The policy covers how Slack collects, uses and discloses Personal Data and your choices
The policy describes how Slack collects, uses and discloses information associated with an identified or identifiable individual, which it defines as "Personal Data", and what choices you have about that activity. Questions can be sent to Slack.
Supporting quotations
This Privacy Policy describes how Slack collects, uses, and discloses information associated with an identified or identifiable individual (referred to in this Privacy Policy as “Personal Data”) and what choices you have around this activity.
Qualifications & exceptions
"Personal Data" means information associated with an identified or identifiable individual, as the policy defines it.
Use & Processing · Context
A separate Customer Agreement governs the Services and Customer Data; the Customer controls its Workspace
A separate contract, the "Customer Agreement", governs delivery, access and use of the Services, including the processing of data such as messages, files or other content submitted through Services accounts, which the policy calls "Customer Data". The organization that entered into the Customer Agreement, for example your employer, is the "Customer"; it controls its instance of the Services (its "Workspace") and any associated Customer Data.
Supporting quotations
In addition, a separate agreement governs delivery, access and use of the Services (the “Customer Agreement”), including the processing of data such as messages, files or other content submitted through Services accounts (collectively, “Customer Data”).
The organization (e.g., your employer or another entity or person) that entered into the Customer Agreement (“Customer”) controls its instance of the Services (its “Workspace”) and any associated Customer Data.
Qualifications & exceptions
The Customer Agreement is a separate document and is not supplied here.
Customer Data and the Customer's control of it are the basis for the processor and controller roles described later in the policy.
Not stated here
The Customer Agreement's terms on Customer Data are not supplied.
Responding to you rests on Slack's, Customers' and Authorized Users' interest in communication
The legitimate interest Slack gives for using your Other Information to respond to your requests, comments and questions is that facilitating communication, for example answering questions from Customers, is in Slack's interest and in the interests of Customers and Authorized Users. This completes the communication purpose begun in the previous packet.
Supporting quotations
How We Process Your Information and our Legal Bases for Doing So
To communicate with you by responding to your requests, comments and questions.
It is in our, our Customers’ and Authorized Users’ interests to facilitate communication (for example to answer questions from Customers).
Qualifications & exceptions
Restates the interest for the communication purpose carded as slack-pp-036.
Use & Processing · User right or choice
You can control whether you receive Slack's marketing emails
Slack sometimes sends emails about new product features, promotional communications or other news about Slack, using Workspace and account information, Usage Information, Cookie information, Third-Party Services Information, Third-Party data and Additional information provided to Slack. Because these are marketing messages, you can control whether you receive them. Questions about a message can be raised through the contact mechanisms at the end of the policy. Slack states its interest in promoting the Websites and Services and sending direct marketing.
Supporting quotations
We use Workspace and account information, Usage Information, Cookie information, Third-Party Services Information, Third-Party data, and Additional information provided to Slack for the following legitimate interests:
To send marketing emails and other communications. We sometimes send emails about new product features, promotional communications or other news about Slack. These are marketing messages so you can control whether you receive them. If you have additional questions about a message you have received from Slack please get in touch through the contact mechanisms described below.
It is in our interest to promote the Websites and Services and send our direct marketing.
Qualifications & exceptions
The control applies to marketing messages only; service and administrative communications cannot be opted out of.
The Your Rights section separately gives a right to object at any time to use of your Personal Data for direct marketing.
Not stated here
How the control is exercised (for example an unsubscribe link) is not stated in this passage.
Use & Processing · Company practice
Slack may transfer your Personal Data to other countries, including the United States
Slack may transfer your Personal Data to countries other than the one you live in, including the United States. To the extent Personal Data is transferred abroad, Slack commits to comply with the requirements of the applicable laws in the respective jurisdiction, in line with its obligations. The safeguards it offers are in the following cards.
Supporting quotations
International Data Transfers
Slack may transfer your Personal Data to countries other than the one in which you live, including transfers to the United States. To the extent that Personal Data is transferred abroad, Slack will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with Slack’s obligations.
Qualifications & exceptions
The compliance commitment is framed by Slack's obligations under the applicable laws of the relevant jurisdiction.
Use & Processing · User right or choice
You can object at any time to Slack using your Personal Data for direct marketing
Slack may process Other Information that constitutes your Personal Data for direct marketing purposes, and you have a right to object to that use at any time. This complements the marketing control in the processing section.
Supporting quotations
Slack may also process Other Information that constitutes your Personal Data for direct marketing purposes and you have a right to object to Slack’s use of your Personal Data for this purpose at any time.
Qualifications & exceptions
The objection right applies to direct marketing; service and administrative communications remain non-optional.
Cross-references
qualifies (model-proposed): You can control whether you receive Slack's marketing emails — qualifies: The marketing-message control is backed in the rights section by a right to object at any time to use of Personal Data for direct marketing.
Use & Processing · Company practice
Slack processes Customer Data only on the Customer's instructions; the Customer is the controller
Slack uses Customer Data in accordance with the Customer's instructions, including to provide the Services, under any applicable terms of the Customer Agreement, through the Customer's use of Services functionality, and as required by applicable law. Slack describes itself as a processor of Customer Data and the Customer as the controller. The Customer can, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share and remove Customer Data, and otherwise apply its policies to the Services.
Supporting quotations
How We Process Your Information and our Legal Bases for Doing So
Customer Data will be used by Slack in accordance with a Customer’s instructions, including to provide the Services, any applicable terms in the Customer Agreement, a Customer’s use of Services functionality, and as required by applicable law. Slack is a processor of Customer Data and the Customer is the controller.
Customer may, for example, use the Services to grant and remove access to a Workspace, assign roles and configure settings, access, modify, export, share, and remove Customer Data, and otherwise apply its policies to the Services.
Qualifications & exceptions
Use "as required by applicable law" sits alongside the Customer's instructions as a basis for Slack's handling of Customer Data.
The Customer, typically your employer, can access, modify, export, share and remove your Customer Data.
Not stated here
The Customer Agreement's terms are not supplied.
Use & Processing · Company practice
Slack uses Other Information to operate its Services, Websites and business for listed purposes
Unlike Customer Data, Other Information is used by Slack for its own purposes: to operate the Services, Websites and business. The policy then lists those purposes under two legal bases, compliance with a legal obligation and legitimate interests, naming for each the categories of Other Information used.
Supporting quotations
Slack uses Other Information to operate our Services, Websites, and business. More specifically, Slack uses Other Information for the following purposes:
Qualifications & exceptions
The specific purposes and the categories used for each are in the following cards.
Use & Processing · Company practice
Slack uses all Other Information categories to provide, maintain and protect the Services and business
Relying on legitimate interests, Slack uses Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack to provide, update, maintain and protect its Services, Websites and business. This includes supporting delivery of the Services under a Customer Agreement, preventing or addressing service errors and security or technical issues, analyzing and monitoring usage, trends and other activities, or acting at an Authorized User's request. Slack states this is in its and your interests.
Supporting quotations
We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for the following legitimate interests:
To provide, update, maintain and protect our Services, Websites and business. This includes the use of Other Information to support delivery of the Services under a Customer Agreement, prevent or address service errors, security or technical issues, analyze and monitor usage, trends and other activities, or at an Authorized User’s request.
It is in our and your interests to provide, update, maintain and protect our Services, Websites, and business.
Qualifications & exceptions
The same group of categories is used for the next five legitimate-interest purposes (tools and features, security, aggregation, sharing with law enforcement, and transfers outside the EEA).
Use & Processing · Company practice
Slack may aggregate or de-identify your information and use the result, for example to improve the Services
In some cases Slack aggregates or de-identifies information associated with you and uses the resulting information, for example to improve the Services. Slack states its interest in researching and improving the Services and the interest of Customers and Authorized Users in data minimisation and privacy by design.
Supporting quotations
To aggregate or de-identify information. In some cases, we aggregate or de-identify information we have associated with you and use the resulting information, for example, to improve the Services.
It is in our interest to research and improve the Services;
It is in the interests of Customers and Authorized Users to practice data minimisation and privacy by design in respect of their information.
Qualifications & exceptions
Improving the Services is given as an example use; the sharing section separately says aggregated or de-identified Information may be disclosed or used for any purpose.
Use & Processing · Company practice
Slack transfers your information outside the EEA, including to the United States, India and South Korea
Because the Websites and Services operate globally with Customers around the world, Slack says it needs to share the information it collects globally. It carries out transfers outside the European Economic Area, including to Australia, Canada, Japan, India, South Korea and the United States, to provide, update, maintain and protect its Services, Websites and business, and states this is in its and your interests. The safeguards for these transfers are in the "International Data Transfers" section.
Supporting quotations
Transfer, store or process your information outside the European Economic Area. As the Websites and Services operate globally, with Customers around the world, we need to share information we collect globally. We carry out necessary transfers outside the European Economic Area, including to Australia, Canada, Japan, India, South Korea, and the United States, to provide, update, maintain and protect our Services, Websites and business.
In our and your interests to provide, update, maintain and protect our Services, Websites and business.
Qualifications & exceptions
The named countries are examples ("including"); the transfer safeguards (Standard Contractual Clauses, APEC CBPR and PRP) are described in a later section.
Use & Processing · Company practice
Slack may use your Other Information to respond when you contact it
Using Workspace and account information, Third-Party Services Information, Third-Party data and Additional information provided to Slack, Slack communicates with you by responding to your requests, comments and questions; if you contact Slack it may use your Other Information to respond. The interest statement for this purpose appears at the start of the next packet.
Supporting quotations
We use Workspace and account information, Third-Party Services Information, Third-Party data, and Additional information provided to Slack for the following legitimate interests:
To communicate with you by responding to your requests, comments and questions. If you contact us, we may use your Other Information to respond.
Qualifications & exceptions
A narrower set of categories applies here than for the purposes above: Usage, Cookie, Contact and Audio and video metadata are not listed.