Version - August 2022

Privacy notice - Single Sign On (SSO)

This privacy notice tells you about the information collected from you when you register for a Single Sign On (SSO) account and/or Ubuntu One account. SSO is an identity provider service that creates, maintains and manages user identity information, providing authentication services for Canonical and other third party applications. Ubuntu One the single account you use to log in to all services and sites related to www.ubuntu.com. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data. For more information, please see our privacy policy.

Who are we?

We are Canonical Group Limited. Our address is 2nd Floor, Clarendon House, Victoria Street, Douglas IM1 2LN, Isle of Man. You can contact us by post at the above address or by email to dataprotection@canonical.com for the attention of "Legal".

We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.

What personal data do we collect?

When you register an SSO and/or Ubuntu One account, we ask you for your name and your email address and related information.

Why do we collect this information?

Your information will be used by us for the provision of services in the creation of an SSO and/or Ubuntu One account. The SSO and/or Ubuntu One account is used to verify your identity and enable access to certain Canonical and third party services.

What do we do with your information?

Your information is stored in our database and may be processed outside of the European Economic Area. It is shared with the third parties only as reasonably required for Canonical to process and store your data in accordance with this notice.

Such countries do not have the same data protection laws as the United Kingdom and EEA. Where the European Commission has not given a formal decision that such countries provide an adequate level of data protection similar to those which currently apply to the United Kingdom and EEA, any transfer of your personal information will be subject to approved contract terms designed to help safeguard your privacy rights and give you remedies in the unlikely event of misuse of you personal information. If you would like further information, please contact us (see "Your right to complain" below).

How long do we keep your information for?

We keep your information for as long as you retain an SSO and/or Ubuntu One account and thereafter for so long as reasonably required in accordance with our record retention policy.

Your rights over your information

You have a number of important rights under data protection laws. In summary, those include rights to:

• Fair processing of information and transparency over how we use your personal information.
• Access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address.
• Require us to correct any mistakes in your information which we hold.
• Require the erasure of personal information concerning you in certain situations.
• Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to a third party in certain situations.
• Object at any time to processing of personal information concerning you for direct marketing.
• Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you.
• Object in certain other situations to our continued processing of your personal information.
• Otherwise restrict our processing of your personal information in certain circumstances.
• Claim compensation for damages caused by our breach of any data protection laws.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

If you would like to exercise any of those rights, please:

• Email or write to us (see “Your right to complain” below).
• Provide us enough information to identify you.
• Provide us proof of your identity.
• Let us know the information to which your request relates.

Please note that if you ask us to remove your SSO and/or Ubuntu One account you will no longer be able to access certain Canonical and third party services.

Your right to complain

If you have a complaint about our use of your information, you can contact the Information Commissioner's Office via their website at ico.org.uk/concerns/ or write to them at: