OneScreen AMS Privacy Policy

Introduction

OneScreen AMS and its related services (hereinafter referred to as “Product”, “Service”) are provided by NZS Inc dba OneScreen, a company located at 12335 World Trade Drive, Ste. 9, San Diego, CA 92128, USA (hereinafter referred to as “we”, “us”, or “our”). We highly value your privacy. This Privacy Policy (hereinafter referred to as “Policy”) describes how we collect, use, disclose, process, and store any personal information that you provided to us or that we collect from you when you use our products and services.

If you are under 16 or otherwise regarded as a minor in your jurisdiction, do not provide any personal information without your parent’s or guardian’s permission.

This Policy only applies to the Product that references or links to this Privacy Policy. It also describes your rights and available choices regarding your personal information.

Data Controller:

NZS Inc dba OneScreen is the controller (or similar term under applicable laws) of any information processed in connection with this Policy.

It is our policy to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR). We reserve the right to change the provisions of this Policy from time to time. We encourage you to periodically review this page for the latest information on our privacy practices

I. What Information We Collect

The term “personal information” or “personal data” means any information relating to an identified or identifiable natural person, including information that specifically identifies an individual (such as a name, mobile number, email address, or other account number), and information about that individual’s location or activities (such as information about your
use of our Service, IP addresses or mobile device identifiers) when directly linked to personally identifiable information. Personal information also includes demographic information such as date of birth, gender, geographic area, and preferences when such information is linked to other personal information that identifies or may identify you.

Personal information does NOT include “anonymized” information, which is data we collect about the use of our Service or about a group or category of products, services or users, or other data from which individual identities or other personal information has been removed so that the individual concerned cannot be identified directly or indirectly. This
Policy in no way restricts or limits our collection and use of such anonymized information.

We may collect information that is automatically collected by us and certain information we obtain from third-party sources. More information about the categories and sources of information is provided below.

1. Information Provided by You

Account Registration Information

When you acting as the administrator to sign up and create an account, you represent and warrant that you are authorized to be the administrator of your organization and provide the other sub-administrators’ personal information. For the purpose of providing you our service, we may collect certain information about you, such as:

Email address
Username and password
Profile picture
The name of your organization
Your name, phone number, location, time zone, and language
The Country in which you select to process and store your information

We collect the Country in which you select to process and store your information to process and store your information, according to your selected option, in a third-party cloud storage located in the United States or Germany.

Administrator Information

You can add your sub-administrators or replace the super-administrators for your organization. The username and email address of the sub-administrators or super-administrators you provide will be collected. You acknowledge and confirm that when you provide us with information about sub-administrators or super-administrators of your organization, you have obtained the valid consent of the above-mentioned administrators.

Member Information

You can add your members for your organization. The username and email address of the members you provide will be collected. You acknowledge and confirm that when you provide us with information about members of your organization, you have obtained the valid consent of that member.

NFC Card Number

You can bind NFC cards to organization members. The member username, email address, and NFC card number of the members you provide will be collected.

Organization Unlock Password

You can modify the unlock password of the organization administrator space in OneScreen AMS. At this time, we need to collect the password you provide to enable the modification function.

Third-Party Account Information

When you log in with your OneScreen Account, Microsoft, or Google Account, you provide us with your account information including email address, user name, and profile picture. When you log in your Microsoft/Google cloud drive via log-in link on the Product, you provide us your Microsoft/Google account information including nickname, profile picture, token and email verification information.

Support Service Information

If you contact our customer care team or initiate a support ticket (via app, email, or phone), we collect the information you give us during the interaction, including your name, organization name, time zone, phone number, email address, account details, and shipping address. Sometimes, we monitor or record these interactions to ensure a high quality of the Services. When you log in with your OneScreen Account, Microsoft, or Google Account, you provide us with your account information including email address, user name, and profile picture. When you log in your Microsoft/Google cloud drive via log-in link on the Product, you provide us your Microsoft/Google account information including nickname, profile picture, token and email verification information.

2. Information We Collect Automatically

Device Information

We collect certain information about the device you use to access our Services, including device name, device type, device version, device model, device ID, device identification code (e.g., IMEI), device hardware details and status, device usage habits, IP address, operating system version, device configuration, and device location.

Usage Information

We collect your usage information, including number of clicks, log-in approach, and usage duration. We also collect your device operation and configuration, including operations and behavior of clicks and usage duration performed on the applications, and your edition of the desktop widgets, the creation of application shortcuts, the wallpaper, and your usage of screen lock.

3. Information From Other Sources

We may collect information about you from third parties, for example, the organization you work at may provide us with your username and email address in order to make authorization to your account.

4. Special Categories of Information

We do not request or intend to collect any “special categories of information”, such as any information on health, race, religion, political opinions or philosophical beliefs, sexual preferences or orientation. We also want to kindly remind you to be cautious when sharing this information about yourself (or others) in our Services.

5. Cookies and Other Similar Technologies

By using our Services, you acknowledge that we may have access to information stored on your device and write certain files on your device, which is necessary for us to provide our Services to you. You may clear the files we write on your device by unbinding your third-party cloud storage account. We will not use cookies for any purpose other than those stated in this Policy.

II. How We Use Your Information and Legal Basis

We may only use your information when we have justifications (each called a “legal basis”) under data protection law. To process your information as described in this Policy, we rely on the following legal bases:

1. Contractual Necessity

To offer our Services to you
To enter into and to perform our contract with you, or to perform any steps you require from us before entering into a contract with you
To verify your identity and activity, to prevent unauthorized log in behavior and other unwanted or unexpected product experiences, and to promote safety and security of our Product
To provide and support the functionality of Product, including managing your hardware device and software resources, accessing the third-party cloud storage service and managing your device display
To provide you with feedback and product support
To communicate with you, including but not limited to respond to your request for any help with the Services or for exercising your rights with respect to your personal information
Your data collected during product registration is used to configure your panel with accurate location, time, date, user type etc. We collect personal information during product registration so that OneScreen Skills Guru team can reach out to proactively schedule training, provide software information and licenses and activate your product warranty

2. Legitimate Interests

To pursue our legitimate interests (or those of a third party) as we deem fit and necessary, where your interests and fundamental rights do not override those legitimate interests of ours (or any third party’s), such as:

To enforce or exercise our rights, for example our User Agreement
To understand, improve, optimize and develop the Services
To develop, test and improve our product by conducting surveys and research, and testing and troubleshooting new products and features
To conduct research and monitor the quality of the Services
To respond to complaints, hearings, arbitrations, law suits or other governmental or regulatory proceedings

3. Compliance with Applicable Laws and Regulations

To comply with legal requirements
Assist law enforcement

For other occasions your data will be used for a purpose not specified in this Privacy Policy, we will notice you the specific purpose and acquire your consent in advance. We may also process your personal information in order to protect your vital interests or the vital interests of another person.

III. How We Store Your Personal Information

For your personal information we collect and generate in our operations, you have the option to choose between the United States or Germany for processing and storage. We will process and store your personal information in third-party cloud servers located in the country you select, except for cross-border transmissions permitted under the applicable law.

We securely store your data at our global server of your region, during which time, we will take all appropriate technical and organizational measures to ensure that your personal data is treated securely and against loss, theft and unauthorized use, access or modification.

We store your personal information in response to the requirements of laws, regulations or our commercial purposes. We store your data until it is no longer necessary to provide our services or until your account is deleted – whichever comes first. We will delete or anonymize your personal information beyond the above retention period.

IV. How We Disclose Your Personal Information

We may disclose some of your personal information with authorized partners who cooperate with us providing products and services. We will not disclose your personal information with third parties for their own marketing or commercial purposes. Currently, we do not share your personal data with any third parties other than application co-developers. If there is a need to share, we will notice you in advance and seek your authorization and consent.

1. Related OneScreen Products:

If your account already has permission to use other OneScreen products (such as OneScreen Control), when you use the account to log in to OneScreen AMS, we will collect and synchronize relevant data of your organization (such as organization administrator information and organization unlock password) for identity authentication and to optimize your user experience.

2. Affiliated Companies:

Your personal information may be shared with our affiliated companies. We will only share your information within our affiliated companies for legitimate and explicit purposes, and only share the information necessary to provide the Services, and are bound by the purposes stated in this Policy. If the affiliated companies wish to change the purpose of processing, we will state it in the corresponding notice of the specific services.

3. Authorized Partners:

Such as technical services providers, data storage services providers, mail service providers, etc. For the performance of certain features or to provide you with better Services and a better user experience, some of our Services will be provided by our authorized partners. We uphold the principles of minimization, necessity, and legality to carry out such sharing. Before sharing information, we will require authorized partners to take relevant confidentiality and security measures to process personal information in accordance with this Policy and applicable laws in your jurisdiction.

4. Corporate Transactions:

Where a merger, acquisition or bankruptcy liquidation takes place, if transfer of personal information is involved, we will continue to ensure the confidentiality of your data and give affected users notice before data is transferred or becomes subject to a different privacy policy.

5. Legal Obligations and Rights:

We will share your data outside of us if we have a good-faith belief that access, use, preservation, or disclosure of the data is reasonably necessary to meet any applicable law, regulation, legal process, or enforceable governmental request. We will only publicly disclose your personal information if it is mandatorily required by laws, in compliance with subpoena, legal proceedings, legal actions or compulsory request by supervisory department of government agencies, or we need to disclose to exercise, establish or defend our legal rights, or to protect your vital interests or those of any other person.

V. Data Processing of Information from Google APIs

When you use the third-party social login or cloud storage service through OneScreen Account, we will collect your Google/Microsoft account information, including your registered email address, profile photo, user name, email verification information, for the sake of user identity verification. In no event shall we store or use your Google account information or cloud storage resources unless at your command.

Use and transfer of information received from Google APIs within OneScreen Account to any other app will adhere to Google API User Data Policy, including the Limited Use Requirements.

VI. How We Protect Your Personal Information

We have taken reasonably feasible and technical measures to protect collected services-related data. However, please be aware that, even if we undertake reasonable measures to protect your data, there is no website, internet transmission, computer system or wireless connection that is absolutely safe.

We have taken safeguarding measures in accordance with industry standards to protect the personal information you provided and prevent data from unauthorized access, public disclosure, use, modification, damage or loss. We take all reasonably practical measures to protect your personal information. In particular:

1. Encryption:

We encrypt a lot of information. For instance, we do not store your password but only store the Hash value after your password’s double layer SHA as a proof of security authentication. The HASH algorithm of SHA is irreversible. Therefore, no one can find your password according to the Hash value. We periodically review practices regarding information collection, storage and processing (including physical security measures), to prevent various systems from unauthorized access.

2. Limited Access:

3. Data Security:

The security of your information is extremely important to us. Therefore, we endeavor to ensure the security of your personal information and implement measures such as security encryption during storage and transmission to prevent your information from unauthorized access, use, or disclosure. At the same time, no one can access the specific content of some encrypted data except the users themselves.

In case of personal information security incident that is likely to result in high risk to the rights and freedoms of personal information subjects, we will promptly inform you of the relevant information related to the incident by email.

VII. How Long Do We Retain Your Personal Information?

We retain your personal information for the purpose of the information collection described in this Privacy Policy or required by the applicable laws, until you take the initiative to delete. We will cease to retain and delete or anonymize personal information once the purpose of collection is fulfilled, and/or after we terminate the operation of the corresponding product or service, and/or after we confirm your request for erasure.

We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. When we no longer need to use your information, we will remove it from our systems and records and/or take steps to anonymize it promptly so that you can no longer be identified from it.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

However, we may continue to retain certain data to the maximum extent permitted by applicable laws. If you would like to delete your data, please refer to the heading of “Your Rights” below.

VIII. Your Rights

As the subject of the personal information, you are entitled to have the rights provided by the privacy laws in your jurisdiction. You can exercise your rights entitled by the privacy laws in your jurisdiction at any time by sending your requests to support@onescreensolutions.com. Your rights may include:

1. Right to be Informed:

We publish this Policy to inform you of how we handle your personal information. We are committed to the transparency of the use of your information.

2. Right to Access Your Personal Information:

You have the right to access personal information we hold about you, how we use it, and who we share it with. We may charge you a small fee for this service.

3. Right to Correct Your Personal Information:

You have the right to correct your information where that information is not accurate. You also have the right to request us to complete information you believe is incomplete. You can correct your personal information by contacting us via the email stated in this Policy.

4. Right to Delete Your Personal Information:

You can remove certain personal information that we have stored about you, under certain conditions. However, please note that we may need to retain personal information if there are valid grounds under data protection laws for us to do so (e.g., for the defense of legal claims or freedom of expression) but we will respond to you and let you know if that is the case.

5. Right to Restrict Processing:

In limited circumstances, you have the right to request us to stop processing your personal information we hold about you other than for storage purposes.

6. Right to Data Portability:

You can request a copy of certain data in a machine-readable form that can be transferred to another provider if such right is requested by the privacy laws in your jurisdiction.

7. Right of Refusal:

Even if the processing of your data is based on our legitimate interest, exercise of public right, direct marketing (including data aggregation) and statistics, you have right to refuse our processing for these purposes.

8. Right to Withdraw Consent:

You may withdraw your consent for the processing of your personal information by submitting a request to us via email. We will deal with your request within a reasonable time frame from the time when the request was received, and thereafter not processing your personal information as per your request. Please note that your withdrawal of consent could result in certain legal consequences. Depending on the extent to which you authorize us to process your personal information, it may mean that you will no longer be able to enjoy the use of our services.

However, any decision on your part to withdraw your consent or authorization will not affect personal information processing previously performed with your permission.

9. Right to Refuse Automated Decision:

You may have rights not to be bound by automatic decisions, including user profiling, if such right is requested by the privacy laws in your jurisdiction.

10. Right to Lodge Complaints:

If you are concerned about the way in which we are managing your personal information and think we may have breached any relevant laws and obligations, please contact us. We will respond and reply to you as soon as possible. Generally, we will reply to you within one (1) month upon receipt of your request. If necessary, we may extend it by an additional two (2) months as permitted by law. If you feel we have not resolved your concern, you have the right to lodge a complaint with your local privacy or data protection regulator.

To help us verify that you are the subject of the personal information and exercise your rights outlined above, we may require you to provide sufficient proof of identification. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

IX. How We Process Children’s Personal Information

Our Services are mainly adult-oriented and we do not offer services directly to a child or use personal information of children for the purposes of marketing. A child should not create his/her own user account. We treat anyone under 16 years old (or equivalent minimum age in relevant jurisdiction) as a child. We do not knowingly collect any information about or market to children, minors or anyone under the age of 16. If you are less than 16 years old, we request that you do not submit information to us. If we become aware that a child, minor or anyone under the age of 16 has registered with us and provided us with personal information, we will take steps to terminate that person’s registration.

X. How Your Personal Information is Transferred Globally

For the purposes described in the Privacy Policy, your information may be transferred to other countries or regions where our server may locate in accordance with applicable law. We may also transfer your personal information to third-party authorized partners and your data may therefore also be transmitted to other countries or regions. However, this does not change our commitment to comply with this Privacy Policy and to protect your personal information.

If we need to transfer personal information outside of your jurisdiction, we will comply with related applicable laws. We will take corresponding protective measures according to the requirements of applicable laws to ensure data security. For more information on protection measures on personal information in scenario of cross border data transfer, please contact us.

XI. How This Policy is Updated

We change this Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We always indicate the date the last changes were published and we offer access to archived versions for your review. If changes are significant, we’ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

XII. Contact Us

If you have any concerns or doubts over our Privacy Policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us:

Address: 12335 World Trade Drive, Suite 9, San Diego, CA 92128, USA
Phone: +1-858-305-9199
E-mail: support@onescreensolutions.com

United States Addendum

If you are residents of the United States and where we meet the relevant threshold tests, the following additional terms apply. If any conflict arises between the main Privacy Policy, the following terms shall prevail:

Minimum Age:

In the United States, the minimum age for users is 13. We therefore do not knowingly collect any personal information from children under the age of 13 in the United States without parental consent, unless permitted by law. If we learn that a child under the age of 13 has provided us with personal information, we will delete it in accordance with applicable law.

De-identified Information:

Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.

Nevada Residents:

If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Note we do not sell your personal information within the meaning of Chapter 603A.

Your Rights:

You are able to exercise your privacy rights described in the “Section VIII. Your Rights” of the Privacy Policy in accordance with the applicable law as well as subject to certain limitations at law, including but not limited to:

The right to access
The right to correct
The right to delete
The right to take your data with you / to request a copy of your data

These rights are not absolute and are subject to certain exceptions. You can exercise your rights by sending your requests to support@onescreensolutions.com.

We do not sell personal information and do not use personal information for the purpose of targeted advertising and profiling, and therefore we do not process requests for opt-out of sale, targeted advertising and profiling. We will not unlawfully discriminate against you for exercising your rights.

If we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by sending emails to support@onescreensolutions.com.

Once we receive your request, we may verify it by requesting information sufficient to confirm your identity. If you would like to use an authorized agent to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.

California Consumer Privacy Rights

As a California resident, in addition to the rights that you may have under OneScreen’s Privacy Policy, you have certain rights with respect to your personal information that OneScreen has collected, uses and may have disclosed.

Right to Know About Personal Information Collected

Subject to OneScreen’s receipt of a verifiable request, you have the right to request that OneScreen discloses to you the following information that may have been collected by OneScreen in the preceding 12 months from the date of your request:

The specific pieces of personal information OneScreen has collected about you
The categories of personal information OneScreen has collected about you
The categories of sources from which your personal information was collected
The categories of personal information about you OneScreen may have disclosed for a business purpose
The categories of third parties to whom your personal information OneScreen may have disclosed for a business purpose
The business or commercial purpose for OneScreen collecting your personal information

OneScreen does not sell your personal information. Nonetheless, please note that under California law you have the right to direct a business that does sell your personal information to third parties to stop the sale of that information.

OneScreen will deliver the personal information you request through the same means that the request was received. OneScreen is not required to provide your personal information to you more than twice in a 12-month period.

Right to Deletion

Subject to OneScreen’s receipt of a verifiable request, you have the right to request that OneScreen delete any of your personal information. However, there are a number of exceptions to this requirement under applicable law. OneScreen may retain a consumer’s personal information if the retention is necessary to: (1) complete the transaction for which the personal information was collected; (2) provide a good or service requested by the consumer or reasonably anticipated by the business relationship; (3) perform under a contract with the consumer; (4) detect security incidents, or protect against malicious, deceptive, fraudulent or illegal activity (or prosecute those responsible); (5) debug to identify and repair errors; (6) comply with the California Electronic Communications Privacy Act; (7) use internally in ways aligned with the expectations of the consumer based on the consumer’s relationship with the business; (8) comply or fulfill a legal obligation; or (9) in a lawful manner that is compatible with the context in which the consumer who provided the information.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

Submitting a Request

In order for OneScreen to be able to process your request to delete or provide you details of your personal information, OneScreen must be able to verify that you are the person making the request. Therefore, we will need to get some information from you before we can process your request.

To submit your verifiable request or if you have any questions or comments about our personal information practices or about this Privacy Policy, please contact us via email at support@onescreensolutions.com, by telephone at +1-858-305-9199, or write to us at:

OneScreen 12335 World Trade Drive, Suite 9, San Diego, CA 92128

Confirmation:

Once we receive your request, we will send you a confirmation on how your request will be processed and may ask you for additional information that is needed to process your request. If you are (i) requesting to know specific pieces of personal information, or (ii) requesting that we delete your personal information, you will need to provide OneScreen with a signed declaration, under penalty of perjury, that you are actually the person whose personal information is the subject of the request.

Requests Through Authorized Agents:

You may make a request to know or a request to delete your personal information through an authorized agent. In order to make such a request, the agent must submit proof of your written permission to serve as your authorized agent and provide satisfactory verification of their own identity.

We do not use or disclose sensitive personal information for purposes not permitted by applicable laws. We do not provide any financial incentives tied to the collection, sale, or deletion of your personal information.

California “Shine The Light” Law:

For consumers located in California, we do not share your personal information with third parties for those third parties’ direct marketing purposes.

“Do Not Track” Signals:

Under California law, operators of online services are required to disclose how they respond to “do not track” signals or other similar mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information of a consumer over time and across third party online services. At this time, we do not track individuals’ personal information over time and across third-party online services. We do not knowingly permit third parties to collect personal information about an individual’s online activities over time and across different online services when using our services.