Effective Date: October 22, 2020

Our Commitment to Privacy

Your privacy is as important to Rimini Street, Inc. (“Rimini Street,” “company,” “we,” “us,” or “our”) as it is to you (“you” or “your”). We will never sell your personal information to any third parties.

This Privacy Notice is a general notice about the ways in which we gather, use and disclose personal information for the legitimate business purposes of Rimini Street and how we protect your rights.  This Privacy Notice applies to the website located at www.riministreet.com and applications that use this domain and that are controlled by Rimini Street (the “Sites”), to any events, tradeshows, interactions with our business representatives (“Business Activities”), to our use of personal information to protect Rimini Street’s legal rights, property and security (“Security”), to our use of past, current, and prospective employee personal information for human resources purposes (“HR”) as supplemented by Rimini Street’s internal HR Privacy Policy to which all employees have access, and to any services activities under contract to the extent not superseded by a duly executed written agreement with a client (“Services”). We protect your personal information in accordance with this Privacy Notice whenever we use it for these purposes and provide you with information about your rights and choices with regard to your personal information herein.

APEC CBPR Certification and Participation

Rimini Street’s privacy practices described in this Privacy Notice comply with the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules System (CBPR). The APEC CBPR system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework can be found here.

TRUSTe

E.U.-U.S. and Swiss-U.S. Privacy Shield Framework

Rimini Street participates in and adheres to the Privacy Shield Principles to which it has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal information received from European Union (EU) member countries, the United Kingdom, and Switzerland, respectively, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about Privacy Shield, visit the U.S. Department of Commerce’s Privacy Shield List at https://www.privacyshield.gov/list.

The Personal Information That We Collect and Receive

We may receive certain personal information through the following means:

  • When you (in person, over the phone, or electronically) exchange messages with us (including our personnel working in Business Activities, HR, and Services functions), to the extent such messages or sender address information contains Personal Information that you choose to send or display to us.
  • When you interact with Business Activities such as events, online documents and interactive activities, exchanging your business card with us, discussing our services with one of our representatives, or when interacting with our representatives or branded company accounts on social media, we may collect the information that you enter or share, such as business contact information, including your title, and whether you have the interest and ability to influence a business entity’s purchase of our services.
  • When you interact with our marketing emails, in which case such information is limited to letting us know whether you opened or clicked on an email.
  • When we acquire, verify, or supplement your business contact information using third party business directories and services where you have allowed your business contact information to be generally available.
  • When you interact with our Sites, during which you may enter information into fields such as in web forms.
  • When our Security function collects information when you visit our business office locations or interact with our networks and computing systems.  On premises, video surveillance and visitor logs may capture your appearance, time and location.  While using our computing systems, your logins and interactions will be recorded, and, in some cases, your precise geographic location may be collected.
  • When you browse our Sites, during which, analytics information may be passively collected such as IP addresses, web browser settings, operating system information, the date, time and duration of visits and referring/exit pages are collected.  Third parties such as social media and advertising partners may also receive information about or your devices when you visit our Sites or utilize social media features such as “share” or “like” buttons.  Such collection occurs through Cookies and Passive Data Collection Technology, as further discussed below.

Your Consent – In certain circumstances noted above, it may be appropriate for us to obtain your explicit prior consent, in such event, we will present more specific information and a choice to you, and that choice may also be freely changed without penalty or consequence to your rights.  In other cases, where we have presumed or inferred consent for lawful reasons, you will be presented with ample opportunity to opt-out from further such uses.

Children or Minors – We do not knowingly collect, use, or disclose personal information from children or minors and our marketing and services are of interest to businesses and are not intended or designed to appeal to children or minors.  If we learn that we have collected the personal information of a child under 16 or the equivalent minimum age depending on the jurisdiction, such as 13 in the United States, we will take steps to delete the personal information as soon as possible.  Please contact us immediately at [email protected] if you become aware that a child or minor (as defined in your jurisdiction) has provided us with personal information.

Why and How We Use Personal Information

We may collect and use personal information in the pursuit of lawful, legitimate business interests, for example:

  • For Services, such as when you interact with technical support team or consultants for purposes of the Services or when we improve or develop new offerings based upon your preferences and feedback, including updating your information in parts of the Sites that are provided to you as a support portal under an agreement.
  • For external HR purposes, such as talent recruitment and scouting, managing job applications, and interactions that you may have with our HR staff including when you do so using a job application portal that we include in our Sites.
  • For internal HR purposes, such as administering benefits, managing employees, career development, and employee engagement.  Current employees should refer to Rimini Street’s internal HR Privacy Policy for more details.
  • For Security purposes, such as protecting the health and safety of employees or other parties to whom we may owe a duty or protecting the property or legal rights of the company, including fulfilling ethical duties.
  • For purposes of the Sites’ analytics and visitor tracking, such as understanding the general location and demographics of visitors to our Site and the popularity and interest in our promotional materials and messages.  Passively collected information is also sometimes related to visitor information or customer user information in order to understand an individual visitor’s browsing journey or a customer’s interests in current or prospective products or services.
  • For Business Activities, such as communicating with you about our webinars, events, downloadable information and assets, and our service offerings and understanding the popularity and interest in such activities.

Retention of Personal Information – We may retain your personal information for the duration of the valid business purpose for which it was originally collected, or if the aforementioned Security purposes require longer retention, such as when we need to retain sufficient information to honor an unsubscribe request.

Disclosure of Personal Information

Rimini Street shares information for business purposes in the following circumstances, and only when the recipient demonstrates and agrees to appropriate safeguards for the security and privacy of your personal information:

  • When disclosing information to affiliates and third parties under this section, whenever international transfer would occur, we will apply appropriate measures design to ensure the lawful transfer of such personal information.
  • When we share information with fully or majority-owned corporate affiliates under the brand of Rimini Street.
  • When we disclose personal information to third party service provider companies who assist us in Business Activities, the Sites, HR, Security, or the Services or to supplemental personnel who may join our workforce from time to time.
  • If or when we must respond to regulatory and/or judicial authorities for information as required by law, such as to comply with a subpoena or other legal process, to protect our rights, to investigate fraud, or to respond to a regulatory request.
  • If or when we create or acquire another entity that becomes a part of Rimini Street, or are acquired by another entity. If Rimini Street is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

When we partner with third parties to manage our advertising on other sites. Our third party partner may use technologies such as cookies to gather information about your activities on these Sites and other sites in order to provide you advertising based upon your browsing activities and interests. To understand more about these technologies, see About Cookies and Passive Data Collection Technology.

Our Commitment to Security

Rimini Street processes personal information only in ways compatible with the purpose for which it was collected, except where Security purposes may apply. Under any circumstance, we take reasonable steps to make sure that customer personal information is accurate, complete, current and otherwise reliable with regard to its intended use based on the personal information that has been provided to us. However, Rimini Street is not responsible for ensuring that it has up-to-date personal information of each customer or Sites user, nor will Rimini Street be responsible for ensuring that customers or users of the Sites update their personal information with Rimini Street.

Rimini Street takes reasonable and appropriate measures to maintain the confidentiality and integrity and availability of personal information in order to prevent its unauthorized use or disclosure. This includes maintaining a system of appropriate and generally accepted administrative, physical and technical safeguards to secure such personal information.  Rimini Street undergoes audit and maintains ISO 27001 certification with respect to information security management and ISO 9001 with respect to quality of services management.

About Cookies and Passive Data Collection Technology

Rimini Street and its partners may use web tracking technologies such as cookies, clear GIFs, browser fingerprinting, HTML 5 local storage to analyze trends, administer the Sites, track users’ movements around the website, and to gather demographic information about our user base as a whole.  We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis. Various browsers may offer their own management tools for removing these types of tracking technologies.  We provide detailed information about all such tracking in our Cookies List, and permit you to adjust Cookies Settings and, depending upon your location and the purpose of the tracking, we may prompt you for your choice regarding whether to accept certain categories of cookies.

Tracking Technologies

Tracking technologies have different names, and below is some background on the various kinds in use on this site.

Cookies are small text files that store information about your interactions with a particular website, either temporarily (known as a “temporary” or “session” cookie, and deleted once you close your browser window) or more permanently on the hard drive of your computer (known as a “permanent” or “persistent cookie”). Cookies can make it easier to use a website by allowing servers to access certain information quickly:

Session cookies can be used to help a user’s browser navigate a website more smoothly and may show up if the user comes from a website with which the subsequent website has some relationship (for example, a website of an affiliated company) and can give helpful information.

Persistent cookies can be used to customize a website for a user, such as by storing passwords, preferences, and registration and account information so that users do not have to reenter this information each time they visit a website.

The Sites may use both session/temporary cookies and persistent/permanent cookies to store information that allows us to offer you better customer service and easier site navigation. To make the Sites easier to use, we combine information collected via cookies with your personal information. Most internet browsers accept cookies automatically, but you can change the settings of your browser to erase cookies after each session or prevent automatic acceptance of first or third party cookies if you prefer. Note that if you configure your browser to reject cookies, you might not be able to access important functions or areas of the Sites or enjoy certain conveniences at this Sites. For more information how to exercise your cookie preference using browser controls, visit your browser’s or device’s help material. We have obtained links to instructions to block cookies depending on the browser you rely on, and such links are maintained and subject to changes by manufacturers of these major browsers:

Clear GIFs (a.k.a. Web Beacons/Web Bugs), can track an individual visitor’s journey on our Sites to help us better manage content by informing us what content is effective.  Clear gifs are embedded invisibly on Web pages and are about the size of the period at the end of this sentence. We tie the information gathered by clear gifs to personal information entered by visitors in order to understand how that visitor interacted with the Sites.

Browser Fingerprinting means generating an identifier for a browser visiting a website based upon the potentially unique combination of settings that it automatically transmits.

Local Storage, such as used by HTML5, is used to store content information and preferences. Various browsers may offer their own management tools for removing HTML5.

Cross-Border Data Transfers

We transfer, store and otherwise process personal data within our global family of companies as well as to third party service providers located in approved jurisdictions around the world.  Whenever we do so, we implement a legally adequate transfer mechanism such as Standard Contractual Clauses approved by the relevant data protection authorit(ies).

Your Rights

Upon request we will provide you with information about whether, as a data controller, we hold any of your personal information as well as further details about other entities with whom we have disclosed personal information. We remain responsible for how such entities process your personal information. You may access, correct, or request deletion of your personal information by contacting us.  You are also entitled to object to or restrict the further processing of your personal information at any time. You have the right to receive your personal information in a commonly used electronic form. We will respond to your request within a reasonable time. In any case, you also have the right to lodge a complaint with your data protection authority regarding the processing of your personal information.

To process your request, we may request personal information from you to enable us to confirm your identity and right to access such personal information, as well as to search for and provide you with the personal information we maintain. Applicable laws or regulatory requirements may allow or require us to refuse to provide or delete some or all of the personal information that we maintain, for example if we must maintain minimal information to be able to ensure that we will not contact you in the future.

Marketing Preferences

If at any time after registering to receive information you change your mind and no longer wish to receive any information or marketing emails from us, send a request to [email protected], use the unsubscribe link contained in our marketing emails, or visit www.riministreet.com/unsubscribe specifying your new choice.

Cookies Preferences

As stated in the above Cookies and Passive Data Collection Technology, you may be presented with an option to consent to or opt-out from specific categories of non-essential visitor tracking technology as further detailed in our Cookies List, and you may adjust your Cookies Settings at any time

Your Testimonials

We post customer testimonials on our Site upon prior consent from the customer, which may contain personal information such as the customer’s name. If you wish to update or delete your testimonial, you may contact us at [email protected].

Privacy Shield Rights

With respect to personal information received or transferred pursuant to the Privacy Shield Framework, Rimini Street is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Under certain conditions, more fully described on the Privacy Shield website, How-to-Submit-a-Complaint, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

Your Rights with Respect to Our Customers

In situations where we are a data processor and provide services to client customers, we generally have no knowledge of or relationship with the individuals whose personal information exists in systems that we are engaged to support. An individual who seeks access to, or who seeks to correct, amend, or delete inaccurate personal information that has been provided to a Rimini Street customer or partner should direct their query to that customer or partner.

Your Rights with Respect to Our Marketing Partners

Tracking Choices

Depending upon the purpose of the tracking technology (functionality, analytics, advertising) and the laws of your local jurisdiction, you may be presented with an option for prior consent, implied consent, or no prior consent to tracking occurring on our Sites by marketing partners.

You may learn more about and enable or disable different categories of cookies and other tracking technology at any time by referring to the Cookies Settings page.

Advertising Choices

If you would prefer to not receive personalized ads based on your browser or device usage, you may generally express your opt-out preference to no longer receive tailored advertisements. Please note that you will continue to see advertisements, but they will no longer be tailored to your interests.

To opt-out of interest-based advertising by participating companies, please visit:

Your Rights with Respect to Unaffiliated Third Parties

The Sites may provide links from our Sites to websites, content, products and services from third parties that do not process personal information in connection with us.  Whenever following or interacting with such links, you should refer to the policies posted by these third-parties regarding privacy and other topics before you use them, as this Privacy Notice applies solely to personal information collected or used by Rimini Street or its marketing partners subject to an agreement.

Contact Us

Questions regarding this Privacy Notice, Rimini Street’s privacy program or privacy practices should be directed to [email protected], or by regular mail addressed to:

Rimini Street, Inc.
Attn: Privacy
3993 Howard Hughes Parkway,
Suite 500
Las Vegas, Nevada 89128
USA

For Unresolved Privacy Concerns of European Economic Area and Switzerland Residents

If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by Rimini Street, and your inquiry, you may have your complaint considered by an independent recourse mechanism: for EU/EEA Data Subjects, a panel established by the EU data protection authorities (“DPA Panel”), and for Swiss Data Subjects, the Swiss FDPIC. To do so, you should contact the state or national data protection or labor authority in the jurisdiction where you work. Rimini Street agrees to cooperate and comply with the decisions of the DPA Panel and FDPIC.

Rimini Street commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.

For Unresolved Privacy Concerns of Residents of APEC CBPR Member Economies

If you have an unresolved privacy or personal data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Changes to this Privacy Notice

We reserve the right to change this Privacy Notice at any time, and any non-material modifications are effective when they are posted on the Sites. For any significant change, we will post a prominent notice of a material change to our privacy notice on the home page of the Sites prior to the change becoming effective. The date of the newest version of the Privacy Notice will be posted at the top of this page. Please check back frequently, especially before you submit any personal information at the Sites, to see if this Privacy Notice has changed.