Table of Contents
- 1. Collection of Personal Data
- 2. Additional Disclosures for Individuals in the United States
- 3. Minors' Data
- 4. Where We Collect Your Data
- 5. Disclosure of Information
- 6. Global Transfer of Information
- 7. Your Rights
- 8. Instructions on How to Exercise Your Privacy Rights
- 9. Complaints
- 10. Changes
- 11. Contact Us
Arduino Privacy Policy
This Privacy Policy describes how Arduino S.r.l. ("we", "us", "Arduino") collects, uses and discloses your personal data (also called personal information) when you use Arduino products and services. Arduino is wholly owned by Qualcomm Technologies, Inc., a subsidiary of Qualcomm Incorporated (together with other subsidiaries of Qualcomm Incorporated, the "Qualcomm Group"). For more information about how the Qualcomm Group processes personal data, please read Qualcomm'sPrivacy Policy.If you are a resident of the United States, including California, please see Section 2, "Additional Disclosures for Individuals in the United States" for more information.
Arduino processes personal data of individuals who are under the age of 18 ("minors") to provide our products and services to those individuals as described in more detail in this Privacy Policy. For more information on how we process the personal data of minors and their parents or legal guardians, please see Section 3, "Minors' Data" below.
Arduino collects personal data in a variety of contexts, as detailed inSection 1, "Collection of Personal Data" below. These include when you (i) create an Arduino Account, (ii) use our services and products available on the websitewww.arduino.cc ("Website") or opt-in to the use of cookies on our Website (strictly necessary cookies will collect personal data without your consent), (iii) contact us via email, phone call or messaging, (iv) use our apps such as the Arduino Science Journal and Arduino IoT Cloud Remote ("Apps"), (v) interact with us through our social media pages Facebook (Meta), Instagram (Meta), Threads (Meta), X, TikTok, Reddit, YouTube, LinkedIn ("Social Media Pages"), or (vi) purchase products or services through our e-commerce store ("Store"). Please note that we offer different types of Arduino accounts depending on your age and the functionality that you use. We refer in this Privacy Policy to Arduino accounts of users under the age of 14 as "Junior Accounts", Arduino accounts of users who are 14 to 18 as "Restricted Accounts", and Arduino accounts for users over 18 as "Regular Accounts".
Arduino S.r.l., with its registered office in via Andrea Appiani 25, 20900 Monza (MB) - Italy (privacy@arduino.cc), is the data controller of your personal data (except as indicated otherwise below).
1. Collection of Personal Data
The table below identifies the purposes for which we process personal data, the corresponding categories of personal data processed for each purpose, our legal basis (and special condition) for processing and how long we retain your personal data. In the scenarios listed in the table below, when we request your personal data to take pre-contractual steps, perform a contract with you or comply with a legal obligation, that data is required in order for us to fulfil your request or our obligations. In such cases, you are obliged to provide your personal data, otherwise we will not be able to perform the contract with you.
Information about Junior Account and Restricted Account creation, and our management of those accounts, is provided inSection 3, "Minors' Data" below.
| Scenario/ processing purpose | Categories of data | Legal basis and special condition for processing | Third parties and others with whom we share this data | Retention |
|---|---|---|---|---|
| User account registration and management of Regular Accounts for users over 18 years of age - In order to allow you to create and use an account. Arduino will process your data in order to allow you to create and use an account on the Website, whether or not you make a purchase in the Store. In particular, the creation of a Regular Account allows you to use different functionalities of the Website and of the Apps. | Customer Records: Your username, email address and other profile information such as your interests. If we deactivate your account, we retain your username within the Forum and Project Hub if you have posted/commented within them. | The legal basis for this processing is the performance of a contractual/pre-contractual request by you. That contract is for the provision of the Arduino services, in accordance with the applicable terms and conditions. The legal basis for additional storage after deactivation of your account is Arduino's legitimate interest in ensuring and maintaining the integrity of the Forum and Project Hub. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period of your data, in addition to the period necessary to process your order or to perform another service available on the Website, will be equal to the period of activity of your account. If you do not access your account for 24 months, we will deactivate it. When creating an account, if you do not confirm within 1 month via the link sent to you, your Arduino account will be deleted. Without your details we cannot give you access to the Arduino services described above. If you cancel your account or we terminate it, we delete your account but retain information relating to your account as explained in this Privacy Policy. |
| User communication - In order to send essential information concerning your account, your use of Arduino products and services. We use your email to send you important information regarding the status of your account (for instance, if some of the services you have signed up for are about to expire or if your account is about to be closed according to the terms and conditions of the service you accepted, within the limits described), the security of Arduino products and services or changes to this Privacy Policy. | Customer Records: Your username, email address, (for Restricted Account and Junior Account users). | The legal basis of this processing is performance of the Terms of Service. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period of data in connection with this processing is equal to the period necessary to carry out the communications described under purposes of processing. |
| Product and service provision - In order to provide you with Arduino services and products. Through our Website, to give you information and assistance for the activation of your account and on Arduino services, or support for services on third party platforms that you may access through your Arduino account. The processing of your data is necessary in order to give you access to the Website and its functionalities, to respond to your requests and to assist you when you use our products and services. | Customer Records: Your Tax Code (if applicable), your residence address and your invoicing data. | The legal basis for this processing is the performance of a contractual/pre-contractual request by you. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period of your data is equal to the period of activity of your account for the use of Arduino services according to the terms and conditions of use you have accepted, within the limits described. |
| Online community participation - In order to allow you to request information and to interact with other users (for users with Regular Accounts only). Through the Forum and the "community" functionalities of Arduino, which you may access upon specific request, you may participate in discussions, request information and leave comments or other information relating to your experiences. This information may be viewed by other users. | Customer Records: Your username, your Account and, if you decide to make such data visible to other Arduino users, we use information relating to your job title and other profile information that you wish to share with Arduino community and, upon your request, with the public. To allow you to be published on Arduino Website as a "Certified User", we may use your username. | The legal basis of this processing is the performance of the terms and conditions of use for Arduino services. In the event of deletion of your Arduino account, we will retain your username in the Forum and Project Hub. The legal basis for this further retention and processing is Arduino's legitimate interest in ensuring and maintaining the integrity of the Forum and Project Hub. | If you use the Forum or Project Hub, Arduino Cloud, Arduino Day, Arduino Blog and the Social Media Pages of Arduino accessible through our Website, you may interact with other users, and we will share your data with other users, to whom your comments, your position and the other information you would like to share will be visible. Service providers outside of the Qualcomm Group operating as data processors. | The retention period of your data is equal to the period of activity of your account for the use of Arduino services according to the terms and conditions of use that you accepted and within the limits described. After your account is cancelled or terminated we delete your account and de-identify your username within the Forum and Project Hub (if you have posted/commented within them). Posts remain in Forum and Project Hub for 5 years, without prejudice to your right to object at any time and/or to request the deletion of posts as well. If your Arduino account is deactivated, after 24 months without activity, your username will be retained within the Forum and Project Hub if you have posted/commented within them, for 5 years, without prejudice to the right to object at any time and/or to request the deletion of usernames as well. After this period, the username will be deleted and the post de-identified in the Forum or in Project Hub. |
| Certification - In order to enable you to obtain an Arduino Certification. We will process your information when you submit a purchase order for the Arduino Certification Program and to enable you to obtain the Arduino Certification. | Customer Records: Your Tax Code (if applicable), your residence address and your invoicing data. | The legal basis for this processing is the performance of the agreement to which you became a party from the moment when you accept the terms and conditions of the Arduino Certification Program. We retain your Certification for 5 years after issuance. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The period of retention of your data, for this purpose, is equal to the period necessary to process your order, carry out the certification process and issue your Certification. We will retain your data until the expiration of your Certification (however, if you also have an account, the period of retention of your data will be equal to the period of activity of your account, according to the terms and conditions of use that you have accepted, within the limits described therein). Without your data we will not be able to process your order and provide you with the requested service. |
| In order to enable the use of Arduino Education products and Arduino Cloud. When you purchase an Arduino Education product, we process your data in order to process your purchase order, as well as to enable the use of these services on your terminal and on the terminal of the users you wish to involve in the educational program. | Customer Records: Your first name and last name, email address, residence or work address, as well as invoicing data. Personal data of users under the age of 14 will be processed as described inSection 3, "Minors' Data. | The legal basis of this processing is the need to fulfil the agreement you entered into with us when you ordered an Arduino Education product. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period in connection with this purpose is equal to the period during which you or your team uses the educational package. Without your data, we cannot process your purchase order and provide you with the educational services of Arduino Education. |
| In order to allow Arduino to release the software to which you are a contributor. Arduino allows you to make available to the developers' community the result of your development work within the Contributor License Agreement program. | Identifiers: Your GitHub username, the data of your account, your first name and last name, the email and the personal data you filled into the header of the source code and in the documents of the license. | The legal basis of this processing is the need to fulfil the contractual obligations in accordance with the terms and conditions that you have accepted. If your work is part of other works released by third parties and the terms of the license provide for the publication of your data as author/co-author, the legal basis of the processing is the legitimate interest of Arduino in pursuing its corporate organizational purposes to promote the open source community, which considers, and is compatible with, your rights and interests as developer of open source programs and as a community member. | Service providers outside of the Qualcomm Group operating as data processors. | The retention period in connection with this purpose is equal to the period during which your software is available on the Arduino sharing platform. Without your data we cannot release your work within the Contributor License Agreement program. If your work is part of other works released by third parties and the terms of the license provide for the publication of your data as author/co-author, the retention period is equal to the period during which the software, in which your work is embedded, is available on the Arduino sharing platform. If you want to erase your data from the published licenses, you shall exercise your moral rights as author of the software, compatible with the terms of the license you and the next contributors used. |
| In order to prevent or assess unlawful conduct or to protect and enforce our rights. For instance, we may use your data to prevent or prosecute infringements, including of our-and third parties'-intellectual/industrial property rights, or to prevent or prosecute cybercrimes or crimes committed through the internet. | All categories as described in this table. | The legal basis of this processing is the legitimate interest of Arduino to protect its rights and to prevent criminal offences. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. Where we believe we have to do so in order to comply with an order from the judge or from an authority, or to comply with statutory obligations or in order to protect us or third parties in court, we may disclose your data. | The retention period of your data is equal to the time reasonably necessary to enforce our rights from the moment we become aware of the offence or of its potential commission. |
| In order to allow you to participate in our surveys. We will process your personal data to allow you to participate in a survey aimed at improving our products and services, through the completion of an online form. | Identifiers: Your first name and last name and contact details (e-mail). | The legal basis of this processing is consent, when we ask for your consent and you consent by responding to our survey. In other cases, the legal basis of this processing is the legitimate interest of Arduino to improve its products and services by obtaining user feedback. | Service providers operating outside of the Qualcomm Group as data processors. | The data retention period is equal to the duration of the survey, after which response data will be de-identified, unless your consent is requested for further storage and publication of the survey results on our Store. |
| To enable you to subscribe to the newsletter. Subject to your consent, you may be contacted by Arduino by e-mail or other electronic communication tools in order to send you the newsletter, as well as following your subscription to the same by entering your e-mail address or following your subscription to a waiting list for the launch of a new product. | Identifiers: Your email address and your first name and last name. Internet and Other Electronic Network Activity Information: Browsing data and Website behavioral information to personalize the newsletter, provided that you have previously authorized processing of browser and Website behavioral information. | The legal basis for this processing is your consent, which in the case of newsletter subscription consists of entering your e-mail address. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The data retention period is 24 months after your last interaction with us by accessing our Website, by your consent to the use of cookies, or by interaction with our newsletter. |
| To send you personalized education and professional newsletters and subscribe you to a waiting list. | Identifiers: Your email address and your first name and last name. When you subscribe to a waiting list, we may ask you, on an optional basis, for some of your additional personal data (such as your first name and last name or your country) for Arduino's internal statistical purposes. Internet and Other Electronic Network Activity Information: Browsing data and Website behavioral information to understand better which products and services you prefer, provided that you have previously authorized such processing. | The legal basis is always your consent, which you can express by choosing to subscribe to such newsletters and by ticking the corresponding checkbox. When we subscribe you to a waiting list, the legal basis for the processing of such personal data is our legitimate interest in ensuring you are notified when a product is available so that you may consider buying it. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The data retention period is 24 months after your last interaction with us by accessing our Website, by your consent to the use of cookies, or by interaction with our newsletter. When we subscribe you to a waiting list, the retention period is as set out above. |
| Training. We may offer training or other services to the employees, workers and agents of our business customers. | Identifiers: Your email address and your first name and last name, position, employer, time zone, country and purchased products. | The legal basis for this processing is our legitimate interest in using your personal data in order to perform the relevant contract with our business customer(s) and thereby abide by our contractual obligations. | We may need to disclose personal information relating to the use of our training and other services to the relevant business customer. Service providers outside of the Qualcomm Group operating as data processors. | The data retention period is 5 years. |
| For Arduino's profiling purposes. We may carry out profiling in order to better understand users of Arduino services, organise (segment) users into groups that share similar interests and characteristics, and use those groups and the personal data of group members to build audiences for our campaigns and to deliver tailored marketing communications to you (where you have consented to receive such communications) as well as more relevant online advertising or other content (in accordance with your consent to cookies) | Customer Records: Your username, email address and other profile information, including your place of residence and interests. Internet and Other Electronic Network Activity Information: Browsing data and Website behavioral information to understand better which products and services you prefer, provided that you have previously authorized such processing. | The legal basis for this processing is:
| Service providers outside of the Qualcomm Group operating as data processors. | The retention period of your data is 24 months after your last interaction with us by accessing our Website or using your account, by your consent to the use of cookies, or by interaction with marketing communication. |
| For sending Arduino marketing communication. After having obtained your consent, or where otherwise permitted by law (such as if you are a customer and we have informed you of your right to opt-out of marketing) you may be contacted by Arduino via email with information or promotional content regarding Arduino's services or selected third party products or services. | Identifiers: Your email address, telephone number and your first name and last name. | The legal basis for this processing is:
If Italian law does not apply, the legal basis is our legitimate interest in promoting our products and services in order to grow our business. | Service providers outside of the Qualcomm Group operating as data processors. | The retention period of your data is 24 months after your last interaction with us by accessing our Website, by your consent to the use of cookies, or by interaction with marketing communication. |
| In order to provide you with the products and services you purchased and to send you communications in connection with your purchase order or with your payments. We will process your data to process your purchase orders. We may send you emails regarding your account or your purchase of Arduino products and services, or the payments made through our Website. | Customer Records: Your email address, your Tax Code (if applicable), your residence address and your invoicing data. | The legal basis of this processing is the performance of the agreement to which you became party from the moment when you accept the Store's general terms and conditions of sale and the fulfilment of pre-contractual measures that you may have requested. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period of your data is equal to the period required to process the purchase order (however, if you also have an account, the retention period of your data is equal to the period of activity of your account for the use of Arduino services, according to the terms and conditions of use that you have accepted, within the limits described). Without your data we cannot process your purchase order and provide you with the products and services requested. |
| To provide you with necessary after-sales support, such as to handle returns and in compliance with applicable product warranty laws. Arduino will use your information to provide you with assistance, to manage the return and/or repair of products you purchased from the Store in accordance with applicable laws and the Store's general terms and conditions of sale. | Customer Records: Your username and email address. | The legal basis for this processing is to comply with legal obligations. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period is the time required to fulfill the obligations required by applicable law (in particular consumer protection law). |
| In order to let you interact with customer care operators. We will assist you in case you need help using Arduino products and services. We might also collect feedback provided through surveys submitted to the customer regarding customer assistance. | Customer Records: Your username, email address or telephone number, as well as your first name and last name and/or postal address. | The legal basis of this processing is the performance of the agreement which you entered into with Arduino when you accepted the terms and conditions of use of Arduino services and compliance with legal obligations relating to statutory due warranties and consumer assistance. If we collect feedback, the legal basis for this processing is your consent. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The data retention period is equal to the activity period of your account, according to the terms and conditions of use that you accepted, within the limits described. |
| To update you on your shopping cart. When you create an account, Arduino may remind you that your shopping cart on the Store contains products. | Customer Records: Your email address and the content in the shopping cart associated with your account. | The legal basis for such processing is Arduino's legitimate interest in keeping you updated about your shopping cart. | Service providers outside of the Qualcomm Group operating as data processors. | The retention period of your data for this purpose is 24 hours from when you left the shopping cart without completing your purchase. |
| To update you on the availability of a product. Following your explicit request, Arduino will process your personal data in order to update you on the availability in the Store of the product you requested which is 'Out of Stock'. | Customer Records: Username and email address. | The legal basis for this processing is the performance of a contractual/pre-contractual request by you. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The storage period of your data is equal to the period necessary to process the request. |
| To ask you to review products you have purchased. After 10 days from the shipment of the product, we may send you an email asking you to review the product(s) you have purchased. | Customer Records: Your first name and last name, email address and order information. | The legal basis for such processing is our legitimate interest in improving our products and services. | Service providers outside of the Qualcomm Group operating as data processors. | The retention period of your e-mail address for this purpose is equal to the period necessary to send you the review request. |
| To publish your review on our Website. Our policy is to avoid publishing any reviews that contain street addresses or images depicting identifiable natural persons. | Customer Records: Your comments, if any, your first name (and the first letter of the surname you have provided us with) and any image you share with us. | The legal basis for this processing is your express consent, which you can give by clicking on the 'Done' button at the end of the review. | Service providers outside of the Qualcomm Group operating as data processors. | The data retention period is 5 years from when you provide your consent. |
| To obtain information about your use of our Website and Apps (except Junior Account users). Arduino uses this information solely in order to allow navigation on its Website and to process the operations normally relating to the use of the Website. We may also analyze how often you use the App and where you downloaded it from. We use third party tools to mask your IP address and analyze use of our Website at the country (and not individual) level. | Internet and Other Electronic Network Activity Information: We may collect data about the type of device you are using, or the version of the operating system of your computer or browser. Internet and Other Electronic Network Activity Information: For unregistered users, we collect data related to how the Website is used in a de-identified form that does not in any way allow, even in combination with the Unique Device Identifier (UDID), the MAC address, the IMEI or IMSI codes or other customer codes, to trace directly or indirectly back to your identity. If you give us your explicit consent to use your data at the moment of registration, we connect your browsing data collected in a de-identified form in the previous 30 days to your identity. This category of data includes IP addresses or domain names of the devices used by users connecting to the App, the Uniform Resource Identifier (URI) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code given by the server indicating the status of the response (e.g., successful, error), the sections of the Website visited, the type of device used, the country which you connect from and other parameters relating to the operating system and the computer environment of the user. | The legal basis of this processing is the legitimate interest of Arduino to communicate with the public through electronic networks, such as for data processing subject to Italian or other data protection law for which consent is not required in relation to the data processing performed by means of necessary cookies. The legal basis is consent if you consent to allow us to link your data and, in relation to data processing subject to Italian data protection law for the data processing occurring through profiling cookies. | We use third-party tools for these purposes and those third parties will receive your data: please consult the document available here for indications of such third parties or see our cookie policy. Service providers outside of the Qualcomm Group operating as data processors. | The retention period of the information that could potentially allow the identification is 30 days from access to the Website. |
| To obtain information about your use of our Website (except Junior Account users). Arduino uses this information solely in order to allow navigation on our Website and to process the operations normally relating to the use of the Website. We may analyze where you navigated from to reach our Website. We use third party tools to mask your IP address and analyze use of our Website at the country (and not individual) level. | Geolocation Data: We collect geographical location data. | The legal basis is consent if you consent to allow us to collect your data. | We use third-party tools for these purposes and those third parties will receive your data: please consult the document available here for indications of such third parties or see our cookie policy. Service providers outside of the Qualcomm Group operating as data processors. | The retention period of the information that could potentially allow identification is 30 days from access to the Website. |
| In order to allow you to report a problem and/or violations of applicable law or to make a report and subsequent handling. We will process your personal data when you report a violation of the terms and conditions of the Website as well as violations of applicable law, such as copyright violations. We will process your data if a third party reports to us that a violation has been committed by you, in order to assess it. | Identifiers: Your first name and last name, e-mail address and the information you provide us in the report. | The legal basis for this processing is Arduino's legitimate interest in protecting its rights and preventing unlawful acts, as well as in some cases (such as copyright infringement or reporting certain content), to comply with legal obligations. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. Where we believe we have to do so in order to comply with an order from the judge or from an authority, or to comply with statutory obligations or in order to protect us or third parties in court, we may disclose your data. | The retention period is equal to the relevant statute of limitations period, it being understood that the reports and the related management process may be retained according to the ordinary statute of limitations. |
| Legal and financial obligations. To comply with obligations under applicable law, such as product safety and compliance; in legal proceedings, responding to legal authorities, or if we believe it is necessary to protect the rights, property, or safety of Arduino or the Qualcomm Group, our users, the public, or others; as necessary to obtain advice or otherwise protect and manage our business interests. | Commercial Information, such as your business contact information, the business you represent, products purchased or supplies provided, financial information, course of conduct with you or your employer; other categories set forth in this table as relevant. | Legal Obligation of the relevant European jurisdiction(s); otherwise, our Legitimate Interests in complying with applicable legal obligations in order to protect our business and our reputation | Where we believe we have to do so in order to comply with an order from a judge or an authority, to comply with statutory obligations or in order to protect us or third parties in court, we may disclose your data. | The retention period is equal to the relevant statutes of limitations period. |
| Security Protection. To detect, investigate and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Qualcomm and others. Safety: to protect safety of our stakeholders and visitors | Identifiers: such as visitor registration information, your images that might be captured by our cameras installed around our facilities and your network activities when you connect your devices to Qualcomm-managed IT systems. Sensitive Personal Information: health data in the event of a medical emergency. | The legal basis for this processing is Arduino's (or a Qualcomm Group entity's) legitimate interest in protecting our rights and assets, interests of stakeholders and our reputation Where health data is processed, that is special category information and the legal basis and special condition for this processing are your vital interests. | Qualcomm Group entities, any relevant governmental agency or a judicial authority. | The retention period is equal to the ordinary statute of limitations applicable to the relevant document (such as a security report or safety report). |
| In order to manage your administrative position properly. We process your data (including account information) for accounting, administrative and tax purposes, directly related to the business of Arduino as required by the applicable legislation. | All categories as described in this table. | The legal basis of this processing is compliance with statutory obligations. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. | The retention period is equal to that required by law (in particular, by tax, anti-money laundering, banking and public security law). |
| In support of corporate transactions and other operations. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financing and related to the administration of our general business, accounting, auditing, compliance, recordkeeping and legal functions. | All categories as described in this table. | The legal basis for this processing is Arduino's legitimate interest in expanding and reorganizing its business and that of the Qualcomm Group, and to efficiently manage business in compliance with the law, in order to foster continued growth. | Contract parties, any relevant governmental agency or a judicial authority. | The retention period is equal to the ordinary statute of limitations applicable to the relevant contract, or the mandatory retention period under law such as for accounting and similar records. |
2. Additional Disclosures for Individuals in the United States
We are providing the following additional disclosures for individuals in the United States to describe: (1) Arduino's "sale" or "sharing" of personal information practices under applicable United States privacy laws, such as the California Consumer Privacy Act ("CCPA"); and (2) our use of "sensitive personal information" as that term is defined by the CCPA. For more information on the rights you may have under the CCPA and other United States privacy laws, including the right to opt out of "sales" and "sharing", please seeSection 7, "Your Rights" below.
Sales, Sharing of Personal Information and Targeted Advertising under Certain United States Privacy Laws
Certain privacy laws include additional requirements for companies that are deemed to be "selling," "sharing" or engaging in targeted advertising, as those terms are used under applicable laws. California privacy laws define a "sale" as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and "sharing" broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we identify below the categories of personal information that we have "sold," "shared" (as defined by the CCPA) or used for targeted advertising in the prior 12 months. We also describe the third parties who received or may receive the personal information and the business or commercial purpose for the sale or sharing. We do not knowingly sell or share the personal information of minors under the age of 18.
| Category of Personal Information | Business or Commercial Purpose for Sale or Sharing | Category of Third-Party Data Recipient |
|---|---|---|
| Identifiers, such as unique personal identifier, online identifier, Internet Protocol address, or other similar identifiers. | This category of personal information may be sold or shared for analytics, marketing, advertising and cross-context behavioral advertising. | We may have shared or sold such personal information with third parties engaged in the provision of advertising and marketing services and third parties that operate the cookies that run on our Website. |
| Internet and Other Electronic Network Activity Information, such as network usage, browsing history, search history, and information regarding a consumer's interaction with a website, application, or advertisement. | This category of personal information may be sold or shared for analytics, marketing, advertising and cross-context behavioral advertising. | We may have shared or sold such personal information with third parties engaged in the provision of advertising and marketing services and third parties that operate the cookies that run on our Website. |
| Geolocation data, such as city-level location (e.g., which city the user may be located in). | This category of personal information may be sold or shared for analytics, marketing, advertising and cross-context behavioral advertising. | We may have shared or sold such personal information with third parties engaged in the provision of advertising and marketing services and third parties that operate the cookies that run on our Website. |
| Inferences drawn from any of the information identified above in this table, such as preferences derived from marketing interactions. | This category of personal information may be sold or shared for analytics, marketing, advertising and cross-context behavioral advertising. | We may have shared or sold such personal information with third parties engaged in the provision of advertising and marketing services and third parties that operate the cookies that run on our Website. |
Use of Sensitive Personal Information under Certain United States Privacy Laws
Where required by law, we will limit our use of sensitive personal information (including sensitive data, as defined under applicable laws) to certain purposes, including performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services; prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information; resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those responsible for those actions; ensure the physical safety of natural persons; verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by Arduino; and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by Arduino. We generally do not collect sensitive personal information for the purpose of inferring characteristics about you.
3. Minors' Data
Please read the following information regarding the processing of personal data of minors under 18 years of age (a "minor" or "minors").
Arduino requires different types of registration (i.e., account creation) on our Website, depending on the age group, in order to better protect browsing and use of services through our Website by users under 18. Minors (including students) under the age of 18 may create an account by selecting unique access credentials and getting parental or legal guardian consent.
When account holders under the age of 14 use Arduino services, their browsing data will not be visible to Arduino. More details are below. Once a minor reaches the age of 14, his or her account will be upgraded to a Restricted Account with the functions and features associated with that type of account.
The Operator collecting information about minors is Arduino S.r.l, with contact information as disclosed at the beginning of this Policy.
- Junior Accounts (for minors under the age of 14)
Information Collection
The table below identifies the purposes for which we process personal data of minors under 14 (including students) and their parents/legal guardians, the corresponding categories of personal data processed for each purpose, our legal basis (and special condition) for processing and how long we retain the personal data. The personal data collected within the Junior Account may be considered personal information (or similar term) in certain jurisdictions, including the United States under the Children's Online Privacy Protection Act ("COPPA"):
| Scenario/ Processing purpose | Categories of data | Legal basis and special condition for processing | Others with whom we share this data | Retention |
|---|---|---|---|---|
| To create a Junior Account on our Website, including to obtain consent from the minor's parent or legal guardian, and to provide our services to minors and their parents and legal guardians (as applicable). | Customer Records, including the minor's date of birth, a randomly generated username and avatar, the Junior Account password and the email address of the parent or legal guardian; a unique identifier assigned by the Arduino platform ("Unique ID") and other personal data stored with the Unique ID; any personal data that the user uploads to their projects, including, if the minor is a student, to the Arduino classroom environment. Internet and Other Electronic Network Activity Information, IP address. | Performance of a contractual/pre-contractual request by the minor with the parent's or legal guardian's consent. That contract is for the provision of the Arduino services, in accordance with the applicable terms and conditions. | Service providers outside of the Qualcomm Group operating as data processors (only to the extent their functionalities and services are made available to the user). With other companies belonging to the Qualcomm Group. If the minor is a student, with other students in the Arduino classroom environment, and the teacher. | The retention period of personal data will be equal to the period of activity on the Junior Account. If the Junior Account is not accessed for 24 months, we will deactivate it. Without the details of the minor and their parents and legal guardians (as applicable), we cannot give access to the Arduino services described above. |
Information Use and Disclosure
Information related to minors under the age of 14 will be processed in order to create a Junior Account and to allow access to a limited set of services and features on the Arduino Website.
In addition, Arduino may also use minors' information for legal compliance and corporate transaction related purposes, as those purposes are described underSection 1, "Collection of Personal Data."
Service Providers and Operators used in Relation to Minors
We use service providers to assist us in providing services that are open to users under the age of 14, including, for example, providers that host our platform. On areas of the services available to users under the age of 14, we use a subset of our service providers, and we do not permit service providers to use minors' data for behavioral advertising. We do not disclose minors' personal data to other third-party operators.
In Arduino's application Science Kit Physics Lab, we embed videos from YouTube and the App is tagged for child-directed treatment with Google so that according to Google/YouTube's system design, no personal data is sent to YouTube. For more information on the tag please follow this link:https://support.google.com/adsense/answer/3248194?hl=en or visit the Google privacy policy:https://policies.google.com/privacy.
Arduino does not enable minors under the age of 14 to make their personal data publicly available.
Parental Choices and Controls
Parents and legal guardians of minors under the age of 14 can request that Arduino make changes to their minor's account or delete it by logging into their account. Parents may also have the right under applicable law to review or prevent further collection or use of personal data from the parent, legal guardian or the minor. To make a request, please email us atprivacy@arduino.cc. Parents and legal guardians can also exercise other data protection rights on behalf of their minors; for more information seeSection 7,"Your Rights" below.
- Restricted Account (for users between 14 and 18 years old)
The table below identifies the purposes for which we process personal data of minors who are at least 14 years of age but under 18 (including students) and their parents/legal guardians, the corresponding categories of personal data processed for each purpose, our legal basis (and special condition) for processing and how long we retain the personal data.
| Scenario/processing purpose | Categories of data | Legal basis and special condition for processing | Others with whom we share this data | Retention |
|---|---|---|---|---|
| To create a Restricted Account on our Website, including to obtain consent from the minor's parent or legal guardian, and to provide our services to minors and their parents and legal guardians (as applicable). | Customer Records, including the minor's date of birth, a randomly generated username and avatar, the Restricted Account password and the email address of the parent or legal guardian; a unique identifier assigned by the Arduino platform ("Unique ID") and other personal data stored with the Unique ID; any personal data that the user uploads to their projects, including (if the minor is a student) to the Arduino classroom environment. Internet and Other Electronic Network Activity Information, IP address. | Performance of a contractual/pre-contractual request by the minor with the parent's or legal guardian's consent. That contract is for the provision of the Arduino services, in accordance with the applicable terms and conditions. | Service providers outside of the Qualcomm Group operating as data processors. With other companies belonging to the Qualcomm Group. If the minor is a student, with other students in the Arduino classroom environment, and the teacher. | The retention period of personal data will be equal to the period of activity on the Restricted Account. If the Restricted Account is not accessed for 24 months, we will deactivate it. Without the details of the minor and their parents and legal guardians (as applicable), we cannot give access to the Arduino services described above. |
Restricted Accounts have all of the functionality of a Regular Account, and so in addition to the information in the table above, we may collect additional personal data from Restricted Account users, as described inSection 1, "Collection of Personal Data."
4. Where We Collect Your Data
Directly from you. For instance, if you create an account, if you post a comment on our Websites, if you send us a query via email or through other communications means, if you browse on our Websites, if you decide to participate in any of our surveys, if you contact us through our Social Media Pages, if you purchase a product and/or a service on our Store. If you do not communicate your data, we will not be able to activate an account.
Through the use of the Website. We use cookies and other analytics tools in order to improve the functionality and efficiency of the Website. To learn more, please see ourCookie Policy linked to on our Websites.
If you are a parent, legal guardian or a person exercising parental authority for a minor under the age of 18 who wishes to create an account, we will collect your personal information necessary to activate the minor's account. For more information, please readSection 3, "Minors' Data" of this Privacy Policy.
From third parties. If you choose to use functionalities of other platforms (such as Google, GitHub, Apple, etc.) to create an Arduino account, the third-party website will transmit to us, upon your consent, some of your personal data, such as your first name and last name, country of origin, language spoken and your email address.
Lastly, if you released software of which you are the author (or co-author or contributor) and it is re-released, shared or commented on through our Websites, we may process your personal data, which you already included in the source code or related license documents.
Third party data provided directly by you. You (or your employer) may act as an autonomous data controller if you provide the personal or contact data of any third party other than yourself (e.g., for the shipment of the product), and assume all obligations and responsibilities provided for by current legislation on personal data. In this respect, you warrant to Arduino that any third party data you provide has been acquired by you in full compliance with applicable data protection laws and that there is an adequate legal basis for the communication of such third party personal data to Arduino, holding Arduino harmless, to the extent legally possible, from any dispute, claim or request for damages that Arduino may receive from any third party as a result of such communication.
5. Disclosure of Information
We may disclose your personal information in the following circumstances or as otherwise described in this Privacy Policy.
- Our Service Providers, Contractors, and Processors: We may disclose the categories of information described above where necessary to service providers, contractors, and processors who provide us services, such as customer service, payment processing, fraud prevention, cybersecurity, IT, cloud storage, video/audio conferences, event planning, analytics, marketing and advertising. A list of data processors is available at thislink.
- Business Customers: We may offer training or other services to the employees, workers and agents of our business customers. In such cases, we may need to disclose information including your personal information, where necessary, relating to the use of our training and other services with the identified business customers.
- Legal Disclosures: We may disclose your information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements. We may also disclose your information in legal proceedings and with legal authorities if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, or safety of Arduino or the Qualcomm Group, our users, the public, or others.
- Our Advisors and Lawyers: We may disclose your information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
- Disclosed During Change of Ownership: We may disclose your information where necessary in connection with, or during negotiations concerning, and consummation of any merger, sale of company assets or securities, financing, or acquisition of all or a portion of our business by another company.
- Among Our Family of Companies: Your information may be disclosed between and among Arduino, Qualcomm and our subsidiaries and affiliates for the purposes as described inSection1, "Collection of Personal Data" above.
- With Your Consent: We may disclose your information in instances where you have provided us consent or at your direction.
- Disclosure of Non-Personal Information: We may disclose anonymized, aggregated, or de-identified information that cannot reasonably be used to identify you or be related to you. When doing so, we publicly commit to maintain and use the information in an anonymized, aggregated, or de-identified form and not attempt to re-identify the information, unless permitted or required by law.
A list of principal data controllers to which we disclose your personal data is availableat thislink.
6. Global Transfer of Information
Arduino is part of Qualcomm's global business, and your information may be transferred and accessed from around the world, such as from countries where we and our service providers operate and which may not provide levels of data protection that are equivalent to those of your home jurisdiction. You can view the locations of our officeshere. We will take steps to ensure that your information receives appropriate safeguards in the jurisdictions in which we or our service providers process it, for example, by entering into appropriate safeguards to protect the personal information, which will include entering into approved standard contractual clauses with the recipient (where required under applicable law). The Qualcomm Group entities rely on EU Standard Contractual Clauses for transferring data outside the EU. You may request more information about the appropriate safeguards and a copy of the standard contractual clauses (where applicable) by contacting us using the information inSection 11,"Contact Us" below.
7. Your Rights
Depending on the laws in your jurisdiction, you may be entitled to exercise the following data subject rights, subject to applicable exceptions:
- Right to Confirm, Know, and Access: You have the right to confirm processing and know/access the personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. Where it is technically feasible or required, you may receive this information in a portable format.
- Right to Delete or Erase: You have the right, in some circumstances, to request deletion or erasure of the personal information we have collected about you. Examples may include where personal information is no longer necessary in relation to the purposes for which it was collected or otherwise processed, where consent is withdrawn and there is no other legal ground for processing, where you object (on grounds relating to your particular situation) to processing based on legitimate interests and we have no overriding legitimate grounds, or where personal information is unlawfully processed. This right does not apply in certain circumstances, including where the processing is necessary for the establishment, exercise, or defense of legal claims.
- Right to Correct or Rectify: You have the right to correct or rectify inaccurate personal information we maintain about you, or to update and to complete any incomplete personal information that we hold about you.
- Right to Restriction. You have the right to restrict our processing of your personal information (that is, allow only its storage) if one of the following conditions applies:
- you contest the accuracy of the personal information, until we have taken sufficient steps to correct or verify its accuracy;
- the processing is unlawful, but you do not want us to erase the personal information;
- we no longer need your personal information for the purposes of the processing, but you require such personal information for the establishment, exercise or defense of legal claims; or
- you have objected to processing, justified on legitimate interest grounds (see below), pending verification as to whether we have compelling legitimate grounds to continue processing.
- Object to Processing: You have the right to object to certain processing of your personal information that is carried out on the basis of legitimate interests, where there are grounds relating to your particular situation. We will no longer process the information unless there are compelling legitimate grounds for our processing that override your interests, rights, and freedoms, or the processing serves the purpose of establishing, exercising, or defending legal claims. Where we process your personal information for direct marketing, you can object to that processing at any time.
- Right of Portability. Where our processing is based on your consent, or performance of a contract to which you are a party, you have the right to receive personal information you provided to us in a structured, common, and machine-readable format, and the right to request transmission of that information to another controller where this is technically feasible.
- Opt-Out of Sharing for Targeted Advertising or Sale of Personal Information: You may have the right to opt-out of the sharing of your personal information for targeted advertising or the sale of your personal information, including sharing or sales based on our use of cookies and other trackers, under applicable privacy laws.
- Limit the Use and Disclosure of Sensitive Personal Information: You may have the right to limit our use and disclosure of sensitive personal information. However, because we use your sensitive personal information for certain permitted purposes, we do not offer this right under applicable law, such as in California.
- Right to Withdraw Consent: Where you have consented to our processing of personal information for a specific purpose, you have the right to change your mind and withdraw consent at any time; such withdrawal applies going forward, and not to past processing. We may, however, have other legal grounds to continue to process the personal information for other purposes.
- Right to Contest or Appeal: You may have the right to contest or appeal to us our decision with respect to your exercise of a privacy right.
- Right to No Discrimination/Retaliation: You may have the right not to be retaliated against for exercising any of your privacy rights.
- Opt-Out Preference Signals and "Do Not Track" Requests.
- We honor opt-out preference signals. An opt-out preference signal is a signal that is sent by a platform, technology, or mechanism on your behalf that communicates your choice to opt-out of sharing personal information for targeted advertisements or the sale of your personal information. You can learn more about implementing opt-out preference signalshere or by exploring other developing technologies and services that offer this tool. We treat opt-out preference signals as valid requests to opt-out of the sale or sharing of your personal information under applicable privacy laws. We will not use, disclose, or retain this additional information for any purpose other than to facilitate the request. Please note that you can also opt-out of the sale or sharing of your personal information through our other methods described inSection 8, "Instructions on How to Exercise Your Privacy Rights" below.
- Some browsers have incorporated "Do Not Track" features. Most of these features, when turned on, send a signal or preference to the websites you visit indicating that you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the do-not-track signal, we currently do not respond to the browser do-not-track signals. However, as noted above, we do honor opt-out preference signals, such as Global Privacy Control signals.
- Other: You may have other data privacy rights in your jurisdiction, which you may exercise if permitted by law. For example:
- Italy - Personal Information Legacy. If you reside in Italy or your or your employer or principal has a contract with Arduino (which is headquartered in Italy), in the event of your death, the aforementioned rights relating to your personal information may be exercised by your successors with an interest or acting as representative, or for family reasons worthy of protection. You may expressly prohibit the exercise of some of the rights listed above by your successors by submitting a written request to us as indicated below. This declaration may be subsequently withdrawn or modified using the same means.
- France - Digital Legacy. If you reside in France or you, your employer or principal have a contract with a Qualcomm entity in France, you have the right to issue specific or general directives concerning the disposition of your personal information after your death.
8. Instructions on How to Exercise Your Privacy Rights
You may exercise your privacy rights by emailing us atprivacy@arduino.cc or completing Qualcomm Group's web formhere. We may need to further verify your identity before honoring your privacy rights request. In some instances, we will verify your identity by asking you to provide additional personal information related to your recent interactions with us. We will respond to your request within the deadline applicable in your jurisdiction, if any. In certain cases, you may have the right to appeal our decision about how we responded to your request, which you can do by emailing us atprivacy@arduino.cc.
In applicable jurisdictions, to opt-out of the "sale" or "sharing" of your personal information for targeted advertising, you may also click on the Do Not Sell or Share My Personal Information link at the bottom of the homepage.
If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please complete our web formhere, or email us atprivacy@arduino.cc.
Additionally, depending on the law in your jurisdiction, you may also opt-in or opt-out of receiving promotional emails from us by following the instructions communicated to you.
9. Complaints
If you have a concern about our processing of personal information that we are not able to resolve, we encourage you to contact us with any questions or concerns by sending us an email atprivacy@arduino.cc. In any event, you also have the right to lodge a complaint with a data protection authority (including where you reside) or to institute civil proceedings, depending on the law of your jurisdiction.
For more information about the data protection authority in your jurisdiction, please contact us below underContact Us. Information about EEA data protection authorities can be found hereOur Members | European Data Protection Board.
10. Changes
We may change this Privacy Policy from time to time. If we make material changes, we will notify you of the change as required by applicable law and revise the date at the top of this Privacy Policy.
11. Contact Us
To contact us, send us an email atprivacy@arduino.cc.