Barracuda Trust Center

Notice of Collection. The table below describes the categories of Personal Data we collect, disclose for a business purpose, and “share” (as the term is defined by applicable law). Please note, in addition to the recipients identified below, we may disclose any of the categories of Personal Data we collect to government entities, as may be needed to comply with law or prevent illegal activity. We do not “sell” your Personal Data for money. As discussed elsewhere in the Privacy Notice, we use cookies and similar tracking technologies for purposes of targeted advertising.

2. Use of Personal Data.

We, or third-party data processors acting on our behalf, collect, use, process and store the Personal Data listed above for the following purposes:

• To register you for webinars/seminars.
• To assign a password and manage account login credentials.
• To ensure that content from the Website and services is presented in the most efficient manner for you.
• To provide you with information, products, or services that you request from us.
• To allow you to participate in interactive features (e.g., live chat) when you choose to do so.
• To notify you about changes to our products or services, and to keep you informed about our fees and charges.
• To provide the service(s) you have requested.
• To improve the quality and accuracy of the services.
• To allow you to access and use the Website, and to register for an account.
• To ensure the security of our services and the Website.
• To manage litigation, to answer competent authorities’ requests, to comply with non-EU legal obligations to which we are subject, and to pursue debt.
• To verify your identity to prevent and detect money laundering and fraud and to comply with global trade laws.
• To carry out statistical analysis and market research.
• For marketing, advertising, and promotional purposes.
• For the purposes of improving and maintaining the Website, preparing reports or compiling statistics to improve our services. Such details will be anonymized as much as reasonably possible.
• To take other action you request when you supply the Personal Data.

Personal Data is not used to profile those who access the Website.

Although the sections above describe our primary purpose in collecting your Personal Data, in many situations we have more than one purpose. For example, if you complete an online purchase, we may collect your Personal Data to perform our contract with you, but we also collect your Personal Data as we have a legitimate interest in maintaining your Personal Data after your transaction is complete so that we can quickly and easily respond to any questions about your order. As a result, our collection and processing of your Personal Data is based on different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

 

3. Data Retention.

We retain Personal Data for as long as you use the services we provide and then as required to comply with applicable laws in accordance with our internal data retention policies and practices.

 

4. Disclosure of Information.

We will not sell, hire, lease or rent your Personal Data to any third party without notifying you and/or obtaining your consent where required by applicable law, except as expressly set forth in this Privacy Notice. Where you have given your consent for us to use your Personal Data in a particular way, but later change your mind, you must contact us as set forth in the Contact Us section of this Privacy Notice to revoke such consent. You may also object to the receipt of marketing materials by clicking on the unsubscribe link included in such correspondence and indicating your preference in our preference center.

 

4.1 Barracuda Affiliate Companies.

We may share your Personal Data with Barracuda affiliate companies, including those that are listed in this Privacy Notice.

 

4.2 Categories of Third Parties.

Third parties with whom we share your Personal Data are limited (by law and by contract) in their ability to use your Personal Data for any purpose other than to provide services for us. We will always ensure that any third parties with whom we share your Personal Data are subject to privacy and security obligations consistent with this Privacy Notice and applicable laws. We will share your Personal Data with the following categories of third parties to operate our business and provide our products and services:

• Our service providers and subcontractors including, but not limited to, payment processors, suppliers of technical and support services, and cloud service providers;
• Companies that assist us in our marketing, advertising, and promotional activities;
• Analytics and search engine providers that assist us in the improvement and optimization of the Website; and
• Resellers, systems integrators, and service providers who resell our products and services.

 

4.3 Other Third Party Disclosures.

We will also disclose your Personal Data to third parties:

• In the event we sell or buy any businesses or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such businesses or assets;
• If Barracuda, or substantially all its assets, is acquired by a third party, in which case information held by it about its customers, prospective customers, and partners will be one of the transferred assets;
• If Barracuda is under a duty to disclose or share your Personal Data to comply with any legal obligation or any lawful request from government or law enforcement officials, and as may be required to meet national security or law enforcement requirements, or prevent illegal activity;
• To enforce or apply Barracuda’s terms and conditions or any other agreement, or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or
• To protect the rights, property or safety of Barracuda, our customers or other persons. This may include exchanging information with other organizations for the purposes of fraud protection and credit risk reduction.
• When we have your consent or direction to do so.

 

5. Protection of Personal Data.

Barracuda is committed to taking steps to protect Personal Data you provide to us, including administrative, technical, and physical measures to safeguard Personal Data against loss, theft, misuse, unauthorized access, disclosure, alteration and destruction.

Personal Data is only accessed by authorized staff who are instructed to handle Personal Data in a confidential manner. Personal Data is protected by firewalls and standard industry security measures. We may also transmit sensitive information and transactional data using secure socket layer (SSL) encryption.

The transmission of information through the Internet is not completely secure. Although we will do our best to protect Personal Data, we cannot guarantee the security of your data transmitted to the Website; any transmission is at your own risk. Once we have received your Personal Data, we will use strict procedures and security features to try to prevent unauthorized access. If we are required by law to inform you of a breach to your Personal Data, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Where we have given you (or where you have chosen) a password that enables you to access certain parts of the Website or our products and services, you are responsible for keeping this password confidential. We ask you not to share the password with anyone.

 

6. Your Rights.

Subject to the conditions set forth under applicable law, you may have the following rights regarding your Personal Data:

• Access To Your Personal Data. You may request access to your Personal Data or confirmation that we have Personal Data about you. In certain limited circumstances, you may also request to receive access to your Personal Data in a portable, machine-readable format.
• Changes To Your Personal Data. We rely on you to update and correct your Personal Data. You may ask us to correct Personal Data that is inaccurate or incomplete. Note that we may keep historical information in our backup files as permitted by law.
• Deletion Of Your Personal Data. You may request that we delete your Personal Data. If required by law, we will grant a request to delete Personal Data, but you should note that in many situations we must keep your Personal Data to comply with our legal obligations, resolve disputes, enforce our agreements, or for another business purposes.
• Opt-out of Targeted Advertising. You may opt-out of online tracking based targeted advertising (e.g., cookies) by clicking the cookie settings link in the footer on our Website homepage. Please note that if you change browsers or devices, or if you clear your browser’s cache, you may need to click the link again to apply your preference. You may also opt-out of other forms of targeted advertising by submitting a request as described below. We also recognize Global Privacy Control (GPC) signals enabled by customers on their web browser or web browser extension as valid opt-out requests where required by applicable law. Please note that your opt-out preference signal will be applied only to your current browser and device.
• Objection to or Restriction of Certain Processing. In certain circumstances, you may object to the processing of your Personal Data, or request that we restrict processing of your Personal Data, by following the instructions described below.
• Online Tracking. We do not currently recognize the “Do Not Track” signal.
• Promotional Text Messages. If you receive a text message from us that contains promotional information you can opt-out of receiving future text messages by replying “STOP.”

Please note, not all the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so, or if we are unable to adequately verify your identity. We will not discriminate against individuals who exercise their privacy rights under applicable law.

You may submit such requests by sending an email to privacy@barracuda.com or by calling us at 888-268-4772 We will respond to your request in accordance with applicable law. In your request, you must advise what Personal Data you would like to access, review, correct, update, suppress, restrict, or delete; or otherwise let us know what limitations you would like to put on our use of your Personal Data. If you disagree with our denial of a request, you may appeal our decision by contacting us with the subject line “Appeal.”

Please note that we may need to retain certain Personal Data for recordkeeping purposes and/or to complete transactions that you began prior to requesting a change or deletion. In the event your Personal Data is processed based on your consent, you may withdraw consent at any time by sending an email to privacy@barracuda.com and specifying the details of your request. However, any withdrawal of consent will not affect the lawfulness of any processing based on consent before it is withdrawn. 

Note that, as required by law, we may require you to prove your identity when submitting certain requests. We may verify your identity via email. Depending on your request, we may ask for information such as your name, the last product or service you purchased from us, or the date of your last purchase or communication from us. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct, or delete Personal Data about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. If you are an authorized agent submitting a request on behalf of an individual, you must provide a valid document indicating that you are able to act on another person’s behalf to privacy@barracuda.com.

If you are a resident within the EEA (as defined in section 7 below), you may lodge a complaint with a supervisory authority in your Member State of residence, if you consider that the collection and use of your Personal Data infringes this Privacy Notice or applicable law.

You have the right to ask us not to process your Personal Data for marketing purposes. We will inform you before collecting your Personal Data if we intend to use your Personal Data for such purposes or if we intend to disclose your Personal Data to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your Personal Data. Alternatively, you can contact us by email at privacy@barracuda.com at any time.

If you have previously given us consent to use your Personal Data for marketing purposes, you can choose to stop receiving marketing communications that we send to you from time to time by following the unsubscribe instructions included in such communications. Alternatively, you can opt out of such communications at any time by contacting us by email at privacy@barracuda.com.

You can choose to opt-out from your Personal Data being used for any purpose that differs from the purposes notified to you when we collected your Personal Data or from being disclosed to any third party.

If you would like to opt out, please contact us as set forth in the Contact Us section of this Privacy Notice. Please note that opting-out may prevent us from providing you with our services or information requested by you.

 

7. Transfers of Personal Data.

Barracuda is an international business with multi-national operations, systems, and processes. In this context, the Personal Data that Barracuda collects from you may be transferred to and stored in the United States or another location outside of the EEA or Switzerland, i.e., Australia, China, Hong-Kong, India, Malaysia, Singapore, and the UK.

With respect to Personal Data transferred outside the European Economic Area and/or the UK (“EEA”) or Switzerland, we will process Personal Data in accordance with applicable privacy laws by implementing appropriate safeguards.

Barracuda is self-certified under the Data Privacy Framework program (DPF) and the Swiss and UK Data Privacy Frameworks. When we transfer Personal Data to a third party, we take reasonable and appropriate steps to ensure the third-party processes Personal Data for limited and specified purposes and in a manner consistent with our DPF obligations. Where the transfer is to a third-party agent acting on our behalf, we may be liable if such third parties fail to meet those obligations.

 

7.1 Data Privacy Framework.

Barracuda complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Barracuda has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  Barracuda has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles will govern.  Consult the Data Privacy Framework (DPF) Program website to read more about the program and view Barracuda's certification.  Barracuda is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Barracuda commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Barracuda commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit www.jamsadr.com/DPR-Dispute-Resolution for more information or to file a complaint.  The services of JAMS are provided at no cost to you.

In the event that a dispute remains unresolved, you may be entitled, under certain conditions, to engage in a binding arbitration.

 

8. Use of Cookies.

Cookies are small data files that are stored on your computer that allow us and our third-party partners and providers to collect certain information about your interactions with our email communications, Website, and other online services.  We and our third-party partners and providers may also use other related technologies to collect this information, such as web beacons, pixels, embedded scripts, location-identifying technologies, and logging technologies (collectively, “cookies”).

See How Barracuda Uses Cookies. For information about opting out of targeted advertising, please see the Your Rights section above.

 

8.1 Your Choices About Cookies.

If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using our online services, as some features and services on our online services may not work properly. Depending on your device and operating system, you may not be able to delete or block all cookies. In addition, if you want to reject cookies across all your browsers and devices, you will need to do so on each browser on each device you actively use. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.

Some Barracuda products use Google Analytics for purposes of improving product performance. For more information on Google Analytics, and how it collects and processes data visit the site “How Google Uses Information From Sites or Apps that Use our Services,” located at  https://policies.google.com/technologies/partner-sites.

 

8.2 Your Choices About Online Ads.

We support the self-regulatory principles for online behavioral advertising (Principles) published by the Digital Advertising Alliance (DAA). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest-based advertising purposes. More information about these Principles can be found at www.aboutads.info. If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow the instructions at www.aboutads.info/choices, or http://www.networkadvertising.org/choices/ to place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements.  Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all your browsers and devices, you will need to opt out on each browser on each device you actively use. If you delete cookies on your device generally, you will need to opt out again.

If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at http://www.aboutads.info/appchoices.

Please note that when you opt out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services.  It means that the online ads that you do see from DAA program participants should not be based on your interests.  We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.

 

9. Third-Party Websites.

The Website may, from time to time, contain links to other websites operated by third parties. Please note that this Privacy Notice applies solely to the information collected from the Website, and we cannot be responsible for Personal Data collected and stored by third parties. If you choose to visit any websites operated by third parties, then their privacy policies would apply, and you should carefully read such third parties’ privacy policies before submitting any Personal Data to those websites. We do not endorse or otherwise accept any responsibility or liability for the content of such third-party websites, terms and conditions, or policies.

10. Changes to this Privacy Notice.

We may update this Privacy Notice from time to time. By continuing to use the services and the Website, you agree to the latest version of this Privacy Notice. Any future changes we make to this Privacy Notice will be posted on this page. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted Personal Data to us will generally govern that Personal Data unless we receive your consent to the new Privacy Notice. Please visit this page frequently to check for any updates or changes to this Privacy Notice.

If you have any questions regarding this Privacy Notice or our use of Personal Data on the Website, please send us your questions or comments as set forth in Section 11 below..

11. Contact Us.

If you have any questions in relation to this Privacy Notice; how we collect, use or store your Personal Data; if you require a copy of an archived version of our Privacy Notice; or if you need to access this Privacy Notice in an alternative format due to having a disability; you can contact us by telephone at: +1 408-342-5400, by mail at Barracuda Networks, Inc., 3175 South Winchester Boulevard, Campbell, CA 95008, or by email at privacy@barracuda.com.