Charlesbridge Publishing, Inc. provides this supplemental privacy notice to give individuals in the European Economic Area (EEA), Switzerland and the United Kingdom (UK) the additional information required by the EU General Data Protection Regulation (GDPR), the Swiss Federal Data Protection Law and the UK GDPR respectively. These provisions, together with the statements in the Charlesbridge Publishing, Inc. Privacy Policy, explain our practices with regard to EEA, Swiss, and UK personal data.

1. Information about Charlesbridge Publishing, Inc.

Charlesbridge Publishing, Inc. is located in the United States of America

Charlesbridge Publishing
Privacy
9 Galen St.
Watertown, MA 02472

Charlesbridge books are distributed worldwide by Penguin Random House.

2. The Purposes and Legal Basis for Processing, including Legitimate Interests

This Charlesbridge Publishing, Inc. Privacy Policy explains the reasons why we process your Personal Information. We only process Personal Information when we have a legal basis for the processing, such as:

• To provide the products, services or information that you request,
• To fulfill our obligations under your service contract
• For closely-related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance, and
• With your consent (or provided you have not objected, as may be appropriate under applicable law), such to provide you with marketing communications.
• To develop and maintain our business relationship with our service providers/contractors and contracted staff

We may also process your Personal Information for the purposes of our legitimate interests, provided that such processing shall not outweigh your rights and freedoms.  In particular, we may process your Personal Information as needed to:

• Protect you, us or others from threats (such as security threats or fraud) piracy or cheating,
• Comply with the laws that are applicable to us around the world,
• Enable or administer our business, such as for quality control, consolidated reporting, and customer service,
• De-identify it to create anonymized and/or aggregated datasets,
• Manage corporate transactions, such as mergers or acquisitions, and
• Understand and improve our business or customer relationships generally.

We may disclose your Personal Information to related companies and to third parties as described in the Privacy Notice; however, we do not share your Personal Information with third parties for them to market their products or services to you without having obtained your prior opt-in consent.  If you give consent for such sharing, you may revoke it at any time.

We do not knowingly collect UK/EU Personal Information from children under the age of 16 without consent of the parent or guardian.

3. Automated Decision-Making and Profiling

We may use profiling and analytics to understand our customers and readers of our publications and to find potential influencers. We will not make automated-decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology.

4. When You are Required to Provide Personal Information to Charlesbridge

In most cases, you are not required by law to provide any Personal Information to Charlesbridge.  You are required to provide certain Personal Information if you want to enter a contest, sweepstakes or giveaway or if you want to receive communications or purchase products from us. Our data collection forms indicate which data elements are required. If you do not provide these data elements, we cannot do business with you.

5. Your Rights

As noted in the Privacy Policy, you always have the right to object to our marketing communications.  To opt-out of emails, simply click the link labeled “unsubscribe” at the bottom of any email we send you. To revoke permissions that you may have given to send text messages, text STOP in response to any message. 

Charlesbridge also respects the rights of EEA residents to access, correct and request erasure or restriction of their personal information as required by law.  This means:

• You generally have a right to know whether or not we maintain your Personal Information. If we do have your Personal Information, we will provide you with a copy (subject to the rights of others).  If your Personal Information is incorrect or incomplete, you have the right to ask us to update it.  In some cases, you may have the right to receive Personal Information that you provided to us back in a machine-readable format.
• You have the right to object to our processing of your Personal Information.
• You may also ask us to delete or restrict your Personal Information.

To exercise these rights, please contact us.

If you believe that we have processed your Personal Information in violation of applicable law, you may file a complaint with Charlesbridge or with a supervisory authority.

6. International Transfers

Charlesbridge is based in the United States. As noted in the Privacy Policy, your Personal Information may be stored or processed in the United States and other countries which may not have equivalent privacy or data protection laws. By using our website, you consent to these transfers.

7. Data Retention

We will retain your Personal Information for as long as the information is needed for the purposes set forth in Section 2 above and for any additional period that may be required or permitted by law.  You may request that we delete your Personal Information by contacting us.

Unless we are required by law to retain your information, we will delete it as required by law.

8. How to Contact Us and our Head of Privacy

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy. You can also reach us via mail to the addresses given above.

To opt out of the “sale” or “sharing” of your personal information collected using cookies and other device-based identifiers as described above, you must be browsing from one of the applicable US states referred to above.