Privacy Statement

Scope of this notice

Autodesk websites, products and services (“applications”) are primarily general interest applications designed for adults. We do not knowingly collect personal data from children in connection with those applications.

There are certain Autodesk applications that are appropriate for and are intended for use by children. This Children's Privacy Statement applies to these applications. Where there is a conflict between this Children’s Privacy Statement and other sections of our Privacy Statement, this Children’s Privacy Statement sets the standard for how we treat children’s personal information, consistent with the requirements of the U.S. Children’s Online Privacy Protection Act and Rule (“COPPA”) and the European Union General Data Protection Regulation (“GDPR”), where applicable.

In the event we discover we have collected data from a child in a manner inconsistent with COPPA’s requirements, we will promptly either delete the data or seek parental or guardian consent for that collection. For more information about COPPA and general tips about protecting children’s online privacy, please visit OnGuard Online.

Data we collect from children, how we use it, and how and when we communicate with parents

Where we know that a user is under 13 years old, we will:

• ask for a parent or guardian email address before we collect personal data from the child, or
• offer an age-appropriate experience for the child as described below, which in particular does not require registration, consistent with legal requirements, or
• not allow access to those sections or features of the site or application directed to a general interest audience (those age 13 and over).

Registration

Where a website or application is appropriate for use by children under 13 years old, children can register to (among other things):

• view, interact with and download content
• take tutorials, create, edit, and import content
• like or follow other creators and their content
• comment on others’ content
• upload a photo
• participate in contests
• view in-application notifications

During the registration process, we will ask the child to provide certain personal data for security purposes and so we can send notices to parents, including:

• a parent or guardian’s email address
• the child’s name (only in the case of parent moderation)
• the child’s member or account username, and password

We also ask for birth dates from children to validate their ages.

Some activities, such as completing tutorials, do not require children to provide any personal data and therefore may not result in notice to the parent or guardian or require parental or guardian consent. If a child chooses not to share their personal data (i.e., a parent or guardian’s email for purposes of consent) with us, this limits their access to account creation and certain features, such as publishing content publically.

We will not require a child to provide more data than is reasonably necessary in order to participate in sections or features of the website or application.

Also, we will keep the data consistent with our retention practices. If we do not receive parental consent within reasonable time, we will delete the parental contact information provided by the child.

Parental or guardian consent

Because our websites and applications include activities that allow children to create, share and publically post content, to utilize certain features and functionality, we seek further parental or guardian consent:

• by asking for a credit card or other payment method for verification (with a nominal charge involved), or
• by requiring a signed consent form by mail or email attachment.

We also require parents or guardians to open their own account so that they can view and moderate their child’s account. For further details, please see Parental Choices and Controls below.

After providing further parental consent, we may offer parents the opportunity to use a password in future communications as a way to confirm the parent’s identity.

Teacher consent in lieu of a parent

For school-based activities, COPPA allows teachers and school administrators to act in the place of parents to provide consent for the collection of personal data from children. Schools should always notify parents about these activities.

In some cases, in order that an account is not closed and so that a child can continue to use a website or application outside of the school context, we may ask schools to obtain consent directly from a parent instead of and/or in addition to providing consent in the place of a parent, so the parent can be added as a moderator.

For more information on parental rights with respect to a child’s educational record under the U.S. Family Educational Rights and Privacy Act (FERPA), please see the FERPA section below.

Specific activities

Content Generated by a Child

Our applications include activities that allow children to create or manipulate content and save it.

We honor requests to delete any content that they post on our websites and applications, unless we are required by law to retain it.

Forums and comments

Certain activities allow users to communicate directly with other users by means of user forums or comments sections.

We strongly encourage children who use these interactive features on our websites and in our applications never to provide personal data about themselves or any third-party, and not to attempt to circumvent any moderation features.

Contests

In all of our contests for children, we will require only the data necessary to enter the contest, such as user name and parent email address (to notify the parent where required by law). We only contact the parent for more personalized data for prize-fulfillment purposes if the child wins the contest.

Email Contact with a Child

In some of our applications, we may collect online contact information, such as an email address, in order to communicate with a child who makes a specific request through customer service. For example, a child may email us to ask for help in understanding how to use a design tool if she or he is having trouble with. Or the child may want to sign up for a monthly newsletter.

If we have actual knowledge that we are communicating with a child under the age of 13 without parental consent, we will respond once to the communication, delete their personal information, and will not participate in any ongoing communication.

Here is how we would handle communication requests:

• One-time communication

  After we respond to the child’s question or request, we or our service provider will delete this data immediately after responding to the question or request.

  If a child initiates additional communication, submits additional tickets, or signs up for newsletters, we will delete the child’s personal data in each instance, and will not retain a record. The parent may need to opt-out of each communication separately.

• Communicating more than once

  Where there is an activity or service where we need to communicate with a child more than once and we have not already obtained parental consent:

  If we collect the child’s contact data for ongoing communications, we will also require a parent’s email address (if we have not already obtained verifiable parental consent) so we can notify the parent about the collection and use, and to provide the parent with an opportunity to prevent further contact with the child.

Persistent Identifiers

When children interact with us, certain personal data and non-personally identifiable data may be collected automatically, both to make our websites and applications more interesting and useful to children and for various purposes related to our business.

Examples include:

• the type of computer operating system
• the child’s IP address or mobile device identifier
• the web browser used
• the frequency with which the child visits various parts of our websites or applications
• data regarding the online or mobile service provider

This data is collected using technologies such as cookies, pixel tags, web beacons, and other unique identifiers. This data may be collected by Autodesk or by a third-party. For a non-exclusive list of third parties that use cookies and other tracking technologies on our behalf as well as data on their privacy practices, please visit the Children’s Privacy Statement- Analytics List. Please visit our general Cookie Policy for more information about our cookie practices.

When data collected from children is available to third parties

In addition to those cases where a child’s personal data is posted publicly (after receiving parental or guardian consent), we also may share or disclose personal data collected from children in a limited and clearly defined number of instances. Please see the “How does Autodesk disclose your personal data?” section of our Privacy Statement.

Autodesk and its third party providers will not use children’s personal data for advertising purposes, to create a profile about a child and tie it to an Application, sell children’s personal information, or use a child’s personal data for any other unauthorized purpose.

Parent and/or Teacher Moderator Choices and Controls

At any time, parents, and/or teacher moderators can:

• refuse to permit us to collect further personal data from their children in association with a particular account
• request that we delete from our records the personal data we have collected in connection with that account

Please note that teachers only have these rights if they are moderators.

Please keep in mind that a request to delete records may lead to a termination of an account, membership, or other service and that any content saved in that account may no longer be accessible. Please note that Autodesk does not have control over third parties (e.g. other users) who may have copied or reposted publicly posted information. Where a child under 13 has registered for an account, we use two methods to allow parents/teachers to access, change, or delete the personal data that we have collected from their children:

• moderators can request access to and delete their child’s personal data by logging into the parent’s moderator account
• moderators can contact us to request access, a change, or delete their child’s personal data by sending an email to us at parents@autodesk.com.

In any correspondence such as email or mail, please include:

• the name of the website or application
• the child’s username
• the parent’s email address and telephone number

To protect children’s privacy and security, we will take reasonable steps to help verify a parent’s identity before granting access to any personal information. Please visit the “How does Autodesk protect your data“ section in the Autodesk Privacy Statement.

Users located in the European Union will be provided the right to exercise their rights to access, correct, delete, object, restrict, or obtain a copy of their personal data as described in the Autodesk Privacy Statement.

Education and FERPA

If you are using our applications through a school program, your personal data may be subject to the Family Educational Rights and Privacy Act (FERPA). Autodesk commits to protect and secure student data in the manner that FERPA requires and, also, agrees to act as a “school official” to the extent our services are used to store regulated student records in accordance with 34 Code of Federal Regulations (CFR) §99.31(a)(1).

For more data regarding FERPA, please visit the FERPA site and the U.S. Department of Education website for more information.

Will This Privacy Statement Change?

If and when the way we treat children’s personal data changes, we will make sure to update this Children’s Privacy Statement. When we change it, we will make it clear at the top of the Children’s Privacy Statement, and we will indicate when we last updated it. We will also send the parent or teacher moderator a notice by email regarding the update, and if applicable, we will seek consent from the parent or teacher moderator relevant to the changes.

CARU COPPA Safe Harbor

This Privacy Statement and the CARU icon shown on Tinkercad.com confirm that Autodesk, Inc. is a valid licensee and participating member in the CARU Safe Harbor Program (“CARU Safe Harbor”). To protect your privacy, we have voluntarily undertaken this privacy initiative. CARU has reviewed and certified that we meet established online information collection and use practices on all applications where our icon is posted.

As part of the CARU Safe Harbor, we are subject to audits and frequent monitoring of our applications and other enforcement and accountability mechanisms administered independently by CARU..

If you believe that we have not responded to your inquiry or your inquiry has not been satisfactorily addressed, please contact CARU at:

Info@caru.bbb.org
CARU Safe Harbor
Attn: Director
112 Madison Avenue, 3^rd Floor
New York, NY 10016