Data privacy

We will collect the following types of personal data about you and use it for the following purposes:

We retain this personal data for as long as necessary to complete the purpose for which it was collected, unless otherwise instructed by consumer, or unless otherwise disclosed at the time of collection.

We will use your information to supply you with the types of alerts you select during the registration process although you do have the option to change these preferences at any time.

Service Providers

We engage vendors to perform functions on our behalf such as: website, software, and data storage, content management, database management, technical integration, marketing automation, analytics, site optimization, conducting customer surveys, and payment processing.
There are circumstances in which the service provider collects data directly from you when their privacy policies may also apply.

Social Media Platforms

Where you choose to interact with us through social media, your interaction with these programs typically allows the social media company to collect some information about you through digital cookies they place on your device and other tracking mechanisms. In some cases, the social media company may recognize you through its digital cookies even when you do not interact with their application. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and controls they make available to you.

Third parties involved in advertising

We partner with third parties who assist us in serving advertising regarding the Services to others who may be interested in the Services. We also partner with third parties who use cookies to display interest-based advertising to you on the Services. These third parties may use tracking technologies on our website to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads. While we will not share information that identifies you by name with unaffiliated third parties for their own uses, such third parties may, with sufficient data from other sources, be able to personally identify you.

Corporate Affiliates

We may share data with other members of our group of companies.

Additional information about our data collection and sharing practices

Sharing of aggregated data

We may create and use aggregated or de-identified data at our discretion, such as by sharing it with marketing agencies, media agencies and analytics providers.

Combination of information

We may combine Personal data from the Services together and with other information we obtain from our business records. Additionally, information collected about you from a particular browser or device may be linked to information collected from another computer or device that we believe relates to you.

Change of ownership or corporate organization

We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy.

Our practices regarding information belonging to children

The Services are intended for users age eighteen and older. Rolls-Royce does not knowingly collect personal data from children. If we discover that we have inadvertently collected personal data from anyone younger than the age of sixteen, we will delete that information.

For detailed information on the cookies we use and the purpose for which we use them, please see the Cookies Section on this website.

We respect your privacy and do not sell, rent or loan any identifiable information collected on this site. Any information that you give us will be treated with the utmost care and security. It will not be used in ways to which you have not consented.

These third party service providers have access to your personal data needed to perform their functions, but may not use it for other purposes. Rolls-Royce ensures that these third party service providers will only process your personal data in accordance with this policy and applicable Data Protection legislation.

We will use appropriate safeguards to ensure that your personal data is treated securely and in accordance the Data Protection legislation in connection to such transfers or processing of your personal data outside the EEA.

We process the commonly used and industry standard GPC Signals but because this is new technology and new providers may offer solutions, we will do our best to recognize, process, and honour a GPC Signal that meets the legal standards and is widely adopted in the industry.

Your personal information will be held in Rolls-Royce's Alert Service systems for an indefinite period to manage our relationship with you. We will carry out periodic data reviews of this information to ensure that it is up to date and accurate. We will retain your personal data for as long as we have a specified, legitimate interest in doing so. This will be reviewed regularly and, if there is no longer a legitimate basis for us to retain your data, we will delete it. At that point we will securely destroy your personal information and only keep statistical information, such as how many times a document has been downloaded by an organisation.

For example, you may have the right to review, correct, and delete personal data we have about you, or to consent or withdraw consent to certain uses or sharing of personal data. You may be able to use our Products to access and update the personal data that you have provided to us. You may also exercise these rights by submitting a request as described in the “How to Submit a Request” section below.

If you are a resident of the United States, please read the “Information for Individuals Located in the United States” section of this Policy.

If you are resident of California, please also read the “Additional Notice for California Residents” section of this Policy. You may have additional rights in relation to your personal data.

If you are resident of Virginia or Colorado, please also read the “Additional Notice for Colorado, Connecticut, and Virginia Residents” section of this Policy. You may have additional rights in relation to your personal data.

If you are resident of Nevada, please also read the “Additional Notice for Nevada Residents” section of this Policy. You may have additional rights in relation to your personal data.

If you are a resident of the EEA (European Economic Area), please read the “Information for Individuals Located in the European Economic Area” section of this Policy.

Further to the information set out in the “Your Privacy Rights” section of this Policy, the following additional information may apply to you. Unless otherwise required by applicable law, the following terms shall have the following meanings:

• “Process” or “processing” means any operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion or modification of personal data.
• “Targeted advertising” or “Cross-context behavioural advertising” means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained from that consumer’s activities over time and across non-affiliated websites or online applications to predict such consumer’s preferences or interests.
• “Sale” or “sell” means renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal data by the business to a third party for monetary or other valuable consideration.
• “Share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, personal data to a third party for cross-context behavioural advertising.
• “Profiling” means any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person and in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.

Persons with disabilities may obtain this notice in alternative format upon request by contacting us at [email protected].

Categories of Personal Data Disclosed to Service Providers

We disclose personal data to certain third parties to enable them to fulfil the purposes described above. The personal data provided to our service providers is limited to that personal data which is necessary for them to fulfil these purposes. Our service providers have contractually agreed not to use your personal data other than as necessary to fulfil the applicable purposes and in accordance with the applicable state privacy laws. In the preceding 12 months, we have disclosed the categories of personal data described above with the following categories of service providers:

• Marketing and Advertising Providers
• Operating Systems and Platforms
• Customer Support Providers

We disclose personal data to our service providers in accordance with the purposes described above.

You may exercise the rights given to you by your state of residence by submitting a request as described in the “How to Submit a Request” section below.

Right to Know and to Access

Subject to certain exceptions, and legal obligations, you may have the right to request that we disclose certain information to you about our collection, use, and disclosure of your personal data, such as the following:

• The categories of personal data we collected about you;
• The categories of sources of that information;
• The business or commercial purposes for which we collect, sell or share personal data about you;
• The categories of personal data about you that we have disclosed about you and the categories of persons or vendors to whom it was disclosed for a business purpose; and
• The specific pieces of personal data we have collected about you.

This information is disclosed above in the “What personal data do we collect” section. To protect your personal data, we may request additional information to verify your identify before we act on your request. To the extent legally required, we will provide the information you request, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. We may provide this information to you via email to the email address you have provided with your request.

Right to Correction

You may have the right to request that we correct any inaccurate personal data we maintain about you. In response to your request, we may request additional information showing that the information you want to correct is inaccurate.

Right to Deletion

You may have the right to request that we delete your personal data. This right is subject to certain exceptions, and legal obligations imposed by state or federal laws including, without limitation, privacy and employment laws. We will delete or deidentify personal data not subject to one of these exceptions from our records and, to the extent required, we will direct our service providers to take similar action.

Right to Opt-Out

Depending on where you reside, you may have the right to opt-out of the processing of your personal data for the purpose of (i) the sale or sharing of your personal data to third parties, (ii) targeted advertising, or (iii) profiling.

Non-Discrimination or Retaliation

We will not discriminate or retaliate against you for exercising any of your data privacy rights.

Additional Notice for California Residents

“Share” and “sharing” as used in this section, does not include transfers of personal data described in this Privacy Policy as part of a corporate business transaction, such as a merger, acquisition, or joint venture, or in the event of insolvency, bankruptcy, or receivership. Should such an event occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with this Privacy Policy.

Categories of Personal Data Sold or Shared to Third Parties

We do not sell and have not sold your personal data or transferred personal data to third parties to use for their own benefit in the preceding 12 months. We also do not share your personal data for targeted or cross-context behavioral advertising, except as described below. Relatedly, we do not sell or share personal data of California residents under 16 years of age.

For more information about the collection and use of personal data by third parties who process information collected by cookies and similar technologies that we permit them to use on our Services, please refer to the “Cookies” section above. Our use of cookies and similar technologies may be considered a “sale” or “sharing” under certain states’ privacy laws.

Right to Limit Use and Disclosure of Sensitive Personal Information

California residents have the right to direct us to limit our use of your sensitive personal data that we use to infer characteristics about you to that use which is necessary to fulfil the purposes reasonably expected by an average consumer who requests those goods or services. We do not collect Sensitive Personal Information.

California "Shine the Light" Law

Residents of the State of California have the right to request information about other companies to whom the company has disclosed certain categories of personal data during the preceding year for those companies’ direct marketing purposes. If you are a California resident and would like to make such a request, please email us at [email protected].

Do Not Track

We do not currently recognize “Do Not Track” (DNT) signals sent by web browsers. However, we do recognize Global Privacy Control signals.

Additional Notice for Colorado, Connecticut, and Virginia Residents

Right to Appeal

If you are a Colorado, Connecticut, or Virginia resident that made a request to exercise any of the above data access rights, and we are unable to comply with your request, you may request to appeal our decision within a reasonable period time by contacting us at [email protected] with the subject line “Data Access Request Appeal.” Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

If after you complete the appeal process with us, you are still not satisfied with our response, you may contact your Attorney General to file a complaint. Below are the contact information for the appropriate entity where you can inquire about filing an appeal:

• For Colorado residents, to the Colorado AG at https://coag.gov/file-complaint/
• For Connecticut residents, to the Connecticut AG at https://www.dir.ct.gov/ag/complaint/
• For Virginia residents, to the AG at https://www.oag.state.va.us/consumercomplaintform.

Additional Notice for Nevada Residents

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, we do not engage in the sale of information.

Thus, you have the following legal rights against us with regard to your personal data, provided that the respective requirements are met. You can find further information on your rights and the relevant requirements on the EU Commission's website at https://commission.europa.eu/law/law-topic/data-protection/reform/rights-citizens_en.

Right of Access

As a data subject, you have the right to request confirmation as to whether we process personal data that concerns you. If this is the case, you have the right to information about this personal data, as well as other information, e.g., the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.

Right to Rectification and Completion

As a data subject, you have the right to demand the correction of incorrect personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.

Right to Erasure

As concerned data subject, you may have the right to the erasure your personal data. For example, if your personal data is no longer necessary for its original purpose, you have revoked your consent, or the personal data has been improperly processed.

Right to Restriction of Processing

As a data subject, you have the right to restrict the processing in the cases prescribed by law.

Right to Data Portability

As a data subject, you have the right, in the cases prescribed by law, to receive the personal data concerning you in a structured, common and machine-readable format.

Right of Objection

As a data subject, you have the right to object at any time to the processing of certain personal data concerning you for any reason relating to your particular situation.

Right to Revoke your Consent under Data Protection Law

You may revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out before the revocation is not affected.

Right to Complain to a Data Protection Authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you reside, your place of work or the place where the alleged infringement was committed, if you believe that the processing of your personal data violates the GDPR.

The data controller is Rolls-Royce, plc, with its address at Kings Place, 90 York Way, London, N1 9FX. Please contact us by sending an email to the Central Data Privacy email address: [email protected]. If you are a resident of the EEA or United States, your email will be forwarded to the relevant contact.

If you are concerned or have questions about how Rolls-Royce handles your personal data or to exercise any of these rights at any time please contact us at [email protected] and we will do our best to assist you.

Please note that you have the right to lodge a complaint with the UK Information Commissioner's Office (or any other appropriate supervisory authority), which may be accessed through the following link https://ico.org.uk/concerns/.