Salesforce
Salesforce is an American cloud-based B2B software company with a focus on on-demand customer relationship management (CRM) software services.
Score
Citation
Targeting or advertising cookies track activity across websites in order to understand a viewer’s interests, and to direct specific marketing to them.
Salesforce also contracts with third-party advertising networks that collect IP addresses and other information from web beacons on our websites, from emails and on third-party websites.
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Citation
To [...], discontinue your account and/or request return or deletion of your Personal Data and other information associated with your account, please contact us by using the information in the “Contacting us” section, below.
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Citation
We may share your Personal Data as follows: [...]
With third-party social media networks, advertising networks and websites, which usually act as separate controllers, so that Salesforce can market and advertise on third party platforms and websites;
Score
Citation
We process your Personal Data when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of Personal Data to protect our rights or is necessary for our legitimate interest in protecting against misuse or abuse of our websites, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes or to respond to lawful requests.
Notes
It's not clear, that the data has to be reasonably requested, the explanation uses "including" words and it can't be inferred that there are rejections to requests.
Score
Citation
We take precautions including organizational, technical and physical measures to help safeguard against the accidental or unlawful destruction, loss, alteration and unauthorized disclosure of, or access to, the Personal Data we process or use.
Score
Citation
The last modified date is available at the top of the policy.
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
Nothing mentioned about data breaches in the privacy policy.
Score
Citation
If we make a material update, we may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided.
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
In particular, we collect Personal Data from the following sources:
Third party providers of business contact information, including mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, social media profiles, LinkedIn URLs and custom profiles, for purposes of targeted advertising, delivering relevant email content, event promotion and profiling; and Platforms such as GitHub, to manage code check-ins and pull requests. If you participate in an open source or community development project, we may associate your code repository username with your community account so we can inform you of program changes that are important to your participation or relating to additional security requirements.
Score
Notes
The explanation of the reasons for data collection is generally reasonable, however not all data types collected are accompanied by a clear explanation.
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Notes
You can choose to opt-out of targeting, advertising cookies and marketing communication, however, your information can still be used for non-critical purposes (like analysing your data for site improvement).
Score
Citation
The Personal Data that we collect directly from you includes the following:
If you express an interest in obtaining additional information about our services, request customer support (including accessing the Help & Training Portal), use our "Contact Us" or similar features, register to use our websites, sign up for an event, webinar or contest, or download certain content, we may require that you provide to us your contact information, such as your name, job title, company name, address, phone number, email address or username and password;
If you make purchases via our websites or register for an event or webinar, we may require that you provide to us your financial and billing information, such as billing name and address, credit card number or bank account information;
If you attend an event, we may with your further consent scan your attendee badge, which will provide to us your information, such as name, title, company name, address, country, phone number and email address;
If you register for an online community that we host, we may ask you to provide a username, photo and/or biographical information, such as your occupation, social media profiles, company name and areas of expertise;
If you use and interact with our websites or emails, we automatically collect information about your device and your usage of our websites or emails through cookies, web beacons or similar technologies, such as Internet Protocol (IP) addresses or other identifiers, which may qualify as Personal Data (please see the "What device and usage data we process" section, below);
If you use and interact with our services, we automatically collect information about your device and your usage of our services, through log files and other technologies, some of which may qualify as Personal Data (please see the "What device and usage data we process" section, below);
If you voluntarily submit certain information to our services, such as filling out a survey about your user experience, we collect the information you have provided as part of that request; and
If you visit our offices, you may be required to register as a visitor and to provide your name, email address, phone number, company name and time and date of arrival.
Notes
The policy generally lists the data it collects but uses "such as" phrases.
Last Updated
December 17, 2021
Sources
Contributors