Introduction

This Privacy Addendum for Virginia Residents (the “Virginia Privacy Addendum”) supplements the information contained in Parking Revenue Recovery Services, Inc.’s (“PRRS” or “we” or “us”) Privacy Policy and further describes our collection and use of Personal Data (as defined below). This Virginia Privacy Addendum applies solely to all visitors of our Website (as defined in the Privacy Policy), users of our services, and others acting only in an individual or household context, each of whom resides in the Commonwealth of Virginia (“consumers” or “you”). We adopt this notice to comply with the Virginia Consumer Data Protection Act of 2021 (“VCDPA”), and any terms defined in the VCDPA have the same meaning when used in this notice.

This Virginia Privacy Addendum applies to information that we collect on our Website or App and when you use our Services that is linked or reasonably linkable to an identified or identifiable natural person (“Personal Data”).

Information We Process

We collect information that is linked or is reasonably linkable to you as an identified or identifiable person, or Personal Data, as described in our Privacy Policy, and categorized below.

Personal Data does not include, and this Virginia Privacy Addendum does not cover:

• Publicly available information from government records or that we have a reasonable belief is lawfully made available to the general public either by widely distributed media, by you, or by a person to whom you have disclosed the information (unless you have restricted the information to a specific audience);
• Information that has been de-identified such that the information can no longer be reasonably linked to you or a device linked to you;
• Information excluded from the VCDPA’s scope, such as Personal Data covered by certain sector-specific privacy laws, including the Driver’s Privacy Protection Act of 1994; and
• Other information as set forth under the VCDPA.

Use of Personal Data

We limit the collection of Personal Data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the Personal Data is processed. We may process the Personal Data we collect, for one or more of the purposes described in the Privacy Policy (for more information, see How We Use Your Information).

Specifically, PRRS may collect and use Personal Data to respond to your inquiries, fulfill your requests, and improve your experience; for marketing, advertising, and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes; to detect, prevent or investigate potential security breaches, fraudulent transactions, and monitor against theft.

We will not process Personal Data for purposes that are neither reasonably necessary to nor compatible with the purposes for which the Personal Data is processed as described in the Privacy Policy without your consent.

Sharing Personal Data

PRRS may share your Personal Data to a third party. When we disclose Personal Data, we enter into contract that describes the purpose and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract. The categories of Personal Data that we share with third parties, and the categories of third parties that we share your Personal Data with, are described in the following table:

Sales of Your Personal Data

We do not sell your Personal Data to third parties for their own commercial use.

Your Rights and Choices

The VCDPA provides you, as a consumer in Virginia, with specific rights regarding your Personal Data. This section describes your VCDPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your authorized agent. For more information on how you or your authorized agent can exercise your rights, please see Exercising Your VCDPA Privacy Rights.

• Confirmation and Access. You have the right to confirm whether or not we are processing your Personal Data and to have access to that Personal Data.
• Correction. You have the right to correct any inaccuracies in your Personal Data processed by us, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. We may also not be able to accommodate your request to change the Personal Data if we believe it would violate any law or legal requirement or cause the Personal Data or the information associated with the Personal Data to be incorrect.
• Deletion. You have the right to request that we delete all of your Personal Data. We cannot delete your Personal Data except by also deleting your user account. We may not accommodate a request to erase your Personal Data if we believe the deletion would violate any law or legal requirement or cause any information associated with the Personal Data to be incorrect.
• Portability. To the extent you provide us with your Personal Data and to the extent we process the Personal Data by automated means, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Data to another controller without hindrance.
• Opt-Out of Certain Processing. You have the right to opt-out of processing your Personal Data for the purposes of: (i) targeted advertising; (ii) the sale of your Personal Data; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant effects. These decisions include decisions that result in the provision or denial by the controller of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities, such as food and water. Please note, however, that PRRS does not sell your Personal Data or process Personal Data for purposes of targeted advertising or profiling within the meaning of the VCDPA.
• Right to Non-Discrimination. We will not discriminate against a Virginia resident for exercising one of the above rights.
• Right to Appeal. Virginia residents have the right to appeal a refusal by us to act on your request to exercise any of the above rights. See Appeal Process below for more information.

Exercising Your VCDPA Rights

To exercise the rights described above, please submit a request to us by contacting us by either:

• Calling us at (877) 302-7275
• Emailing us at Privacy@prrsparking.com
• Clicking the “Your Privacy Choices” link in the footer of our Website or within our App

You may only make a request to exercise the above rights twice within a 12-month period. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Data if we cannot authenticate that the Personal Data that is the subject of your request relates to you through commercially reasonable efforts. In this case, we may request additional information, which we will only use to authenticate you.

Making a verifiable consumer request does not require you to create a password-protected, online account with us. However, if you do have such an account, we may require you to use it in order to make your request. Doing so will enable us to process your requests through that account to authenticate that the Personal Data that is the subject of your request relates to you.

Response Timing and Format

We will generally process these requests within forty-five (45) days of receiving them. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the Contact Information at the end of this Addendum. Within sixty (60) days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the Virginia Attorney General through their contact information available at: https://www.oag.state.va.us/contact-us/contact-info.

Non-Discrimination

We will not discriminate against you for exercising any of your VCDPA rights. Unless permitted by the VCDPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the VCDPA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Changes to This Virginia Privacy Addendum

PRRS reserves the right to amend this Virginia Privacy Addendum at our discretion and at any time. When we make changes to this Virginia Privacy Addendum, we will post the updated addendum on the Website and update the addendum’s effective date. Your continued use of our Website, App, and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Virginia Privacy Addendum, the ways in which PRRS collects and uses your information described above and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under Virginia law, please do not hesitate to contact us at:

Parking Revenue Recovery Services, Inc.
Phone: (877) 302-7275
Website: www.parkingprrs.com
Email: Privacy@prrsparking.com
Postal Address: 12381 East Cornell Ave, Aurora, Colorado 80014