Privacy Shield Framework
Although not relied on for data transfers, Intuit Inc. complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland, to the United States. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. You can find more information about Intuit’s and Mailchimp’s EU-U.S. and Swiss-U.S. Privacy Shield certification here.
This section applies to Applicants and Workforce Members based in the EEA, California or other regions where there are applicable data protection laws.
To make a request, please contact HR Connect using the methods described in the “How to Contact Us” section below. We will consider and act upon any such requests in accordance with applicable data protection laws. If you are a California resident, you may only make a request to exercise your rights on behalf of yourself. You also have a right to submit requests to exercise your rights through an authorized agent. An authorized agent must be registered with the Secretary of State in California to conduct business in California. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, (b) verify your identity directly with us, and (c) directly confirm with us that you granted permission to the authorized agent to submit the request on your behalf. For clarity, you are required to verify the identity of both yourself and the authorized agent.
In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information. You must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.
When we receive your request to exercise your rights: (a) we will acknowledge receipt of your request; (b) we will try to match the Personal Information you provide in making the request with Personal Information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including Personal Information; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.
We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.
We will respond to your requests within the time periods prescribed by applicable law. If we require additional time, we will inform you of the reason and extension period.
When applicable, if we are relying on your consent to process your Personal Information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.
Please be aware that you may have limited choices in your ability to request deletion of Personal Information due to Intuit’s legal obligations to retain certain information.