate personal data we maintain about you.

Right to Delete

You have the right to request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal data not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal data.  We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. You do not need to create an account with us to submit a request to know or delete. We will only use personal dataprovided in the request to verify the requestor’s identity or authority to make it.

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you.

Making a verifiable consumer request does not require you to create an account with us.

We will only use personal data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact privacy@gurobi.com.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

You do not need to create an account with us to exercise your opt-out rights. We will only use personal data provided in an opt-out request to review and comply with the request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Other U.S. State Privacy Rights

We do not meet the eligibility conditions outlined in the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, or Montana Consumer Data Privacy Act and are therefore are not subject to the requirements of these laws.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal data (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal data in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California.  We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from our systems.  

GDPR Notice

We collect the categories of personal data identified above. The personal data that Gurobi Optimization collects is is specified above in the “What personal data will Gurobi Optimization collect about me?” section, section 3 above.

In compliance with the European Union (“EU”) General Data Protection Regulation (“GDPR”) and United Kingdom (“UK”) General Data Protection Regulation (“UK GDPR”), we rely upon the following legal basis defined in the GDPR and UK GDPR to collect, use, share and otherwise process the personal data of individuals located in the EU or UK:

• Necessary for the purposes of Gurobi Optimization or a third party’s legitimate interests, provided that those interests are not overridden by your interests or fundamental rights and freedoms.

Where we collect, use, disclose and otherwise process your information based on legitimate interests, we rely on the following legitimate interests:

• Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
• Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
• Providing, improving and developing our products: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.

We transfer personal data to the categories of recipients identified above.

Data Retention

We retain personal data for so long as is necessary to carry out the legitimate interests identified above. Personal data shall be retained in an active environment only for the minimal period for which it is required for processing. Thereafter, the data shall be archived securely as per the requirement identified under legitimate interest.

Subsequently, data shall be continued in secure archiving or destroyed as per the identified legitimate interest requirements of Gurobi Optimization. Legal obligations on data retention shall be factored into the legitimate interest assessment.

Contact Information for EU and UK Residents

Gurobi Optimization has designated individuals who receive emails directed to the privacy@gurobi.com inbox and are the contacts to handle all data subjects requests and complaints. The core activity of Gurobi Optimization does not involve processing sensitive data on a large scale or involve large scale, regular, and systematic monitoring of EU and UK data subjects. Thus there is no requirement to designate a “Data Protection Officer” as envisaged under GDPR or UK GDPR at this time.

If you are an EU or UK resident, you have the right to object to our processing that is based on legitimate interests by contacting us at the address or number below. If you are located in the EU or UK and you believe that we have infringed your rights under the GDPR or UK GDPR, please contact us by sending an email to privacy@gurobi.com.  

You have the right to lodge a complaint with a supervisory authority, in particular in your applicable Member State.

You have the right to access your personal data pursuant to Article 15 GDPR and to request a copy of the personal data Gurobi Optimization holds about you and to have any inaccuracies corrected. We may require you to prove your identity.

In addition, you have the following rights under the GDPR:

• Right to rectification of your personal data pursuant to Article 16 GDPR
• Right to erasure (or “right to be forgotten”) pursuant to Article 17
• Right to restriction of processing pursuant to Article 18 GDPR
• Right to data portability pursuant to Article 20 GDPR
• Right to object to processing pursuant to Article 21 GDPR where the processing is based on Article 6(1)(e) or 6(1)(f) GDPR as explained in detail at the end of this privacy policy
• Where the processing is based on your consent, your right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
• Right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR
•  

Please address requests and questions about this or any other question about this Privacy Policy to the Data Protection Officer, 9450 SW Gemini Dr #90729, Beaverton, Oregon 97008-7105, USA (Email: privacy@gurobi.com).

Information about your right to object to processing pursuant to Article 21 GDPR

1. You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or Article 6(1)(f) GDPR, including profiling based on those provisions. Gurobi Optimization shall no longer process the personal data unless Gurobi Optimization demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defense of legal claims.
2. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Notice to Australia Residents

This Notice is for people who are located in Australia. Our processing of personal data of people who are in Australia is governed by the Australian Privacy Principles (“APPs”) contained in the Privacy Act 1988 (Cth). A copy of the APPs may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

The provisions of this Privacy Policy, including those disclosing the kinds of personal data collected and processed, the purposes for such collection and processing, and the manners in which you may access your personal data, are applicable to you. Your personal data will be stored and processed in the United States, the European Union, and Japan, and we may disclose personal data to overseas recipients located in the United States, the European Union, and Japan.

If you have any questions or comments about this Privacy Policy and our privacy practices, or if you have any complaints regarding breach of the APPs, please contact us at:

9450 SW Gemini Dr #90729
Beaverton, Oregon 97008-7105 USA
privacy@gurobi.com