Jotform Privacy Policy changes — 20230901_rev01

180

Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).

181

182

#### **Complaints**

183

184

You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).

185

186

### **Privacy Shield / EU-U.S. Data Privacy Framework (DPF)**

186

### **EU-U.S. Data Privacy Framework ("DPF")**

187

188

Despite the July 12, 2016 decision of the European Commission's Decision (EU) 2016/1250 regarding Privacy Shield, the U.S. Department of Commerce still requires adherence to Privacy Shield Principles. As such, Jotform is committed to complying with those principles and to remain certified by the U.S. Department of Commerce. Where applicable, Jotform has committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield) for more information. Jotform is committed to abiding by the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability.

188

We participate in and are committed to complying with the DPF. Here is a link to the DPF List of participating organizations. (This link will be provided/updated when the DPF organization provides it).

189

190

On July 10, 2023, the European Commission adopted an [adequacy decision](https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf) regarding the EU-U.S. Data Privacy Framework (DPF). See this web [page](https://www.dataprivacyframework.gov/s/) for DPF information. This decision lays the groundwork for organizations to certify to the DPF, reducing obstacles to transfers of personal data from the EU to the U.S. Jotform is committed to complying with the DPF principles.

190

See the "Information We Collect" section above for information on what personal data we collect, and the "How We Use and Disclose Your Information" section for information on how we use such data and to whom we may disclose it. Whatever personal data our user or customer (the data "controller") collects via submissions to their forms on our platform is determined by the user or customer on the one hand and by the persons who fill in and submit their forms on the other hand.

191

192

See above for information on the choices you have concerning limiting the use and disclosure of your data, and your right to access your personal data. We are subject to the investigatory and enforcement powers of the FTC. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. See above. We may be liable for onward transfers to third parties if and to the extent determined by law.Complaints regarding our compliance with the DPF may be subject to binding arbitration before the American Arbitration Association in the US - see our [terms of use](https://www.jotform.com/terms/). You may address any complaints directly to us using [this form](https://www.jotform.com/privacyconcerns/), free of charge, worldwide.

193

192

194

### **How to Contact Us Regarding Your Personal Information**

193

195

194

196

If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).

195

197

196

198

### **Representation for Data Subjects in the EU**

197

199

198

200

We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.

199

201

200

202

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921

201

203

202

Last Update: Jul 13, 2023

204

Last Update: Aug 18, 2023

 Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).
 #### **Complaints**
 You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).
+### **Privacy Shield / EU-U.S. Data Privacy Framework (DPF)**
+### **EU-U.S. Data Privacy Framework ("DPF")**
+Despite the July 12, 2016 decision of the European Commission's Decision (EU) 2016/1250 regarding Privacy Shield, the U.S. Department of Commerce still requires adherence to Privacy Shield Principles. As such, Jotform is committed to complying with those principles and to remain certified by the U.S. Department of Commerce. Where applicable, Jotform has committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield) for more information. Jotform is committed to abiding by the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability.
+We participate in and are committed to complying with the DPF. Here is a link to the DPF List of participating organizations. (This link will be provided/updated when the DPF organization provides it).
+On July 10, 2023, the European Commission adopted an [adequacy decision](https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf) regarding the EU-U.S. Data Privacy Framework (DPF). See this web [page](https://www.dataprivacyframework.gov/s/) for DPF information. This decision lays the groundwork for organizations to certify to the DPF, reducing obstacles to transfers of personal data from the EU to the U.S. Jotform is committed to complying with the DPF principles.
+See the "Information We Collect" section above for information on what personal data we collect, and the "How We Use and Disclose Your Information" section for information on how we use such data and to whom we may disclose it. Whatever personal data our user or customer (the data "controller") collects via submissions to their forms on our platform is determined by the user or customer on the one hand and by the persons who fill in and submit their forms on the other hand.
+See above for information on the choices you have concerning limiting the use and disclosure of your data, and your right to access your personal data. We are subject to the investigatory and enforcement powers of the FTC. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. See above. We may be liable for onward transfers to third parties if and to the extent determined by law.Complaints regarding our compliance with the DPF may be subject to binding arbitration before the American Arbitration Association in the US - see our [terms of use](https://www.jotform.com/terms/). You may address any complaints directly to us using [this form](https://www.jotform.com/privacyconcerns/), free of charge, worldwide.
 ### **How to Contact Us Regarding Your Personal Information**
 If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
 ### **Representation for Data Subjects in the EU**
 We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.
 Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921
+Last Update: Jul 13, 2023
+Last Update: Aug 18, 2023

Privacy Policy

Full text changes — 20230801_rev01 to 20230901_rev01