We want to inform you about the ways we process your personal information. In this Privacy Notice we explain what personal information we collect, use, disclose and retain or destroy. Personal information means any data relating to an individual who can be identified, directly or indirectly, based on that information. This may include information such as names, addresses, telephone numbers, email addresses, other contact details, (online) identification data, online identifiers or other characteristics specific to that individual.

This Privacy Notice applies when you visit our websites, solutions and other services, including events and web chat communications, that refer or display a link to this notice (“Services”). This Privacy Notice may be supplemented or replaced by additional privacy statements or terms provided to you from time to time.

WHAT PERSONAL INFORMATION DO WE COLLECT?

The type of personal information we collect depends on your relationship with us and the Services we deliver to you. To that end, we may collect the following personal information about you:

• Name and contact details, such as, first and last name, email address, postal address, telephone number.
• Work-related information, such as, job title and other employment or education information.
• Account Credentials, such as, passwords and other security information for authentication and access.
• Financial Information, such as, bank account, credit and debit card numbers for processing of payments.
• Usage information, such as, behavioral information about how you navigate within our Services and which elements of our Services you use the most and information regarding the goods and/or services you wish to order, wish list, preferences, interest, etc. Other information shared by you through our websites, apps, web shops and other products.
• Computer, device and connection information, such as, IP address, browser type and version and location.
• Audio and Visual Information, such as your voice and image as captured in photographs, video, or audio.
• Any other information shared by you through our websites, apps, and other products and services, including web chat communications.

If you are under 18 years of age, please do not use or access the Services. We do not knowingly collect or maintain personal information from persons under 18 years of age. If we learn that personal information of persons under 18 has been collected on or through the Services, we will take appropriate steps designed and intended to delete this information.

HOW WE COLLECT PERSONAL INFORMATION

We and our third-party service providers may collect personal information from the following sources:

• Direct Interactions, such as when you register for our Services, make a purchase, or communicate with us, including through our web chat features;
• Data from Third Parties, such as information on third-party websites or other information you may have made publicly available, or information provided by third party sources, including but not limited to government entities and data resellers;
• Automated tracking technologies, such as information automatically collected about your interaction with our Services and websites using various technologies such as cookies, web logs and beacons and internet tags.

HOW WE USE YOUR PERSONAL INFORMATION

Personal information is used for the purposes for which it has been collected and might be further used for statutory or other legitimate purposes only. As an example, if you make use of our service contact form or web chat features on our website, we will use the information you provided in the first place to respond to your service request. We might further use that information to improve the quality of our customer service process. Depending on how you interact with us, we may use your personal information for the following purposes:

• Administering our relationship with you and our business, such as providing and managing your access to and use of our Services;
• Improving our Services and developing new products and services;
• Marketing, such as customer segmentation, providing you with marketing or advertising communications that we think you may be interested in;
• Recruiting, such as assessing job applicants;
• Other general business support purposes, including but not limited to procurement, financial and fiscal management, risk and compliance management, and external reporting.

SHARING YOUR PERSONAL INFORMATION

To be able to provide you the Services and further our business operations, we may share certain information internally or with third parties. There might also be a certain statutory or legal obligation that we believe in good faith requires us to disclose your personal information externally. Parties we might share data with include:

• Our affiliates or subsidiaries;
• Our service providers;
• Our business partners and advertisers;
• Organizations involved in business transfers;
• Other parties;
• Governmental authorities and regulators.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Your personal information will be processed to the extent necessary for the performance of our obligations, and for the time necessary to achieve the purposes for which the information is collected, in accordance with our data retention policies and the applicable data protection laws. When we no longer need your personal information, we will take reasonable steps to remove it from our systems and records or take steps to properly anonymize it so that you can no longer be identified from it.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We have put in place an internal framework of policies and minimum standards across all our businesses designed to keep your data safe. In addition, we limit access to personal information by our employees, business partners, service providers and third-party service providers to a ‘need-to-know’ basis. More specifically and in accordance with the law, we take technical and organizational measures (policies and procedures, IT security and others) designed and intended to safeguard the confidentiality and integrity of your personal information and the way it is processed by us.

WHAT ARE YOUR RIGHTS?

We operate in different jurisdictions which grant individuals different levels of protection in relation to the processing of personal information. We will respect your rights under the applicable law. To the extent provided under your local data protection laws, including the European data protection laws as applicable, your rights may include the following:

• Right of access (‘an overview of your personal information’): the right to get an overview of your personal information that we process.
• Right to rectification (‘correct your personal information’): if your personal information is inaccurate or incomplete, the right to ask us to rectify or complete your personal information.
• Right to erasure (‘right to be forgotten’): the right to request that we delete your personal information to the extent permitted by the applicable law. In certain circumstances, it may not be possible for us to accept your request; for example, when the processing is necessary to comply with a legal obligation, or if the processing is necessary for the performance of a contract. In some cases, your personal information is necessary in order to provide the Services, and, if you do not provide such information to us, then you may be precluded from accessing and using the Services or using certain Services features.
• Right to data portability (‘transfer your personal information’): the right to ask us to transfer your personal information directly to you. This applies to certain personal information if processed by automated means and with your consent, or based on a contract you have with us. On your request, and where technically feasible, we will transfer your personal information to another party of your choice.
• Right to restrict processing: the right to request that we restrict or stop the processing of your personal information held by us for a certain period of time, or for an indefinite period. In certain circumstances, it may not be possible for us to accept your request; for example, when the processing is necessary to comply with a legal obligation, or if we determine there may be legitimate grounds otherwise.
• Right to object: the right to object to the processing of your personal information. The reasons for an objection should relate to your particular situation, and be related to processing based on the legitimate interest condition. We will then no longer process the personal information, unless we can demonstrate compelling reasons otherwise. In certain circumstances, you have the unconditional right to object; for instance, in the context of direct marketing activities.
• Withdrawal of Consent: the right to withdraw your consent to the processing of your personal information at any time; for instance, after you consented to us keeping you informed about our Services, you have the right to withdraw this consent at any time. Withdrawal of your consent will not affect the lawfulness of the processing of your personal data prior to the withdrawal.

To exercise your rights (if applicable) and/or for any other questions about the handling of your personal information, we refer you to the “How You Can Contact Us’’ section below. If you feel we are unresponsive or disagree with our data privacy practices, you can also file a complaint with your local Data Protection Authority.

THE USE OF COOKIES

We use cookies to optimize our websites and analyze website traffic. On occasion, if we have obtained your informed consent in advance, we may use third party cookies, notably social media plugins, to enable you to share ideas and information related to us instantly and for our own marketing purposes. Cookies or similar techniques (referred to collectively as “Cookies”) are small text files or pixels, which might be stored on your computer or mobile device. Cookies may be necessary to facilitate website browsing and making it more user-friendly. Cookies may also collect information to analyze personal browsing behavior.

LINKS TO OTHER WEBSITES

Our websites may contain links to other affiliated companies or third-party websites, which may have privacy notices that differ from ours. We are not responsible for the collection, processing or disclosure of personal information collected through such other websites.

We are also not responsible for any information or content contained on such websites. Links to other websites are provided solely for your convenience. Your usage and browsing on any such website are subject to that website’s own policies. Please review the privacy notices posted on other websites that you may access through our website.

We may provide you with additional or different privacy notices, in specific instances, on how your personal information is collected and used for a specific Service.

INFORMATION FOR CALIFORNIA RESIDENTS

We do not, and will not, sell your information to third parties.

California law allows California residents to submit a verifiable request for us to provide them with certain information including: i) specific pieces and categories of personal information that we have collected about them; ii) the categories of sources for that information; iii) the business or commercial purposes for collecting their information; and iv) the categories of third parties with which their information is shared.

California residents also have the right to submit a request for deletion of their information under certain circumstances. This is not an absolute right, and we may decline to delete information when retention is allowed by law, for example, when we have an on-going business relationship with the person, we have a continued need to use the information, or we need to retain the information to comply with a legal obligation.

If you exercise your rights under the California Consumer Privacy Act of 2018, we will not provide discriminatory treatment to you.

If you would like to submit a request for your data, or obtain additional information, you may do so by emailing support@urscompliance.com or by calling our toll-free number at 1-800-567-4397.

After you submit the request, you will be asked to verify your email address and you may also be asked to provide additional information to verify your identity. We will attempt to verify your identity by asking for information that matches the information that we have previously collected about you. Where this is not possible, we may request that you submit additional documentation for verification. Please note that, in accordance with California law, we will not be able to satisfy your request until we have verified your identity.

You may designate an authorized agent to make a request on your behalf. To designate an authorized agent to make a request, you must provide us with your written permission for the agent to make the request on your behalf, or provide us with a signed power of attorney. We will also need to verify valid government issued identification for both you and the agent.

NOTICE TO NON-U.S. USERS

If you are located outside of the United States of America, you should be aware that your personal information will be transferred to the United States of America, the laws of which may differ from the laws of your country. If you are located in a country outside of the United States of America and voluntarily submit personal information to us, you thereby consent to the general use of such information as provided in this Privacy Policy and to the transfer of that information to, and/or storage or processing of that information in, the United States of America, and you understand that your information may be available to United States state and federal government authorities under lawful orders and laws applicable there. By requesting our Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have different data protection rules than those of your country.

HOW YOU CAN CONTACT US

If you have any questions about how we process your personal information or if you want to exercise one of your rights, you can contact us at support@urscompliance.com. If you feel we are unresponsive or disagree with our data privacy practices, you also have a right, depending on applicable law, to file a complaint with your local Data Protection Authority. In response to a request, we might ask you to verify your identity, and to provide information that helps us to understand your request better. If we do not grant your request, whether in whole or in part, we will explain why.

UPDATES TO THIS NOTICE

From time to time we may update this Privacy Notice or any other specific privacy statement. When making changes to this Privacy Notice, we will add a new date to this Privacy Statement. This version is effective December 29, 2023.