Supplemental Privacy Notice for U.S. Residents

i. Categories of Personal Information that We Collect

The categories of Personal Information we collect about you and the third parties to whom we disclose such Personal Information for a business purpose that we have collected in the preceding 12 months are set forth below:

We collect sensitive Personal Information for various purposes, including:

• to uniquely identify you and for tax reporting purposes;
• to comply with our legal obligations pursuant to applicable federal and state employment laws and regulations, including collecting and disclosing Personal Information as required by law (e.g., for minimum wage, payroll tax, as well as to comply with equal opportunity and anti-discrimination laws);
• to facilitate and provide reasonable accommodations; and
• to facilitate other business purposes as enumerated under CCPA.

As defined by the CCPA, sensitive Personal Information shall be treated as Personal Information, except where it is collected or processed for “the purpose of inferring characteristics about a consumer.” We do not collect or process sensitive Personal Information for the purpose of inferring characteristics about individuals.

ii. Sources of Personal Information

The sources from which we collect Personal Information depend on, among other things, our relationship or interaction with a specific Consumer. The information below lists the categories of sources from which we collect Personal Information in different contexts:

• From Consumers directly;
• Public records or widely available sources and other records and information that are made available by federal, state, and local government entities;
• Social media platforms, advertising networks and data analytics providers;
• Organizations from whom we collect Personal Information to support human resources and workforce management activities;
• Organizations from whom we collect Personal Information as part of providing products and services, completing transactions, supporting our everyday operations, or business management and development.

Depending on the context, further information can be found in the Section titled “Information we collect” of our Sisense Privacy Notice, the Section titled “Information we collect” of our Sisense Products and Services Privacy Notice and Section 2 titled “Types of personal information we collect when you apply” of our Applicant Privacy Notice.

iii. Why we Collect Personal Information

The business and commercial purposes for which we collect and use Personal Information depend on, among other things, our relationship or interaction with a specific Consumer.

Depending on the context, further information can be found in the Section titled “How we use information” of our Sisense Privacy Notice, Section titled “How We Use the Information We Collect” of our Sisense Products and Services Privacy Notice and Section 3 titled “Purposes for processing personal information” of our Applicant Privacy Notice.

iv. Our Disclosure of Personal Information

The categories of recipients to whom we disclosed Personal Information for our business purposes during the preceding 12 months include:

• our group companies (companies owned or operated by us);
• third party service providers and partners who need to have access to the information for the purpose of providing services to us only (and not for such third parties’ commercial use in any way); and
• any other person if we have your permission to do so.

The categories of third parties to whom we disclose Personal Information for a business and commercial purposes are further described in the Section titled “Who we share information with” of our Sisense Privacy Notice, the Section titled “Who We Share Information With” of our Sisense Products and Services Privacy Notice and Section 5 titled “Who we share your personal information with” of our Applicant Privacy Notice.

While Sisense does not sell Personal Information in exchange for any monetary consideration, we may share Personal Information for cross-context behavioral advertising purposes as defined by certain state privacy laws, such as the CCPA under Cal. Civ. Code 1798.140(ad)(2). Some of our processing activities may also constitute “targeted advertising” as that term is defined under certain state laws.

We have shared in the preceding 12 months Personal Information as necessary for business purposes, as defined by Cal. Civ. Code 1798.140. This includes sharing personal identifiers, commercial information, and internet or other electronic network activity with payment processing providers, customer relationship management, consulting, e-mail, product feedback, helpdesk services, advertising networks and website analytics companies. You have a right to direct Sisense not to sell or share your Personal Information. We do not have actual knowledge that we have sold or shared Personal Information of individuals under the age of 16 for targeted advertising or cross-context behavioral advertising purposes.

We retain Personal Information we collect from you as long as is needed to fulfil the purposes outlined in this US Privacy Notice, and as further described in the Section titled “Data retention” of our Sisense Privacy Notice, the Section titled “Data retention” of our Sisense Products and Services Privacy Notice and Section 7 titled “Data retention periods” of our Applicant Privacy Notice.

Use of our Websites, Products or Services is not intended for and not directed at children under 16 years of age. We do not knowingly collect, sell, or share Personal Information from children under 16 and do not knowingly target our Websites, Products or Services to children under the age of 16. Persons under 16 years of age should not use or provide any Personal Information through our Websites, Products or Services. If we learn we have collected or received Personal Information from a child under the age of 16, we will delete that Personal Information in accordance with applicable law. If you believe we might have any information from or about a child under the age of 16, please contact us.

Subject to certain limitations (as defined in the CCPA or other applicable law), you have the following rights with respect to the Personal Information that we collect about you:

i. Right to Know. You may request information about what Personal Information we have collected about you, including:

• The categories of Personal Information;
• The categories of sources from which the Personal Information is collected;
• The business or commercial purposes for collecting, selling or sharing your Personal Information;
• The categories of Personal Information we disclosed, shared or sold about you; and
• The categories of third parties to whom we disclosed, shared or sold Personal Information about you.

ii. Right of Access. You may request a copy of the Personal Information we have collected about you.

iii. Right of Correction. You may ask us to rectify inaccurate Personal Information, or, as appropriate, edit.

iv. Right of Deletion. You may ask us to delete the Personal Information that we have collected from you.

v. Right to Limit Processing of Sensitive Personal Information. You may ask us to limit the processing of sensitive Personal Information we process about you. We do not collect sensitive Personal Information, as defined by the CPRA, for the purpose of inferring characteristics about you. Accordingly, submitting a request to limit the use of your sensitive Personal Information is not required.

vi. Right of Non-discrimination. You have the right to be free from discrimination or retaliation related to your exercise of any of your privacy rights.

vii. Right to Opt-out of Sales or Sharing. As described above, we do not sell your Personal Information. Like many other companies, Sisense uses services that help deliver interest-based ads to you, and may disclose Personal Information to business partners for their use. Making your Personal Information (e.g., online identifiers, IP address, browsing activity, etc.) available to these third parties may be considered “sharing” under CCPA.

You may have the right to opt out of the sale or sharing of your Personal Information by contacting us through one of the contact methods described under the section titled “How to Contact Us” or by clicking on the link “Do Not Sell or Share My Personal Information” at the bottom of the page.

However, please note that your use of our Websites may still be tracked by us and our vendors or partners to perform functions that are necessary for our businesses, such as hosting our Website, Products and Services, ensuring there is no fraud (click-fraud, fraudulent or bot traffic), etc. These entities are contractually obligated to keep such information confidential, and will not use it for any purpose other than for the services they provide to us.

You can contact us with your request through one of the contact methods described under section 7 below titled “How to Contact Us”.

We may ask you to provide information that will enable us to verify your identity in order to comply with your request to exercise your privacy rights. Consumers in some states may also authorize an agent to make requests on their behalf. In particular, when a California consumer authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the consumer to submit the request, or we may require the consumer to verify their own identity to us or confirm with us that they provided the agent with permission to submit the request on their behalf. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request in accordance with the requirements of applicable law.

You may have the right to appeal our decisions made with respect to on your request. To appeal our decision on your request, you may contact us through one of the contact methods described under the section titled “How to Contact Us”. Please enclose a copy of, or otherwise specifically reference, our decision on your request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

You may also request information about our practices related to our disclosure of your Personal Information to certain third parties for their direct marketing purposes. You may be able to opt out of our sharing of your Personal Information with unaffiliated third parties for the third parties’ direct marketing purposes in certain circumstances. You can contact us with your request through one of the contact methods described under the section titled “How to Contact Us”.

Sisense may update this US Privacy Notice at any time in response to changing legal, technical or business developments. When we update this US Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

This US Privacy Notice was last changed on the date set forth at the top of this US Privacy Notice.

If you have any questions or concerns about our collection or use of your Personal Information, or if you have questions about our privacy practices, please contact us using our e-mail address: [email protected] or using the contact form located at the bottom of our Privacy and Data Protection Center. If you wish to submit a request to exercise your rights under Section 5 above, please click here.