Last Updated: January 25, 2022
1. Types of Information Collected.
1.1 Information You Give Us.
You may give us information about yourself by using the online forms provided on the Website or by contacting us by phone, e-mail or other means. This includes, for example, filling in the “Contact Us” form on the Website or when you provide your information to us in order to receive our services.
The information you give us may include email address, name, mailing address, telephone number, company name, company address, credit card information, job title, account information and any updates to information provided to us.
Please note that we need certain types of information so that we can provide services to you. If you do not provide us with such information, or if you ask us to delete it, you may no longer be able to access our services.
1.2 Information We May Collect About You.
We may automatically collect any of the following information each time you visit the Website:
- Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, domain name and country that requests information, the file(s) requested, browser type and version, browser plug-in types and versions, operating system and platform; and
- Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time), length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.
1.3 Information We May Receive From Other Sources.
We will receive information about you if:
- You obtain our services through one of our resellers or partners. The types of information that we may receive are the same as the information that you may give to us detailed in section 1.1 above.
- You use any of the other websites we operate or the other services we provide. In this case, we will inform you when we collect that data that it may be shared internally and combined with data collected on the Website. We work closely with third parties (including, for example, advertising networks, and analytics and search information providers) and may receive information about you from them.
- Some Barracuda products use Google Analytics for purposes of improving product performance. For more information on Google Analytics, and how it collects and processes data visit the site “How Google Uses Information From Sites or Apps that Use our Services,” located at https://policies.google.com/technologies/partner-sites.
2. Use of Information.
We, or third-party data processors acting on our behalf, collect, use, process and store the Personal Information listed above for the following purposes:
- On the basis of the contract you have with us, as necessary in order to deliver your contracted services and to carry out our obligations arising from the contract;
- On the basis of your consent, in order to provide you with information, products or services which we feel may interest you;
- On the basis of our legitimate interests, as necessary in order:
- To register you for webinars/seminars.
- To assign a password.
- To ensure that content from the Website and services is presented in the most efficient manner for you.
- To provide you with information, products or services that you request from us.
- To allow you to participate in interactive features (e.g., live chat) when you choose to do so.
- To notify you about changes to our products or services and to keep you informed about our fees and charges.
- To provide the service(s) you have requested.
- To improve the quality and accuracy of the services.
- To allow you to access and use the Website and to register for an account.
- To ensure the security of our services and the Website.
- To manage litigation, to answer competent authorities’ requests, to comply with non-EU legal obligations to which we are subject, and to pursue debt.
- To verify your identity in order to prevent and detect money laundering and fraud.
- To carry out statistical analysis and market research.
- For marketing, advertising and promotional purposes to the extent your consent is not required.
- For the purposes of improving and maintaining the Website, preparing reports or compiling statistics in order to improve our services. Such details will be anonymized as much as reasonably possible.
- To take other action you request when you supply the Personal Information.
- On the basis of the legal obligation to which we are subject, as necessary for compliance with such obligation.
Personal Information is not used to profile those who access the Website.
3. Data Retention.
We retain Personal Information for as long as you use the services we provide and then as required to comply with applicable laws.
4. Disclosure of Information.
4.1 Barracuda Affiliate Companies.
4.2 Categories of Third Parties.
- Our service providers and subcontractors including, but not limited to, payment processors, suppliers of technical and support services and cloud service providers;
- Companies that assist us in our marketing, advertising and promotional activities;
- Analytics and search engine providers that assist us in the improvement and optimization of the Website; and
- Systems integrators and service providers who resell our products and services.
4.3 Other Third Party Disclosures.
We will also disclose your Personal Information to third parties:
- In the event we sell or buy any business or assets, in which case we may disclose your Personal Information to the prospective seller or buyer of such business or asset;
- If Barracuda, or substantially all of its assets, is acquired by a third party, in which case information held by it about its customers and partners will be one of the transferred assets;
- If Barracuda is under a duty to disclose or share your Personal Information in order to comply with any legal obligation or any lawful request from government or law enforcement officials, and as may be required to meet national security or law enforcement requirements, or prevent illegal activity;
- In order to enforce or apply Barracuda’s terms and conditions or any other agreement, or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or
- To protect the rights, property or safety of Barracuda, our customers or other persons. This may include exchanging information with other organizations for the purposes of fraud protection and credit risk reduction.
5. Protection of Personal Information.
Barracuda is committed to taking steps to protect Personal Information you provide to us, including administrative, technical and physical measures to safeguard Personal Information against loss, theft, misuse, unauthorized access, disclosure, alteration and destruction.
Personal Information is only accessed by authorized staff who are instructed to handle Personal Information in a confidential manner. Personal Information is protected by firewalls and standard industry security measures. We may also transmit sensitive information and transactional data using secure socket layer (SSL) encryption.
The transmission of information through the Internet is not completely secure. Although we will do our best to protect Personal Information, we cannot guarantee the security of your data transmitted to the Website; any transmission is at your own risk. Once we have received your Personal Information, we will use strict procedures and security features to try to prevent unauthorized access.
Where we have given you (or where you have chosen) a password that enables you to access certain parts of the Website or our products and services, you are responsible for keeping this password confidential. We ask you not to share the password with anyone.
6. Your Rights.
Subject to the conditions set forth under applicable law, you have the right to request to access, review, correct, update, suppress, restrict or delete Personal Information that you have provided to us. You have the right to request an electronic copy of Personal Information for purposes of transmitting it to another company. You have the right to not be subject to a decision based solely on automated processing, including profiling. You may submit such requests by sending an email to email@example.com. We will respond to your request in accordance with applicable law. In your request, you must advise what Personal Information you would like to access, review, correct, update, suppress, restrict or delete; or otherwise let us know what limitations you would like to put on our use of your Personal Information.
Please note that we may need to retain certain Personal Information for recordkeeping purposes and/or to complete transactions that you began prior to requesting a change or deletion. In the event your Personal Information is processed on the basis of your consent, you may withdraw consent at any time by sending an email to firstname.lastname@example.org and specifying the details of your request. However, any withdrawal of consent will not affect the lawfulness of any processing based on consent before it is withdrawn.
If you have previously given us consent to use your Personal Information for marketing purposes, you can choose to stop receiving marketing communications that we send to you from time to time by following the unsubscribe instructions included in such communications. Alternatively, you can opt out of such communications at any time by contacting us by email at email@example.com.
You can choose to opt-out from your Personal Information being used for any purpose that differs from the purposes notified to you when we collected your Personal information or from being disclosed to any third party.
7. Transfers of Information.
Barracuda is an international business with multi-national operations, systems and processes. In this context, the Personal Information that Barracuda collects from you may be transferred to and stored in the United States or another location outside of the EEA or Switzerland, i.e., Australia, China, Hong-Kong, India, Malaysia, Singapore, and the UK.
With respect to Personal Information transferred outside the European Economic Area (“EEA”) or Switzerland, we will process Personal Information in accordance with applicable privacy laws by implementing appropriate safeguards.
While Barracuda remains self-certified under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, it is not currently relying on these frameworks for the transfers of Personal Information. Indeed, we rely on Standard Contractual Clauses (“SCC”) as adopted by the European Commission, a copy of which may be requested at firstname.lastname@example.org.
For additional Information on U.S. Privacy Safeguards Relevant to SCCs and other EU Legal Bases for EU-U.S. Data Transfers after Schrems II, please click here for the White Paper jointly issued on September 2020 by the U.S. Department of Commerce (DOC), Department of Justice (DOJ), and the Office of the Director of National Intelligence (ODNI).
7.1 Privacy Shield.
As noted above, Barracuda remains self-certified under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, and as such has taken on the additional obligations and liabilities set forth in this section.
7.2 Our Obligations to You Under the Privacy Shield.
- Barracuda has certified that it complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce and approved by the European Commission regarding the collection, use and retention of Personal Information transferred from the European Union and Switzerland to the United States, respectively.
- Barracuda has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
- The Federal Trade Commission has jurisdiction over Barracuda’s compliance with the Privacy Shield.
- Barracuda commits to cooperate with EU Data Protection Authorities and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given to Barracuda by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.
7.3 Accountability and Liability for Onward Transfer.
Barracuda may be liable in cases of onward transfer of EU and Swiss individuals’ data to third parties received pursuant to the Privacy Shield.
7.4 Privacy Complaints, Recourse, Enforcement and Liability.
In compliance with the Privacy Shield Principles, Barracuda commits to resolve complaints about your privacy and our collection or use of your Personal Information without charge to you.
Barracuda has committed to refer all unresolved privacy complaints to JAMS, an alternative dispute resolution provider based in the US. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.jamsadr.com or https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS are provided to you at no cost.
Please note that if your complaint is not resolved through the above mechanism, in certain limited circumstances you may be able to invoke a binding arbitration proceeding before the Privacy Shield Panel if Barracuda has failed to meet its obligations to you under the Privacy Shield and that failure has still not been remedied. Additional information about invoking binding arbitration is available online at the following link: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
8.1 What Are Cookies and Related Technologies
Cookies are small data files that are stored on your computer that allow us and our third-party partners and providers to collect certain information about your interactions with our email communications, websites and other online services. We and our third-party partners and providers may also use other related technologies to collect this information, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”).
8.2 What We Collect When Using Cookies
To view the types of cookies Barracuda uses on the Website, please click here.
8.3 How We Use That Information
8.4 Your Choices About Cookies
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using our online services, as some features and services on our online services may not work properly. Depending on your device and operating system, you may not be able to delete or block all cookies. In addition, if you want to reject cookies across all your browsers and devices, you will need to do so on each browser on each device you actively use. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
Some Barracuda products use Google Analytics for purposes of improving product performance. For more information on Google Analytics, and how it collects and processes data visit the site “How Google Uses Information From Sites or Apps that Use our Services,” located at https://policies.google.com/technologies/partner-sites.
8.5 Your Choices About Online Ads
We support the self-regulatory principles for online behavioral advertising (Principles) published by the Digital Advertising Alliance (DAA). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest-based advertising purposes. More information about these Principles can be found at www.aboutads.info If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow the instructions at www.aboutads.info/choices, or http://www.networkadvertising.org/choices/ to place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements. Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all of your browsers and devices, you will need to opt out on each browser on each device you actively use. If you delete cookies on your device generally, you will need to opt out again.
If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at http://www.aboutads.info/appchoices.
9. Third Party Websites.
11. Contact Us.