Account Settings Sign Out
 

Privacy policy

Last updated: July 29, 2020

  1. About Us

    We are Groundspeak, Inc. (“Groundspeak”), the owner and operator of the following websites, apps and discussion forums:

    For the purpose of this privacy policy, we refer to the services provided by us in relation to each of the above as our "Services". References in this privacy policy to "we", "us," or "our" are references to Groundspeak.

  2. How to contact us

    If you have any questions about this privacy policy, or about the personal information we hold about you, the best and fastest way to contact us is by clicking here. You may also contact us by any of the means provided on this page.

  3. About this privacy policy

    When you use our Services, we collect personal information about you. The purpose of this privacy policy is to explain the types of information we collect, and how we use them.

    This privacy policy is divided into the following sections:

  4. What personal information do we collect about you?

    Personal information you give us

    We collect and store the following personal information you give to us when you interact with us or our services, including when you access our services through applications provided by approved developers interested in creating geocaching related websites and applications (“Authorized Developers”) that connect with our websites using our software interface, known as an API (collectively, “our Services”).

    When you create an account with us, or when you use our Services, we collect and store:

    • Account details (including your name, email address(es), passwords, and other identification information).
    • Profile information you provide such as your location, your home location, your profile photo, your cover photo, any other photo uploads, your “about” me information, your Forum title and Forum signature, etc.
    • Information you provide to us when you sign up to receive our newsletter or other communications from us.
    • Information you provide when you enter a competition, prize drawing, or other promotion (for example, your name, email address, address, and other contact details, such as your telephone number).
    • Information you provide to websites that link to or from our Services, including any social networking sites to which you choose to link your account.
    • Content and information you provide through the Geocaching Forums, your geocache and trackable logs, or by email to us.
    • Email addresses of people you know when you participate in a referral program.
    • Messages you send or receive through our communications Services.
    • Information you provide to us if you apply for a job, including information in your resume or application form.
    • Any information you provide as part of a survey.

    Personal information we collect automatically

    When you use our Services, we automatically receive and record information from your browser or mobile device for purposes of providing you Services that are personalized, relevant and useful to you:

    • Your precise geolocation, where you have enabled this on your mobile device or GPS device.
    • The unique identifier for your mobile device.
    • Install ID
    • Your IP address.
    • Time and date of access and use of the Services.
    • The name of the application you're using if you're using an application provided by one of the Authorized Developers.
    • Your user ID for the account through which you are accessing our Services.
    • Membership data, including whether you are a Premium or Basic member.
    • Your search data, including the latitude and longitude of any location-based search you perform either intentionally or via the automatic search of your current location performed when you open our apps.
    • Files, listings, and content that you access.
    • Which version of our application you're using.
    • Cookie information (click here to find out more information about how we use cookies).
    • Information about the pages you request.
    • If you choose to link your account with us to your social media account (e.g. Facebook, Google), we may collect personal information about you through your social media account, such as email address, name, and profile photo.

  5. How do we use your personal information?

    We use your personal information for the following purposes:

    • To provide our Services to you and to administer your account with us.
    • To authorize, process, and track payments through our service providers’ secure credit card and payment processing gateways.
    • To enable your Premium membership status and follow up with you in connection with your membership.
    • To communicate through any of our communications Services.
    • For our own internal business purposes, such as analyzing the use of our Services (via services like Google Analytics, HotJar, and others), market research, and website and mobile application optimization.
    • To enable Authorized Developers to provide geocaching-related websites and applications that extend and enhance the geocaching experience.
    • To communicate with you about things we think will be of interest to you such as our products and Services, and location-based entertainment-related activities.
    • To verify your identity.
    • To provide customer service and review issues with your account or your use of our Services.
    • To enable other users to receive and enjoy the Services.
    • To allow you to share your experiences using our Services with others.
    • To update you on changes to our Services, this Privacy Policy, or our Terms of Use and other administrative communications.
    • To improve our products and Services.
    • To customize the content available through our Services.
    • To allow you to login via Apple, Google, or Facebook and to share information through a social network site account, such as Facebook and Twitter.
    • To create a convenient and easy-to-use shopping process on Shop.Geocaching.com that includes an online shopping cart.
    • To restrict access to our Services or communicate with users who have violated our Terms of Use, or otherwise violated our rights or the rights of others.

  6. What is our legal basis for using your personal information?

    If you are accessing our Services in Europe, then applicable law requires us to ensure that we only process your personal information where we have a legal basis to do so. When we process your personal information, we will only do so where at least one of the following applies:

    • We need to use your personal information to perform our responsibilities under our contract with you (e.g. providing you with the correct membership level, administering the Services);
    • If it is in our legitimate interests and/or those of our partners and service providers to use your personal information. For example, it is in our legitimate interests to use your personal information to improve our website, to preserve the historical record of the game for other users, to allow our Authorized Developers access to geocache and profile data to create websites and applications that extend the geocaching experience beyond what we are able to provide, to preserve other users’ messages, to ensure that our Services are secure, to tell you about new Services, products or offers, and to develop our business; or
    • Sometimes we will ask for your consent to use certain types of personal information, such as by asking you to tick an online box or when you sign up to access certain geocaching related services including those provided by our Authorized Developers. In these circumstances, your consent will be our legal basis for processing your personal information for those purposes. If you have provided consent, you may withdraw it at any time. You may do this by "opting out" where we give you the opportunity to do so, by changing your profile settings, or by contacting us using the contact details below.

  7. With whom do we share your personal information?

    Except as provided below, we do not share or sell information that identifies our users personally or makes it possible for other parties to contact them directly.

    We share your information as follows:

    Who Why do we share it?
    Other users

    When you create an account, we make your username and certain details about your membership, such as whether you are Basic or Premium, when you joined and when you last visited the site, and your finds, hides, and trackable count, available for other users who may want to add you as a friend in our system or understand your experience and activity level for purposes of determining your credibility or engagement level with the game. We also share with other users your game statistics and in some cases, your standing compared to other users on a leaderboard. Your standing may include the time that you finished the various stages of an Adventure Lab or the time that you logged a particular cache or trackable.

    If you choose to include personal information (such as your email address, photo, location, or other details) in your public profile, this may be viewed by other registered Geocaching account holders who use our Services for purposes of enhancing the community aspects of the game.

    Any information or content you post publicly will be shared with other users when you use the public features of our Services; for example, when you log a geocache, post a photo in your gallery or participate in the Geocaching Forums for purposes of maintaining a historical record of game-related activity and enhancing the community-oriented nature of the game.

    If you choose to participate in a discussion forum, your IP address may be shared with forum moderators (who are registered Geocaching account holders) to help them provide appropriate controls on forum discussions.

    Authorized Developers

    Publicly available profile information, geocache and trackable logs (including photos) will be accessible to Authorized Developers and users of their services unless you have opted out of sharing with Authorized Developers in Account Settings.

    If you opt out of sharing with Authorized Developers in Account Settings, the users of their services will not be able to see your geocache and trackable logs or your profile information.

    Additional information such as your home location will be available to Authorized Developers if you use their application and consent to sharing your account information with them.

    Authorized Developers use this information to develop their own geocaching-related websites and applications to enhance your geocaching experience and the geocaching experience of other registered Geocaching account owners.

    These services are owned and operated by the Authorized Developers and not by us. Authorized Developers will have their own privacy policies in relation to personal information. For a list of our Authorized Developers, click here.

    Other partners

    We provide location information to our map providers without identifying you specifically for the purpose of enabling map functionality. We use YouTube API Services to display video uploaded to YouTube on our mobile applications. This use does not require access to your YouTube account data. The Google Privacy Policy is available at http://www.google.com/policies/privacy.

    Additionally, we may partner with other companies/organizations to provide trackable and other promotions, GeoTours, and Geocaching Adventure Lab. If you choose to participate, the information you provide may be shared via our API or otherwise to enable your participation and to allow the sponsor to learn more about the general location of participants. In some cases, with your explicit consent, partners may also use your information to contact you. Their use of your information will be covered by their privacy policy.

    Single Sign On If you choose to log in to your account through a third party service, such as Apple, Google or Facebook Sign In, Groundspeak and that service may share certain information about you for purposes of authenticating your login information.
    Social media With your permission, we may share information about your activities on our Services with Facebook, Instagram or Twitter, if you choose to post your geocache log, including images, on your Facebook, Instagram, or Twitter account.
    Vendors From time to time, we employ other companies and individuals to perform specialized functions on our behalf, such as analytics, secure credit card processing, and email services. They may have access to personal information needed to perform these functions but will be prohibited from using it for other purposes.
    Advertisers We share your information with our advertising partners, including advertising networks that may place cookies on your computer or device so they can show you advertisements based on your navigation history. As an example, we use Facebook pixel. The pixel enables Facebook to collect information from our Services and elsewhere on the internet and use that information to provide targeted ads to you. It also tells us what actions people take after seeing our ads on Facebook, so we can measure the effectiveness of our ads.
    Others we share with for legal reasons

    We may share your personal information with others if the law requires us to, or if we reasonably believe it is necessary to comply with the law.

    We may also share your personal information if we need to do so to protect or defend our legal rights, or those of our users.

    Merger and acquisition partners In the unlikely event that we wished to sell our business, we may need to share your personal information with a potential buyer. From time to time, we may also share your personal information with members of our group of companies, for example, if we were reorganizing our business.
    Providers of online analytics services

    We use tools such as Hotjar, Google Analytics, Google Analytics for Firebase, and Microsoft Azure Application Insights to track how groups or categories of users interact with our Services. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular IP address, device screen size, device type, unique device identifiers, browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will match this information with further data on an individual user. For additional details, please see Hotjar’s privacy policy by clicking on this link. You can opt-out of the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

    We enable Google Analytics’ User-ID feature to better understand how users interact with our Services over an extended period of time, from different devices and multiple sessions, so we can continue to improve our Services and provide the best experience for our users. User ID helps identify unique users across multiple devices and browsers. When you log-in to use our Services, your User ID is sent to Google.

    We use Google Analytics to understand how you use our websites and Google Analytics for Firebase to understand how you use our mobile apps. In using these tools, we share information with Google. To find out how Google uses your information, visit: www.google.com/policies/privacy/partners/.

    Microsoft Azure Application Insights collects mobile application performance data, and in some cases usernames, to help us diagnose problems and understand how you are using our apps.

    Our suppliers and subcontractors We may also share your personal information with suppliers and subcontractors to enable us to provide Services to you (for example, if you have ordered goods online, we may share your personal information with delivery companies).

  8. What rights do I have in relation to my personal information?

    Your rights in relation to how we use your information

    You can choose how we use your personal information in the following circumstances:

    • You can add, update, or delete certain personal information by signing in to your account and accessing your Account Settings. Click here to find out more about how to do delete information from your profile and here to find out more about how to delete your geocache and trackable logs. You can also contact us via our webform to request deletion.
    • You can choose to opt-out of allowing our Authorized Developers to share your Geocaching.com public profile with their users by changing your Authorizations in Account Settings. You can choose to allow Authorized Developers to share your geocaching activity with your Geocaching friends.
    • If you do not want to receive our newsletter or marketing messages from us, you can click the "unsubscribe" link at the bottom of the email or message you receive or adjust your email preference in Account Settings.
    • If you do not want to receive emails from us about specific geocaches or trackables, you can change your preferences by logging into your account and removing these geocaches and/or trackables from your Watchlist or Lists. Click here to find out more about how to do this. Please note that you cannot disable notifications related to geocaches or trackables owned by you.
    • If you have granted us access to your Facebook, Google, or Apple sign on, you can disconnect the link by logging into account settings, accessing your profile and clicking to remove access. Click here to find out more about how to remove authorizations.

    If you choose not to provide personal information, we may not be able to provide you with our Services, or certain aspects of our Services.

    Other rights in relation to your personal information if you are accessing the Services in Europe:

    In addition to the choices described above you also have the following rights under the European General Data Protection Regulation (“GDPR”) if you are accessing the Services in Europe:

    • Right of access to your Personal Data (Art. 15 GDPR): You have the right to ask us for confirmation on whether we are processing your Personal Data, and access to the Personal Data and related information on that processing (e.g., the purposes of the processing, or the categories of Personal Data involved). “Personal Data” is defined in the GDPR as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
    • Right to rectification (Art. 16 GDPR): You have the right to have your Personal Data corrected, as permitted by law.
    • Right to erasure (Art. 17 GDPR): You have the right to ask us to delete your Personal Data, as permitted by law. This right may be exercised among other things: (i) when your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) when you withdraw consent on which processing is based on your consent and where there is no other legal ground for processing; (iii) when you object to processing which is necessary for our legitimate interests (pursuant to Art. 21 (1) GDPR) and there are no overriding legitimate grounds for the processing, or when you object to your Personal Data being used for direct marketing purposes (pursuant to Art. 21 (2) GDPR); or, (iv) when your Personal Data has been unlawfully processed.
    • Right to restriction of processing (Art. 18 GDPR): You have the right to request the limiting of our processing under limited circumstances, including: when the accuracy of your Personal Data is contested; when the processing is unlawful and you oppose the erasure of your Personal Data and request the restriction of the use of your Personal Data instead; (and, when you have objected to processing which is necessary for our legitimate interests (pursuant to Art. 21 (1)) GDPR pending the verification whether the legitimate grounds of Groundspeak override your grounds.
    • Right to data portability (Art. 20 GDPR): You have the right to receive the Personal Data that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that information to another controller, including to have it transmitted directly, where technically feasible.
    • Right to object (Art. 21 GDPR): You have the right to object to our processing of your Personal Data, as permitted by law. This right is limited to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or processing which is necessary for the purposes of our legitimate interests (Art. 6 (1) (e) or (f) GDPR), and includes profiling based on those provisions, and processing for direct marketing purposes.

    Contacting us to exercise your rights and with any questions

    If you need help or wish to exercise any of the above rights or have questions about them, please email us or contact us by one of the means provided here, including writing to us at Geocaching HQ, 837 N. 34th Street, Suite 300, Seattle, WA 98103. For specific requests to remove or change your profile information on Shop Geocaching (shop.geocaching.com), please email Shop Geocaching directly by clicking here.

    We will consider all such requests and provide our response as soon as we can. Please note, however, that some personal information may be exempt from such requests in certain circumstances, which may include if we need to keep processing your personal information for our legitimate interests, to protect the privacy of others, or to comply with a legal obligation. Please note that we may request you provide us with information necessary to confirm your identity.

  9. How long do we keep your personal information?

    Account deletion

    If you want to permanently delete your account or following your explicit request for deletion of any of your personal information, we will delete your account and/or help you to delete your personal information as requested. Due to the nature of the game and the way that users interact, you will need to take all steps necessary to facilitate the deletion, including adopting or removing any geocaches you own and disabling your account. We will then complete the deletion process as soon as possible. The way our systems are structured, in some cases, it may take up to 30 days for records to be deleted or overwritten. In some circumstances (set out below) we may keep your personal information for longer.

    When you stop playing

    If you stop playing or temporarily disable your account, without taking any further steps or asking us to permanently delete your account or personal information, we will keep your information as long as needed to ensure the integrity of the game and the enjoyment of other players. Your geocache and trackable logs and any images associated with them will remain as part of the historic record of the geocache or trackable with which they are associated unless you delete them or explicitly request the permanent deletion of your account. If you have provided personal information or content that other users need to use in relation to the Services (for example information about a particular geocache you have logged, or placed; if you have moved or logged a particular trackable; or if you have left instructions or goals about a particular trackable) we may retain that information for as long as we need to provide the Services to our other users, but we will delete the information or help you to delete the information upon your request. For more information about trackables please click here.

    We know that sometimes users take a break from the game and come back at a later time, which is why we don’t automatically permanently delete your account and personal information if you stop playing or temporarily disable your account. We may contact you if you have stopped playing or temporarily disabled your account to check if you would like us to permanently delete your information. However, after three years of inactivity, we may delete your account without contacting you, if you created an account and never took any other action in the game.

    Please note that once your account and personal information has been deleted we cannot get it back. If you don’t ask us to permanently delete your account and personal information, except as provided above, we will keep it until you want to reactivate your account, and we will store it securely and in accordance with this privacy policy.

    Information provided for a specific purpose

    If you have provided us with personal information for a specific purpose, we will keep your personal information for as long as we need to fulfill that purpose. For example, if you have provided address information as part of a competition entry, we will keep that information for as long as necessary to administer the competition.

    We will retain your contact details if you have an account with us or if we think you may be interested in marketing messages, offers, promotions, or new Services. You will always have the choice of opting out of receiving these messages. If you do so, we will remove you from our email marketing lists as soon as we can but within 10 business days.

    If you have posted content online in the Geocaching Forums, we will retain that content for as long as we think the topic is relevant. After this time, we may delete the post or archive it.

    Where we have obtained personal information automatically about your use of our apps or website (e.g. analytics), we will keep this information for as long as we feel it may be useful to us to improve and develop our business. We will delete it when it is no longer useful. This will normally be within 24 months of completion of the purpose for which it was originally collected. As an example, we may conduct a test for two months during which one group of users is shown our current home page and one group is shown a new version of our home page to determine which is preferable to users. Twenty-four months after completion of the two-month test, we would delete personal information associated with the test.

  10. How do we protect your personal information?

    Groundspeak has implemented many security measures to protect against the loss, misuse, and alteration of your information. We protect your account information through the use of a password. To protect the confidentiality of your information you MUST keep your password confidential and not disclose it to any other person. We also work to protect the security of your credit card information during transmission through the use of payment processor service providers using Secure Sockets Layer (SSL) software, which encrypts the information you input. However, keep in mind that no security measures are perfect or impenetrable.

  11. Transfers of your personal information outside the European economic area

    If you are accessing our Services from Europe, then the personal information which you provide to us, or which we collect about you, will in most cases be stored and processed in the U.S.

    In order to ensure your personal information is protected we have signed up to the EU-US "privacy shield" framework. Please click here to see our Privacy Shield Policy, which will apply to all personal information transferred to the U.S. Please click here to find out more information about the Privacy Shield framework.

  12. Do I have to be a certain age to use the services?

    Because of the nature of the game, which requires a cellular data plan or GPS device and the ability to travel to geocache locations, our Services are not directed toward anyone under the age of 16. Although individuals under 16 years of age are welcome to geocache, their parents or guardians must own and manage their accounts.

    If you are under the age of 18 but at least 16, you may only use our Services with the consent of a parent or legal guardian who agrees to be bound by this Agreement. You must be 18 or older to post in the Geocaching Forums

    If you are a parent or guardian and discover that your child under the age of 16 has an account not created and managed by you, then you may alert us via email or contact us by one of the means provided here and request that we delete that child’s personal information.

  13. Complaints and questions

    If you have any complaints or questions about how we use your personal information, you may contact us using the contact details set out above. We will then get in touch with you to see how we can help.

    If you have a complaint about how we use your personal information, we would always prefer you to contact us first. However, you may also make a complaint to the data privacy regulator if you wish to do so. If you would like more information about how to contact the relevant data privacy regulator, please email us or contact us by one of the means provided here.

    Details of our EU data protection officer and EU-based representative for EU customers

    We are located in the U.S. However, we have an EU based data protection officer and EU-based representative whose details are as follows:

    Email: DPO@geocaching.com

    Address: Data Protection Officer, Geocaching, Innere Kanalstr. 15 50823 Cologne, Germany

    Our EU-based representative, MCF Legal Technology Solutions Limited, can also be contacted at: Email: EURepresentative@geocaching.com.

    Address: MCF Legal Technology Solutions Limited, ATTN: Groundspeak, Inc. DBA Geocaching EU Representative, Riverside One, Sir John Rogerson's Quay, Dublin 2, D02 X576

  14. Changes to this privacy policy

    We may amend this Privacy Policy from time to time. When we post changes to this Privacy Policy, we will revise the "last updated" date at the top of this page. Please review this Privacy Policy periodically to be informed of how we use and protect your information. If we have your email address, we may also email you with information on those changes.

  15. How we use cookies

    A cookie is a small text file that is downloaded onto your computer or smartphone when you use our Services. We use cookies and other similar data collection technologies on our websites and applications. Although the lists may be updated from time to time, most of the cookies we currently use are available here.

    Information we collect using cookies

    We collect the following information from you:

    • The date and time you use our websites or apps.
    • Information about your browser, system, or device configuration.
    • Your internet browsing history (including the pages you have viewed)
    • Your IP address.
    • We use tools such as Google Analytics cookies, Facebook pixel, Localytics and Hotjar to track how you interact with our apps and websites, and the pages you visit.

    How we use cookies information

    We place cookies and other tracking technology that identifies you, or allows vendors to do so on our behalf, for the following purposes:

    • To provide our Services. For example, we use them in order to know your membership status and provide you with the appropriate benefits. We also use them to enable you to sign up for information from us.
    • For system administration and security and to gather general information about our audiences and their geographic locations.
    • To recognize you automatically when you return to our websites and apps and to customize certain features and functions.
    • To understand the type of content you are interested in. We use this information to send you marketing messages, promotions, or offers, or information about Services we think you might be interested in.
    • To make an automated record of your activities on our websites and mobile applications.
    • To manage, track, and follow up on email marketing campaigns.
    • To display ads and messaging specific to your use of our Services when you are on Facebook or on other websites and to understand their effectiveness.

    Advertising cookies

    We allow other companies to advertise on our websites and applications. Additionally, users who add certain types of content to their profile, geocache and trackable details pages, may in some cases add content that places advertising cookies. We do not control these uses of cookies or other data collection technologies or practices. Advertising companies may place cookies on your computer or device, so they can send you marketing messages, advertisements, or promotions based on your navigation history.

    Facebook may use information collected through Facebook pixel to customize ads on Facebook and other sites. You can learn more by visiting Facebook’s Data Policy and can control the information shared about you by changing your Facebook ad preferences.

    Google's DoubleClick and other cookies enable it and its partners to serve ads to you based on your visit to our websites and/or other sites on the Internet. Google and some of the companies it works with may offer additional choices about your preferences. Please visit Google for more information about the technologies it uses, the types of information it collects and its privacy practices. Please visit Google and use "Ads Settings" to set your preferences. The website http://optout.aboutads.info/ offers a single place to turn off targeted ad serving from any of its members. We may add or change the list of advertisers from time to time without changing the effective date of the Privacy Policy itself.

    Disabling cookies

    You can use the tools we provide or the tools in your browser to decline, disable, or delete cookies. Using the tools in your browser to decline or delete certain cookies may limit functionality. As an example, you will still be able to log on as a member if you decline or delete our cookie that enables automatic recognition. However, many important features of our websites will not be available (e.g. you will not be able to log a geocache if persistent cookies have been disabled). If you disable the session cookie for our websites, you may remain on the site, but you will not be able to use Shop Geocaching and access certain other content. User profile pages and certain geocache details pages include user content that may contain cookies. Due to the volume of such content, we are unable to identify all of these cookies or provide the ability for you to disable them. Please consider browser-based cookie blocking if you wish to block these types of cookies.

    Privacy Shield Policy

    This Privacy Shield Policy (“Policy”) applies to all personal data transferred to Groundspeak, Inc. (“Groundspeak”, “we”, “our”, or “us”) from an organization in the European Economic Area (EEA) (which includes the member states of the European Union (EU) plus Iceland, Liechtenstein and Norway). This Policy sets out our practices for collecting, using, maintaining, protecting and disclosing that personal data. Our general Privacy Policy applies to information that individuals give us about themselves through our websites, applications and services.

    Definitions

    For purposes of this Policy, the following definitions shall apply:

    “Agent” means any third party that collects or uses personal data under the instructions of, and solely for, Groundspeak or to which Groundspeak discloses personal data for use on Groundspeak’s behalf.

    "Groundspeak" means Groundspeak, Inc., which does business as Geocaching and Geocaching HQ, and any predecessors and successors in the United States.

    "Personal data" means any data or set of data that identifies or could be used by or on behalf of Groundspeak to identify (together with other data) a living individual. Personal data does not include data that is anonymized or aggregated.

    "Sensitive data" means any personal data that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data that concerns health or sex life, or data about criminal or administrative proceedings and sanctions.

    EU-U.S. Privacy Shield

    Groundspeak complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the EU to the U.S., respectively. Groundspeak has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles of Notice; Choice; Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement and Liability (“the Privacy Shield Principles”) which are the basis for the principles of this Policy. If there is any conflict between the terms in this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

    Principles

    Notice

    Groundspeak receives personal data about individuals in the EEA collected by Groundspeak and partners who promote geocaching and/or use geocaching to promote their products or locations in Europe. Groundspeak uses this personal data to provide services enabling individuals to participate in location-based play and customer support, information updates and purchases related to such services and in geocaching-related promotions. This data also facilitates our partners’ participation in geocaching-related marketing and promotions and enables partners to develop other geocaching services.

    Choice

    Groundspeak will offer individuals the opportunity to choose (opt-out) whether their data is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. An individual may opt-out of such uses of their personal data by contacting us at the address given below.

    Groundspeak will not use sensitive personal data for a purpose other than the purpose for which it was originally collected, or subsequently authorized by the individual, without first receiving the individual’s affirmative and explicit consent (opt-in). Groundspeak will treat as sensitive any personal data received from a third party where the third party identifies and treats it as sensitive.

    Accountability for Onward Transfer

    Groundspeak may employ third parties to manage its IT infrastructure, provide credit card processing and customer support, perform analytics, and manage its email service. These entities may have access to personal information if needed to perform their functions for Groundspeak.

    Groundspeak may also disclose personal data – such as public profile information and geocache logs – to non-agent third parties by licensing its application program interface (API) to partners who use it to develop other geocaching-related services. If you wish to opt-out of transfers to such non-agent third parties, please contact us at the address given below or change your authorizations in Account Settings to stop such sharing of data.

    Groundspeak may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

    For data received under the EU-U.S. Privacy Shield, Groundspeak will obtain appropriate assurances from its agents that they will safeguard personal data consistent with this Policy. Examples of appropriate assurances that may be provided by agents include the following: a contract obligating the agent to provide at least the same level of protection as is required by the Privacy Shield, its own EU-U.S Privacy Shield certification, or another European Commission adequacy finding.

    Groundspeak’s accountability for personal data that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Groundspeak remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Groundspeak proves that it is not responsible for the event giving rise to the damage.

    Security

    Groundspeak will take reasonable and appropriate precautions to protect personal data in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.

    Data Integrity and Purpose Limitation

    Groundspeak will use personal data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. Groundspeak will take reasonable steps to ensure that personal data is relevant to its intended use, accurate, complete and current.

    Access

    Upon request, Groundspeak will grant individuals reasonable access to personal data that it holds about them. Groundspeak will take reasonable steps to permit individuals to correct, amend, or delete personal data that is demonstrated to be inaccurate or incomplete. An individual may request access to their data, or otherwise correct, amend, or delete their personal data by contacting us at the address given below or by making changes to their Account Settings.

    Recourse, Enforcement and Liability

    In compliance with the EU-U.S Privacy Shield, Groundspeak commits to resolve complaints about privacy and personal data collection or use. EU individuals with inquiries or complaints regarding this Policy should first contact Groundspeak at the address given below. Groundspeak will investigate and attempt to resolve such complaints by reference to the principles contained in this Policy.

    Groundspeak has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to the BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit the BBB EU PRIVACY SHIELD web site at www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.

    Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel.

    Groundspeak is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

    Groundspeak will conduct compliance audits of its relevant privacy practices to verify adherence to this Policy. Any employee that Groundspeak determines is in violation of this policy may be subject to disciplinary action.

    Contact Information

    If you have questions regarding this Policy, please email us or contact us by one of the means provided here, including by postal mail to:

    Geocaching HQ, Attn: Legal Dept., 837 N. 34th Street, Suite 300, Seattle, WA 98103 USA

    Limitations & Charges

    Groundspeak may also be required to disclose an individual’s personal data in response to a lawful request by public authorities or in connection with a legal obligation. Adherence by Groundspeak to these Privacy Shield Principles may also be limited to the extent necessary to meet national security, public interest or law enforcement obligations, and to the extent expressly permitted by an applicable law, rule or regulation.

    Notice of California consumer data collection and sharing practices

    The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of “Personal Information,” as well as rights to access and control Personal Information. The CCPA defines “Personal Information” to mean “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Certain information we collect may be exempt from the CCPA because it is considered public information (i.e., it is made available by a government entity) or covered by a federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.

    To the extent that we collect Personal Information that is subject to the CCPA, that information, our practices, and your rights are described below.

    Right to Access Information

    You have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request.

    Right to Request Deletion of Information

    You have the right to request in certain circumstances that we delete any Personal Information that we have collected directly from you. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

    Right to Opt Out of Sale of Personal Information to Third Parties

    You have the right to opt out of any sale of your personal information by Groundspeak to third parties. To exercise this right, please visit our “Do Not Sell My Personal Information” webpage. For California residents, the link should be available at the bottom of our website page or in the mobile app settings. If you are a California resident and do not see the link, please email us or contact us by one of the means provided here. Please note that your right to opt out does not apply to our sharing of personal information with service providers, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.

    Your California Privacy Rights

    Residents of the State of California also have the right to request information regarding third parties to whom the company has disclosed certain categories of Personal Information during the preceding year for the third parties’ direct marketing purposes.

    How to Submit a Request

    To make a request to opt out of such disclosure, please email us or contact us by one of the means provided here, such as by postal mail:

    Groundspeak, Inc.
    837 N 34th Street
    Suite 300
    Seattle, WA 98103

    You must include the Services as the subject line, and your full name, the e-mail address associated with your Geocaching account, if applicable, and postal address in your message.

    Data We Collect

    The following is a description of our data collection practices, including the personal information we collect, the sources of that information, the purposes for which we collect information, and whether we disclose that information to external parties. We may use any and all of the information for any of the purposes described in the Privacy Policy, unless limitations are listed. The categories we use to describe the information are those enumerated in the CCPA.

    • Personal Identifiers:
      • We collect your name, phone number, email address, and contact address when you complete a transaction on our Shop.Geocaching.com site.
      • If you choose to create an account, we will collect your email address. You will also be asked to create a username, and we will assign one or more unique identifiers to your profile.
      • You provide our payment processing service providers or the applicable app store with payment information, which may be your credit card number or a bank account, when you complete a transaction or sign up for a premium membership. With the payment processor or app store, you have the option to store this information in connection with your account or set up a recurring transaction.
      • We do not collect your Social Security number, driver’s license number, or passport number.
      • We do not collect any medical information or health information about you.
      • We collect your IP address automatically when you use our Services.
      • We collect your device ID automatically when you use our Services.
    • Protected Classifications:We may collect your age in order to comply with laws that restrict collection and disclosure of personal information belonging to minors. We do not collect your gender, racial or ethnic origin, or sexual orientation.
    • Commercial Information:When you engage in transactions with us, we create records of goods or services purchased or considered, as well as purchasing or consuming histories or tendencies.
    • Biometric Information: We do not collect information about your physiological, biological, or behavioral characteristics.
    • Internet or Other Electronic Network Activity Information: We collect information about your browsing history, search history, and information regarding your interaction with websites, applications, or advertisements automatically when you use our Services.
    • Geolocation Data: As described above, we collect your IP address automatically when you use our Services. We may be able to determine your general location based on the IP address. When you use the Services for the first time, we ask for your permission to collect your precise geolocation (e.g., your GPS coordinates). If you allow your device to provide us with this information, we use it to provide you with the Services and to make improvements to our products and Services. Additionally, you have the option to add a Home Location in your private profile information for purposes of seeing events and caches near you.
    • Audio, electronic, visual, thermal, olfactory, or similar information: If you contact us via phone, we may record the call. We will notify you if a call is being recorded at the beginning of the call. We do not collect your image or any thermal, olfactory, or similar information.
    • Professional or employment-related information: We do not collect employment-related information from our users.
    • Education information: We do not collect any information about the institutions you have attended or the level of education you have attained.
    • Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics: We may analyze your actual or likely preferences through a series of computer processes. On some occasions, we may add our observations to your internal profile.

    Data Sharing

    We may share any of the above-listed information with service providers, which are external parties that we engage for business purposes. Service providers are prohibited from using Personal Information for any purpose that is not related to our engagement. The categories of service providers with whom we share information and the services they provide are described in our Privacy Policy.

    On certain occasions, we also share information with third parties that would be considered a “sale”, as the term is defined under California law. Such sharing may be considered a sale because the purpose of sharing is not an enumerated business purpose under California law, or because our contract does not prohibit them from using Personal Information for other purposes. To “sell” information means to disclose it to an external party for monetary or other benefit. We sell the following information:

    • Personal Identifiers. We provide your IP address and Device ID to our advertising partners. We also provide certain geocaching information to our Authorized Developers, as provided in our Privacy Policy, for the purpose of creating geocaching applications and websites. This information includes your username, your avatar pictures, images, geocache and trackable logs. You can opt out of sharing your information with Authorized Developers in Account Settings.
    • Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics. Cookies dropped on your browser may collect observations about you that are shared to our advertising partners. You can opt out of advertising cookies using the tools on our site or by visiting Google and using "Ads Settings" to set your preferences. The website http://optout.aboutads.info/ offers a single place to turn off targeted ad serving from any of its members.

    We may also disclose information to other external parties who are not listed here when required by law or to protect our Company or other persons, as described in this Privacy Policy.