Skip to Footer Sign In Support Contact Us HOME BACKUP PROFESSIONAL BACKUP BUSINESS SOLUTIONS Privacy Policy February 2021 Carbonite, Inc. and its affiliates and subsidiaries (collectively “Carbonite”) respect the privacy of our customers and users. Please take time to read this Privacy Policy (“Privacy Policy”) as we believe it is important for our customers and users to understand how we collect, process and use personal data. By using the Products and Services, Websites or Portals, you consent to the data we collect and how we use and share it in accordance with this Privacy Policy. If you do not agree with the data we collect and how we use and share it, you should not use the Products and Services, Websites, or Portals. WHAT DATA WE COLLECT AND HOW WE USE IT Carbonite’s customers and users voluntarily provide us with data when they purchase or use our products and services (together, “Products and Services”) and access our websites or portals (“Websites” or “Portals”). Some of this data includes “Personal Data”, which is data that can be reasonably used to identify, either directly or indirectly, an individual or reasonably can be linked to a particular individual (“Personal Data”). Categories of information collected Purposes of use (see chart below for additional information) Sources of personal information Contact and account registration information, Name, address, email, telephone number, username and password (collectively “Account Information”) Communicate with you. Provide the services. Personalize your experience. Secure our service and users. Fraud prevention and legal purposes. You Our affiliates Others who provide information about you in connection with their use of the services. Financial and transactional information. Credit card, debit card, banking or other payment information. Provide the services Secure our Services and users Fraud prevention and legal purposes. You Third-party payment processors who collect this information on our behalf and who also have an independent relationship with you. Customer Content. Information provided by customers stored, processed, maintained or transmitted using our Products and Services. File system information such as stored file folder names, file extensions, file sizes. Provide the Services. Secure our Services and users Fraud prevention and legal purposes. You. Others who provide information about you in connection with their use of the services. Device information and identifiers. The configuration of any device registered for use in connection with the Products and Services, including any hardware delivered as part of the Products and Services (each a “Device”); also IP address; browser type and language; operating system; platform type; device type; software and hardware attributes; and unique device, advertising, and app identifier. Provide the Services. Secure our Services and users Personalize your experience. Fraud prevention and legal purposes. You. Analytics providers Cookie and tracking technologies. Connection and usage data, e.g., information about files you download, domain names, landing pages, usage activity, content viewed and accessed, dates and times of access, pages viewed, forms you complete or partially complete, search terms, uploads or downloads, whether you open an email and your interaction with email content, access times, error logs, and other similar information. Provide the Services Personalize your experience Secure our Services and users Fraud prevention and legal purposes You Advertising providers Analytics providers Cookies and tracking technologies Our affiliates Other information, e.g., any other information you choose to directly or indirectly provide to us in connection with your use of the Products and Services, Websites or Portals Communicate with you. Provide the services. Personalize your experience. Secure our service and users. Fraud prevention and legal purposes. You Others who provide information about you in connection with their use of the services. Automated Decisions. To the extent permitted by applicable law, Carbonite may collect data in an automated manner and make and use automated decisions about customers, including using machine learning algorithms, in order to provide or optimize the Products and Services, for security or analytics purposes, to display advertisements and offers based on individual preferences and for any other lawful purpose. Aggregate Information. To the extent permitted by law, Carbonite may use, process, transfer and store customer and user data in a non-personally identifiable, anonymous (or pseudonymous) or aggregated manner. We may combine such data with other information collected, including information from third-party sources. By using the Products and Services, our customers and users agree that we may collect, use, share and store anonymized (or pseudonymized) aggregated data collected through the Products and Services for benchmarking, analytics, metrics, research, reporting, machine learning and other legitimate business purposes. WHY WE USE DATA Purposes of Use Communicate with you, for example: Responding to your requests for information and provide you with more effective and efficient customer service and technical support Providing you with transactional updates and information about the Services (e.g., inform you about updates to our Services, information about your account, or information about transactions that you conduct on the Services) To provide you with marketing materials (in accordance with applicable law). In accordance with applicable legal requirements, contacting you by email, postal mail, phone, or other means for marketing purposes. Provide the Services, for example: Processing and fulfilling your requests using the services. Engaging in analysis, research, and reports to better understand how you use the Services, so we can improve them Backup, restoring, and archiving of data. Understanding and resolving crashes and other issues being reported Recordkeeping and billing. Personalize your experience, for example: Customizing the content on the Services based on your usage. Secure our Services and users, for example: Monitoring, preventing, and detecting fraud, such as through verifying your identity Combatting spam or other malware or security risks Monitoring, enforcing, and improving the security of our Services Fraud detection and prevention, defending our legal rights and compliance with the law, for example: Complying with any applicable procedures, laws, and regulations where it is necessary for our legitimate interests or the legitimate interests of others Establishing, exercising, or defending our legal rights where it is necessary for our legitimate interests or the legitimate interests of others (e.g., to enforce compliance with our Terms of Use, Privacy Policies, or to protect our Services, users, or others) The legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and specific context in which we collect it, such as: With customer or user consent, e.g., to receive marketing materials if necessary under applicable law Where the processing is necessary for the performance of a contract, e.g., to facilitate backing-up and restoring data, for archiving purposes, or to provide technical support Where necessary to comply with law Where the processing is necessary for the purposes of our legitimate interests, taking into account individual interests. Our legitimate interests include providing the Products and Services, internal record-keeping and administrative purposes and to operate, maintain and improve the Websites or Portals HOW WE USE COOKIES AND OTHER TECHNOLOGIES We use certain automatic data collection technologies such as cookies, web beacons, pixel tags and other technologies to collect data, including Personal Data, when users or customers visit the Websites or Portals, use the Products and Services or interact with us, and may share this data with our third-party marketing vendors (including for example, advertising networks and providers of external services like web traffic analysis services and analytics tools). We explain these technologies below. Cookies. Cookies are small text files placed on a computer by a web server when browsing online and are used to store user preference data so a web server doesn't have to repeatedly request this information. A user may block cookies by activating the settings on the browser that blocks all or some cookies. However, if a user blocks all cookies (including strictly necessary cookies), a user may not be able to access all or parts of our Websites or Portals. We use the following types cookies: Strictly Necessary Cookies. These cookies are required to operate our Websites and Portals. They include, for example, cookies that enable a customer to log-in to secure areas of our Websites and Portals and use e-commerce. Analytical and Performance Cookies. These cookies allow us to recognize and count the number of users visiting our Websites and Portals and see how those users navigate our Websites or Portals. This helps us to improve our Websites and Portals. Functionality Cookies. These cookies recognize a user that returns to our Websites or Portals. This enables us to personalize our content, greet the user by name and remember preferences, for example, choice of language or region. Targeting Cookies. These cookies record visits to our Websites or Portals and the links followed. We use this information to improve our Websites or Portals and ensure the advertising displayed relates to users. Web Beacons. A web beacon is a small pixel incorporated into a web page or email to keep track of activity on the page or email. A web beacon helps us better manage the content of our Websites by informing us of what content is effective. Cross-device Tracking. We may use third-party cross-device tracking. For example, a user may use multiple browsers on a single device, or use various devices, which can cause the customer having multiple accounts or profiles across various devices. Cross-device tracking may connect these various accounts or profiles and the corresponding data from different devices. GLOBAL DATA MANAGEMENT Carbonite is a global organization. Data collected by us, including Personal Data, may be transferred or accessed by Carbonite’s subsidiaries and affiliates in other countries around the world regardless of a customer or user country of residence. By using the Products and Services, Websites or Portals or by providing Personal Data to us, customers and users acknowledge and agree that Personal Data may be sent to and processed in countries outside your country of residence, including the U.S. For individuals residing in the European Economic Area ("EEA"), Switzerland or the United Kingdom ("UK"), and for Personal Data subject to EEA, Swiss or UK data protection laws, this includes transfers outside of the EEA, Switzerland or UK. The transfer to other countries shall be in accordance with applicable data protection legislation which may include an adequacy decision or appropriate safeguards under Article 46 of the General Data Protection Regulation. WHEN AND WHY WE SHARE YOUR PERSONAL DATA The California Consumer Privacy Act 2018 sets forth obligations for businesses that “sell” personal information. Carbonite does not engage in such activity based on our current understanding of the definition of sell. We may share certain personal information with other businesses or allow them to collect certain personal information through the use of website cookies, pixels, or other technologies in order to provide services to us such as analyzing our Services and advertising and marketing our Services on other sites or apps. You can control certain of these cookies through browser settings and other controls. Under Nevada law, certain Nevada consumers may opt out of the “sale” of “personally identifiable information” as such terms are defined under Nevada law. However, we do not engage in such activity. If you have questions about this, you may contact us at privacy@carbonite.com. We do not access customer stored data that is protected by our Products and Services for marketing purposes. Carbonite may share categories of information about you or your use of the Products and Services for the reasons set forth below. Such categories of information may include: Identifiers (such as name, address, email address); commercial information (such as transaction data); financial data (such as credit card information); internet or other network or device activity (such as browsing history or app usage); geolocation information, and other information that identifies or can reasonably be linked to you. Service Providers. Carbonite may share any category of data it collects, including Personal Data, with our contracted third-party service providers (“Service Providers”) in order to provide our Products and Services, Websites or Portals. We may share Personal Data with Service Providers who administer surveys and perform user analysis to better understand user needs and preferences. These Service Providers include business partners, payment and delivery services, advertising networks, analytics providers, credit reference agencies, social media companies, email distributors, marketing automation partners, customer survey companies, data storage and hosting partners, IT specialists and product developers. Legal Purposes. Carbonite may share any category data it collects, including Personal Data, as necessary to comply with law, court orders, governmental agencies, for the administration of justice, to protect vital interests, to protect the security or integrity of Carbonite’s databases, Products and Services, Websites or Portals, or to take precautions against legal liability. Sale. In the event of a merger, consolidation, or acquisition of all, substantially all or a portion of Carbonite’s business or assets, Carbonite may share data, including Personal Data. Customers and users acknowledge and agree that data, including encrypted stored data and Personal Data that Carbonite has collected, may be securely shared, disclosed and transferred to such successor or assignee. OPT-OUT OF MARKETING Customers and users can opt-out of receiving marketing and promotional communications from Carbonite by emailing optout@carbonite.com or mailing Carbonite, Inc., Two Avenue de Lafayette, Boston, MA 02111, Attn: Privacy. We will continue to process Personal Data to deliver operational and service-related communications relating to purchases, changes to Products and Services or policies, and other purposes as permitted by law. RETENTION OF DATA We may retain data, including Personal Data, for as long as necessary to deliver the Products and Services or for other lawful purposes. We may retain anonymized or pseudonymized, aggregated data indefinitely or to the extent permitted under law. YOUR RIGHTS Subject to data protection laws, customers and users may have the following rights regarding Carbonite’s handling of Personal Data. Certain information may be exempt from such requests under applicable law. We will take reasonable steps to verify Your identity when exercising these rights. To exercise these rights, you or your agent may be required to authenticate to your account or provide information contained in your account profile. Please ensure that you keep your profile information up to date and accurate so that we may verify your requests. Access. The right to access Personal Data held by Carbonite. Customers in California may request the categories of Personal Information we collect, disclose, or sell about you, the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we share personal information. Those users may also request access to or a copy of certain information we hold about You. Rectification. The right to request correction of Personal Data that is incomplete, incorrect, unnecessary or outdated. Right to be Forgotten. The right to request erasure of all Personal Data that is incomplete, incorrect, unnecessary or outdated within a reasonable period of time. Carbonite will do everything possible to erase Personal Data if a user or customer so requests. However, Carbonite cannot erase all Personal Data if it is technically impossible due to limitations of existing technology or for legal reasons, such as Carbonite is mandated by law to retain Personal Data. Restriction of Processing. The right to request restriction of processing Personal Data for certain reasons, provided Carbonite does not have an overriding, legitimate interest to continue processing. Data Portability. If requested, Carbonite will provide Personal Data in a structured, secure, commonly used and machine-readable format. Right to Withdraw Consent. If Personal Data is processed solely based on consent, and not based on any other legal basis, customers can withdraw consent at any time. Data Protection Contact. The right to contact the relevant data protection regulator regarding Carbonite’s handling of Personal Data. To exercise any of the above listed rights, email Carbonite at privacy@carbonite.com, contact customer support here or at the appropriate geographical telephone number found here, visit the following page or mail Carbonite, Inc., Two Avenue de Lafayette, Boston, MA 02111, Attn: Privacy. Carbonite will process requests in accordance with applicable law and within a reasonable period of time. California law provides California residents with the right to not be discriminated against (as provided for in applicable law) for exercising these rights or their right to opt-out of sales of personal information. Please note that certain information may be exempt from such requests under California law. Under California’s "Shine the Light" law California residents have the right, twice in a calendar year, to request and obtain from Carbonite information about Personal Data Carbonite has shared, if any, with other businesses for their own direct marketing uses. Carbonite does not currently share your Personal Data with other businesses for their own direct marketing uses. CARBONITE AS A DATA CONTROLLER AND PROCESSOR Carbonite, Inc. acts as a data controller when we collect and process Personal Data for Carbonite’s legitimate interests, such as analyzing user interaction with our Websites or processing a customer credit card payment. Carbonite, Inc. acts as a data processor when we provide Products and Services to our customers, such as remote troubleshooting technical support. When acting as a data processor, Carbonite will only process Personal Data in accordance with customer instructions and this Privacy Policy. Carbonite, Inc.'s affiliates or subsidiaries may also act as data controllers or processors to the extent customers purchase Products and Services from those entities or Personal Data is shared with those entities. DO NOT TRACK Carbonite belongs to advertising networks that may use browsing history across participating websites to show interest-based advertisements. Our Products and Services do not recognize if a browser sends a “do not track” signal or similar mechanism to indicate the wish not to be tracked or receive interest-based advertisements. SECURITY Carbonite and its global third-party cloud storage providers have reasonable and appropriate technical and organizational security measures in place to protect against unauthorized processing, loss, misuse and alteration of Personal Data under its control, including: (a) pseudonymization (such as where data is separated from identifiers so that linkage to an identity is not possible without additional information that is stored separately) and encryption, (b) ensuring the ongoing confidentiality, integrity, availability and resilience of systems and services used to process Personal Data, and (c) ensuring a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational security measures. We cannot, and we do not believe that anyone can, genuinely guarantee or warrant absolute security of Personal Data disclosed or transmitted via the Internet to us or a third-party. Absent Carbonite’s gross negligence, customers and users agree to not hold Carbonite responsible for the theft, destruction, loss, damage or inadvertent disclosure of Personal Data or other data provided to Carbonite. LINKING The Websites and Portals may contain links to third-party websites that Carbonite does not control or maintain. Carbonite is not responsible for the privacy practices employed by these third-party websites. Carbonite encourages users to read the privacy statements of such other websites before submitting any Personal Data. REGARDING CHILDREN Carbonite does not knowingly collect or distribute any Personal Data from children under 13 years old. If a child under 13 has provided Carbonite with Personal Data, the parent or guardian of that child should contact Carbonite immediately at privacy@carbonite.comto delete this Personal Data. PRIVACY SHIELD FRAMEWORKS EU-U.S. Privacy Shield. Carbonite has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Privacy Shield Framework and its Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement and Liability. Carbonite's certification under the Privacy Shield applies to all Personal Data subject to this Privacy Policy and transferred from the EEA to the U.S. Carbonite is responsible for the processing of Personal Data it receives and subsequently transfers to a third-party acting as an agent on its behalf. Carbonite complies with the EU-U.S. Privacy Shield Principles for all onward transfers of Personal Data from the EEA, including the onward transfer liability provisions. U.S.-Swiss Privacy Shield. Carbonite has certified to the U.S. Department of Commerce that it adheres to the U.S.-Swiss Privacy Shield Framework and its Principles of Notice, Choice, Onward Transfer, Security, Data Integrity, Access and Enforcement. Carbonite's certification under the Privacy Shield applies to all Personal Data subject to this Privacy Policy and transferred from Switzerland to the U.S. Carbonite is responsible for the processing of Personal Data it receives and subsequently transfers to a third-party acting as an agent on its behalf. Carbonite complies with the U.S.-Swiss Privacy Shield Principles for all onward transfers of Personal Data from Switzerland, including the onward transfer liability provisions. Dispute Resolution. Disputes within the jurisdiction of the EU-U.S. or Swiss Privacy Shield Frameworks should first be referred to privacy@carbonite.com. Carbonite has further committed to refer unresolved privacy complaints under the EU-U.S. and Swiss Privacy Shield Principles to JAMS, Carbonite’s independent recourse mechanism. If a timely acknowledgement of a complaint is not received, or if we have not satisfactorily addressed a complaint, please contact or visit the JAMS website at https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services of JAMS for Privacy Shield complaints are provided at no cost to the complainant. If neither Carbonite nor JAMS resolves the complaint, customers and users may pursue binding arbitration through the Privacy Shield Panel. To learn more about the Privacy Shield Panel, visit here. Carbonite is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Without prejudice to any other administrative or judicial remedy, customers and users may always lodge a complaint with the relevant data protection supervisory authority in their resident country. Conflict. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. or Swiss Privacy Shield Principles, the Privacy Shield Principles shall govern according to jurisdiction. To learn more about the Privacy Shield program, and to view our certifications, please visit https://www.privacyshield.gov/. While Carbonite is certified to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks and the commitments they entail, Carbonite does not rely on the EU-U.S. Privacy Shield Framework as a legal basis for transfers of Personal Data in light of the judgment of the Court of Justice of the EU in Case C-311/18. CHANGES TO CARBONITE'S PRIVACY POLICY As laws and best practices evolve, this Privacy Policy will likely change. By continuing to access our Websites and Portals or using our Products and Services, users and customers acknowledge and accept the Privacy Policy as revised. We encourage You to periodically review this Policy to stay informed about how we collect, use and disclose Personal Data. If we update this statement, the new statement will be posted to the website ten (10) days prior to the changes taking effect. If we make a material change to the Privacy Policy, you will be provided with appropriate notice in accordance with legal requirements. At such time, Your continued use of the Services after notice of posting or notice of such changes constitutes Your agreement to this latest version of this Policy and any future revisions. CONTACT CARBONITE To contact Carbonite’s Data Privacy Officer, or questions related to this Privacy Policy generally, please email privacy@carbonite.com. You can contact Carbonite’s representative for the UK and the EEA at DPO@opentext.com. Contact us Resources GDPR Center Partner with Carbonite Log in to our Partner Portal About Carbonite About OpenText Careers Blog News Region Selector Terms of use Privacy policy Safety Corporate responsibility Sitemap Agent ©2021 Carbonite, Inc. All rights reserved. Our website uses cookies to give you the best online experience and provide functionality essential to our services. By clicking 'Close' or by continuing to use our website, you are consenting to our use of cookies in accordance with our Privacy Policy. Close