Premier Proactive Services

Premier

Proactive Services

Privacy Statement

Last updated: June 2015

Microsoft is committed to protecting your privacy, while delivering software and services that brings you the performance, power, and convenience you desire in your personal computing. This privacy statement explains the data collection and use practices of Microsoft Premier Proactive Services ("Services") and covers the Premier Proactive Services website, its content (including video on demand courses), its available services (RAP as a Service and Education as a Service) and the software you install to enable the Services. This privacy statement focuses on Services features that communicate with the Internet as well as the data collected via the Services and is not intended to be an exhaustive list.

RAP as a Service is an online service that analyzes specific Microsoft products and versions running in customer environments. RAP as a Service collects data from these environments, analyzes it, and presents potential risk and health issues that deviate from identified best practices with regard to configuration and usage. RAP as a Service includes an additional level of analysis performed by accredited Microsoft engineers. These Microsoft engineers additionally analyze potential issues, provide additional recommendations on potential optimization and present the overall findings.

Education as a Service is an online, on-demand learning portal that can provide a range of different services to enhance learning. It streams video on demand content in a range of technical subject matters. It provides access to hosted lab content. Knowledge checks are used to enhance learning. Learning paths provide a personalized learning experience. Online instructor led training will provide access to Microsoft subject matter experts to provide both support and technical webcasts. Social forums and gamification will enhance the learning experience. Personalization of your user profile will support customers learning paths.

COLLECTION AND USE OF YOUR INFORMATION

The information we collect from you will be used by Microsoft and its controlled subsidiaries and affiliates to enable the features you are using and provide the service(s) or carry out the transaction(s) you have requested or authorized. It may also be used to analyze and improve Microsoft products and services, or to pursue additional business opportunities between you and Microsoft.

We may send certain mandatory service communications such as welcome letters, billing reminders, information on technical service issues, and security announcements. Some Microsoft services may send periodic member letters that are considered part of the service. We may occasionally request your feedback, invite you to participate in surveys, or, if you consent to receive them, send you promotional mailings to inform you of other products or services available from Microsoft and its affiliates.

In order to offer you a more consistent and personalized experience in your interactions with Microsoft, information collected through one Microsoft service may be combined with information obtained through other Microsoft services. We may also supplement the information we collect with information obtained from other companies. For example, we may use services from other companies that enable us to derive a general geographic area based on your IP address in order to customize certain services to your geographic area.

In order to access Premier Proactive Services, you will be asked to enter an e-mail address and password, which we refer to as your Microsoft Account (formerly known as Windows Live™ ID). After you create your Microsoft Account, you can use the same credentials to sign in to many different Microsoft sites and services, as well as those of select Microsoft partners that display the Microsoft Account logo. By signing in to one Microsoft site or service, you may be automatically signed in when you visit other Microsoft sites and services. To learn more about how your credential information is used when you sign in to participating sites, please read the Microsoft Online Privacy Statement at http://go.microsoft.com/fwlink/?LinkId=204800.

Except as described in this statement, personal information you provide will not be transferred to third parties without your consent. We occasionally hire other companies to provide limited services on our behalf, such as packaging, sending and delivering purchases and other mailings, answering customer questions about products or services, processing event registration, or performing statistical analysis of our services. We will only provide those companies the personal information they need to deliver the service, and they are prohibited from using that information for any other purpose.

Microsoft may access or disclose information about you, including the content of your communications, in order to: (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the services; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers, or the public. We may also disclose personal information as part of a corporate transaction such as a merger or sale of assets.

Information that is collected by or sent to Microsoft by Premier Proactive Services may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union, the European Economic Area, and Switzerland.

COLLECTION AND USE OF INFORMATION ABOUT YOUR COMPUTER

When you use software with Internet-enabled features, information about your computer ("standard computer information") is sent to the Web sites you visit and online services you use. Microsoft uses standard computer information to provide you Internet-enabled services, to help improve our products and services, and for statistical analysis. Standard computer information typically includes information such as your IP address, operating system version, browser version, and regional and language settings. In some cases, standard computer information may also include hardware ID, which indicates the device manufacturer, device name, and version. If a particular feature or service sends information to Microsoft, standard computer information will be sent as well.

The privacy details for each Premier Proactive Services feature, software or service listed in this privacy statement describe what additional information is collected and how it is used.

SECURITY OF YOUR INFORMATION

Microsoft is committed to helping protect the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure. For example, we store the information you provide on computer systems with limited access, which are located in controlled facilities.

USE OF COOKIES

We may use cookies on the Premier Proactive Services website to enable you to sign in to our services or to help personalize the Site. A cookie is a small text file that is placed on your hard disk by a Web server. Cookies contain information that can later be read by a Web server in the domain that issued the cookie to you. Cookies cannot be used to run programs or deliver viruses to your computer. One of the primary purposes of cookies is to provide a convenience feature to save you time. For example, if you personalize a Web page, or navigate within a site, a cookie helps the site to recall your specific information on subsequent visits. This simplifies the process of delivering relevant content, eases site navigation, and so on. When you return to the Web site, the information you previously provided can be retrieved, so you can easily use the site's features that you customized.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you are using Internet Explorer, search for "Cookies" in the Help menu to find detailed instructions. If you choose to decline cookies, you may not be able to use interactive features of the Premier Proactive Services website or other Web sites that depend on cookies.

Use of Web Beacons

Microsoft Web pages may contain electronic images known as Web beacons - sometimes called single-pixel gifs - that may be used to assist in delivering cookies on our sites and allow us to count users who have visited those pages and to deliver co-branded services. We may include Web beacons in e-mail messages or our newsletters in order to determine whether messages have been opened and acted upon.

Microsoft may also employ Web beacons from third parties in order to help us compile aggregated statistics regarding the effectiveness of our promotional campaigns or other operations of our sites. We prohibit Web beacons on our sites from being used by third parties to collect or access your personal information.

THIRD PARTY SCRIPTS AND CODE

Third party scripts and code linked to or referenced from this website are licensed to you by the third parties that own such code, and are not licensed by Microsoft other than for the purpose of viewing and interacting with this website.

CHANGES TO THIS PRIVACY STATEMENT

We will occasionally update this privacy statement to reflect changes in our products, services, and customer feedback. When we post changes, we will revise the "last updated" date at the top of this statement. If there are material changes to this statement or in how Microsoft will use your personal information, we will notify you either by posting a notice of such changes on the Premier Proactive Services website prior to implementing the change or by directly sending you a notification. We encourage you to periodically review this statement to be informed of how Microsoft is protecting your information.

FOR MORE INFORMATION

Microsoft welcomes your comments regarding this privacy statement. If you have questions about this statement or believe that we have not adhered to it, please contact us:

Premier Proactive Services contact email is ppas@microsoft.com.

Microsoft Privacy
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052 USA
425-882-8080

SPECIFIC FEATURES

The remainder of this document will address the following specific features:

Customer Account Creation

What this feature does:

Customers of the Services must have an account in the Services which represents the customer, company, organization or business unit receiving the Services. The Services automatically creates these accounts based on information provided by the customer via its assigned Microsoft Technical Account Manager.

The Premier Proactive Services will create customer accounts in a Microsoft data center.

Information collected, processed or transmitted:

The Service request includes information such as the name of the customer to receive the Service, where that Service will be conducted, dates of the Service, and personal contact information such as names, email addresses and phone numbers for those involved with the Service.

Data related to the Service will be uploaded to the Microsoft data center in which the customer account was created.

Use of information:

This information is used in support of creating the necessary accounts and granting permissions to the individuals designated by the Customer participating in the Service. The location where the Service will be conducted is used to determine in which Microsoft data center the customer account will be created.

Choice/control:

Creation of a customer account is a mandatory aspect of the Premier Proactive Services as it is the underlying item that allows the Service to be delivered.

Customers determine what information they want to provide when submitting a request via their Microsoft Technical Account Manager. They may decide where the Service will be conducted, individuals involved in the Service and dates related to the Service.

RAP as a Service Client

What this feature does:

The RAP as a Service Client is a tool that you install on a designated computer in the environment to be assessed as part of a RAP as a Service engagement.

The RAP as a Service Client is used to discover and collect data from the environment being assessed. It then submits the data it has collected to the Premier Proactive Services for processing.

The RAP as a Service Client may be used to re-discover, re-collect or re-submit multiple times within its license period.

Information collected, processed or transmitted:

The RAP as a Service Client collects data on an on-demand fashion (initiated by a user) against the environment is it targeted against. Once collected, the RAP as a Service Client is used to submit or upload the data to the Premier Proactive Service.

The RAP as a Service Client determines the data to collect via the assessment package associated to the assessment being delivered. The package is downloaded from the Services website along with the RAP as a Service Client. The package contains the logic used to discover and collect data against the target environment. For example, a RAP as a Service for Microsoft Exchange Server assessment would include an assessment package that can discover a target Exchange environment and collect data from it. The type of data collected includes server and product configuration settings, diagnostic logs, performance state and so on.

The RAP as a Service Client submits the data it has collected to the Premier Proactive Services for processing. The RAP as a Service Client establishes a secure SSL connection to the Premier Proactive Services and then uploads the data it has collected. It additionally encrypts the data prior to upload as an additional level of security. The RAP as a Service Client utilizes a digital certificate that is specific to the customer account to encrypt the data and validate it is authorized to submit against the online service. The digital certificate requires an additional Submission Access Key for use. The Submission Access Key is only available to authorized Premier Proactive Services website users that have been granted access to the customer account being assessed.

The data collected by the RAP as a Service Client is locally accessible as individual XML files to anyone that has access to the computer it is installed to. Once submitted to the Premier Proactive Services, the data is then accessible via the Premier Proactive Services website to only authorized users that have been granted explicit access to the customer account being assessed. Access to the data via the Premier Proactive Services website is available through the license period of the assessment and if the customer's Microsoft Premier Support contract remains active.

Use of information:

The data collected will be used to generate Issues and support the completion of the RAP as a Service assessment by an accredited Microsoft engineer. The Microsoft engineer will review the data and Issues, applying additional recommendations as deemed appropriate. The Microsoft engineer will also prepare a report document that summarizes the major risk and health Issues found, recommendations to resolve, and so on. The report will be available to only authorized Premier Proactive Services website users that have been granted access to the customer account being assessed.

The data collected may also be used to operate and improve the Premier Proactive Services, website and client, including troubleshooting aimed at preventing, detecting and repairing problems affecting the operation of the Premier Proactive Services, website and client.

Choice/control:

Only authorized users of the Premier Proactive Services website that have been granted access to the customer account being assessed may download the RAP as a Service Client and assessment package. The same users may also obtain the Submission Access Key that is required to submit data from the RAP as a Service Client to the Premier Proactive Services.

The RAP as a Service Client does not discover or collect data without user intervention. A user must initiate both discovery and collection.

The RAP as a Service Client does not submit data without user intervention. A user must initiate submission of data to the Premier Proactive Services.

Customers may request additional users access to their data on the Premier Proactive Services website by making a request via their assigned Microsoft Technical Account Manager.

Issues, Scorecards, Report Documents and Premier Proactive Services Website

What this feature does:

Issues provide descriptions and recommendations based on analysis of the data collected by the RAP as a Service Client. Issues summarize the potential risk or health items that have been identified, along with guidance on best practices and resolution options. Scorecards represent the higher-level categories that Issues belong to. Scorecards help present a bigger-picture view of what has been assessed. Reports are a collection of scorecards and Issue details. The Premier Proactive Services website allows, among other things, viewing or downloading of Issues, scorecards, report documents and other materials related to an assessment.

Information collected, processed, or transmitted:

Issues and scorecards are generated based upon the data collected by the RAP as a Service Client.

Report documents are generated based upon the data collected by the RAP as a Service Client as well as additional comments provided by an accredited Microsoft engineer performing an assessment.

In addition, the Premier Proactive Services may collect information regarding your actions in response to an Issue (e.g. whether the recommendations were implemented or ignored). You may also have the option of providing feedback on Issues directly via the Premier Proactive Services website or via a third party feedback system, as further discussed in the "User Feedback" section of this Privacy Statement.

Use of information:

Issues are provided to assist Microsoft engineers in the delivery of an assessment, and customers in reducing downtime and optimizing performance of Microsoft products. Issues may be viewed by any users that have been granted access to the customer account being accessed or that have been given a copy of a report document.

In addition, information regarding the occurrences of Issues for any assessments delivered within the customer's environment, the customer's actions in response to those Issues (e.g. whether comments were added, severities changed, or manually resolved), and any customer feedback related to Issues may be used by Microsoft in order to improve the effectiveness of Issue guidance and to improve customer satisfaction.

Choice/Control:

Issues are a mandatory part of the Premier Proactive Services. Customers' actions in response to Issues will be recorded within the Premier Proactive Services and may be used by Microsoft as described above. If you do not wish to receive Issues or record this information within the Premier Proactive Services, do not use this Service.

You may choose, however, whether or not to provide feedback about Issues either directly via the Premier Proactive Services website or via a third party feedback system, as further discussed in the "User Feedback" section of this Privacy Statement.

Operational Survey

What this feature does:

The Operational Survey, also referred to as the IT Service Management Questionnaire or just "Questionnaire", allows you to provide information regarding how you operate the environment being assessed via a series of questions and answers. The results of the Operational Survey create Issues and are used as part of the overall assessment results.

Information collected, processed, or transmitted:

The Operational Survey is conducted via the Premier Proactive Services website. During the Operational Survey you will answer questions regarding how you operate the environment being assessed. This includes topics such as processes and tools for change management, release management, disaster recovery, monitoring, and so on. You may provide comments along with your answers.

Use of information:

Your answers, along with any comments, to the Operational Survey will be stored within and analyzed by the Premier Proactive Services. The results of analysis will generate Issues to highlight potential risks. You may revise your answers as part of completing the Operational Survey.

Microsoft accredited engineers delivering your assessment will review your answers and the Issues they generated.

Choice/Control:

The Operational Survey is a mandatory part of a RAP as a Service assessment. Customers' actions in completing the Operational Survey will be recorded within the Premier Proactive Services and may be used by Microsoft as described above. If you do not wish to complete the Operational Survey or record this information within the Premier Proactive Services, do not use this Service.

Activation and Account management

What this feature does:

Activation allows you to complete the initial sign in process for the Premier Proactive Services website so you can use its features.

Account management provides ongoing access to your Premier Proactive Services user account information, such as your name and email address.

Information collected, processed, or transmitted:

During the activation process, you will sign in with your valid Microsoft Account (or Microsoft credentials for Microsoft employees) and password. The Premier Proactive Services website does not store your Microsoft Account password. It relies upon the Microsoft Account system to perform the actual authentication validation. You will also be required to provide your first name, last name and contact email address to complete the activation process. This information will be stored within the Premier Proactive Services website. You may update your first name, last name and contact email address via the Premier Proactive Services website.

Use of information:

The Premier Proactive Services uses your activation and account information to uniquely identify your Premier Proactive Services website user account. For information on how Microsoft Account uses your information, please see its privacy statement located at http://go.microsoft.com/fwlink/?LinkId=74170.

Choice/control:

Activation is required to use the Premier Proactive Services. You are required to sign in with your valid Microsoft Account (or Microsoft credentials for Microsoft employees) and provide your first name, last name and contact email address as part of activation.

You may access and update your account information in the Accounts – Users section of the Premier Proactive Services website.

Digital Certificates

What this feature does:

Contained within the RAP as a Service assessment package are digital certificates. These certificates are used to encrypt the collected data and to validate the identity of the computer accessing the Premier Proactive Services website.

One digital certificate is unique to the RAP as a Service customer account receiving an assessment. This customer-specific digital certificate is used during the submission process to validate the RAP as a Service Client is accessing the correct customer account within the Premier Proactive Services. This digital certificate is also used within the export data /import data feature of the RAP as a Service Client. A Submission Access Key is required to use this digital certificate. The Submission Access Key is obtained via the Premier Proactive Services website by users that have been granted access to the customer account being assessed.

One digital certificate is used to establish a secure SSL connection between the RAP as a Service Client and Premier Proactive Services during submission.

One digital certificate is used to validate the RAP as a Service Client is authorized to authenticate against the Premier Proactive Services.

Use of information:

The digital certificates are used to uniquely identify and authorize each installed RAP as a Service Client.

Choice/Control:

Use of the above mentioned digital certificates are required as part of submitting data from the RAP as a Service Client to the Premier Proactive Services.

The above mentioned customer-specific digital certificate can optionally be stored within the local certificate store of the computer running the RAP as a Service Client. If stored locally, any subsequent users using the RAP as a Service Client will not be prompted for the Submission Access Key during submission.

Addition/Deletion of Users

What this feature does:

User management is used to grant others access to your customer account so they can view the Issues and data for that customer account and use the available features.

Information collected, processed or transmitted:

When adding a new user to a Premier Proactive Services customer account, you must provide the invited user's contact email address. This will generate a user activation token. The invited user must use their user activation token as part of the Activation process. To activate, the user must sign in with a valid Microsoft Account (or Microsoft credentials for Microsoft employees) as well as provide their first name, last name and contact email address. For information on how Microsoft Account uses your information, please see its privacy statement located at http://go.microsoft.com/fwlink/?LinkId=74170.

Use of information:

The Premier Proactive Services uses this information to uniquely identify the invited user and associate his or her actions within your Premier Proactive Services customer account.

Choice/Control:

Customer users may request other customer users added or removed via the Microsoft Technical Account Managers.

Invited users have the choice to accept the invitation and become a user of the specified Premier Proactive Services customer account. By accepting the invitation, the user's first name, last name and contact email address will be visible to other users of the Premier Proactive Services customer account. To be removed from a Premier Proactive Services customer account, a user must ask their Microsoft Technical Account Manager to remove them. Once removed, the user's first name, last name and contact email address will no longer be visible to other users of the Premier Proactive Services customer account.

Diagnostics

What this feature does:

In the event of an error arising from your use of the Premier Proactive Services, the Service automatically collects diagnostic information about the error and the transaction ID in order to help quickly diagnose and resolve issues.

Information collected, processed, or transmitted:

The Service collects exception information that may arise in the case of an error, including error or warning messages, web request transaction IDs, and error trace codes. The Premier Proactive Services associates such exception information with a given transaction.

Use of information:

The Premier Proactive Services collects this information for internal engineering use to quickly diagnose and resolve issues.

Choice/Control:

The Premier Proactive Services automatically collects any diagnostic information that arises from errors. You may not disable this feature. If you do not wish this data to be collected you must not use this Service.

User Feedback

What this feature does:

User feedback will allow you to submit your thoughts, ideas, comments, and information about bugs you have encountered directly to the Premier Proactive Services team. The feedback you submit is not anonymous. The Premier Proactive Services team will use this feedback to continually improve the Premier Proactive Services.

Information collected, processed or transmitted:

When you submit feedback, your Microsoft Account (or Microsoft credentials for Microsoft employees) will be stored, along with the actual feedback and the time of submission. Your feedback may be transferred to other systems within Microsoft that have a specific need. It may also be transferred to third-party systems that are used by the Premier Proactive Services to track user feedback.

Use of information:

We will use your feedback to directly improve our product(s). The Premier Proactive Services team may contact you at times via your Microsoft Account email, to get more information about the feedback you have submitted or to provide you with direct help to solve an issue or problem. By submitting user feedback, you consent to being contacted by the Premier Proactive Services team for these purposes.

Choice/Control:

User feedback will only collect information when the user chooses to submit feedback via the feedback mechanisms available on the Premier Proactive Services website and RAP as a Service Client. No feedback will be automatically collected. Once submitted, feedback cannot be deleted or removed from the system. You can choose not to submit feedback by simply not using this feature, or cancelling out of the feature before final submission.