the ncr foundation

Privacy Policy

This NCR Atleos Foundation Privacy Policy (‘Privacy Policy’) provides information on the Processing (as defined below) of Personal Data (as defined below), including Personal Data to which NCR Atleos Foundation has access in connection with the provision of products and services to our customers. This policy governs NCR Atleos Foundation and its global subsidiaries worldwide for all operations where NCR Atleos Foundation is the Controller of Personal Data.

Definitions

Controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

Personal Data” means information relating to an identified or identifiable natural person to the extent such information is afforded the protection of law. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number, location data, an online identifier or to one or more factors specific to the individual’s physical, physiological, mental, economic, cultural, or social identity. In the state of California, Personal Data may also include categories of information that identify or could be linked to a particular consumer or household such as identifiers; bank account and payment card numbers; biometric information; professional, educational, or employment-related information; Internet or electronic network activity; and inferences used to create a profile about a consumer in accordance with applicable law.

Process” means any operation or set of operations that is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, blocking, erasure, or destruction.

Processor” means a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of a Controller.

Special Categories,” “Sensitive Personal Data,” or "Characteristics of Protected Class(es)” (collectively, “Special Categories”) means, to the extent designated under applicable law, Personal Data revealing racial or ethnic origin, color, national origin; political opinions, religious, or philosophical beliefs; trade union membership; genetic data or biometric data for the purpose of uniquely identifying a natural person; data concerning age, disability, or health; or data concerning a natural person’s sex life or sexual orientation.

You” means any individual about whom NCR Atleos Foundation collects, uses, or discloses Personal Data except as may be described below.

Collection of Personal Data

The categories of Personal Data NCR Atleos Foundation may process about you depend on how you interact with the Foundation. The NCR Atleos Foundation may collect Personal Data in ways that include:

  • Communicating with Us. When you contact us to join a mailing list, inquire about partnering with the Foundation, or otherwise communicate with us through any means.
  • Completing Surveys. If you partner with the Foundation, you may be asked to provide certain information that may include Personal Data.
  • Visiting Our Facilities. If you visit our physical facilities, you may provide us with certain information about you for security purposes. We also may employ closed-circuit video recording (i.e., “CCTV”) that may capture your image.
  • Entering into a contract or other business relationship with us. We may collect contact information, financial data, and other similar data to manage our relationship with you or your business.

We may collect Personal Data about you in the following ways:

  • Information from Other Sources. NCR Atleos Foundation may collect information about you or obtain Personal Data about you from third parties for the purposes of providing you with information about NCR Atleos Foundation and opportunities to obtain funding from us.
  • Automatic Data Collection. NCR Atleos Foundation may also use certain technologies to automatically collect information about you while you are visiting an NCR Atleos Foundation website, which as described in more detail below, may include your Internet protocol (IP) address; user settings; IMEI; MAC address; cookie identifiers and related technologies (see below); mobile carrier; mobile advertising and other unique identifiers; details about your browser, operating system, or device; location information; Internet service provider; pages that you visit before, during, and after using our sites; information about the links you click; and other information about how you use our sites. Information we collect may be associated with other accounts and other devices. In addition, we may automatically collect data such as the types of content you interact with and the frequency and duration of your activities. We may combine your Personal Data with information that others provide when they use our services.

As described above, NCR Atleos Foundation websites, applications, and services may employ a variety of tools, including cookies, to help us improve your experience and determine the effectiveness of certain of our marketing initiatives.

  • Cookies. A cookie is a small element of data that a website can send to a web browser, which is then stored on the browser user’s computing device. We may use cookies, alone or in combination with other data we may collect from other technologies (such as server logs) to make our websites work or operate more efficiently, to personalize a user’s experience, or to make our websites more useful to our visitors. You can learn more about cookies by visitinghttps://www.consumer.ftc.gov/articles/0042-online-trackingorwww.youronlinechoices.eu.
  • Other Technology NCR Atleos Foundation May Use to Improve Your Experience. NCR Atleos Foundation, and our service providers, may also use other technology to improve your experience. As described below, these technologies include analysis tools, log file information, web beacons, web links, and local shared objects.
  • Analysis Tools. NCR Atleos Foundation may use analysis tools like Google Analytics or Adobe Analytics to help us analyze how visitors use our websites. Among other things, these tools use cookies to collect data about the number of visitors to the site, the web page that referred visitors to the site, and the pages that visitors view within the site. Both Google Analytics and Adobe Analytics use persistent cookies. To opt out of Google Analytics, visithttp://tools.google.com/dlpage/gaoptout. To opt out of Adobe Analytics, visithttp://www.adobe.com/privacy/opt-out.html.
  • Log File Information. NCR Atleos Foundation records log file information whenever you access our websites. Examples of log file information include your IP address, your browser type, the page from which you accessed our website, the pages you viewed while visiting our website, the last page you viewed before you exited our website, and the page you accessed after leaving our website.
  • Web Beacons, Pixel Tags, Clear GIFs, and Other Technologies. These technologies involve placing electronic (and usually transparent) images on a website or in an email. These images place certain information on your device such as cookies, the time and date of a page you viewed and the length of time you viewed the page, the IP address of the device that retrieved the image, the time the web beacon was viewed and for how long, and the type of browser that retrieved the image. We may use these technologies, for example, to determine whether you have opened or accessed links included in marketing communications from NCR Atleos Foundation. These technologies often work with cookies; therefore, if you do not want us to associate your cookie information with your visits to our website, you must turn off cookies in your browser.
  • Web Links. Emails from NCR Atleos Foundation may contain links that are designed to take you to a web page after redirection through NCR Atleos Foundation servers (or those of its suppliers). We use the information we obtain during the redirection process to determine whether a particular marketing initiative is effective and may collect information connected to your identity. If you do not want NCR Atleos Foundation to collect information about the links that you click, you can choose a text-based version of the message (if the option is available). You may also choose not to click the links we provide in the emails we send to you and search online for the relevant resource independently.
  • Local Shared Objects (“Flash Cookies”). NCR Atleos Foundation may use Adobe Flash Player® to deliver multimedia content, such as a video, to you. To improve your user experience, NCR Atleos Foundation may use Flash local shared objects (LSOs) – sometimes called “flash cookies” – to store your flash content information and preferences, similar to other types of cookies NCR Atleos Foundation employs. You can manage flash cookies by accessing the following link on Adobe’s website:http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html.
  • Notice Regarding APIs and SDKs. We may use third-party APIs and software development kits (“SDKs”) as part of the functionality of our applications. APIs and SDKs may allow third parties including analytics and advertising partners to collect your Personal Data for various purposes including to provide analytics services and content that is more relevant to you. For more information about our use of APIs and SDKs, please contact us as set forth below.
  • Information from Other Sources. We may obtain Personal Data about you from other sources, including through third party services and organizations to supplement information provided by you. For example, if you access our website through a third-party application—such as an app store, a third-party login service, or a social networking site—we may collect information about you from that third-party application that you have made public via your privacy settings with that third party.
Use of Personal Data

NCR Atleos Foundation is committed to collecting Personal Data for specified and legitimate purposes, to limit its Processing to the stated purpose, and to not Process that data further in a manner incompatible with such purpose.

Lawful Bases for NCR Atleos Foundation Processing.

NCR Atleos Foundation will use Personal Data where reasonably necessary to fulfill NCR Atleos Foundation business needs (as described below), including to:

  • Perform a contract with you or take steps at your request prior to entering into a contract;
  • Comply with a regulatory or legal obligation;
  • Perform a task carried out in the public interest;
  • Carry out Processing with your consent, which you may withdraw at any time as described below;
  • Further a legitimate interest of NCR Atleos Foundation or a third party including, but not limited to:
    • Detecting security incidents, protecting NCR Atleos Foundation personnel, property and assets from malicious, deceptive, fraudulent or illegal activity including threats or harm including to NCR Atleos Foundation information technology infrastructure, Intellectual property, or goodwill or reputation and prosecuting those responsible for that activity;
    • Ensuring compliance with relevant corporate policies and terms; or
    • Optimizing utilization of global corporate resources including the administration of business transactions, personnel and information technology systems
Additional Business Purposes.

In addition to the foregoing, NCR Atleos Foundation may Process Personal Data in the following specific purposes and circumstances:

  • Contract Data. As described above, NCR Atleos Foundation will use Contract Data consistent with applicable contractual obligations and applicable law. NCR Atleos Foundation also may use Contract Data to facilitate compliance with regulatory and legal requirements.
  • Deidentified Data. For deidentified or aggregated data, which was formerly Personal Data, but which can no longer identify individuals, NCR Atleos Foundation may conduct research and development, statistical, trend or pattern analysis in order to continuously improve our products, services, processes, and security procedures.
  • Sales and Marketing. NCR Atleos Foundation may use your Personal Data for sales and marketing purposes, including contacting you for feedback, providing you with marketing literature on products and services, notifying you of events, and providing you with information about NCR Atleos Foundation.
  • Social Networking Tools. If NCR Atleos Foundation uses social networking widgets or tools to provide information to you, your information will be governed by the terms of use and the privacy policy for the applicable social networking platform.
  • Fulfilling Business Transactions. NCR Atleos Foundation may use your Personal Data to fulfil business transaction requests with you or your organization.

You may always change your privacy preferences as set forth below.

Transfers

NCR Atleos Foundation is an independent non-profit entity organized by NCR Atleos Corporation (“NCR Atleos”). To facilitate the efficient functioning of the Foundation, the Foundation may rely on NCR Atleos to provide certain shared services such facilities, information technology, and personnel. Where it is necessary for the efficient and effective performance of a business transaction or the fulfilment of one of the uses of Personal Data outlined above, NCR Atleos Foundation may need to transfer Personal Data to NCR Atleos. In such cases, the Foundation has received a commitment that NCR Atleos will not make further use of Personal Data in a way that is incompatible with the terms of this Notice or the purposes for which the Foundation collected Personal Data.

Additionally, we may share your Personal Data (including Contract Data) with the following categories of third parties:

  • Affiliates. We may share Personal Data within NCR Atleos Foundation to our personnel on a need-to-know basis.
  • Service Providers. We may share Personal Data with third-party suppliers and service providers that help us Process Personal Data. It the Foundation’s practice to enter into contracts with our suppliers and service providers that require them to handle your information in a manner consistent with Foundation policy and applicable law.
  • Advertising Partners. Third parties do not advertise on NCR Atleos Foundation websites. NCR Atleos Foundation , however, may contract with third parties who collect information about your online activities over time and across different devices and websites (including NCR Atleos Foundation websites). These third parties may use cookies or web beacons across multiple websites, including NCR Atleos Foundation websites, to collect certain information about you (e.g., your IP address, mobile identifiers, page(s) visited, location, time of day) and may provide you with targeted ads based on your interests. These third parties’ collection, use, and disclosures of your information is governed by their own privacy policies and statements. You have several choices to control the delivery of targeted ads to you by NCR Atleos Foundation, as described below. In certain jurisdictions, you have the right to opt out of targeted advertising.
  • Disclosures to Protect Us or Others. In certain circumstances, NCR Atleos Foundation may use or release Personal Data to third parties when disclosure is required or permitted by law (e.g. statute, judicial proceeding, court order, or subpoena). We also reserve our right to use or provide your Personal Data to third parties, including law enforcement, auditors, consultants, and government officials, to protect NCR Atleos Foundation rights, property, or safety, and/or the rights or property of our customers, business partners, suppliers, or other third parties.
Your Privacy Rights

Your Preferences.

You have certain choices about your Personal Data. Where you have consented to the processing of your Personal Data, you may withdraw that consent at any time and prevent further processing as follows:

  • Email and Telephone Communications. From time to time, you may sign up to receive information or access to NCR Atleos Foundation services, or where law permits, we may provide you with information we believe may be of interest to you. In all cases, we will provide you with mechanisms to control your receipt of such communications or services.
  • Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that at this time NCR Atleos Foundation does not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
  • Cookies and Interest-Based Advertising. You may stop or restrict the placement of technologies on your device or remove them by adjusting your preferences as your browser or device permits. If you would like to change your browser’s cookie settings, please refer to the online help offered with your browser or to your device manufacturer’s website. Please note, however, if you decide to turn off cookies, there may be some features of our websites that may not be available to you and some pages may not display properly. To learn more about managing cookies on your device, please visit http://www.allaboutcookies.org/manage-cookies/. The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy, at http://www.youronlinechoices.eu/,https://youradchoices.ca/choices/,www.networkadvertising.org/managing/opt_out.asp, and www.aboutads.info/choices/. To separately make choices for mobile apps on a mobile device, you can download DAA's AppChoices application from your device's app store. Alternatively, for some devices, you may use your device's platform controls in your settings to exercise choice.

Advertisements on third-party websites that contain the AdChoices link may have been directed to you based on information collected by advertising partners over time and across websites. These advertisements may also provide a mechanism to opt out of the advertising partners’ use of this information for interest-based advertising purposes.

Your Individual Rights

In accordance with applicable law, we provide several mechanisms to allow you to:

  • Access Personal Data about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic Personal Data transferred to another party. Where permitted by law, NCR Atleos Foundation may charge a reasonable fee if we are required to provide information about you. You may have the right to request information about public and private entities with which the NCR Atleos Foundation has shared data.
  • Request correction of your Personal Data where it is inaccurate or incomplete. In some cases, NCR Atleos Foundation may provide self-service tools that enable you to update Personal Data about you or refer you to the Controller of your Personal Data who is able to make the correction.
  • Request deletion of your Personal Data where required by law, subject to exceptions prescribed by law.
  • Request restriction of or object to the Processing of your Personal Data, including the right to opt in or opt out of the sale or sharing of your Personal Data to third parties, if applicable, where such requests are permitted by law. In some jurisdictions, you may have the right to request restriction of the Processing of your Personal Data while NCR Atleos Foundation undertakes to verify the accuracy of your data where you have contested its accuracy; where NCR Atleos Foundation Processing is unlawful and you have the right to erasure, but request that we restrict Processing instead; where the data are no longer needed for the purposes of the Processing by us, but they may be required by you for the pursuit or defense of a legal claim, or by NCR Atleos Foundation where its legitimate interests override your request for restriction.. NCR Atleos Foundation will notify you before we begin to Process any information about you that was restricted just prior to Processing.

You may log into your account or use the contact mechanisms specified below to make your request. We will process such requests in accordance with applicable laws. NCR Atleos Foundation may take reasonable steps to verify your identity before acting on a request.

Consent Exceptions

Where you have previously provided your consent to Process your Personal Data, you may withdrawal that consent at any time; however, doing so will not affect the lawfulness of NCR Atleos Foundation processing before your withdrawal of consent. Once you withdraw consent, we will no longer Process your information for the purpose(s) to which you originally consented unless there are compelling legitimate grounds for further Processing which override your interests, rights, and freedoms or if Processing is necessary for the establishment, exercise, or defense of legal claims.

Denying a Request

In certain circumstances applicable law may permit NCR Atleos Foundation to deny a request to exercise your rights; for example, where an access request is manifestly unfounded or excessive, in particular where it is repetitive, where the burden or expense of providing access would be disproportionate to the risks to your privacy, or where the rights of other persons would be violated.

Use of Automated Individual Decision Making Including Statistical Analysis and Profiling

NCR Atleos Foundation may use statistical and analytic techniques to support automated individual decision-making including profiling for the purpose of improving the quality, performance or efficiency of our products, services or processes or to screen applicants for employment, to facilitate compliance with law or policy, or to protect our information technology infrastructure.


Protection of Your Personal Data

NCR Atleos Foundation aims to provide leading data privacy protections designed to safeguard Personal Data. We prioritize safety across our business and commit to operating in accordance with the laws applicable to the countries in which we conduct business and with our contractual requirements. Furthermore, NCR Atleos Foundation takes reasonable and appropriate steps designed to safeguard NCR Atleos Foundation Personal Data in accordance with these laws and requirements.

Retention of Personal Data

NCR Atleos Foundation retains Personal Data only for so long as it is necessary to support the overall purpose(s) for which NCR Atleos Foundation collected such information. The Foundation may retain and use your personal information as necessary to comply with our business and legal obligations, resolve disputes, protect our assets, and enforce our rights and agreements. We take steps to minimize access, use, and retention of Personal Data to what is reasonably necessary.

Children's Information

NCR Atleos Foundation applications and websites are not directed to children under the age of 16. By your use of our applications and websites, you affirm that you are at least 16 years of age. NCR Atleos Foundation does not sell or share the information of consumers under 16 years of age. If you are a parent or a guardian, and you believe your child has provided NCR Atleos Foundation with Personal Data without your consent, please contact us as described below.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time and without notice, and we will make an updated copy of such privacy Policy available on our website. When we make any revisions that materially change the ways in which we use or share the Personal Data previously collected from you, we will give you the opportunity to consent to or opt-out of such changes before applying them to that Personal Data previously collected.

Changing Your Preferences and Contacting Us

You may change your marketing preferences by clicking here. You may send any comments or questions regarding this Privacy Policy or NCR Atleos Foundation handling of your Personal Data by email to office.privacy@ncratleos.com or by mail to:

NCR Atleos Foundation Privacy Office
864 Spring Street NW
Atlanta, GA 30308
US Toll-free: 800-225-5627

To make a request for your personal data or to exercise your rights, please visit our access request portal.

If NCR Atleos Foundation does not satisfactorily address your concerns, you may have the right to lodge a complaint with your any national data protection authority of competent jurisdiction.