Post Date: May 18, 2018
Effective Date: May 25, 2018
Demandbase, Inc. and its subsidiary, Demandbase Ltd. (collectively, “Demandbase”, “we” or “us”) provides real-time B2B marketing, advertising, and personalization services through its technology (the “Demandbase Technology”) in addition to a software as a service platform for customers (the “ABM Platform”) and information collected through its partner portal. Demandbase provides its customers with insights and data on companies and information about business clients and prospects in addition to various services that use that data.
In some cases or in specific jurisdictions, the Demandbase Sites, Partner Sites, or other third-party sites on which we display ads may only permit the Demandbase Technology to receive data from you after you provide consent to cookies or the use of Demandbase Technology.
Through the Demandbase Site, including Demandbase sponsored marketing and promotions, you may be able to provide contact information, billing information, ask questions, register, or provide other information, some of which may be considered personal data that directly or indirectly identifies you, such as your name, email address, and contact details. We may also offer interactive functionality, such as forms or chat, that enable us or a third party service provider to collect data or interact with you.
Through the Demandbase ABM Platform, in certain configurations, customers may be able to provide additional data, including their authorized users’ and clients’ contact information. Demandbase uses this information only to provide customers with services and as otherwise agreed to in their respective agreements. Demandbase may derive insights from usage of these features and types of insight typically derived from customer usage and customer-provided data, but does not use any customer-provided data except to provide its services. If your account on the Demandbase ABM Platform is managed by an administrator, that account administrator may have control with regards to how your account information is retained and deleted. Administrators are able to request the deactivation of an account made for you through your company.
Through the Demandbase partner portal (available to select Demandbase partners), partners may provide their own and their authorized users’ and clients’ contact information. These partners may also provide demographic information and use the partner portal to conduct outreach.
The provision of information is sometimes required by law and at other times is a result of a contractual requirement. You may be required to provide information, for example in a case where we sign a contract with you, and the non-provision of information could, in certain circumstances, prevent a transaction from concluding.
We may receive data about you from sources other than from Demandbase Sites, such as third-party partners, email campaigns, public sources, and marketing partners. Such third-party data may include demographic information, company information, and personal data such as contact details. We may also generate or receive predicted data about business users such as characteristics, interests, or business buying behavior.
For automatic data collection, Demandbase uses tracking pixels, web beacons, and cookies to collect information. Demandbase may use these technologies either alone or in conjunction with each other.
Demandbase uses data in the following ways:
Where we intend to process your personal data for a purpose other than the purpose for which it was collected, we will provide you with information regarding the purpose for the processing, as well as other relevant information, prior to processing your personal data for the new purpose.
Depending on the circumstances, Demandbase will use different legal bases to process personal data. For example, in some jurisdictions, when a user explicitly consents, then Demandbase may place cookies on the user’s machine. In other circumstances, Demandbase processes personal data to fulfill a contract (such as managing its customers), when required to do so by law, or if necessary to protect your interests or the interests of a third party. Demandbase may also process data when it’s in Demandbase’s legitimate interests. Demandbase will only use the legitimate interests basis to process data in the event that such interests are not overridden by the fundamental rights and freedoms of individuals. A few examples of these legitimate interests may be to provide its services, process data, conduct direct marketing, and maintain security.
Demandbase may retain data collected through its services for customers as follows:
After this, Demandbase may either aggregate, anonymize or pseudonymize data it collects, such as the Tag Data, so that it is no longer reasonably associated with an identified or identifiable natural person and use it for any business purpose. However, Demandbase may retain this information in a form where it is reasonably associated with an identified or identifiable natural person for longer periods of time when required under law.
Customers and other third parties may combine the data we share (including personal and demographic data) with additional data they have for their marketing and sales purposes. Demandbase offers a real-time technology, so data provided by the Demandbase Technology and the Demandbase ABM Platform, its services, any other technology, and other related data collected and derived insights may be shared with third parties in real-time.
Demandbase takes reasonable steps to safeguard the information we collect through the Demandbase Site and Partner Sites, such as employing measures like encryption or hashing, where appropriate. Demandbase takes reasonable and appropriate measures to prevent against loss, misuse and unauthorized access, disclosure, alteration and destruction. For example, Demandbase has undergone an independent third-party examination through a System and Organization Controls (SOC) Report for its services. Demandbase makes available a copy of its SOC 2 Report to current customers upon request.
In the event you suspect a vulnerability, please share such details confidentially with Demandbase at firstname.lastname@example.org. You should provide exact details of the suspected vulnerability so that Demandbase can verify and reproduce your results. Please do not publish or share any details of the suspected vulnerability with third parties or online except with Demandbase’s permission once resolved.
Demandbase encourages you to choose a secure and secret password for your account. You should not disclose your Demandbase password to anyone. If you suspect that your password has been compromised, you must immediately notify Demandbase and change your password.
Demandbase encourages you to learn about phishing and social engineering. You should never provide any personal information in response to any email you suspect comes from Demandbase. If you need to change or update your account information, we encourage you to log directly into the Demandbase Site to change, update or modify your personal information. If you believe that you received a request for personal information in an email potentially sent by Demandbase, please contact us immediately at email@example.com.
Demandbase may transfer information that it processes to a jurisdiction with different privacy protections than yours. Demandbase processes and stores information in the United States and other countries.
In the event we send direct marketing emails to you, we will rely on the legitimate interests basis of processing and include an “unsubscribe” link at the bottom of all of our emails to allow you to object to Demandbase’s use of your personal information for this purpose. Click the link to unsubscribe and Demandbase will remove you from future emails within a reasonable amount of time.
Demandbase services are designed to make B2B advertising more relevant to its customers’ business needs. Opting-out of interest-based advertising won’t affect the number of ads that you see or allow you to opt-out of advertising; however, opting-out will make ads less relevant to you and your interests and allow you to opt-out of advertising from Demandbase. If you choose to opt-out, then you will no longer receive ads from Demandbase as long as the opt-out cookie is installed on your machine.
When serving interest-based advertising to you, Demandbase includes the Digital Advertising Alliance’s (“DAA”) AdChoices icon within such ads. This icon generally appears as in one of the corners of the ad and may be accompanied by text such as “AdChoices.” You can click on the icon to learn more about the ad and to opt-out of receiving ads from Demandbase in the future. Demandbase adheres to the DAA’s Self-Regulatory Principles for Online Behavioral Advertising. To learn more about the DAA and the AdChoices Icon, and to opt-out of interest-based advertising delivered by other participating companies, please visit:
The DAA opt-out requires the ability to set an opt-out cookie in your browser. Your opt-out choices only apply to the particular browser and device from which you have opted-out (ex. work computer vs. personal computer) and only to the applicable advertising channel (you may still receive interest-based advertising in-app or email marketing if you opt-out via web browser cookies) or otherwise not via cookies. Please note that if you delete, block, or otherwise restrict cookies or change your cookie preferences, or if you use a different computer or Internet browser, you may need to renew your opt-out choice. Cookie-based opt-out preferences do not apply to the Demandbase Technology used to personalize web content to companies.
Some browsers have incorporated “Do Not Track” (DNT) features, Demandbase does not respond to DNT signals.
Individuals located in some jurisdictions, including the EEA, have specific legal rights in relation to their personal data. Subject to the exemptions under law, you may have the right to request access to information, update, delete or correct the information. Under certain circumstances, you have the right to receive personal data that we store about you and transmit that information to another without hindrance from us, including requesting that we provide your information directly to another, i.e. a right to data portability. You may also request that we restrict or block the processing of your information. Where we previously obtained your consent, you have the right to withdraw your consent to the processing of your information.
If you would like to exercise any of your rights, please email firstname.lastname@example.org for further steps to do so. Demandbase will validate these requests and carry out the requests, if valid. If the request is not deemed valid, then Demandbase will share the reasons why it is not valid and your options for seeking resolution through a supervisory authority and through judicial remedy. These requests are typically free-of-charge; however, Demandbase may charge you an administrative fee in the event that the request is manifestly unfounded or excessive, such as multiple repetitive requests or additional copies. You have the right to lodge a complaint against us. To do so, contact the supervisory authority in your country of residence.
Individuals located in California may contact Demandbase at email@example.com with valid information sharing-disclosure requests. Once per calendar year, you may request a complete list of all personal information outlined under CA Civil Code section 1798.83 that is disclosed to third parties and the nature of that information. Demandbase will validate any requests received and for valid requests, share the categories information disclosed and the companies to which they were disclosed in the last year.
Demandbase does not direct Demandbase Sites or services to children under 16 and does not knowingly collect information from children under 16.
If you have any questions about our privacy practices or this policy, please contact us at firstname.lastname@example.org, or write us at:
680 Folsom Street #400
San Francisco, CA 94107
If you raise a concern regarding your data, we will take reasonable steps to investigate and attempt to resolve any complaints or disputes.
To contact our Data Protection Officer, please email email@example.com.
Demandbase has also appointed an EU Representative to act on our behalf and serve as a direct contact for supervisory authorities and data subjects. To contact our EU Representative, please email: GDPRrepresentative@demandbase.com.
If you have a business account with Demandbase, we will communicate with you through the business account contact details. For all others, if you provide us with contact information, we will reach out to you in accordance with provided details.