Our headquarters are in the United States. Your Personal Data will be transferred to the United States and may be transferred to other locations where privacy laws may not be as protective as those in your state, province, or country.
Where the GDPR applies, where we share your Personal Data with third parties who are based outside Europe, we try to ensure a similar degree of protection is afforded to it by implementing one of the following mechanisms:
You may contact us using the details below if you want further information on the specific mechanism used by us when transferring your Personal Data outside of Europe.
EU-U.S. Data Privacy Framework with UK Extension and Swiss-U.S. Data Privacy Framework
PixieBrix, Inc. complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. PixieBrix has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. PixieBrix has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the EU-U.S. DPF Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit
https://www.dataprivacyframework.gov/.
As described in the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles, PixieBrix is accountable for Personal Data that it receives and subsequently transfers to third parties. If third parties to whom PixieBrix has disclosed Personal Data process it in a manner that does not comply with the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, PixieBrix will be accountable, unless PixieBrix proves that PixieBrix is not responsible for the event giving rise to the damage. The types of third parties with which PixieBrix may share your Personal Data and for which purposes are set out in the section of this Privacy Policy entitled
How we share your Personal Data. The categories of Personal Data PixieBrix may receive, as well as the purposes for which PixieBrix collects and uses the Personal Data, are set out in other sections of this Privacy Policy, including in those entitled
What Personal Data we collect and
How we use your Personal Data and why.
With respect to Personal Data received or transferred pursuant to the DPF, the U.S. Federal Trade Commission has jurisdiction over PixieBrix’s compliance with the DPF.
In certain situations, PixieBrix may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Depending upon the context in which PixieBrix processes Personal Data received in reliance upon the DPF, relevant individuals may have rights to access Personal Data about them, and choices to limit the use and disclosure of their Personal Data. Please submit a written request to exercise your rights or choices to the contact information provided in this Privacy Policy (see the section entitled Contact details). We may request specific information from you to confirm your identity.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, PixieBrix commits to resolve DPF-related complaints about our collection and use of your Personal Data. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact us the contact information provided in this Privacy Policy (see the section entitled Contact details).
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, PixieBrix commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF-related complaint from us, or if we have not addressed your DPF-related complaint to your satisfaction, please visit
https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Additionally, under certain conditions, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For more information on this option, please see the DPF website:
https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction We may amend this section from time to time consistent with DPF requirements.