mathworks data privacy faq -凯发k8网页登录
1. does mathworks publicly disclose its data privacy practices?
yes. the mathworks privacy policy contains a detailed description of mathworks’ use of personal data, including instructions on how to correct or delete personal data. the mathworks trust center contains additional information for data protection officers.
2. what data does mathworks collect and use about me?
the information we collect section of the privacy policy lists the types of information that mathworks collects when you access and use products and services, including the website.
3. does mathworks ever sell or rent my personal data?
no.
4. does mathworks store personal data in connection with use of its products?
it depends on how you have purchased mathworks products, your license option, and whether you have an online mathworks account. for most customers and end users, mathworks has your name and email address. if you’ve provided additional contact information, such as your mailing address and phone number, mathworks stores that too. for license management purposes, mathworks may store information about your computer, such as your computer host name. for end users who access the products through their organization with a license option that does not require a named account, mathworks may not have any personal data.
5. does mathworks collect information about my web browser or network?
like most software and online services, mathworks’ website and products collect usage and device information. this information tells, for example, which web browsers people are using when they access the website. this information also helps to identify and correct problems in mathworks software.
6. does mathworks store my code or models in connection with use of its products?
mathworks does not store your matlab code, simulink models, or other files unless you choose to use mathworks cloud file storage.
7. who can access my files in mathworks cloud file storage?
your files can be accessed only by you, unless you choose to share them. even if you have an account through an organization, such as a company or university, others in your organization can see your files only if you choose to share them. select mathworks employees serving in certain information technology roles have access limited to deployment, backup, and recovery operations. these employees have signed confidentiality agreements.
8. who can access my personal data?
if you are part of an organization that has a mathworks license or subscription, your license administrator or faculty supervisor can access some of your data. this data includes the name and email address that you use for your mathworks account and relevant usage information. for license administrators, relevant usage information is related to license use and management, such as which mathworks products you use and how often you access them. for faculty supervisors using matlab grader and other online learning products and services, relevant usage information is related to learning for enrolled students, such as whether students have completed assignments. your contact and account information can be accessed by employees at mathworks who need access due to the nature of their work. all mathworks employees are subject to company-wide policies about confidentiality and protection of personal information.
9. what measures does mathworks use to protect my data?
mathworks uses physical, technical, and administrative safeguards to protect customer data. these safeguards include data encryption, access-controlled facilities and systems, regular scanning and monitoring of networks and servers, and controls for data authentication and integrity. mathworks has a dedicated security team that manages and implements these safeguards. all mathworks employees are subject to company-wide policies about confidentiality and protection of personal information. for more information, see the mathworks trust center.
10. in which countries does mathworks store my data?
mathworks maintains key business systems to support its ability to provide software and services, including systems for licensing, customer support, and billing. structured customer data collected through such systems is stored in the united states and ireland. customer data collected by mathworks in the context of a technical services and support engagement may be stored in the united states and ireland as well as in the country where the mathworks technical services and support personnel are located.
11. does mathworks train its staff on data protection?
yes. mathworks staff members are required to complete data privacy and security training annually.
12. does mathworks have an incident response plan?
yes. mathworks maintains a program for managing security incidents that includes documented roles and responsibilities, response procedures, reporting requirements, and a root cause analysis process. mathworks conducts tabletop exercises to practice its response to information security incidents on a regular basis.
13. how does mathworks handle data subject requests?
mathworks uses a data subject request process that allows individuals to make requests about their personal data, including data deletion, correction, access, and portability. you may exercise these rights by submitting a or contacting us at . mathworks responds to these requests within thirty days to either confirm that the request was fulfilled, or explain why and in what ways the request could not be fulfilled.
14. what does mathworks do to comply with gdpr, ccpa/cpra, and other data privacy laws?
mathworks has a privacy compliance program for protection of data and adherence to fair information principles including lawfulness, fairness, transparency, purpose limitation, data minimization, storage limitation, accountability for onward transfer, security, data integrity, confidentiality, recourse, enforcement and liability. some of the specific measures mathworks has taken include becoming part of the better business bureau’s program to provide an independent recourse mechanism for customers to address any complaints or issues about their data; entering into data protection contracts for compliance with gdpr and other applicable laws; reviewing and documenting data usage and workflows; and regularly assessing data protection practices.
15. what does mathworks do to help customers comply with hipaa, pci-dss, and other industry-specific laws and standards?
mathworks provides data security and privacy safeguards, as described above, but customers are responsible for their compliance with laws and standards that apply to them. if you have specific statutory or regulatory requirements for data storage, mathworks suggests using your own storage rather than the online storage that mathworks provides.
16. what legal mechanisms does mathworks use for cross-border data transfer?
mathworks uses a combination of contractual clauses detailing the transfer; standard clauses required by law, such as the eu standard contractual clauses (sccs); risk assessments; and technical and organizational data protection safeguards.
17. where can i find additional information about transfers of data to third parties?
mathworks does not sell or rent personal information to third parties. we may transfer data to third parties such as information technology infrastructure providers. specific reasons for transfers and categories of third parties are listed in the “reasons we share your information” section of the mathworks privacy policy. if needed, detailed subprocessor information is available upon request.
18. why is mathworks still certified under the privacy shield frameworks and why are they still mentioned in the mathworks privacy policy?
mathworks remains certified under the eu-us and swiss-us privacy shield frameworks because the u.s. department of commerce continues to administer and enforce the privacy shield program. this certification requires that we include privacy shield information in our privacypolicy. we continue to use appropriate safeguards under both privacy shield and gdpr with respect to eea personal data.
mathworks does not rely on privacy shield as a legal basis for transfers of data under gdpr. for transfers of such data outside the eu, we typically rely on the eu sccs.
19. how does mathworks comply with the requirements of the schrems ii decision of the court of justice of the european union (cjeu)?
the schrems ii decision, and the associated guidance from the european data protection board, indicates that transfers of personal data from the eu to third countries require both a valid transfer mechanism (as described above), and a risk assessment including any supplementary measures needed to provide an adequate level of data protection for the transfer. in the us, the cjeu in schrems ii identified two laws, fisa section 702 (50 u.s.c. 1881a) and executive order 12333, as potentially requiring disclosures of personal data that would be incompatible with the level of data protection required by the european union.
neither fisa 702 nor eo 12333 is directly applicable to mathworks, and mathworks has no reason to believe that these laws would be interpreted or applied to cover its transfers of personal data. the nature of the personal data transferred (primarily contact information and business information) and the nature of the processing (facilitating access to technical computing software) make it unlikely that any such personal data would be requested or would be useful for surveillance purposes.