This notice provides information about accessing your IBMid user account (Account).

We collect Basic Personal Data from you, and we are the “Controller” of this data. This includes your user ID, name, email address, country, and related information you may provide (for example, your mailing address). We also collect information about your network connection(s) to us, such as your IP Address. If we require more personal data, we will notify you. Where appropriate, you may select your preference(s) for using your data. For full information about how we use your personal data, refer to our Privacy Statement.

We need your Basic Personal Data to support our Legitimate Interests in enabling you to create and use an IBMid. This allows you to access applications and services, and to manage your Account settings and preferences. It also lets us record your access to comply with security and audit requirements, and to utilize automatically generated, unique identifiers which assure your correct profile data is available to applications or services.

To provide the above capabilities, we will only collect personal data that is needed.

If you do not want us to use your Basic Personal Data as described above, you have the option of not using your IBMid, or even asking us to delete your IBMid.

IBM obtains your data when your IBMid is created, either:

• When you enter your Basic Personal Data or
• If your IBMid is created through an Enterprise Federation Partner (Identity Provider), when your Basic Personal Data collected from the Identity Partner is shared with IBM.

You may have used the IBM Profile Editor to update or add to your Basic Personal Data.

Your IP Address is obtained when you make a network connection to us.

This is how IBMid uses your Basic Personal Data:

• To uniquely identify you, and to supply your authenticated identity to IBM or third party applications and services;
• To communicate with you about your IBMid;
• To perform security/audit logging, including in conjunction with your IP Address;
• To perform problem determination, system administration, usage tracking, and support activities; and
• To set secure cookies which maintain your authenticated user session.

Applications and services may use your Basic Personal Data:

• To uniquely identify you;
• To communicate with you about your Account status;
• To authorize your level of access;
• To reflect your Basic Personal Data to you (for example, an on-screen greeting);
• To perform security/audit logging, including in conjunction with your IP Address;
• To perform problem determination, system administration, subscription management, usage tracking, and support activities; and
• To set secure cookies which maintain your authenticated user session(s) with applications or services.

IBM may use IBMers or selected partners to process your Basic Personal Data for problem determination, system administration, usage tracking, and support activities. These individuals may reside in any country where IBM conducts business.

Applications or services which use your Basic Personal Data for different purposes than those above will provide you with notification, or when appropriate, an opportunity to consent to such use.

If you do not wish your Basic Personal Data to be used for the above purposes, you have the option of not using your IBMid, or even asking us to delete your IBMid.

For the Legitimate Interests explained above under “Why we need your data”, your Basic Personal Data is protected in these ways:

• When appropriate, we use secure communications and storage to protect your personal data from unauthorized access or disclosure.
• We require applications or services which use your personal data for purposes other than those described here to justify those uses, provide appropriate notice, and where applicable, allow you to consent to such usage.

IBM will keep your Basic Personal Data while you have an active IBMid. If you choose to delete your IBMid, we will delete your Basic Personal Data and other personal data which may be associated with your IBMid, but data already present in security or audit logs, support records, or business transaction records, may be retained for those purposes. Our retention policies determine how long we will retain this data. For additional information regarding data retention, refer to our Privacy Statement.

Our Privacy Statement provides more information about your personal data rights. It also provides contact information if you have questions or concerns regarding our handling of your personal data.