Last updated: August 23, 2022
This site is not intended for use by individuals under the age of 18.
WHAT THIS POLICY COVERS
Tulip respects your statutory data subject rights. If Personal Information pertaining to you as an individual has been submitted to us by a Tulip Customer and you wish to exercise any rights you may have to, inter alia, access, correct, amend, or delete such data, please inquire with the Customer directly. If you wish to make your request directly to Tulip, please provide the name of the Tulip Customer that submitted your data to our Services. We will refer your request to that Customer, and will support them as needed in responding to your request within a reasonable timeframe.
THE CATEGORIES OF PERSONAL INFORMATION WE COLLECT
The categories and types of Personal Information collected directly from or about you may include, without limitation:
Contact information, including identifiers: Information used to communicate with you, such as first and last name, title, company name, email address, telephone number, and postal address;
Account and commercial information: Information that Tulip maintains in association with your account, such as your account number, username/user ID, password, payment information, purchase records, information about your use of the Services, information about your registration or participation in a class, certification, training, webcast or other event, your preferred language and other preferences, credit and billing status and support inquiries;
Professional or employment-related information: Information contained in your job inquiries or applications, such as resume, cover letter, age, education, professional history and contact details;
Internet or other similar network activity information (“Internet Information”): Information collected when you visit a website, such as IP address, language and locale settings, browsing history, information on your interaction with the website, browser type, version and language, native client type and version, operating system, location, date and time; and
Inferences: Information drawn from the Personal Information collected above, such as what topics you may be interested in based on the areas of the website you visit or what products you may be interested in based on purchase records.
When you visit the Websites, we may request that you provide Personal Information, and we collect Internet Information. Often you are able to choose what information you provide, but from time to time we may require certain information from you in order for us to provide the Services or in order for you to take advantage of certain content on the Websites (e.g., Tulip University courses).
Tulip generally does not collect sensitive Personal Information, which is data such as your religious or philosophical beliefs, racial or ethnic origin, health or medical information (other than for the purpose of responding to an accommodation request for an event), genetic or biometric data, bank account information (other than for the purpose of processing your order) or other similar sensitive Personal Information as such term is defined under applicable law. If Tulip reasonably needs to collect any sensitive Personal Information from you, Tulip will obtain your consent for the collection of such Personal Information as may be required under applicable law.
HOW WE COLLECT PERSONAL INFORMATION
Tulip collects Personal Information directly from you and from other categories of sources as described in more detail below. The categories of Personal Information collected directly from you by Tulip include all of the categories identified above in "The Categories of Personal Information We Collect" section. Tulip collects Personal Information directly from you when you interact with us through the Websites and when you use our Services, including when you:
Create a user account (individual or corporate);
Request customer service or support;
Register for or participate in a course, certification, training, webcast or other event;
Request information or materials;
Participate in surveys or evaluations;
Participate in promotions, contests, or giveaways;
Apply for employment;
Submit questions or comments; or
Input, submit, post, upload, transmit, store or display content that you create in the process of using our Services or Websites if such content includes any Personal Information that you choose to include (“passively-collected Personal Information”).
Combination of Personal Data. Personal Information we collect online may also be combined with Personal Information you provide to us through offline channels such as through a call center, during an interview or in conjunction with a Tulip event you attend.
Analytics. We and our analytics providers may also collect diagnostic and other information indirectly from you relating to your use of our Websites and Services through the use of various technologies (with your consent where necessary). The categories of Personal Information collected in this manner are what we refer to above as “Internet or other similar network activity and inferences,” or Internet Information. Collecting information in this manner allows our engineers to improve Tulip Services and allows us to analyze the effectiveness of our Websites, Services, operations, systems, and marketing efforts, personalize your experience and improve our interactions with you. For more information about the technology we employ for these purposes, see the "Cookies and Other Technology" section below. You can disable our collection of analytics information from products via the administrator settings or by blocking collection at the local network level.
Customer-Generated Content and Applications. In addition to information gathered through the Websites or submitted to the Services, we may obtain Personal Information through Customer-Generated Applications running on the Tulip Player (“Customer-Generated Applications”) that Customers or their authorized individuals (“Users”) create and run on Customer or User devices (“Devices”). Customer-Generated Applications may obtain information from, or access data stored on, Devices to provide services related to the relevant Customer-Generated Application. Customer-Generated Applications may provide Tulip with information related to Users’ use of the Customer-Generated Application, information regarding Users’ computer systems, and information regarding Users’ interaction with Customer-Generated Applications, which Tulip may also use to provide and improve the Services. Customers configure Customer-Generated Applications and can upload content (“Customer Content”).
Supplementing Personal Information. We may also supplement the Personal Information we collect from you with additional Personal Information we receive from third parties, such as your employer, Customers, and our business partners where you purchase any of our Services through such business partners. The categories of Personal Information we receive from this type of third party includes account and commercial information and professional or employment-related information. We do this to help us improve the overall accuracy of the information and its completeness and to help us better tailor our interactions with you.
HOW WE USE (PROCESS) YOUR PERSONAL INFORMATION
|Processing Purpose||Categories of Personal Information||Lawful Basis|
|To Communicate with you, including responding to your comments, questions, and requests||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in facilitating our Customers’ use of our Services and on the basis that it is necessary in order for use to provide the Services.|
|Provide customer service and support||contact information, including identifiers; account and commercial information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in facilitating our Customers’ use of our Services and on the basis that it is necessary in order for use to provide the Services.|
|Provide you with information about services, features, surveys, newsletters, offers, promotions, contests and events; providing other news or information about us and our select partners||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in promoting our Services, events and product offerings, and in managing our business.|
|Provide you with technical notices, updates, security alerts, and support and administrative messages||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in that it is necessary in order to provide the Services; this processing is also covered by the applicable agreement between a Customer and Tulip.|
|Send information (other than marketing communications) which we think may be of interest to you or that you have consented to receiving by post, email, or other means||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in providing our Services and in providing related information that we think may be helpful or of interest.|
|Send you marketing communications relating to our business or the businesses of carefully-selected third parties which we think may be of interest to you||contact information, including identifiers; account and commercial information||Where required by applicable law, we will obtain your consent before sending marketing messages. It is in our legitimate business interests to provide customers/prospective customers and the public with information about our Services, and events.|
|Process and complete transactions, and send you related information, including purchase confirmations and invoices (note: if you give us credit card information, we use it solely to check your financial qualifications and collect payment from you - we use a third-party service provider to manage credit card processing)||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in that it is necessary in order to provide the Services; this processing is also covered by the applicable agreement between a Customer and Tulip.|
|Provide and deliver Services||contact information, including identifiers; account and commercial information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in that it is necessary in order to provide the Services.|
|Monitor/analyze trends, usage, and activities in connection with our Services and for marketing/advertising purposes||internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in that it is necessary in order to provide the Services.|
|Investigate and prevent fraudulent transactions, unauthorized access to our Services, and other illegal activities||contact information, including identifiers; account and commercial information; professional or employment related information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in preventing fraud and in increasing the reliability of our Website and Services.|
|Process your job application when you apply for a position at Tulip||contact information, including identifiers; professional or employment-related information||It is in our legitimate business interests to be able to review the qualifications of prospective employees and perform human resources functions with regard to our employees.|
|Comply with requests of law enforcement or data protection agencies||contact information, including identifiers; account and commercial information; professional or employment-related information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in protecting our company and/or complying with the law.|
|Seek your opinion or feedback on our Services or industry questions||contact information, including identifiers; account and commercial information||We process Personal Information on the basis of our legitimate interest in improving our Services and on the basis that it is necessary in order for use to provide the Services.|
|Facilitate seamless access to all of our Services to which you have subscribed||contact information, including identifiers; account and commercial information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in that it is necessary in order to provide the Services.|
|Enforcing our legal rights or comply with legal requirements||contact information, including identifiers; account and commercial information; professional or employment related information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in protecting our company and/or complying with the law.|
|comply with a legal or regulatory obligation||contact information, including identifiers; account and commercial information; professional or employment-related information; internet or other similar network activity; and inferences.||We process Personal Information on the basis of our legitimate interest in protecting our company and/or complying with the law.|
We may post customer testimonials and comments on our Websites, which may contain Personal Information. We obtain each customer’s consent via email prior to posting the customer’s name and testimonial.
Retention of Personal Information. Tulip will retain your Personal Information for only as long as is required to fulfill the purposes for which the information is processed or for other valid reasons (for example to comply with our legal and regulatory recordkeeping and other obligations, resolve disputes, enforce our agreements and for the establishment, exercise or defense of legal claims). We also maintain log files for internal analysis purposes. These log files are generally retained for a brief period of time, except in cases where they are used for site security and safety, to improve site functionality, or we are legally obligated to retain them for longer time periods. If such log files are maintained for a longer time period, they are anonymized and are not associated with Personal Information. We will remove this information from our servers at an earlier date if you so request, as described in “Opting-Out and Unsubscribing” below.
Marketing Emails: Please note that if you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services. Every marketing email we send will provide you with the option to opt out of receiving future emails.
HOW WE DISCLOSE (SHARE) YOUR PERSONAL INFORMATION
Tulip discloses Personal Information to the following people or entities for the following business purposes:
Service Providers. We may provide third-party service providers (such as training, implementation and certification partners, data storage and marketing vendors, software providers, and credit card payment processing partners) access to your Personal Information to perform services for visitors to our Websites on our behalf. We contractually require our service providers to provide protection for personal information and to limit the use of such information solely for the purpose of providing the specified services on our behalf.
Other Providers of Products and Services. From time to time, Tulip may partner with other companies to jointly offer products or services. If you voluntarily purchase or specifically express interest in a jointly–offered product or service from or through Tulip, we may share your information in connection with your purchase or expression of interest with our partner(s). We contractually require such providers to provide protection for Personal Information, to only use your information to perform these tasks on our behalf, and to not disclose or use your information for other purposes. Engaging such third party service providers is often necessary for us to provide Services to you, particularly where such companies perform roles such as payment processing or shipping. In some cases these service providers are not strictly necessary, but help to improve our services by conducting research into how we could better service our users. In such cases we have a legitimate interest in working with these third party Service Providers. If you do not wish for your information to be shared in this manner, you may opt not to purchase or specifically express interest in a jointly offered product or service.
COOKIES AND OTHER TECHNOLOGIES
web beacons also known as image tags, pixel tags, clear GIFS or web bugs which are clear electronic images that can recognize certain types of information on your device, such as cookies, when you viewed a particular website tied to the web beacon, and a description of a website tied to the web beacon;
software development kits (usually referred to as SDKs), which serve a similar purpose to cookies and which allow us to monitor and improve our website; and
embedded scripts which is programming code that is designed to collect information about your interactions with the website, such as the links you click on.
Performance Cookies: These Cookies allow us to track visits on our website so that we can measure and improve the performance of our website and understand which access points are the most or least popular, or to record error messages on the website.
Functional Cookies: These Cookies allow us to improve the functionality and personalization of the website. They ensure that your end device is maintained and help us to include third-party services on the website.
Advertising Cookies: These Cookies help us to personalize your online experience and to provide targeted advertising based on your interests and previous browsing history.
Strictly Necessary Cookies: These Cookies are technically necessary for the functioning and management of the website cannot be disabled in our systems.
In addition, we collect data by running queries against website content across our user base for the purposes of generating Usage Data. "Usage Data" is aggregated data about a group or category of services, features or users that can contain Personal Information.
Consent and Legitimate Interest in ProcessingThe placement and subsequent processing of Strictly Necessary Cookies is based on our legitimate interest or in order to provide you with an expressly requested tele media service. Our legitimate interest is to provide you with a technically optimized, user-friendly and appropriate website and/or Service. We use other types of Cookies only with your consent. You can withdraw your consent at any time with effect for the future, e.g. by managing your Cookie settings on the website and/or Service or by sending an e-mail to the contract details set out herein.In addition, most Web browser settings allow you to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Websites. Third party ad networks may collect information about your visits to our Websites and other websites, such as your IP address, your Internet service provider, and the browser you use to visit our websites. They do this using cookies, web beacons or other technologies. You will be provided with the choice of whether to accept or decline these cookies and can update your preferences at any time using the “Cookie Preferences” link in the footer.
YOUR RIGHTS AND CHOICES
In accordance with the laws of certain countries, you may have certain rights and choices regarding the Personal Information we collect and maintain about you, and how we communicate with you.
- The right to request information about our use of your Personal Information (e.g., the pieces and categories of Personal Information we have; the categories of sources, purposes for collection, the third parties with whom we have shared Personal Information, and Personal Information we have disclosed);
- The right to review and access your Personal Information including the right to obtain a copy of your personal data;
- The right to rectify (correct, update or modify) the Personal Information we hold about you;
- The right to erase (e.g., delete), de-identify, anonymize or block your Personal Information;
- The right to restrict our use of your Personal Information;
- The right to object to to our processing of your Personal Information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
- The right to request the transfer of your Personal Information we hold about you to a third party; and
- The right to lodge a complaint with your local data protection authority (in the EU: your EU Member State of habitual residence, place of work or where the alleged infringement of data protection law occurred).
If you would like to exercise any of these rights, you may do so by contacting firstname.lastname@example.org. If you have submitted a valid European Union General Data Protection Regulation data subject access request to exercise your right to be forgotten we will delete your personal data without undue delay after receiving the request. For California consumers, you may also submit requests by calling Tulip’s U.S. toll free number at 833.468.8547.
Where the GDPR, LGPD, CCPA, PIPL or similar legal requirements apply, you also have the right to withdraw any consent you have given to uses of your Personal Information. If you wish to withdraw consent that you have previously provided to us, you may do so by contacting email@example.com. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal, nor will it preclude our ability to retain your Personal Information for legal reasons.
Where the GDPR, LGPD, CCPA, PIPL or similar legal requirements do not apply, Tulip grants you the ability to access, modify, or update some of your Personal Information online at any time. You may log in and make changes to your information, such as your password, your contact information, your general preferences, and your personalization settings. If necessary, you may also contact us at firstname.lastname@example.org and describe the changes you want made to the information you have previously provided. However, note that changing or deleting information necessary for Tulip to assist with support and customer service may result in a delay or interruption in assisting you.
You will be given an opportunity to tell us whether you would like to receive information, special offers, and promotional materials by email from Tulip or our business partners when you create a Tulip account, when you register for a Service, when you provide us with your Personal Information, or when we send you a marketing email. Where required by applicable law, we will obtain adequate consent to provide you with these marketing materials. You also have the ability to opt out of receiving marketing emails from Tulip at any time without cost by clicking on the “unsubscribe” link contained in our marketing emails or by contacting us at privacy.tulip.co. You can also exercise your rights and choices by contacting us as described below under "Contact Us." Please note that Customers cannot opt out of receiving transactional emails related to their account with us or our store as these communications are necessary for the completion of the Services.
When you exercise your privacy rights, such as those conferred by the GDPR, LGPD, CCPA or PIPL, you have a right not to receive discriminatory treatment by Tulip for the exercise of such privacy rights.
Before responding to a request for information about your Personal Information, we must verify the request. Verification is important to protect your information and to help confirm that we are responding to a valid request and providing the response to the correct individual. The information we ask to verify your identity may depend on your relationship with us.
When you exercise your privacy rights under the GDPR, LGPD, CCPA, PIPL or similar laws, you can designate an authorized agent or representative to make a request on your behalf by providing the authorized agent with written permission to do so and verifying your identity with us as part of the request, or by providing the authorized agent with Power of Attorney pursuant to applicable law (e.g., the California Probate code). We will ask the individual submitting the request to denote that they are an authorized agent or representative. When submitted by an authorized agent or representative, we ask the authorized agent or representative to provide name, email address and a description of the relationship with the individual who is the subject of the request and to certify that the representative has permission to submit the request, and may request proof of the consumer’s written permission.
Tulip has implemented reasonable and appropriate physical, administrative and technical safeguards to protect your Personal Information from unauthorized access, theft, use, modification, and disclosure. In addition, payment-related Personal Information (such as a credit card information) is collected for transactions with us, it is protected by our third-party payment processor. We also require that our business partners and service providers protect such information from unauthorized access, use and disclosure. Although we take reasonable precautions to assess the reliability of such technology, we rely on the statements of the vendors of those products and services as part of its security evaluation. While we have endeavored to create a secure and reliable site for users, the confidentiality of any communication or material transmitted to/from the site, and the security of your personal information, cannot be guaranteed. We urge you to take every precaution to protect your personal information when you are on the Internet. To help protect yourself, use a strong password, do not use the same passwords to access your Tulip accounts that you use with other accounts or services, and protect your usernames and passwords to help prevent others from accessing your accounts and services.
SOCIAL MEDIA, PUBLIC FORUMS AND LINKS TO OTHER WEBSITES
We may offer publicly accessible message boards, blogs, and community forums. Please keep in mind that if you directly disclose any information through our public message boards, blogs, or forums, this information may be collected and used by others. We will correct or delete any information you have posted on our servers if you so request, as described in “Opting-Out and Unsubscribing” below.
CHILDREN’S ONLINE PRIVACY
The following is not applicable to EU data subjects.
The Websites are intended for a general audience and not intended for or targeted at children under 13, and we do not knowingly or intentionally collect personal information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) in a manner not permitted by COPPA. If you are a parent or guardian and you believe you believe that we have collected information about your child in a manner not permitted by law, please contact us at email@example.com, so that we may delete the information to the extent required by applicable law.
We do not knowingly “sell” the personal information of minors under 16 years old who are California residents without their affirmative authorization.
If you are a California resident under 18 years old and registered to use the Websites, you can ask us to remove any content or information you have posted on the Websites. To make a request, email us at the email address set out in “Contact Us” section with “California Under 18 Content Removal Request” in the subject line, and tell us what you want removed. We will make reasonable good faith efforts to remove the post from prospective public view, although we cannot ensure the complete or comprehensive removal of the content and may retain the content as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Tulip is a global organization, with legal entities, business processes, and technical systems that operate across borders. Tulip may transfer and access your Personal Information to and from around the world, including the United States. The United States and other countries may not have the same data protection laws as the country from which you initially provided the information. This can result in disadvantages for you such as an impeded enforcement of data subject rights, a lack of control over further processing and access by state authorities. You legal remedies against this may be limited.
CALIFORNIA SUPPLEMENTAL PRIVACY STATEMENT ON SALE OF PERSONAL INFORMATION
Sale of Personal Data under California Law. Under the CCPA, a “sale” is defined to include disclosures of Personal Information to another business or a third party for monetary or valuable consideration. When you use Tulip websites, Tulip’s authorized partners may collect cookies and similar technology and use this data for their own purposes. This activity may qualify as a “sale” under the CCPA. You can make choices to allow or prevent such uses. Depending on your choices, during the past twelve months, we may have “sold” information within the following categories defined by the CCPA:
Internet or other similar network activity relating to your interactions with Tulip websites
Identifiers and location information, such as your IP address
Inferences about your interests