Last updated: April 17, 2018
“Personal data” is information relating to an identified or identifiable natural person.
Categories of Personal Data Processed by Garmin
Personal data that is processed when you create a Garmin account:
When you create a Garmin account, we ask you to provide your email address and name. You can choose to provide only your first name or a nickname instead of your full name if you wish.
Purposes and Legal Grounds:
(a) Garmin processes your email address because you use your email address and your password to sign in to your account. The legal ground for processing your email address for this purpose is based on Garmin’s legitimate interest in protecting the security of your account.
(c) If you provide your opt-in consent to receiving marketing information from Garmin, Garmin will also process your email address for the purpose of sending you marketing information about Garmin products and apps. The legal ground for processing your email address for this purpose is your consent. You may withdraw your consent at any time by changing your preferences in your Garmin account or through the unsubscribe link at the bottom of our marketing emails. The marketing emails you receive from Garmin are based on the preferences you provide in your Garmin account, the locale indicated by your IP address, the types of Garmin devices you have added to your Garmin account, and any subscriptions included in your Garmin account. The legal ground for processing this data for this purpose is Garmin’s legitimate interest in reducing the number of marketing emails sent to each particular customer by selecting which customers receive a particular marketing email rather than sending every marketing email to every customer who has consented to receiving marketing emails.
(d) Garmin also processes your email address to associate it with your Garmin account when you interact with our customer support representatives. The legal ground for this processing is Garmin’s legitimate interest in providing quality customer support.
Personal data that is processed when you sign in to your Garmin account with Social Media Credentials if you choose:
You may choose to sign in to your Garmin account using your social media sign in credentials (e.g., your Facebook sign in credentials). If you choose to do this, the first time you do so you will be asked whether you agree that the social media provider may provide certain information to Garmin, such as your name, email address, profile photo, posts, comments and other information associated with your social media account.
All of this information is made available to Garmin by the social media provider due to the way the social sign-on configuration works. However, the only information Garmin retains and processes is your email address. If you do not want your information to be shared with Garmin by the social media provider, then you can simply sign in to your Garmin account using your Garmin account credentials instead of your social media account credentials.
Purpose and Legal Ground:
Garmin associates the email address provided by the social media provider with your Garmin account so that you can use your email address to sign in to your Garmin account in the future if you no longer wish to sign in using your social media account credentials. The legal ground for processing this information for this purpose is Garmin’s legitimate interest in providing you an alternative sign in method and in securing your account.
Personal data that is processed when you purchase a subscription to the InReach satellite communication services:
Purpose and Legal Ground:
(a) inReach processes your email address for the purposes of associating it with your subscription to the inReach satellite communication services, enabling you to send emails to and receive emails from other users of InReach devices, and to send you billing and other information about your subscription to the inReach satellite communication services. The legal ground for processing your email address for these purposes is performance of the subscription contract.
(b) inReach processes your mailing address because GEOS and the GEOS International Emergency Response Coordination Center (the “IERCC”) use the mailing addresses of inReach subscribers to determine if the SOS button has been activated inadvertently by a subscriber at his or her residence. The legal ground for this processing is inReach’s legitimate interest in minimizing the number of false alarms.
(c) inReach processes your telephone number because it is used by GEOS and IERCC to determine whether the subscriber has inadvertently activated the SOS button at his or her residence, and it is used by inReach to communicate with subscribers about billing information. The legal ground for this processing is inReach’s legitimate interest in minimizing the number of false alarms and in communicating with subscribers about their billing information.
(d) inReach processes contact information for your chosen emergency contacts so that inReach and/or GEOS and IERCC can communicate with them in the event you are involved in an emergency situation. The legal ground for this processing is inReach’s legitimate interest in communicating with your chosen emergency contacts in the event you are involved in an emergency situation.
(e) inReach processes your email address for purposes of sending you subscriber retention emails if you reside in the United States and do not opt-out of receiving such emails or if you reside outside of the United States and opt-in to receiving such emails. The legal ground for this processing is your consent, which you may withdraw at any time.
Personal data that is processed when you use the inReach satellite communication services:
The inReach products and satellite communication services are designed to be used as a means of communicating the need for emergency response to appropriate authorities. In order for inReach, its affiliates and its service providers to perform this service, inReach processes text, SMS and email messages sent to and from your inReach device, and inReach processes the location of your inReach device when your inReach device communicates with Iridium satellites.
Purpose and Legal Ground:
Performance of a contract.
Personal data that is processed when you sync your Garmin inReach device:
When you sync your Garmin inReach device through the Explore app,the Earthmate app, Garmin Express, or inReach Sync, we log data about the transmission, such as the Internet Protocol (IP) address used when syncing, the sync time and date, crash/diagnostic logs, geographic location of the device, information about your device, information about the network used to sync (e.g., Wi-Fi or cellular) and device battery level.
Personal data that is processed when you communicate with Garmin or inReach:
When you interact with our customer support representatives via email, telephone, online or in person, we collect personal data, such as your name, mailing address, phone number, email address and contact preferences; and information about the Garmin products you own, such as their serial numbers and date of purchase, and information about your subscriptions. We also may create event logs that are useful in diagnosing product or app performance-related issues, and capture information relating to the support or service issue. To improve customer service, subject to applicable laws, we may also record and review conversations with customer support representatives, and analyze any feedback provided to us through voluntary customer surveys. With your consent, our customer support representatives may sign in to your Garmin account, if appropriate, to help troubleshoot and resolve your issue.
Purpose and Legal Ground:
We use this information to provide you with customer and product support and to monitor the quality and types of customer and product support we provide to our customers. The legal ground for processing this information for these purposes is Garmin’s and inReach’s legitimate interests in providing quality product support. The legal ground for signing in to your Garmin account, if appropriate, to help troubleshoot and resolve your issue is consent, which you may withdraw.
Categories of Recipients of Personal Data
GEOS and IERCC:
When you use the satellite communication services and trigger an SOS emergency signal, inReach will provide information such as your name, email address, mailing address, telephone number, the message content, time sent, and the identify and location of the message sender and recipient to GEOS and the GEOS International Emergency Response Coordination Center (the “IERCC”) provider, and we may also provide this information to competent authorities and first responders, and to members of your family. GEOS and IERCC may also provide such information as required to emergency responders.
Search and rescue authorities and emergency responders:
When you use the satellite communication services and trigger an SOS emergency signal, inReach may also provide information such as your name, email address, mailing address, telephone number, the message content, time sent, and the identify and location of the message sender and recipient to competent search and rescue authorities and emergency responders. GEOS and IERCC may also provide this information as appropriate to competent search and rescue authorities and emergency responders.
If you request as part of our subscription settings, InReach may also provide information such as the message content, time sent, and the identify and location of the message sender and recipient to members of your family identified in your subscription settings.
People you invite to track your whereabouts:
You can invite family, friends or others to follow your progress on their computers or mobile devices, using the web-based MapShare portal. The inReach device will send track points at preselected time intervals, so followers can track your whereabouts online. You can also invite your family, friends or others to use MapShare to ping your inReach unit and see your GPS location, track your movements and exchange messages during your trip. You can also embed your MapShare page on a blog, website or social media if you wish.
Other service providers:
Garmin uses cloud services from third parties such as Adobe and Emarsys to assist in sending emails. Those services track the activities associated with these emails, such as whether they were opened, whether links in the emails were clicked on, and whether purchases were made following clicks on those links. Garmin uses this data to analyze the level of engagement with its emails. Garmin uses third-party service providers to help us better understand usage of our websites and apps, and for related purposes.
inReach uses SendGrid to send messages from Garmin inReach devices to email addresses.
We may disclose personal data about you to others: (a) if we have your valid consent to do so; (b) to comply with a valid subpoena, legal order, court order, legal process, or other legal obligation; (c) to enforce any of our terms and conditions or policies; (d) as necessary to pursue available legal remedies or defend legal claims; or (e) as we deem necessary or appropriate for purposes of attempting to get you help in the event you are involved in an emergency situation.
Transfers of Personal Data
Garmin is a global business. To offer our products, apps and services, we may need to transfer your personal data to other Garmin companies in other countries. View Garmin-owned companies. When you create a Garmin account, add personal data in your account profile, or upload data to your Garmin account, your personal data will be collected and stored on Garmin International Inc.’s servers in the United States. Personal data regarding individuals who reside in a country in the European Economic Area or in Switzerland is controlled by Garmin Würzburg GmbH and processed on its behalf by Garmin International, Inc.
Any transfers of personal data from Garmin companies in the European Economic Area ("EEA") or Switzerland to Garmin International, Inc. in the United States are done pursuant to European Commission approved Model Contractual Clauses.
All Garmin companies are required to follow the privacy practices set forth in this Privacy Statement.
We request individuals under 16 not provide personal data to Garmin. If we learn that we have collected the personal data from a child under 16, we will take steps to delete the information as soon as possible.
Retention of Personal Data
We will retain your personal data as long as your Garmin account is considered to be active. In addition, see below under “Your Rights” for a description of your right of erasure.
Data Controller and Data Protection Officer
If you reside in a country in the European Economic Area or in Switzerland, then your personal data collected by Garmin is controlled by Garmin Würzburg GmbH, which is located at Beethovenstraße 1a+b, 97080 Würzburg, Germany. Garmin’s EU Data Protection Officer is located at the same address and can also be reached by email at firstname.lastname@example.org
If you reside outside of the European Economic Area and Switzerland, then the personal data collected by Garmin is controlled by Garmin International, Inc., 1200 E. 151st St., Olathe, Kansas 66062, which you can also contact by email at email@example.com.
If you reside in the European Union, you have the right under the General Data Protection Regulation to request from Garmin access to and rectification or erasure of your personal data, data portability, restriction of processing of your personal data, the right to object to processing of your personal data, and the right to lodge a complaint with a supervisory authority. For more information about these rights, please visit the European Commission’s “My Rights” page relating to GDPR, which can be displayed in a number of languages. If you reside outside of the European Union, you may have similar rights under your local laws.
To request access to or rectification, portability or erasure of your personal data, or to delete your Garmin account, visit Account Management Center.
If you live in the European Union and you wish to exercise your right to restriction of processing or your right to object to processing, contact Garmin’s EU Data Protection Officer at Garmin Würzburg GmbH at Beethovenstraße 1a+b, 97080 Würzburg, Germany or by email at firstname.lastname@example.org. If you do not live in the European Union but you believe you have a right to restriction of processing or a right to object to processing under your local laws, please contact Garmin International, Inc. at email@example.com.