SALESFORCE.ORG
Salesforce.org Privacy Policy Effective: May 25, 2018
Your Privacy Is Important
Salesforce.org puts the world’s best technology into the hands of nonprofits and educational institutions so they can create more impact. Our focus is to provide you with Salesforce subscriptions that we resell and to offer our own in-house developed apps. At Salesforce.org, trust is our #1 value and we take the protection of your data seriously. We believe it is critical for you to have meaningful control over your data – because together, we can help improve the world. With that in mind, we want to be transparent about the personal information we collect about you, how we use it and with whom we share it.
Please read this Privacy Policy in full, but here are a few important points to keep in mind:
•When you visit our websites, even if you are just reading them, we receive some personal information from you like your IP address, geographic location, and data about how you are using the websites.
•When you interact with us, such as expressing interest in becoming a customer, downloading materials from or viewing demos through the websites, or registering for or attending one of our events, you may share additional information with us like your name, email address, phone number, and information about your educational institution or nonprofit. We use this information to contact you regarding your interest, better understand you and the markets we serve, and improve and tailor the content and services we offer to you.
•Due to the nature of our relationship with salesforce.com, inc. (“Salesforce”), Salesforce.org and Salesforce share personal information about you to meet both companies’ business interests.
•Throughout this Policy we’ll refer to ourselves as “we,” “us,” and “our.” Depending on how you are using our websites, we may refer to you as a user, visitor, customer or an attendee depending on what applies.
If you have any questions about our Privacy Policy, how we collect or process your personal information, or anything else related to our privacy practices, you can contact us at any time.
1. Introduction
This Privacy Policy explains how we use personal information we obtain from a variety of users and regarding various services we provide, as described below. Personal information is any information that on its own, or in combination with other information, could reasonably identify you.
1.1 Users
This Policy applies to a variety of Salesforce.org users who visit our websites, including those who download or view website materials (“visitors”), register to use the Services as defined below (“customers”), and register for or attend our online webinars or in-person corporate events (“attendees”).
1.2 Services
In this Policy, we describe Salesforce.org’s privacy practices in relation to: (1) the use of our websites located at salesforce.org, info.salesforce.org and https://powerofus.force.com (our “Sites”); (2) the Salesforce products, services, applications, and programs we resell; and (3) non-Salesforce products, services, applications, and programs that are offered through and described within our Sites, to the extent that they link to or reference this Privacy Policy (collectively, the “Services”).
This Privacy Policy only applies to the privacy practices regarding Services that link to or reference it. It excludes your use of our Services subject to a customer agreement or another agreement that does not reference this Privacy Policy. It also excludes any use of Salesforce other than as provided for in this Policy.
1.3 Other Applicable Policies
As a user of our Services, the collection, use, and sharing of your personal information is subject to this Privacy Policy, including other documents referenced in this Policy and updated versions.
1.4 Changes to the Policy
We may update this Privacy Policy from time to time. The most current version of the Policy will govern our collection and processing of your personal information. We will post the most current version of the Policy at salesforce.org/privacy-policy. If we make material changes to this Policy, we will notify you through our Services or email. Use of the Services after the changes become effective will be subject to the updated Privacy Policy.
2. Personal Information We Collect
2.1 Personal Information You Share with Us
We collect personal information directly from you including when you request information or Services, apply for the Power of Us program, become a customer, fill out a registration or contact form, or post content through the Power of Us Hub.
Potential Customers
When you inquire about becoming a customer, we need you to provide us with your name, job title, email address, phone number, geographic location, and organization’s name, size and type so that we can determine availability of and the best Services for you.
Power of Us Program
The Power of Us program gives qualifying organizations access to Salesforce subscriptions, either as donations or at discounted rates. To apply for the Power of Us program, you must first obtain your Salesforce trial account and submit your application through that account. As part of your application, you must then include personal information about yourself and members or agents of your organization (such as the name(s) and email address(es) of a system administrator and an executive from your organization who has approved your request to move forward with the application) so we can determine eligibility.
Customers
If you choose to become our customer and create either a Salesforce trial account, a Salesforce account, or a Salesforce Marketing Cloud account through Salesforce.org (in each case, your “Salesforce Account”), we will need your name, job title, business contact information for you and, if applicable, your authorized organizational users (e.g. email address, postal address, and phone number), geographic location, organizational information, financial qualification information, and the number of employees within the organization using our Services. If your Services include a fee, we will also require payment information (e.g. your credit card number and billing information). This information, plus a username and password you create, will be shared with and/or handled by Salesforce to create your Salesforce Account. Please note that your use of the subscriptions covered by your Salesforce Account are governed by the applicable Master Subscription Agreement.
Registration or Contact Forms
To access or take advantage of certain Services, we will require or request that you fill out a registration or contact form through the Sites, including to attend in-person events or educational webinars, view or download materials (e.g. white papers, e-books or demos), join our mailing list, participate in surveys and contact us with your interest. We use the forms you fill out and the information you provide to contact you, enable access to the requested Services, understand our users, obtain feedback and improve our Services. Please note that these forms may include additional policy disclosures.
Power of Us Hub
The Power of Us Hub (the “Hub”) is an online community for those in the nonprofit, higher education, and K-12 sectors who are using Salesforce subscriptions to communicate and connect. As explained more thoroughly in the Power of Us Hub Terms of Service (https://powerofus.force.com/articles/Customer_Service/Terms-of-Service), Salesforce.org provides the Hub solely for our active customers and authorized partners, staff from Salesforce.org and Salesforce, and Salesforce MVPs (collectively, “Hub users”). Hub users must sign in with a Salesforce Account to access it. The Hub is an added benefit, and you do not have to use it.
In order to communicate with others in the Hub, we require all Hub users provide their name, email address, and organization details for their profile. We also request that Hub users provide a picture, job title, phone number, location and a short biography, but this information is optional. However, providing the optional information may improve the user experience since it will enable connecting with more relevant users. Hub users can also join User Groups through the Hub, and share additional information in those groups, but please note that Salesforce manages those groups separately in the Salesforce Success Community.
We provide opportunities for Hub users to post or submit text, photographs, videos, articles, ideas, documents or other content on or through the Hub (“Hub content”). You may post Hub content that includes personal information through Chatter posts, User Groups, Articles, Ideas, the Solution Exchange, or other posts. We collect the posted Hub content, make it available as part of the Hub, and use it to improve our Services or send you success resources that we believe are relevant to you. The Hub is accessible to all Hub users so please do not post Hub content or personal information there that you would not want to be available to those users.
If you communicate with us or an individual in the Hub through direct messaging, we store and process your communications and information related to your messages. We scan the messages for malicious content, link shortening, spam, prohibited content and review of reported issues. We also use information about those with whom you communicated (but not the content of the communications) to better understand how you use our Services, protect the safety and integrity of our Services and show you more relevant information. Please remember that when you message users or otherwise communicate with users through the Hub, the recipients have their own copy of your communications, which they may copy, store or share.
2.2 Additional Personal Information We Receive about You
We collect personal information about you from Salesforce and other third parties. We also receive information about you through additional means.
Salesforce
Due to the nature of our relationship with Salesforce, we receive personal information about you from Salesforce in a number of ways. For example, when you inquire about becoming a Salesforce customer, fill out a registration or contact form through salesforce.com, watch a demo about a Salesforce service, or sign up for Trailhead, we receive and/or access the personal information you have provided to Salesforce because it is stored in a shared environment. We use the information you provided to Salesforce to determine if our Services are relevant for you and for marketing purposes. Similarly, if you access our Services through a Salesforce trial account, donated subscriptions, or purchased subscriptions, we will receive information about you from Salesforce.
Salesforce receives information about you when you use Salesforce’s partner apps, including information about which apps you’ve installed and the status of that application. This information is associated with other personal information collected about you at the time of signup through your Salesforce Account. We do not receive individual user usage data, individual user license status, or disaggregated data that specifically relates to your partner app usage and implementation.
Dreamforce, Salesforce World Tours, and Other Salesforce Events
If you sign up for or attend Salesforce events, such as Dreamforce or Salesforce World Tours, Basecamp or Connections, we receive personal information about your registration and attendance from Salesforce. Additionally, Salesforce and its event co-sponsors may scan your badge at certain sessions, and any associated personal information will be shared with us. We use this information to determine if any of the Salesforce services that we resell might be of interest to you, to determine whether any of the products and services that we have developed in-house or other resources might be relevant for you, to enable us to follow up with you, and for analytics purposes.
Co-sponsors
We receive personal information about you from event co-sponsors, including information about your registration, attendance, and interactions with them (such as when they scan your badge). We use this information for a number of purposes, such as to ensure access, analyze the event, to follow up with you, and to send you marketing communications.
Service Providers
We work with third-party service providers to assist us in operating the Services, and they send us personal information about you through the course of this relationship. These third parties help us evaluate the security of our Services, detect and prevent fraud, process secure payments, verify our customers, analyze content on our Sites, perform maintenance or auditing functions, and provide marketing and development services. They also receive your personal information to ensure the usefulness, applicability and reliability of our Services and send it to us.
When we work specifically in conjunction with our third-party advertising service providers, we also receive additional personal information about you, such as your language and advertising preferences, transaction or download details, and the website or app advertising or content that lead you to our Services, as further explained in Sections 2.5 and 3.3.
Partner Program
Salesforce.org engages a number of different types of Salesforce partners, including consulting partners, independent software vendors (“ISVs”), and sponsors, who also serve the nonprofit and education communities (collectively, our “partners”). These partners can assist you in your implementation of your Salesforce subscriptions or provide you with additional applicable services and resources. When you utilize the services of these partners, we obtain (or share) personal information about you from and/or with Salesforce or the partners. This personal information includes your name, business contact details, and organization details and will be used for authentication, access, assisting you in setting up and/or personalizing your use of the Services, and overcoming technical issues.
Publicly Available Information and Sources
When you express interest in becoming a customer, apply for the Power of Us program, attend our events or webinars, or request access to the Hub, we receive and use personal information about you from publicly available sources and other resources. This personal information includes your name, job title, email address, phone number, as well as the name of the Chief Executive Officer of your organization, to determine your eligibility, validate accurate contact information, and for marketing purposes.
2.3 Usage Data
We receive and log information about your usage of our Services even if you are just visiting. We refer to this information as “usage data.” For example, when you view pages on our Sites, click on links, download information, sign into your Salesforce Account, click on a link through an email we send you, share content on social media, or visit a third-party website that includes our content, cookies (or similar technologies) or ads, we receive information about you.
This usage data includes your Internet Protocol (“IP”) address, browser information, operating system, proxy server, plug-ins, integrations, geographic location, internet service provider, mobile carrier, device information and features, search terms, the referring website, app or ad, pages visited, advertising and language preferences, and cookie information. We also receive usage data concerning the time and frequency of your use of the Sites and when you view or interact with content (e.g. different pages or links of the Sites or a blog) or advertisements (on or off our Sites, including advertisements placed by third parties on our behalf). We use usage data to operate our Services, ensure the secure and reliable performance of our Services, and provide a tailored experience, including ads.
2.4 Links
We keep track of how you interact with links across our Services, including links in emails we send you and links that appear on third-party websites or apps.
If you click on an external link from our Services, that advertiser, website operator or organization will be able to figure out that you came to them from us, along with other information associated with the ad you clicked on, such as the audience it was designed to reach. They may collect other personal information from you, such as your IP address, and send it back to us.
2.5 Cookies and Similar Tracking Technologies
Salesforce.org collects information on you as you navigate our Sites, or use information based on your navigation of our Sites (“Web Site Navigational Information”). The information is collected through the use of commonly-used information-gathering tools, such as cookies, pixels, tags, and web beacons. Information stored in cookies or similar technologies (collectively, “Identifiers”) generally includes standard information from your web browser (such as browser type and browser language), your IP address, and actions you take on the Sites (such as the web pages viewed and links clicked).
We use Identifiers to provide you with Services and content; to analyze trends and understand how our Sites and Services are used; for generating user profiles and providing tailored online experiences and advertising; and for gathering demographic and other market information about our users as a whole, as explained elsewhere in this Privacy Policy. More information about the Identifiers used on our Sites, and your choices about them, is explained below.
Cookies
Salesforce.org uses cookies to make interactions with the Sites easy and meaningful. When you visit and navigate through one of our Sites, Salesforce.org or a third party sends a cookie to your device (such as a computer or mobile device). If you choose to identify yourself to Salesforce.org, such as by responding to a promotional offer, opening a Salesforce Account, or filling out a web form, or have previously identified yourself to Salesforce.org, then cookies will be combined with other data collected from you.
We use cookies that are session-based as well as some that are persistent-based. Session cookies exist only during one session. They disappear from your device when you close your browser software or turn off your computer. Persistent cookies remain on your device after you close your browser or turn off your computer. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it will limit your use of certain features or functions of our Sites or Services. Certain users can also control the use of certain cookies in our Preference Center, as explained below.
The following describes the types of cookies we use and your choices around those cookies.
1. Types of Cookies
Salesforce.org uses the following different types of cookies.
a. Required Cookies
Required cookies enable you, and are essential, to access and navigate the Sites and related features and content. These cookies are set in response to actions by you, like a request for services, i.e., they are necessary for entering or performing a contract with you.
Examples of required cookies include those that:
• Record data for maintaining user input during a session, such as supporting online shopping cart or chat functions
• Assist with authentication and security for a single session
• Enable multimedia playback
• Help us remember your Site preferences, such as language or country
•Enable the provision of information requested by you, including from third parties
If you have chosen to identify yourself to Salesforce.org, we will place cookies containing an encrypted, unique identifier on your device. These cookies allow us to uniquely identify you when you are logged into the Sites, to enable you to use the Services and to process your online transactions and requests.
If you disable required cookies, or set your browser to block or alert you about these cookies, you may not be able to access the full functionality of our Sites and we may not be able to fulfill your requests.
b. Functional and Performance Cookies
You make choices that make your experience with our Sites better for you and allow us to understand how our users move around, use and interact with our Sites.
As such, functional and performance cookies help us remember your choices, improve your overall experience and enhance our services by giving us information about the effectiveness of our Sites, pages, operations and promotions.
For example, these cookies:
• Help us remember your language or country preference
• Help us count visits and traffic sources so we can measure and improve website performance
• Can be used to remember customizations on the web pages
• Enable you to optimize your use of the Sites after logging in
We use our own technology (under our brand or an affiliated brand name) or third parties’ technology to track and analyze usage and volume statistical information from users to provide enhanced interactions and more relevant communications, and to track the performance of our advertisements.
Salesforce.org and third parties also utilize HTML5 local storage or Flash cookies for functional and performance purposes. Flash cookies and HTML local storage are different from browser cookies in terms of how data is stored, and the amount and type of data that is stored. We also use Flash cookies to store your preferences or display content based upon what you view on our Sites in order to personalize your visit.
If you do not allow these cookies, we will not know when you have visited our Sites or be able to monitor their performance. Additionally, some or all of the enhanced functionality, personalization or customisation of the Sites may not function properly.
c. Targeting and Advertising Cookies
Salesforce.org uses cookies delivered by us, or third parties, on your devices to collect information about you, such as your browsing history and which browsers you have used to visit our Sites, in order to generate user profiles and tailor relevant marketing. This can include showing you ads for Services that we think may interest you on any devices you may use and to track the performance of Salesforce.org advertisements.
We share the information we collect or use with third parties to help create and deliver advertising personalized to you and your interests. Salesforce.org re-associates this information with other information we collect about you. If Salesforce.org is using one of its own cookie-related products on our own Sites, then a cookie related to ads will appear on our Sites under the Salesforce, Salesforce.com, or Salesforce.org name (or one of our affiliated company names).
Salesforce.org also contracts with third-party advertising networks that collect IP addresses and other information from web beacons or other technologies (see below) on our Sites, from emails and on third-party websites. Ad networks follow your online activities over time and across different sites or other online services by collecting Web Site Navigational Information through automated means, including through the use of cookies. These technologies recognize you across the different devices you use, such as desktop or laptop computers or mobile devices. Third parties use this information to provide advertisements about our Services tailored to your interests. You may see these advertisements on other websites or mobile applications on any of your devices. This process also helps us manage and track the effectiveness of our marketing efforts. Third parties, in conjunction with Salesforce.org advertising partners, provide certain features on our Sites or display advertising based upon your web browsing activity, and use Flash cookies to collect and store information, as discussed above in relation to functional and performance cookies.
If you do not allow these cookies, you will experience less targeted advertising.
2. Who sets cookies
Salesforce.org, on our own or through service providers acting on our behalf, set cookies on your devices.
Third parties also set cookies, or use other Identifiers, on your devices that we do not control. For example, if you make use of embedded third-party content, the third-party outside content vendors use cookies and other Identifiers, and are responsible for informing you about, and collecting consent where applicable to make use of, such cookies.
In addition, as noted above, we work with one or more advertising networks that use cookies to facilitate interest-based advertising on third-party websites.
3. Your choices about cookies
With the exception of cookies that are required and essential to operate our Sites and related content, for our European users, we will seek your consent before placing other important, but non-essential cookies (as discussed above) on your devices.
Your cookie consent options include the following:
a. Modify your browser settings
You can modify your browser settings to control whether your computer or other device accepts or declines cookies. These settings are generally available within your browser’s “Help”, “Tools” or “Edit” menus. If you choose to decline cookies, as noted above, you may not be able to use certain interactive features of our Sites and related content.
To learn more about how to control cookies using browser settings, see here (https://www.aboutcookies.org/)
b. Delete cookies from your browser
You can delete cookies from your browser; however, that means that any settings or preferences managed by those cookies will also be deleted and you may need to recreate them. Depending on your device, you may not be able to control tracking technologies through settings.
c. Consent or opt-out of specific cookies
When we send you emails, they might include a web beacon or similar technology (see below) that lets us know if you received or opened the email and whether you clicked on any of the links in the email. You can opt-out of marketing emails that use web beacons by clicking on the opt-out link contained within the email.
When you visit our Sites, for our European users, we will ask for your consent to use non-essential cookies. You can also specify your consent and opt-out of certain cookies that we use on our Sites by visiting our Cookie Preference Center here. You will have to opt-out for each browser and device that you use. Note that, at this time, the use of a cookie banner and related Preference Center regarding cookies and marketing opt-in, applies solely to persons residing within Europe.
To learn more about targeting and advertising cookies, advertising networks and your ability to opt out of collection by certain third parties, please visit the opt-out pages of the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1#!/) and the Digital Advertising Alliance (http://optout.aboutads.info/?c=2&lang=EN#!%2F).
To learn more about how to manage privacy and storage settings for Flash cookies, see here (https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html#117118). Various browsers may also offer their own management tools for removing HTML5 local storage.
Web Beacons, pixels, and other tracking technologies
Salesforce.org uses other technologies, including web beacons, tags and pixels, alone or in conjunction with cookies, to compile information about visitors’ usage of our Sites, applications and email interactions with Salesforce.org. Web beacons are small, clear electronic images that help deliver cookies, collect information about your use of our Sites and Services and are used by Salesforce.org to operate and improve our Sites, Services and email communications.
Log Files, IP Addresses, URLs and Other Data
As is true of most websites, we gather certain information automatically to analyze trends in the aggregate and administer our Sites. This information includes your IP address (or the proxy server you use to access the World Wide Web), device and application identification numbers, your location, your browser type, your Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your operating system and system configuration information and date/time stamps associated with your usage.
Due to Internet communications standards, when you visit or use our Sites, we automatically receive the URL of the website from which you came and the website to which you go when you leave our Sites. This information is used to analyze overall trends; to help us improve our Sites, services, and applications; and to provide our Services. For example, Salesforce.org uses IP addresses to monitor the regions from which customers and visitors navigate our Sites.
Social Media Features and Single Sign-on
Our Sites use social media features, such as the Facebook “like” button (“Social Media Features”). These features may collect your IP address and which page you are visiting on the Sites, and set a cookie to enable the feature to function properly. You may be given the option by the Social Media Features to post information about your activities on the Sites to a profile page of yours that is provided by a third-party social media network in order to share with others within your network. Social Media Features are either hosted by a third party or hosted directly on our Sites.
Your interactions with these features are governed by the privacy or cookie policies of the company providing the relevant Social Media Features. Salesforce.org also allows you to log in to certain of our Sites using sign-in services such as Facebook Connect. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign-up form.
Do Not Track
Currently, various browsers — including Internet Explorer, Firefox, Chrome and Safari — offer a “do not track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to Sites visited by the user about the user’s browser DNT preference setting. We do not currently respond to browsers’ DNT signals with respect to the Sites. Salesforce.org takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.
2.6 Your Mobile Device and Geographic Location
When you use our Services from a mobile device, in addition to obtaining usage data, we get information specific to your device that can benefit your use of and across the Services. For example, by using your IP address and geographic location, we will more easily enable your login across the Services or provide you content in your language preference. The personal information we access through a mobile device may be affected by your configuration.
2.7 Third-Party Websites or Services
We receive data when you visit or use websites or services provided by others that include our ads or cookies (or similar technologies), such as when you share or like content or engage with us through social media.
2.8 New Features
As we constantly strive to provide you with the best user experience, we will add new features to our Services that may also collect your personal information. If our new features constitute a material change in what personal information is collected or how we use your personal information, we will notify you through our Services or through the email address associated with your account and may also modify this Privacy Policy.
3. How We Use Your Personal Information
How we use your personal information depends on the type of user you are, the personal information you provide to us, and which Services you use and how you use them. We use the personal information we have about you to provide you with and personalize your use of the Services, with the help of technology, automated decisions, and inferences, so that you can make the most out of the Services. We also use your personal information for marketing and sales communications.
3.1 The Services
Operating the Services
We use your personal information to provide and personalize the Services you have requested. If you are a customer, we use your email address, phone number, and device identifiers to authenticate your Salesforce Account and Hub account, allow you access and to keep them secure, as is necessary to perform our contract with you. We also use personal information to personalize our Services (such as building a profile for you on the Hub and your device and language settings), help prevent abuse, spam, and fraud, and communicate with you about your use of the Services or related trainings, events or topics of interest we believe may be of interest to you. It is in our legitimate interests to provide you with more relevant and interesting content, and to keep our Services free of unauthorized users or unwanted content in order to provide a better experience for all of our users.
If you are an attendee at any of our events or co-sponsored events, we use your personal information for various reasons, including to grant you access, to evaluate attendance, and for marketing and analytics purposes. If you have otherwise provided your contact information for a business purpose, we will use it to discuss your interest in our Services, answer your questions or otherwise provide the information you request. It is in our legitimate interests to send you follow-up communications about our events, to analyze data about your attendance in order to understand the success of our events, and to provide you with appropriate responses and provide you with notices about our Services.
We use your personal information to allow Hub users to connect and communicate. We also use this information to enable your use of the Hub, suggest Hub content for you to view and Hub users for you to follow, and inform you about who created Hub content so you know who to connect with if interested. This use of your personal information is necessary to provide the contracted services to you.
Staying Informed
Our Services allow you to stay informed about news, events and ideas regarding topics you care about. They also inform you about the best technological tools, apps, programs, services and practices for you to use for your organization. Additionally, certain Salesforce services allow you to improve your relevant professional skills, such as Trailhead courses specifically dedicated to training you about Services for educational organizations and nonprofits. When you use our Services and Salesforce’s services that allow you to stay informed, we use the personal information you provide through your use (and inferences we make based on that information) to enable your access, recommend relevant Services and information for you (such as other relevant Trailhead courses or Hub content, as applicable), provide more information about our Services, train you about using the Services, marketing and analytics purposes, improve the Services, or contact you. It is in our legitimate interests to provide you with more relevant and interesting communications, tools, apps, services, and practices that are personalized to you, and to understand any issues with our Services in order to improve them.
3.2 Communications
We use your information to contact you through mail, email, social media, phone, text message, notices posted on our Sites, messages to your Hub inbox, or other ways through our Services including pop-ups and push notifications, where permitted by applicable law. Salesforce also uses your information to contact you, including through phone or emails, particularly in cases where they are acting as our processor, such as following up on potential customer inquiries. Both Salesforce.org and Salesforce contact you as a controller when you request information about Services or events, fill out a registration form through the Sites, or otherwise contact us. If you are located in Europe, barring an applicable legal exception, we will request your consent for marketing and sales communications by email and phone from Salesforce.org or Salesforce.com concerning our Services.
Salesforce.org and/or Salesforce will contact you to inform you about the availability and functionality of our Services, security, planned downtime, network updates or other service-related issues. Both companies also send messages to benefit your use of the Services, including about events or suggestions about related resources, apps, products or services. Both companies also use your personal information to notify you about changes to the terms and conditions of our Services, and to send you promotional messages from us or our third-party partners.
It is in our legitimate interests to provide you with appropriate responses and notices about our Services, either that you request or to inform you about features, functions, and other resources that might be of interest to you.
When the communication is a marketing, sales or non-transactional communication, you may manage your receipt of those messages by clicking on the “unsubscribe” link located on the bottom of the email. If you are a customer, you cannot opt-out of receiving messages about Service-related issues, including security and legal notices.
3.3 Marketing & Advertising
We use certain information about our users for marketing, sales and advertising communications about our Services, invitations and other forms of engagement. We use your personal information, Hub content, and preferences, as well as usage data, information about materials you have downloaded or viewed through the Sites, automated systems and inferences, to build a profile about you. Using this data, we will place you into particular marketing segments in order to better understand your preferences, determine which Services and offers are best suited to your needs, provide you with the best contact person, and personalize the messages we send to you. If you opt-in to marketing messages from our partners, or have our partner (including a co-sponsor) or Salesforce scan your badge at an event, this information will become part of your profile and we will share relevant personal information about you to enable our partners and Salesforce to provide you with the services requested or otherwise send you marketing materials.
We target ads to users both on and off our Services, including through emails, directly or through a variety of partners, and we measure the performance of these ads. We use the following personal information, by itself or in combination:
•Data from technologies on and off our Services, like cookies, web beacons, pixels, ad tags, and device identifiers, as described in Section 2.5 of this Privacy Policy;
•Information you provide directly to us (e.g., name, contact information, title, organization information, Hub profile, interest in our Services and services of Salesforce partners, and marketing preferences);
•Data from your use of our Services (e.g. pages you visit, content and links you view, click on, and download, search history, events or webinars you attend, who you follow or is following you through the Hub, participation on and content creation through the Hub, click on an ad, including as described in Section 2.3 of this Privacy Policy);
•Information we receive from the Salesforce partners in our partner program, including our ISVs, sponsors, and consultants
•Information we receive from our service providers
•Information inferred from data described above (e.g. using your marketing preferences to tailor what we send to you; using your job title to infer industry or the type of educational institution you work for; or using first names or pronoun usage to infer gender).
If you express interest in our Services, are a customer, inquire or register for an event or webinar, or otherwise contact us, we will show you ads on or off our Sites, including on social media, other web pages or through email, of Services we believe might be of interest to you. If you take an action on these ads (such as signing up for our Services), your action will be associated with your name and viewable by others, including our third-party advertisers if applicable. It is in our legitimate interests to provide you with these more relevant and interesting marketing messages and advertisements.
Please note that our customers can use our Services to target ads to you, and that activity is subject to the customer’s policies and practices. We encourage you to read our customers’ policies for more information as they apply to you (such as when you express interest in their services or enter into a transaction with them) because that customer’s policy will govern.
Information to Third-Parties
We do not share your personal information with any third-parties, including our partners or service providers, for their own advertising purposes without your prior consent except: (1) as described in this Privacy Policy; (2) hashed or device identifiers along with the interests or characteristics of the device or user; or (3) data already visible through the Services, including through the Hub. Indeed, our authorized partners who are allowed to use the Hub are specifically prohibited from soliciting business through the Hub.
However, if you view or click on an ad for us on or off our Sites, our third-party advertising providers and networks will get notified that someone visited the page that displayed the ad, and they may determine it is you through technology (e.g. through cookies). We (in conjunction with these advertising providers) will analyze this information to assess the effectiveness of the advertising campaign. Similarly, if you contact a Salesforce partner through our Services, the consultant will receive a notification that someone contacted them through or due to the Services.
3.4 Development and Research
We use your personal information to conduct service and business development, to enhance the user experience, to conduct research, and to distribute and analyze survey responses. It is in our legitimate interests to process personal data for these purposes, in order to understand and analyze any issues with our Services in order to improve them.
Service and Business Development
Our Services are dynamic and we are always looking for ways to offer you the best user experience. We use data about the use and users of our Services, as well as communications and other feedback, to conduct research and development, by ourselves or in conjunction with our service providers as applicable, to improve or offer you new services, provide you with a more user-friendly and personalized experience, drive engagement with our Services, sign up new customers, offer useful events and education, and help our existing customers connect with each other.
Research
We seek to use our technology to improve the performance of students and educational organizations and success of nonprofit organizations. We use personal information available to us to research trends and determine the best methods of implementation of our Services to ensure success. In some cases, we work with trusted service providers to conduct this research, and we mandate they adhere to procedures that protect your privacy. We publish our insights, presented as aggregated data that does not identify you, unless we have your explicit permission to identify you.
Surveys
Surveys are conducted by us and our partners, such as our co-sponsors, through our Services. Participation in the surveys is voluntary, and you have choices about what information you provide.
3.5 Technical Support
We use your personal information (including your communications) to provide you help and technical support (http://www.salesforce.org/help/), such as investigating, responding to, and resolving complaints and issues with the Services (like bugs, spam, and availability issues). This is so we can provide the Services according to our contract with you.
3.6 Aggregated Data
We use your personal information to produce, analyze, and share aggregated insights without identifying you. For example, we use your data to generate statistics about the use of our Services, including the types of customers we have and their preferences, our most popular Services and their effectiveness, who attends our events, the effectiveness of ad campaigns, or for any other business purpose. It is in our legitimate interests to aggregate information and use it in a non-personalized way to improve our offerings.
3.7 Security
We use your personal information (including your communications) if we believe it’s necessary for the security of our Services. It is in our legitimate interests to provide safe and secure services to all of our users.
3.8 Exercising Our Rights
We use your personal information to exercise our legal rights where it is necessary to do so. For example, we use your data to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our Terms of Service(http://www.salesforce.org/legal-information/terms-of-service/), Power of Us Hub Terms of Service(https://powerofus.force.com/articles/Customer_Service/Terms-of-Service), Power of Us Hub Community Guidelines(https://powerofus.force.com/articles/Customer_Service/Power-of-Us-Hub-Community-Guidelines), this Privacy Policy, and attempts to harm our users.
3.9 Complying with Obligations
We use your personal information when necessary to comply with our legal obligations. For example, we use it to carry out fraud prevention checks or comply with other legal or regulatory requirements.
4. How We Share Your Personal Information
We share your personal information with other parties as needed to provide and enhance the Services, as requested by you, or as required by law, as described further below.
4.1 The Services
Customers
If you are a customer, we share your personal information to provide you with the secure and reliable Services you have requested. We also share your personal information with Salesforce and our partners for the same reasons as further detailed below.
Hub Users
If you are a Hub user, your profile is fully visible to other Hub users. As detailed through the Hub, we share your personal information, including from your profile and through Hub content, with other Hub users so that our Hub users can connect and learn. We share your personal information with Hub users from the same organization, or other organizations, to suggest that they follow you. Beyond the required information necessary for access to the Hub (e.g. the information you input to have a Salesforce Account), and the information pre-populated in your Hub profile (e.g. your name, email address, and organizational details), you can choose the additional information you share through your profile and Hub content you publish. If you do not want this additional personal information shared with other Hub users, please do not share it.
When you post Hub content, such as through the Solution Exchange or Knowledge tab, your posts can also be viewed by everyone in the Hub. If you like or comment on a post created by another user, your activity will be visible to our Hub users who also visit or view that content, and they will be able to associate that activity with you. The audience who immediately receives notifications of your post depends on the person or group with whom you decide to share it. When Hub users follow each other, each can see that they have a new follower as well as Hub content the other person posts. When you send a direct message another Hub user, they will receive personal information about you as well as the content from you. We share the content of Hub users’ direct messages with the people you have sent them to; we do not use them for advertising purposes. If you are in a User Group, your posts will be visible to others in that group, but please note User Groups are managed through the Salesforce Success Community. Although managed by Salesforce, your membership in User Groups is available as part of your Hub profile.
Attendees
If you are an attendee, we share your personal information with our event or webinar co-sponsors, including Salesforce, if applicable or as requested by you, to ensure access, participation, and that you obtain the requested information before, during, and after the event. We will also use it to follow up with you after the event, to analyze the event, and for marketing purposes.
Users
If you have contacted us, filled out a webform, or requested information from us or our partners, we share your personal information to provide you with the Services or information requested. We also share personal information you provide through your engagement with our Services off our Sites, including through cookies placed on our third-party advertising providers’ websites or by utilizing Social Media Features. We share this personal information with our third-party advertising partners for analysis.
Depending on the Service you select, we may ask for permission to share your relevant personal information before you use such Service. For example, if you request information about or from our co-sponsor for an event, we may request that you opt-in to communications through a separate, applicable form.
Blogs
In some instances, we will share personal information about you through stories or content we publish on our website, such as Customer Stories or Hub blogs. This information will be public to users of the particular Site, and we will obtain your permission before publishing the content if it will include personal information about you. If you have initially approved our sharing your personal story or data publicly in one format including, but not limited to, a Salesforce.org video, webinar, landing page, e-book, article, social media post or Customer Story, we reserve the right to re-use, re-publish, or edit your story for the blog for marketing purposes without asking you a second time. We also will repurpose the relevant blog post into a different format without asking for additional approval.
4.2 Salesforce
We share your personal information with Salesforce in numerous ways. When you are a prospective customer, your data is shared with Salesforce who often serves as our processor and makes sales calls and other communications on our behalf. As an authorized reseller of Salesforce services, we also share your data with Salesforce to enable your use of and access to the Services and your Salesforce Account. We also share your personal information for other business reasons, including to provide you with information or access to events requested, to help determine which Services are the most appropriate for you, to analyze information about our users, and other marketing purposes. Further, while Salesforce uses your personal information on our behalf, please note that Salesforce uses it for their own purposes as well.
4.3 Our Affiliates
We work closely with our Salesforce.org affiliates in other countries, such as in Europe and Canada. We share or exchange your personal information with our affiliates including your name, contact information, geographic location, account details, billing information, and behavior about the use of our Services for customer relationship management, marketing, security, personalization, optimization, and internal reporting. For purposes of clarity, Salesforce.org and Salesforce are not affiliates.
4.4 Our Service Providers
We share personal information about our customers and event attendees with our service providers so that they are able to provide services on our behalf or ensure the quality of information provided. For example, we use service providers to process billing, secure payments, fulfill orders, optimize services, prevent and detect fraud, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, analyze information, perform maintenance or audits, provide consulting services, evaluate the effectiveness of our marketing, and perform research and development. They will have only the amount of access to your personal information as is reasonably necessary to perform the tasks on our behalf and are contractually obligated not to disclose or use it for other purposes.
We also share personal information about our users with third-party advertising agencies, ad networks, social media companies, and other websites for marketing and advertising through those companies or on those websites. Our service providers only use your personal information for ways described in this Privacy Policy and we do not share, sell, rent or trade any information with third parties for their promotional purposes other than as described in this policy.
4.5 Our Partners
As stated above in Section 2.2, from time to time, we engage a number of different types of Salesforce partners, including consulting partners, ISVs, and sponsors, who also serve the nonprofit and education communities. If a user expresses an interest in a service provided by our partner, or that we provide in conjunction with a partner (such as a co-sponsored event), we will share your personal information with that partner to enable your use of or access to those services, or otherwise communicate with that partner. We do not control our partners’ use of the personal information we share with them, and their privacy policies will govern. If you do not wish for your information to be shared in this manner, you may choose to refrain from expressing interest in or using our partner’s service.
4.6 Required by Law
We share your personal information with law enforcement agencies, courts, other government authorities or other third parties that have a legal reason to obtain your information (including with Salesforce) where we have a good faith belief that disclosure is necessary to comply with a legal or regulatory obligation (such as our nonprofit status or to comply with a subpoena), enforce our agreements with you, protect our rights or the rights or safety of any third party, or protect the security or integrity of our Service.
4.7 In the Context of a Transaction
We can share your personal information in connection with a sale, merger or change in control, or in preparation of any of these events. Any other entity that purchases us or part of our business will have the right to continue to use your data, but we will use reasonable efforts to obligate the new entity to use your personal only in the manner set out in this Privacy Policy.
5. European Users
This section discusses certain rights and information for users located in the EU, particularly those users whose personal information is governed by the European Union’s General Data Protection Regulation (“GDPR”).
5.1 Rights to Your Personal Data
In addition to accessing your personal data from within the Services, users located in the EU have certain rights and protections about the collection, sharing, and use of your personal data including as follows:
•Right to Access Your Data: You can ask us for a copy of the personal information we have about you.
•Right to Rectification/Correction: In addition to modifying your data from within your Salesforce Account or Hub account, you can also ask us to change, correct, or update your data in certain cases, especially if it is inaccurate.
•Right to Erasure/Right to be Forgotten: You can ask us to stop using or erase all or some of your personal information (if we have no legal right to keep using it).
•Right to Data Portability: You can ask us for a copy of the personal information you provided to us in a commonly used and machine-readable format.
•Right to Object or Restrict Processing: You can object to or ask us to restrict processing under certain circumstances.
For users located in the EU, please click the following link (https://app.onetrust.com/app/#/webform/aa4b517a-33e8-4060-b28a-3d4a82c8bfd7) to make a detailed request regarding these rights. If we determine that your request is in accordance with applicable laws, we will accommodate it to the best of our ability. We will also handle your request or contact you within the time required by law. If you are located in the EU, you may also contact our DPO or your local data protection regulator.
5.2 Lawful Bases for Processing
We only collect and process your personal information when we have a lawful basis for it. These lawful bases can include: (a) contract (where it is necessary for the performance of a contact with you (e.g. to deliver the Services you have requested)); (b) consent (where you have given your consent such as through opting in); and (c) our other legitimate interests. We describe our lawful bases for processing personal information in Section 3.
When your consent is the basis for us to process your personal information, you may revoke your consent at any time. Where we rely on our legitimate interests, you have a right to object. If you have questions about the lawful bases upon which we collect and process your personal information, please contact our Data Protection Officer at SFDO-DPO@salesforce.com.
5.3 Direct Marketing
We do not share personal information with third parties for their direct marketing purposes other than as described in this Privacy Policy.
5.4 Data Controllers and GDPR Representative Information
Salesforce.org and Salesforce.org EMEA Limited are both controllers responsible for the personal information we collect and process in connection with our Services regarding European residents. Salesforce.org’s GDPR representative for European residents is Salesforce.org EMEA Limited, 110 Bishopsgate, Floor 440, London, London EC2N 4AY, United Kingdom.
6. Additional Information
6.1 Accessing or Amending Your Data from within the Services
If you are a customer, you may update or change the personal information you have input into your user profile by editing your user or organization record from within your Salesforce Account. If you are a Hub user, you can amend the optional profile information or delete content you have shared by editing it or deleting it from within your Hub account. You can also remove other interactive content you have shared with the Services, such as through social media, by deleting or removing it from within that third-party service. For technical support, to update billing information or discontinue your account and have information you maintained in the Services returned to you, please see: http://www.salesforce.org/help, email support@salesforce.com or call +1 (415) 901-7010.
6.2 Salesforce Account and Hub Account Closure
If you are a customer and decide to close your Salesforce Account or allow it to expire, our retention policies are detailed in your separate agreement with us. If you close your Salesforce Account and you have a Hub account, your access to the Hub will be terminated as also detailed in your separate agreement with us. After your Hub account is terminated, your name, email address, organization information and other profile information you have provided will remain associated with your content in the Hub to other Hub users although your account may note that it is inactive. We retain your personal information after you close your Salesforce Account and Hub account as detailed in your separate agreement with us or as long as it is reasonably necessary for compliance with our legal obligations, regulatory requirements, or security purposes, to prevent or detect fraud or abuse, enforce our contractual obligations with you, fulfill your request to unsubscribe from messages, or if recovery services had been enabled.
Please note that although your Salesforce Account or Hub account may be closed or deleted, your posts, documents and other information shared with others, such as exchanged messages, will generally still be available to others if they have been downloaded or are located in another customer’s inbox or cloud service. We do not control data that other users have copied from the Services. If you are a Hub user, your profile may continue to be displayed in the Hub until the other user refreshes their cache.
6.3 Information Security
We implement physical, technical and organizational security safeguards to protect your personal information we control and process through the Services. We regularly monitor our systems for possible vulnerabilities to provide on-going availability, integrity and confidentiality of your personal information. However, no information system can be 100% secure.
6.4 International Data Transfers
We operate globally and process personal information both inside and outside of the United States. Your personal information will be transferred to, stored and processed in countries that have different laws than your home country, and are potentially less protective. We utilize legally-provided mechanisms including EU model clauses to lawfully transfer data across borders and ensure an adequate level of protection for the rights of users located in the EU based on the adequacy of the receiving country’s data protection laws. For more information on such mechanisms or to obtain a copy of such safeguards, please contact us at the contact information set forth below.
6.5 Children and Our Services
Our Services are not directed to children, and you may not use our Services if you are under the age of 18 unless we have a separate agreement with you to do so.
6.6 Contact Us
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you would like to contact us, please first email us at SFDO-Privacy@salesforce.com. You can also contact us at: Salesforce.org, Attn: Legal Department, 50 Fremont Street, San Francisco, CA 94105. If you are located in the EU, you may also contact our Data Protection Officer at SFDO-DPO@salesforce.com. If you are located in the EU and believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of your country of residence
