ShareThis Privacy Notice

DATED 2024-02-21 · VERSION 20240301_rev01 · COMPARED WITH 20240201_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20240201_rev01 to 20240301_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

3	3	ShareThis is committed to processing information in accordance with applicable laws (including where applicable the European Union's General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA") and as described in this Privacy Notice. For specific information about how ShareThis adheres to European, UK and Brazil data protection law and your rights as an EEA, UK, Swiss or Brazil data subject please click [here.]() For information about how ShareThis adheres to applicable U.S. Privacy laws in States such as California, Colorado, Connecticut, Nevada, Virginia, and Utah, please click [here]().
4	4
5	5	To access information for Publishers, please visit the Publisher Information page [here](https://www.sharethis.com/publisher/).
6	6
7	7	To access Publisher Terms of Use, please click [here](https://sharethis.com/publisher-terms-of-use/).
8	8
9		Last Updated on: January 30, 2024
	9	Last Updated on: February 21, 2024
10	10
11	11	- * *
12	12
13	13	ShareThis provides website operators ("Publishers") with customizable social sharing tools, which makes sharing online content simple. Any user of a website can easily share anything on the web with their friends on social sites, such as Facebook, Twitter, Email, Digg, Reddit and more through using one of our tools on that website ("ShareThis Icon").
14	14
15	15	ShareThis also collects pseudonymous data about internet users and how they interact with content, websites, and advertisements while online. Some of the data is collected via our tools such as the ShareThis Icon, and some is collected through third-party data providers. We compile this data and provide it to our Publishers and license it to advertisers, agencies, and other businesses (our "Customers") to facilitate the delivery of relevant, targeted advertising and for a number of other reasons which are listed below.
78	78	The characteristics by which we group users relate to age ranges, income ranges, education, gender, product or activity interests and family composition (e.g., how many children in the family), on the basis of information available about the typical audience of websites they visit and content viewed.
79	79
80	80	In certain cases where Publishers that we work with utilize the "Google Analytics By ShareThis WordPress" plug-in on their websites, ShareThis uses a Google Analytics feature currently known as Google Analytics Demographics, in order to better understand the audience demographics of those Publisher websites, and to provide insights about those demographics to the Publishers that own or operate those websites. To learn more about Google Analytics' privacy practices, please click [here](https://support.google.com/analytics/answer/6004245). To opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, please click [here](https://tools.google.com/dlpage/gaoptout), or you may also visit the [NAI consumer choice page](https://optout.networkadvertising.org/).
81	81
82	82	In the U.S., ShareThis creates modeled segments based off of demographic attributes where those attributes are aligned with the target audience of products marketed by pharmaceutical drug companies.
83	83
84		If you would like to see a list of the types of Profile Information used by ShareThis, including any Profile Information that is health or political in nature (U.S. only), please [click here.](https://sharethis.com/privacy-audiences/) ShareThis does not create Profile Information based on topics we believe to be sensitive under applicable law, or based on visits to adult entertainment websites.
	84	ShareThis does not create Profile Information based on topics we believe to be sensitive under applicable law, or based on visits to adult entertainment websites.
85	85
86	86	1.3 How we obtain Usage Data and Profile Information
87	87
88	88	We collect Usage Data when your device visits our website, uses or interacts with our services (including sharing content with the ShareThis Icon), when your device visits Publishers' websites that use ShareThis Publisher Applications, and when your device views or clicks advertisements that we serve or are served on our behalf. We do so by using cookies placed on your browser (to the extent that cookies are not-restricted by the browser), pixel tags, and HTTP headers (or other communication protocols) and the use of hashed email address. We may also use probabilistic IDs generated via the user agent string and IP address when cookies are restricted by the browser.
89	89
90	90	_Our use of Cookies and other Tracking Technologies_
215	215	If you are located in Brazil, then the Brazilian General Law for the Protection of Personal Data (LGPD) applies to our processing of personal data. The LGPD grants those located Brazil a set of clear privacy rights and imposes responsibilities on ShareThis as we process the personal data of data subjects located in Brazil. The ShareThis privacy policy outlines how and why ShareThis processes personal data. This section is designed to provide more information on how ShareThis adheres to the LGPD and your rights as a data subject located in Brazil.
216	216
217	217	- * *
218	218
219	219	Definition of Personal Data
220	220
221		The LGPD defines personal data broadly. As such, where Usage Data and/or Profile Information relates to an individual in the Brazil, we treat it as personal data. Similarly, nearly all of the data collected from EEA, Swiss, and UK data subjects in the context of our normal business operations is likely to be considered personal data. This includes: a) data collected via visits to ShareThis.com; b) data collected from Customers, Publishers and business partners; and c) data collected from employees and prospective employees, as applicable.
	221	The LGPD defines personal data broadly. As such, where Usage Data and/or Profile Information relates to an individual in Brazil, we treat it as personal data. Similarly, nearly all of the data collected from EEA, Swiss, and UK data subjects in the context of our normal business operations is likely to be considered personal data. This includes: a) data collected via visits to ShareThis.com; b) data collected from Customers, Publishers and business partners; and c) data collected from employees and prospective employees, as applicable.
222	222
223	223	Special Categories of Personal Data
224	224	ShareThis does not collect nor process any special categories of personal data with respect to data subjects in Brazil.
225	225
226	226	Legal Basis for Processing
227	227	The LGPD entities seeking to process personal data to have a valid legal basis for doing so. The legal basis utilized by ShareThis include: a) consent; b) legitimate interest (i.e., where we believe that our need to process the data and/or the value we deliver by processing such data is not outweighed by the rights of the data subject); c) where necessary for the performance of a contract; and d) where processing is necessary to comply with our legal obligations.
339	339	ShareThis is a member in good standing with the NAI. The NAI offers an online [web opt-out platform](http://www.networkadvertising.org/choices/) to allow consumers to express their choices and provides general information related to privacy and [Interest Based Advertising](http://www.networkadvertising.org/understanding-online-advertising).
340	340
341	341	The Digital Advertising Alliance (DAA):
342	342
343	343	ShareThis adheres to the Digital Advertising Alliance Self-Regulatory Principles for Online Behavioral Advertising. The [DAA opt-out platform](http://www.aboutads.info/choices/) offers the consumer a choice page to opt out from advertising services, and general information related to privacy.
344	344
345		GDPR and Swiss Privacy Shield:
346
347		ShareThis, Inc. is committed to protecting data and enabling individual privacy rights in every location we do business. Therefore, we comply with the GDPR and the EU-US and Swiss-US Privacy Shield Frameworks.
348
349		In accordance with the GDPR, which is designed to empower and protect the data privacy rights of EU individuals, ShareThis makes available user consent tools (ShareThis is a registered CMP with the IAB Transparency and Consent Framework), as well as facilitating user data rights outlined throughout this notice.
350
351	345	VII. User Choices and Opt-out Rights
352	346
353	347	If you do not want to receive advertisements based on Usage Data and Profile Information collected by ShareThis on your current browser, you can change and manage your preferences in relation to the collection and processing of Usage Data and Profile Information by clicking the ShareThis opt-out button available on this privacy policy. When data subjects opt-out, ShareThis will stop profiling, engaging in targeted advertising and/or selling or otherwise transferring data about their browser or device to third parties in accordance with applicable law.
354	348
355	349	If you do not want to receive ads based on Usage Data collected by ShareThis whatever device or browser used, you must opt-out from our services for each device and each internet web browser.
356	350
409	403	Do Not Track:
410	404
411	405	You may also stop the collection of your Usage Data by using the do-not-track function or similar privacy controls of your browser. ShareThis recognizes these do-not-track signals from your browser. As required by law, or where we are able to ascertain that such signals are enacted by you and not set by default by your browser, we will consider them to be an indication that you have opted out.
412	406
413	407	Onward Transfer/Data Privacy Framework:
414	408
415		ShareThis has certified that it adheres to the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF program principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. If there is any conflict between the policies of this privacy policy and the above listed DPF program principles, the DPF program principles shall govern. To learn more about the DPF programs, and to view our certification page, please visit [https://www.privacyshield.gov](https://www.privacyshield.gov/).
	409	ShareThis has certified that it adheres to the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF program principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. If there is any conflict between the policies of this privacy policy and the above listed DPF program principles, the DPF program principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/).
416	410
417	411	In the context of an onward transfer, ShareThis is responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf. ShareThis shall remain liable under the DPF principles if its agent processes such personal data in a manner inconsistent with the DPF principles, unless the ShareThis proves that it is not responsible for the event giving rise to the damage.
418	412
419	413	In compliance with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, ShareThis commits to resolve complaints about your privacy and our collecting or use of your personal information. European Union, UK, or Swiss individuals with inquiries or complaints regarding this privacy notice should first contact ShareThis directly at [privacy@sharethis.com](mailto:privacy@sharethis.com). We will respond to your complaint within 30 days of receipt.
420	414
421	415	For complaints that cannot be resolved between ShareThis and the individual concerned, ShareThis has further committed to refer unresolved privacy complaints under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to the BBB Data Privacy Framework Program, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you are an EU, UK, or Swiss individual and you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint.