Privacy Notice to Data Subjects in the EEA, the UK and Switzerland

Privacy Notice to Data Subjects in the EEA, the UK and Switzerland

Date of issue: September 1, 2021


Scope
If you are a resident of the EEA (specifically, any country in the European Union, Liechtenstein, Norway, Iceland) or a resident of the United Kingdom ("UK") or a resident of Switzerland, this Privacy Notice to Data Subjects in the EEA, the UK and Switzerland ("Privacy Notice") explains what personal data we collect about you, how it is used, with whom it is shared, and rights you may exercise in relation to your personal data.
This Privacy Notice applies to our privacy practices for your use of (i) this website and any mobile sites or applications operated by Alarm.com, including the Alarm.com application, (the "User Interfaces") and (ii) any combination of Alarm.com's products and services purchased or accessed via any User Interface (the "Services"), and all personal data we directly receive or collect from you in the course of doing business. Alarm.com's business address is 8281 Greensboro Drive, Suite 100, Tysons, VA 22102 USA.
Alarm.com's Services are provided by licensed and authorized service providers ("Authorized Service Providers"). If you are a customer of an Authorized Service Provider, your information will be processed by Alarm.com acting as a data processor and your Authorized Service Provider will remain responsible for the handling of any personal information it collects from you and for compliance with any applicable data protection and/or privacy laws. You should refer to the Authorized Service Providers' privacy notice for more information on the Authorized Service Providers' privacy practices.

Data Collection and Use

Data You Provide to Us
If you are an owner, agent, or employee of an existing or prospective Authorized Service Provider, you may provide us with personal data when you register with Alarm.com, engage with customer support or marketing, and transact business with Alarm.com.
If you are an existing or prospective customer of an Authorized Service Provider, you may provide us with personal data when you set up your account with Alarm.com and use Alarm.com User Interfaces or Services.
We may use this information for our business operations, to communicate with you or your Authorized Service Provider (as applicable), to comply with the law, and to protect the security and integrity of the User Interfaces and Services.

Data We Collect and Process on Behalf of Authorized Service Providers
When using the User Interfaces, you may provide us with personal data including, but not limited to, your name, home or business address, phone number, email address, location, or zip code.
When using our Services, you or your Authorized Service Provider may provide us with certain additional information (e.g., unit description, home or business size, home or business system configuration, sensor names, appliances or other devices monitored by Alarm.com, account information, schedule, mode, automation settings, and device settings) in order to help us personalize your Services. Alarm.com may also receive personal data that you have provided to our partners, including emergency contact information and user profile information, to enable Alarm.com to provide our Services. 

On behalf of you or your Authorized Service Provider, Alarm.com may process information regarding your use of the Alarm.com Services, including but not limited to: performance of any security or other device monitored by Alarm.com, electrical usage or consumption, heating and cooling information, light or other fixture settings, and usage and alert logs. We receive this type of information from your devices that are monitored by Alarm.com and your computer or other electronic device through which you may access, browse, download, receive, or otherwise use the Alarm.com User Interfaces or Services (each a "Personal Device"), and we may also receive and collect such information from third parties.
Alarm.com will process all personal data received by Authorized Service Providers via contractual arrangements and may use compiled aggregate statistics about the User Interfaces and Services to improve our Services.

Location-based Information
Some features of our Services, such as location-activated arming reminders, thermostat adjustments, vehicle diagnostics, and other location-based Services (collectively, "GeoServices"), use location information. Before certain GeoServices information can be used, you must first opt-in to activate these Services. If you enable these features, we will automatically collect and store location information from your Personal Device or vehicle you designate which is capable of producing location data (e.g., mobile device, GPS device, or vehicle). This location information may include your current location or places you have recently visited. We also may aggregate this information, but this information will only be used for Alarm.com's internal purposes and to provide information requested by you. If you do not wish for us to collect and store this information, do not enable these features.

Video and Audio Data
When you (i) subscribe to Alarm.com's video monitoring or video monitoring add-on Services (such as the Visual Verification services), (ii) use a connected doorbell, camera, image sensor, or other connected device or wearable that is capable of recording video and/or audio recordings, or (iii) subscribe to two-way voice, you may enable us, certain of our third-party service providers, or your Central Station (as defined below), to record, store, view and process video and/or audio recordings from your monitoring equipment. This may include capturing and sending to you portions of this data as part of a notification or analyzing the data to identify motion or other events. We may process information from your monitoring equipment so that we can send you alerts. In addition, if you have the recording features enabled, we will capture, process and store video and audio data recordings from your device and you may be able to access those recordings. As used herein, a "Central Station" is a third party selected by your Authorized Service Provider to receive alarm signals and coordinate emergency response.

Data protection and privacy laws in your country may impose certain responsibilities on you and your use of security cameras, connected doorbells and other devices with recording capabilities. You (not Alarm.com) are responsible for ensuring that you comply with any applicable laws. For example, you may need to display a notice that alerts visitors to your home or business that they may be recorded using security cameras and other devices with recording capabilities. Alarm.com takes no responsibility for your compliance with these laws.

Data We Collect Automatically

When you use the User Interfaces or access Alarm.com Services using your Personal Device, certain information may be collected by automated means, such as cookies. Information about Alarm.com’s use of cookies can be found in our Cookie Policy.


Legal Basis for Processing Personal Data
We will only collect and process personal data about you where we have a legal basis. Legal bases include consent (where you have given consent), contract (where processing is necessary for entering into or the performance of a contract with you), compliance with a legal obligation, and "legitimate interests."
Where we process personal data based on consent, we will ask for your unambiguous consent. You may withdraw your consent at any time, but that will not affect the lawfulness of the processing of your personal data prior to such withdrawal.
We may process your personal data for the purposes of our legitimate interests, provided that such processing does not outweigh your rights and freedoms. Where we rely on legitimate interests, you have the right to object. Please keep in mind that if you object this may affect our ability to perform certain services for your benefit. We process your personal data based on legitimate interests in order to:

• Protect you, us, or others from security threats by enhancing the security of our network and information systems;
• Identify and prevent fraud;
• Comply with applicable laws and industry regulations;
• Enable or administer our business, such as for invoicing Authorized Service Providers and maintenance of User Interfaces; and
• Improve our User Interfaces and Services by enabling us to enhance, modify, or personalize them for your benefit.

Data Sharing
Alarm.com will not disclose your personal data to any other entity except:

• as is necessary to provide the Alarm.com User Interfaces and Services to you;
• to your Authorized Service Provider (also referred to as your Alarm.com Dealer), the company through which you subscribed to our Services;
• to the Central Station selected by your Authorized Service Provider to receive alarm signals and coordinate emergency response;
• when you have opted in to share the information;
• to third party suppliers, subcontractors or business partners who work or perform services on our behalf and are only permitted to use the minimum amount of information necessary to assist in providing the Services;
• as necessary in connection with other lawful business purposes; and
• as otherwise necessary when required or permitted by law.

In addition, we may disclose your personal data when the personal data has been converted to a form that cannot be used to identify you. It may also be necessary for us to disclose your personal data in case of a merger or combination with, or acquisition of a portion of our business by, another company or entity, in which case personal data collected by Alarm.com would be expected to be one of the transferred business assets.

International Data Transfers
Our servers and offices are located in the United States, so your personal data will be transferred to, stored, or processed in the United States. We rely on legally-provided mechanisms to lawfully transfer personal data across borders, including the European Commission-approved "Standard Contractual Clauses" or "Model Clauses."

Exercising Your Rights

Right to Access, Correct, Update and Delete Personal Data
You may view, update, or delete certain personal data at any time by following the links at www.alarm.com to your profile and address book pages. These changes will be immediately made to our records. If you wish to stop Services notifications, you may do so through the User Interfaces. For customers of Authorized Service Providers, changes you make to your user profile on the Alarm.com User Interfaces to your user profile may not automatically change the records of your Authorized Service Provider. You should contact your Authorized Service Provider directly to make changes to its records.
By contacting your Authorized Service Providers, you can also exercise the following rights:

• Deletion. You can ask to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
• Object to, or Limit or Restrict, Use of Data. You can ask to stop using all or some of your personal data (e.g., if there is no legal right to keep using it) or to limit use of it (e.g., if your personal data is inaccurate or unlawfully held).
• Take Your Data. You can ask for a copy of your personal data provided in a machine readable form.

If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
We do not make use of automated decision-making. As defined under current data protection laws, automated decisions are defined as decisions about individuals that are based solely on the automated (i.e., no human involvement) processing of data and that produce legal effects or that significantly affect the individuals involved.
You have the right to register a complaint with a European data protection or supervisory authority about our collection and use of your personal information. For more information, please contact your local data protection authority. For more information, please contact your local data protection authority (contact details for data protection authorities in the EEA are available at https://edpb.europa.eu/about-edpb/board/members_en; contact details for the data protection authority in the UK are available at https://ico.org.uk/; and contact details for the Swiss data protection authority are available here https://ico.org.uk/ ).

(contact details for data protection authorities in the EEA, the UK and Switzerland are available at https://edpb.europa.eu/about-edpb/board/members_en).

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

Retention Period
We retain the personal data that we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with the Services you requested or to comply with an applicable legal requirement).

Information Protection
Alarm.com has security measures in place to protect against the loss, misuse, and alteration of your personal data. For example, we protect your information through a unique username and password, and we protect certain sensitive communications with our website through server authentication and secure connections.

Third Party Websites
For your convenience, some hyperlinks may be posted on the Alarm.com website that link to other websites not under Alarm.com's control. Alarm.com is not responsible for, and this Privacy Policy does not apply to, the privacy practices of those sites or of any companies that Alarm.com does not own or control. Alarm.com does not endorse any of these websites or pages, the services or products described or offered on such sites or pages, or any of the content contained on those sites or pages. Alarm.com encourages you to seek out and read the privacy policy of each website that you visit. In addition, should you happen to initiate a transaction on a website linked to the Alarm.com website, even if you reached that site through the Alarm.com User Interfaces, the information that you submit to complete that transaction becomes subject to the privacy practices of the operator of that linked website. You should read that website's privacy policies to understand how personal data that is collected about you is used and protected.

Changes to Our Privacy Notice
We may modify our Privacy Notice from time to time, and we will post the revised statement here, with an updated revision date. If we revise our Privacy Notice in a material way, we will provide a conspicuous notice on our website before any changes take effect.

Contact Information
You can contact our data protection officer (DPO) at privacy@alarm.com.