CALIFORNIA EMPLOYEE AND JOB APPLICANT PRIVACY POLICY

California residents may exercise certain privacy rights pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2023, and related regulations.  Your right to submit certain requests as a California resident is described below. Please note that these rights are subject to certain exceptions, and certain of these rights are subject to verification mechanisms. 

• • Right to Know Personal Information Collected About You. You have the right to know: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the business or commercial purpose for collecting Personal Information; (4) the categories of third parties to whom we disclose Personal Information; and (5) the specific pieces of Personal Information we have collected about you.  You also have the right to know the list of all third parties to whom we have disclosed Personal Information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.  

• • Right to Know Personal Information Disclosed or Sold and to Whom.  You have the right to request that we disclose to you: (1) the categories of Personal Information that we collected about you; (2) the categories of Personal Information that we sold about you and the categories of third parties to whom the Personal Information was sold, by category or categories of Personal Information for each category of third parties to whom the Personal Information was sold; and (3) the categories of Personal Information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.   

• • Right to Request Deletion of Your Personal Information.  You have the right to request that we delete your Personal Information, subject to a number of exceptions.  Following receipt of a request, we will let you know what, if any, Personal Information we can delete from our records.  If we cannot delete all of your Personal Information, we will let you know the reason.  

• • Right to Correct Inaccurate Information.  If you believe that any of the Personal Information we maintain about you is inaccurate, you have the right to submit a request for us to correct that information.  Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you direct.   

• • Right to Opt-Out of the Sale of Your Personal Information.  To the extent applicable, you may opt-out of the “sale” of personal information by clicking HERE.

• • Right to Limit the Use of Your Sensitive Personal Information.  California provides certain rights to limit the use of Sensitive Personal Information under certain circumstances.  You do not have this right where we use your Sensitive Personal Information for the following purposes:  (i) to that use which is necessary to perform the services or provide the goods reasonably expected by you; (ii) to help to ensure security and integrity; (iii) to perform services on our behalf; (iv) to undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us; and (v) to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.  Given our use of your Sensitive Personal Information, this right does not apply to you.   

• • Right to Not Be Retaliated Against. If you choose to exercise any of your rights, you have the right not to be retaliated against and not to receive discriminatory treatment by us. 

You may submit a request to know, delete, and/or correct by calling us at 972-546-0528 or emailing us at info@advantismed.com.  When you make a request to know, delete, and/or correct, to help protect your privacy and maintain security, we will take steps to verify your identity.  Our verification procedure may differ depending on whether you have an account with us or not, and the request you are making.  The following generally describes the verification processes we use:   

• • Password-Protected Accounts.  If you have a password-protected account with us, we may use existing authentication practices to verify your identity, but we will require re-authentication before disclosing, correcting, or deleting data.  If we suspect fraudulent or malicious activity relating to your account, we will require further verification (as described below) before complying with a request to know or delete. 
  • Verification for Non-Accountholders.  If you do not have, or cannot access, a password-protected account with us, we will generally verify your identity as follows: 

• • • • • For requests to know categories of Personal Information, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you with reliable data points maintained by us. 

• • • • • For requests to know specific pieces of Personal Information, we will verify your identity to a reasonably high degree of certainty by matching at least three data points provided by you with reliable data points maintained by us.  We will also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative.  We will maintain all signed declarations as part of our records. 

• • • • • For requests to correct or delete Personal Information, we will verify your identity to a reasonable degree or a reasonably high degree of certainty, depending on the sensitivity of the Personal Information and the risk of harm posed by unauthorized deletion.  We will act in good faith when determining the appropriate standard to apply. 

If there is no reasonable method by which we can verify your identity, we will state so in response to a request to know or delete Personal Information, including an explanation of why we have no reasonable method to verify your identity. 

If you use an authorized agent to submit a request to know, delete, or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.  This requirement does not apply if you have provided the authorized agent with power of attorney pursuant to California Probate Code sections 4121 to 4130. 

We will respond to requests to know, requests to delete and/or delete no later than 45 calendar days.  If we cannot verify your request within 45 days, we may deny your request.  If necessary, we may take up to an additional 45 days to respond to your request, but in such an event, we will provide you with a notice and an explanation of the reason that we will take more than 45 days to respond to your request.