22 of 84 cards in Legal Rights & Agreement Rules
Legal Rights & Agreement Rules · Context
The document is Slack's Privacy Policy with a stated effective date of July 5, 2023. Only this dated version is analyzed; earlier or later versions are not supplied.
Privacy Policy
Effective: July 5, 2023
Legal Rights & Agreement Rules · Context
When the policy says "Slack" it means one of two companies, Slack Technologies, LLC or Slack Technologies Limited. Which one applies to you is explained in the "Identifying the Data Controller and Processor" section later in the policy.
When we refer to “Slack”, we mean Slack Technologies, LLC or Slack Technologies Limited, as explained in more detail in the “Identifying the Data Controller and Processor” section below.
Legal Rights & Agreement Rules · Context
The policy applies to Slack's online workplace productivity tools and platform, including the Slack mobile and desktop applications (the "Services"), to Slack.com and other Slack websites (the "Websites"), and to other interactions you may have with Slack such as customer service inquiries and user conferences. Slack states that this is the only privacy policy that applies to Slack.
Applicability of This Privacy Policy
This Privacy Policy applies to Slack’s online workplace productivity tools and platform, including the associated Slack mobile and desktop applications (collectively, the “Services”), Slack.com and other Slack websites (collectively, the “Websites”) and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with Slack.
For the avoidance of doubt, this is the only privacy policy that applies to Slack.
Legal Rights & Agreement Rules · Restriction or exception
Slack ties use to acceptance: if you do not agree with the Privacy Policy, you are told not to access or use the Services, the Websites or any other aspect of Slack's business.
If you do not agree with this Privacy Policy, then do not access or use the Services, Websites or any other aspect of Slack’s business.
Legal Rights & Agreement Rules · Procedure
Slack may change the Privacy Policy from time to time, because laws, regulations and industry standards evolve or because Slack changes its services or business. Changes are posted on the policy page, and if a change materially alters your privacy rights Slack will give additional notice, such as by email or through the Services. If you disagree with a change, the policy says you should deactivate your Services account; to have Personal Data under the Customer's control removed, you contact the Customer. Two other sections qualify this remedy: Slack may keep your Other Information after deactivation for the period it needs for business interests, audits, legal compliance, disputes and enforcement, and if you cannot use the account settings and tools for access or deletion you are directed to the Customer who controls your workspace.
Changes To This Privacy Policy
Slack may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary, or we may make changes to our services or business. We will post the changes to this page and encourage you to review our Privacy Policy to stay informed. If we make changes that materially alter your privacy rights, Slack will provide additional notice, such as via email or through the Services. If you disagree with the changes to this Privacy Policy, you should deactivate your Services account. Contact the Customer if you wish to request the removal of Personal Data under their control.
This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.
If you cannot use the settings and tools, contact the Customer who controls your workspace for additional access and assistance.
Legal Rights & Agreement Rules · Company commitment
Where Slack transfers Personal Data from jurisdictions with differing data protection laws, one safeguard it offers is the European Commission's Standard Contractual Clauses, with the equivalent UK clauses where appropriate, for transfers to, among others, Australia, Canada, India, Japan, South Korea and the United States. Slack transfers Personal Data to facilitate the provision of the Services. Its standard data processing addendum incorporating the Standard Contractual Clauses is linked (not supplied), and an executed copy can be obtained by contacting Slack as described in the "Contacting Slack" section.
In particular, we offer the following safeguards if Slack transfers Personal Data from jurisdictions with differing data protection laws:
European Commission’s Standard Contractual Clauses. Slack uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, Canada, India, Japan, South Korea, and the United States. Slack will transfer your Personal Data to facilitate the provision of the Services. A copy of our standard data processing addendum, incorporating the Standard Contractual Clauses, is available here, and a copy of the executed version of the Standard Contractual Clauses may be obtained by contacting us as described in the “Contacting Slack” section below.
Legal Rights & Agreement Rules · Company commitment
Slack states that its privacy practices, as described in the policy, comply with the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules (CBPR) system and the Privacy Recognition for Processors (PRP). The policy describes the CBPR system as a framework for protecting personal data transferred among participating APEC economies, and the PRP as demonstrating an organization's ability to implement a controller's privacy obligations when processing personal information.
Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System And Privacy Recognition For Processors. Slack’s privacy practices, described in this Privacy Policy, comply with the Asia-Pacific Economic Cooperation (“APEC”) Cross Border Privacy Rules (“CBPR”) system and the Privacy Recognition for Processors (“PRP”). The APEC CBPR system provides a framework for organizations to ensure protection of personal data transferred among participating APEC economies and the PRP demonstrates an organization’s ability to provide effective implementation of a personal data controller’s privacy obligations related to the processing of personal information.
Legal Rights & Agreement Rules · User right or choice
If you have an unresolved privacy or data use concern related to Slack's APEC CBPR or PRP certifications that Slack has not addressed satisfactorily, you may contact Slack's third-party dispute resolution provider. The provider is reached through linked pages that are not supplied.
If you have an unresolved privacy or data use concern related to our
that we have not addressed satisfactorily, you may
our third-party dispute resolution provider.
Legal Rights & Agreement Rules · Procedure
To communicate with Slack's Data Protection Officer, email dpo@slack.com.
Data Protection Officer
To communicate with our Data Protection Officer, please email dpo@slack.com.
Legal Rights & Agreement Rules · Context
Data protection law in some jurisdictions distinguishes the controller from the processor. In general, the Customer is the controller of Customer Data; Slack is the processor of Customer Data and the controller of Other Information. Which Slack entity acts in these roles depends on where the Workspace's Customer is established, as the two following cards set out.
Identifying The Data Controller And Processor
Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general, Customer is the controller of Customer Data. In general, Slack is the processor of Customer Data and the controller of Other Information. Different Slack entities provide the Services in different parts of the world.
Legal Rights & Agreement Rules · Context
For Authorized Users who use Workspaces established for Customers outside the United States and Canada, Slack Technologies Limited, an Irish company based in Dublin, is the controller of Other Information and a processor of Customer Data.
Slack Technologies Limited, an Irish company based in Dublin, Ireland, is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers outside of the U.S. and Canada.
Legal Rights & Agreement Rules · Context
For Authorized Users who use Workspaces established for Customers in the United States and Canada, Slack Technologies, LLC, a US company based in San Francisco, California, is the controller of Other Information and a processor of Customer Data.
Slack Technologies, LLC, a U.S. company based in San Francisco, California is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers in the US and Canada.
Legal Rights & Agreement Rules · User right or choice
Individuals in the European Economic Area, the United Kingdom, Brazil and across the globe have certain statutory rights over their personal data. Subject to any exemptions provided by law, you may have the right to request access to your personal information and to seek to update, delete or correct it. Slack points you first to the settings and tools in your Services account; if you cannot use them, you contact the Customer who controls your workspace for additional access and assistance, with Customer contact details at slack.com/account/settings. The Data Protection Authority section adds that, subject to applicable law, you also have the right to restrict Slack's use of Other Information that is your Personal Data and to lodge a complaint with your local data protection authority.
Your Rights
Individuals in the European Economic Area, the United Kingdom, Brazil, and across the globe have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to your personal information, as well as to seek to update, delete, or correct this information. You can do this using the settings and tools provided in your Services account. If you cannot use the settings and tools, contact the Customer who controls your workspace for additional access and assistance.
Subject to applicable law, you also have the right to (i) restrict Slack’s use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority.
Legal Rights & Agreement Rules · User right or choice
To the extent Slack's processing of your Personal Data is subject to the General Data Protection Regulation or other laws requiring a legal basis, such as the UK Data Protection Act and Brazil's Lei Geral de Proteção de Dados, Slack primarily relies on its legitimate interests, described in the processing section. Where it relies on legitimate interests you can object by contacting Slack as described in the "Contacting Slack" section. In response Slack will stop processing your information for the relevant purposes unless it has compelling grounds in the circumstances or the processing is necessary in the context of legal claims.
To the extent that Slack’s processing of your Personal Data is subject to the General Data Protection Regulation or other applicable laws requiring a legal basis for processing Personal Data, such as the UK Data Protection Act and the Brazilian General Data Protection Act (Lei Geral de Proteção de Dados), Slack primarily relies on its legitimate interests, described above, to process your Personal Data. Where we rely on legitimate interests to process your Personal Data, you can object to that processing by contacting us as described in the “Contacting Slack” section below. In response to your objection, we will stop processing your information for the relevant purposes unless we have compelling grounds in the circumstances or the processing is necessary in the context of legal claims.
Legal Rights & Agreement Rules · Context
This section provides additional detail about the personal information Slack collects about California consumers and the rights afforded to them under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). More on Slack's role and obligations under the CCPA is in a separate CCPA FAQ, which is not supplied. The statutes are named as the policy words them; their text is not supplied.
Your California Privacy Rights
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA,” as amended by the California Privacy Rights Act or “CPRA”.
For more information on Slack’s role and obligations under the CCPA, please visit Slack’s California Consumer Privacy Act (CCPA) FAQ.
Legal Rights & Agreement Rules · User right or choice
Subject to certain limitations, the CCPA gives California consumers the right to request to know more about the categories or specific pieces of personal information Slack collects, including how it uses, discloses or may sell them; to delete their personal information; to opt out of any sales; to know about and opt out of sharing personal information for delivering advertisements on non-Slack websites; and not to be discriminated against for exercising these rights.
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use, disclose, or may sell this information), to delete their personal information, to opt out of any “sales”, to know and opt out of sharing of personal information for delivering advertisements on non-Slack websites, and to not be discriminated against for exercising these rights.
Legal Rights & Agreement Rules · Procedure
California consumers make CCPA requests by emailing privacy@slack.com or filling out a linked Salesforce privacy request form. Slack verifies the request using information associated with your account, including your email address, and government identification may be required. Consumers can designate an authorized agent to exercise these rights, and agents must submit proof of authorization.
California consumers may make a request pursuant to their rights under the CCPA by contacting us at privacy@slack.com or by filling out
We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf. Authorized agents must submit proof of authorization.
Legal Rights & Agreement Rules · User right or choice
Subject to applicable law, you have the right to restrict Slack's use of Other Information that constitutes your Personal Data and to lodge a complaint with your local data protection authority. If you believe Slack has not been able to help with your complaint or concern and you are in the European Economic Area or the United Kingdom, you have the right to complain to the competent supervisory authority. EU and EEA residents can find their authority through the European Data Protection Board's member list; UK residents can contact the Information Commissioner's Office. The linked pages are not supplied.
Data Protection Authority
Subject to applicable law, you also have the right to (i) restrict Slack’s use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority. If, however, you believe that we have not been able to assist with your complaint or concern, and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority.
Legal Rights & Agreement Rules · Procedure
You can contact Slack with questions about the Privacy Policy or Slack's practices, or to exercise any of your statutory rights. Slack says it will respond within a reasonable timeframe. The contact routes are privacy@slack.com or the mailing address for the Slack entity responsible for your Workspace.
Contacting Slack
Please also feel free to contact Slack if you have any questions about this Privacy Policy or Slack’s practices, or if you are seeking to exercise any of your statutory rights. Slack will respond within a reasonable timeframe. You may contact us at privacy@slack.com or at our mailing address below:
Legal Rights & Agreement Rules · Procedure
The mailing address depends on where your Workspace's Customer is established. For Customers and Authorized Users of Workspaces established for Customers in the US and Canada, write to Slack Technologies, LLC, 50 Fremont Street, San Francisco, CA 94105, United States. For Workspaces established for Customers outside the US and Canada, write to Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland. These are the same two entities identified as controller of Other Information and processor of Customer Data for each region.
For Customers and Authorized Users who use Workspaces established for Customers in the US and Canada:
Slack Technologies, LLC 50 Fremont Street San Francisco, CA, 94105 United States
For Customers and Authorized Users who use Workspaces established for Customers outside the US and Canada:
Slack Technologies Limited Salesforce Tower 60 R801, North Dock Dublin Ireland
Slack Technologies, LLC, a U.S. company based in San Francisco, California is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers in the US and Canada.
Slack Technologies Limited, an Irish company based in Dublin, Ireland, is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers outside of the U.S. and Canada.
Legal Rights & Agreement Rules · Company practice
Slack processes Other Information when complying with a legal obligation, for example to access, preserve or disclose information if there is a valid legal request from a regulator, law enforcement or others, such as a search warrant or production order asking for your profile picture or IP address in an investigation. For this basis Slack uses every category of Other Information: Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack.
Compliance With A Legal Obligation: Slack processes Other Information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. For example, a search warrant or production order from law enforcement to provide information in relation to an investigation, such as your profile picture or IP address.
We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for compliance with a legal obligation.
Legal Rights & Agreement Rules · Context
Slack relies on its own legitimate interests, or those of a third party, where they are not outweighed by your interests or fundamental rights and freedoms. The policy uses "legitimate interests" in this sense for most of the purposes that follow.
Legitimate Interests: We rely on our legitimate interests or the legitimate interests of a third-party where they are not outweighed by your interests or fundamental rights and freedoms ("legitimate interests").