California and Virginia Privacy | Acer
California, Virginia, and Colorado Privacy Home Page
Last Update: July 2023
If you are a California, Virginia, or Colorado resident, you are entitled to certain specific rights as a consumer under your state's law(s) in addition to any rights that you have under Acer’s Privacy Policy. This policy provides you with information regarding those rights and how you may exercise them.
CATEGORIES OF PERSONAL INFORMATION THAT ACER COLLECTS AND HOW ACER USES THAT INFORMATION
ACER DOES NOT COLLECT YOUR PERSONAL INFORMATION FOR SALE TO ANY THIRD PARTY.
Categories of Personal Information Collected
- Name;
- Street address;
- City, state and zip code;
- Country;
- Language preference;
- Email address;
- Communication preferences (i.e. how do you want Acer to contact you?);
- Telephone number(s);
- IP address;
- Serial number;
- Order number;
- Contact preference (or similar indications of preference); and
- Summaries of your interactions with Acer (e.g., phone conversations with Acer Technical Support) when you purchase an Acer product or seek technical support.
Payment Card Information and Other Sensitive Personal Information
Acer does not directly collect sensitive personal information, such as social security numbers, drivers’ license numbers, passport numbers, geolocation data, and biometric data. Acer does not directly collect payment card information from you. When you make a purchase from Acer, a third party payment processor directly collects your payment information. If approved, Acer receives a digital “token” that includes the first six and last four digits of the payment card number, along with an authorization ID and transaction ID.
Purposes for Collecting Personal Information
Depending on the circumstances, whenever you provide Acer with your PI, Acer may use it for any or all of the following:
- To complete your purchase of our products;
- To confirm that your address is correct;
- To provide confirmation of your order and delivery of your order;
- To deliver your order to you;
- To provide you support in case of problems with your order;
- To enable you to return products;
- To process your payment and credit card information (see above regarding the collection and processing of credit card information);
- To issue you a refund;
- To detect and/or prevent fraud;
- To contact you (e.g., send you customer surveys) about our products and your customer experience;
- To provide you accurate, up-to-date information about your product, including warranty information, service bulletins and recalls;
- To send you marketing information about other Acer products;
- To provide service and support and improve our delivery of service and support services;
- To offer you extended service plans and other offers regarding the service of your product; and
- To make your browsing, shopping or service experience satisfying, informative and safe.
If You Don’t Complete Transaction in Acer Store. If you enter your name, address, telephone number and email address to checkout at the Acer Store, but don’t complete the transaction, we may collect some or all of that information and use it to contact you to see whether you are still interested in the product and whether we can further assist you.
General Business Purposes. Acer may also use the personal information that you have provided for business purposes specifically authorized under state law, such as: auditing the interaction with consumers and concurrent transactions; detecting or preventing security incidents or other illegal activity and prosecuting the responsible parties; debugging; short-term transient uses, including non-personalized advertising; performing services on behalf of Acer or its service providers, such as customer service, order fulfillment, payment processing, financing and advertising marketing or analytic services; undertaking internal research for technological development and demonstration; and verifying or maintaining quality or safety or improving or upgrading a service or device owned, manufactured, or controlled by Acer.
Deidentified or Aggregated Consumer Information. To improve our products, services and marketing, Acer may use consumer personal information that has been deidentified or aggregated so that it cannot be reasonably used to infer information about, or otherwise be linked to a particular consumer. If Acer uses deidentified or aggregated data, if will take reasonable measures to ensure that the information cannot be linked to a consumer or household. Acer will only use this information in a deidentified or aggregated form and will not attempt to reidentify the information, except as needed to audit compliance with this commitment.
Sources of Personal Information
Acer collects personal information directly from you. When you make a purchase at the online Acer Store, you do not submit your payment card data directly to Acer, but rather to a secure third-party online payment processing partner with expertise in payment processing and data security. If approved, Acer receives a digital “token” that tells Acer that the purchase amount is authorized. As part of the tokenization process, Acer receives an authorization ID, a transaction ID, and the first six and last four digits of the payment card. Acer never receives the full payment card number, the security code or the expiration date. The entire transaction is performed via a secure and encrypted method.
Categories of Third-Parties With Whom Acer Shares Personal Information
To provide you with certain services related to our products, Acer may share your personal information with:
- Third-party technical service providers;
- Third-party payment card processors (as explained above); and
- Third-party fraud detection and prevention services.
YOUR CONSUMER RIGHTS AS TO PERSONAL INFORMATION COLLECTED BY ACER
In addition to the rights that you have under Acer’s privacy policy, you have certain rights under California law as to your personal information that the company has collects, uses, discloses or sells. ACER DOES NOT SELL YOUR PERSONAL INFORMATION. To the extent that any of these rights under state law are in conflict with or differ from the rights in the Acer privacy policy, these rights shall govern.
Right to Know About Personal Information Collected, Used, Disclosed or Sold. Upon Acer’s receipt of a verifiable request (see directions below), you have the right to request that Acer disclose the following upon Acer’s receipt of a verifiable request:
- The specific pieces of personal information Acer has collected about you;
- The categories of personal information that Acer has collected about you;
- The categories of sources from which Acer has collected personal information about you;
- Acer’s business or commercial purpose for collecting or selling personal information; and
- The categories of third parties with whom Acer shares personal information.
Acer shall take steps to disclose and deliver your personal information to you, free of charge, either by mail or in an electronic format. If delivered electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows you to transmit this information to another entity without hindrance. Acer is not required to provide your personal information to you more than twice in a 12-month period.
Right to Deletion of Personal Information Collected, Used, Disclosed or Sold. Upon Acer’s receipt of a verifiable request (see directions below), you have the right to request that Acer delete any personal information. There are a number of exceptions to this requirement. Acer may retain any your personal information if retention is necessary to: (1) complete the transaction for which the personal information was collected; (2) provide a good or service requested by the consumer or reasonably anticipated by the business relationship; (3) perform under a contract with the consumer; (4) detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity (or prosecute those responsible); (5) debug to identify and repair errors; (6) comply with the California Electronic Communications Privacy Act; (7) use internally in ways aligned with the expectations of the consumer based on the consumer’s relationship with the business; (8) comply or fulfill a legal obligation; or (9) in a lawful manner that is compatible with the context in which the consumer who provided the information.
Right to Opt Out of Sale of Personal Information. ACER DOES NOT SELL YOUR PERSONAL INFORMATION. Nevertheless, you should know your rights under state law. You have the right, at any time, to direct a business that does sell your personal information to third parties to stop the sale of that information. In California, state law has expanded this right to your right to opt out to the sharing of personal information for cross-context behavioral marketing purposes. Acer does not share your personal information for cross-context behavioral marketing purposes.
Right to Correct. You have the right to request that Acer correct any inaccurate personal information in Acer’s records.
Right to Restrict Sensitive Personal Information Processing. State law gives you the right to restrict how Acer uses and discloses sensitive personal information, but only if it is used for the purpose of inferring characteristics about you. ACER DOES NOT USE SENSITIVE INFORMATION TO INFER CHARACTERISTICS ABOUT YOU. But you should understand your rights under California law.
Sensitive personal information includes:
- Personal information that reveals your social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; or genetic data.
- The contents of your mail, email, and text messages unless the business is the intended recipient of the communication.
- The processing of biometric information for the purpose of uniquely identifying an employee; and
- Personal information collected and analyzed concerning your health, sex life, or sexual orientation.
If Acer were using this sensitive information in this way (which it does not), you could restrict Acer’s use and disclosure of this information to:
- Actions that are necessary for the performance of services or provision of goods and that an average consumer requesting those goods or services would reasonably expect.
- Uses that helps to ensure security and integrity, but only to the extent that the use is reasonably necessary and proportionate.
- Short-term, transient use, such as non-personalized advertising shown as part of a consumer’s current interaction with the business, if the business does not: disclose the sensitive personal information to another third party; or use it to build a profile about the consumer or otherwise alter the consumer’s experience outside their current interaction with the business.
- Services performed for the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, or providing financing, analytic services, storage, or similar services for the business.
- Activities required to: verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business; and improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
- Purposes otherwise authorized by California Privacy Rights Act regulations, including to ensure the functionality of the business’s operations.
Right Not to Be Discriminated Against for Exercising Your Rights. State law prohibits a business from discriminating against you for exercising any of your rights under state privacy laws, including the rights above. The law provides a number of examples of what a business cannot do to you for exercising your rights:
- Denying good or services;
- Charging different prices or rates for goods and services, including through the use of discounts or other benefits or imposing penalties;
- Providing a different level or quality of goods or services; or
- Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
These are just examples and other adverse actions taken against you for exercising your rights may be prohibited.
SUBMITTING A REQUEST
Before Acer can honor your request to delete or know your personal information, Acer must be able to verify that you are the person making the request. Therefore, we will need to get some information from you before we can process your request.
Two Ways to Submit a Verifiable Request. Acer gives you two ways to provide this information and make a verifiable request.
- Online Form. You may provide this information through an online form.
- Toll Free Number. You can also call (866) 301-9774 and follow the prompts to leave the required information.
Confirmation. Once Acer receives your information, we will send you a confirmation. That confirmation will provide you with information about how Acer will process your request and may ask you for additional information that you need to provide or actions that you will need to take. If you are (i) requesting to know specific pieces information, or (ii) requesting that we delete your personal information, you will need to provide Acer with a signed declaration, under penalty of perjury, that you are actually the person whose personal information is the subject of the request. Additionally, if you are requesting that Acer delete your personal information, you must separately (from your original submission) confirm that you want your personal information deleted before Acer deletes that information.
Requests Through Authorized Agents. You may make a request to know or a request to delete through an authorized agent. In order to make such a request, the agent must submit proof of your written permission to serve as your authorized agent and provide satisfactory verification of their own identity. This does not apply when you have provided the authorized agent with a power of attorney pursuant to Probate Code sections 4000 to 4465.