Introduction

This Privacy Addendum for Colorado Residents (the “Colorado Privacy Addendum”) supplements the information contained in Parking Revenue Recovery Services, Inc.’s (“PRRS” or “we” or “us”) Privacy Policy and further describes our collection and use of Personal Data (as defined below). This Colorado Privacy Addendum applies solely to all visitors, users, and others who reside in the State of Colorado (“Consumers” or “you”). We adopt this Colorado Privacy Addendum to comply with the Colorado Privacy Act (“CPA”), which will go into effect on July 1, 2023, and any terms defined in the CPA have the same meaning when used in this Colorado Privacy Addendum. We may update this Colorado Privacy Addendum at any time as necessary in the event of changes to the CPA.
This Colorado Privacy Addendum applies to information that we collect on our Website or App and when you use our Services (both online and offline) that is linked or reasonably linkable to an identified or identifiable individual (“Personal Data”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the CPA) are not considered Personal Data and this Colorado Privacy Addendum does not apply to such information.
This Colorado Privacy Addendum also does not apply to certain Personal Data that is excluded from the scope of the CPA, such as Personal Data covered by certain sector-specific privacy laws, including the Driver’s Privacy Protection Act of 1994.

This Colorado Privacy Addendum applies to information that we collect on our Website or App and when you use our Services (both online and offline) that is linked or reasonably linkable to an identified or identifiable individual (“Personal Data”).

Personal Data We Collect About You

We collect information that is linked or reasonably linkable to you, as an identified or identifiable individual or Personal Data, as described in our Privacy Policy and categorized below.

PRRS will not collect additional categories of Personal Data without your consent without providing you notice.

PRRS does not knowingly collect or process Personal Data from children under the age of 13. We also do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, as defined in the CPA.

Personal Data does not include, and this Colorado Privacy Addendum does not cover:

• Publicly available information from government records or information that we have a reasonable belief is lawfully made available to the general public by you;
• Information that has been de-identified such that the information cannot reasonably be used to infer information about, or otherwise be linked to, you, or a device linked to you;
• Information covered by certain sector-specific privacy laws, including the Family Educational Rights and Privacy Act (FERPA), the Fair Credit Reporting Act (FCRA), the Health Insurance Portability and Accountability Act (HIPAA), the Driver’s Privacy Protection Act of 1994 (DPPA); and
• Other information as set forth under the CPA.

Sources of Personal Data

We collect Personal Data about you from the sources described in our Privacy Policy.

Use of Your Personal Data

We limit the collection of Personal Data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the Personal Data is processed. We may process the Personal Data we collect, for one or more of the purposes described in the Privacy Policy (for more information, see How We Use Your Information).

Specifically, PRRS may collect and use Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising, and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes; to detect, prevent or investigate potential security breaches, fraudulent transactions and monitor against theft.

We will not process Personal Data for purposes that are neither reasonably necessary to nor compatible with the purposes for which the Personal Data is processed as described in the Privacy Policy without your consent.

To Whom Do We Sell or Share Your Personal Data

As noted in our general Privacy Policy, we do not sell Personal Data as the term “sell” is commonly understood to require an exchange for money. However, the use of advertising and analytics cookies on our Website is considered a “sale” of Personal Data as the term “sale” is broadly defined in the CPA to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising, and their use in understanding how people use and interact with our Website, App, or Services. Our “sale” of your Personal Data in this matter are subject to your right to opt-out of those sales (see Exercising Your CPA Privacy Rights.).

The categories of Personal Data that we sell or share with third parties, and the categories of third parties with whom we sell or share your Personal Data, are described in the following table:

Your Rights and Choices

The CPA provides Colorado residents with specific rights regarding their Personal Data. This section describes your CPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your CPA Privacy Rights.

• Confirmation and Access. You have the right to confirm whether we process your Personal Data and to request access to all the specific pieces of Personal Data we have collected and maintain about you.
• Correction. You have the right to correct any inaccuracies in your Personal Data processed by us, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. We may also not be able to accommodate your request to change the Personal Data if we believe it would violate any law or legal requirement or cause the Personal Data or the information associated with the Personal Data to be incorrect.
• Deletion. You have the right to request that we delete all of your Personal Data. We cannot delete your Personal Data except by also deleting your user account, however, we may not accommodate a request to erase your Personal Data if we believe the deletion would violate any law or legal requirement or cause any information associated with the Personal Data to be incorrect.
• Portability. To the extent you provide us with your Personal Data and to the extent we process your Personal Data, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Data to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets. You may only make such a request twice within a 12-month period.
• Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your Personal Data for the purposes of: (i) targeted advertising; (ii) the sale of your Personal Data; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant affects concerning. These decisions include decisions that results in the provision or denial by the controller of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities, such as food and water. Please note, however, that PRRS does not process Personal Data for purposes of targeted advertising or profiling within the meaning of the CPA.
• Right to Non-Discrimination: We will not discriminate against a Colorado resident for exercising one of the above rights.

Exercising Your CPA Privacy Rights

To exercise the rights described above, please submit a request to us by contacting us by either:

• Calling us at (877) 302-7275
• Emailing us at Privacy@prrsparking.com
• Clicking the “Your Privacy Rights” link in the footer of our Website or within our App
• Enabling a recognized universal opt-out mechanism on your browser or device, such as the Global Privacy Control (“GPC”).

If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.

Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your Personal Data. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below.

All Consumer Requests must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data or an Authorized Agent of such a person. This may include:
  • Verifying Personal Data that we may already have about you, such as your name, address, license plate number, ticket number and/or other similar information.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We are unable to fulfill your request or provide you with Personal Data if we cannot authenticate that the Personal Data that is the subject of your request relates to you through commercially reasonable efforts. In this case, we may request additional information, which we will only use to authenticate you.

Making a verifiable consumer request does not require you to create a password-protected, online account with us. However, if you do have such an account, we may require you to use it in order to make your request. Doing so will enable us to consider your requests through that account to authenticate that the Personal Data that is the subject of your request relates to you.

Privacy Control Signals

You may also exercise your right to opt out of the “sale” of your Personal Data for the purposes of targeted advertising by setting the privacy control signal on your operating system, if your system supports it. We currently recognize and support the following privacy signals sent by mobile operating systems:

• Global privacy control (for more information on how to configure your mobile operating system to send this signal, please see https://globalprivacycontrol.org/).

When we receive one of these privacy control signals, we will opt you out of any further “sales” of your Personal Data when you interact with our App or Services through that mobile device. We are only able to propagate your choice to opt-out to your account if you are currently logged in when we receive the privacy control signal from your mobile device. When we are able to propagate your choice to your account, you will be opted out of “sale” of your Personal Data on all devices on which you are logged in, and for both online and offline “sales.”

Response Timing and Format

We will generally process these requests within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the contact information listed below.

Within 45 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If we require more time (up to 60 additional days), we will inform you of the reason and extension period in writing. If your appeal is denied, you may lodge a complaint with the Colorado Attorney General through his/her contact information available at: https://coag.gov/about-us/contact-colorado-office-attorney-general/.

Authorized Agents

You may authorize your agent to exercise your rights under the CPA. We may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Changes to This CPA Privacy Addendum

PRRS reserves the right to amend this Colorado Privacy Addendum at our discretion and at any time. When we make changes to this Colorado Privacy Addendum, we will post the updated addendum on the Website and update the addendum’s effective date. Your continued use of our Website, App, and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Colorado Privacy Addendum, the ways in which PRRS collects and uses your information described above and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under Colorado law, please do not hesitate to contact us at:

Parking Revenue Recovery Services, Inc.
Phone: (877) 302-7275
Website: www.parkingprrs.com
Email: Privacy@prrsparking.com
Postal Address: 12381 East Cornell Ave, Aurora, Colorado 80014