The Precis Digital company group ( “we”, “us” or
“our”) values and understands that your privacy is important to you and
we are committed to protect and use your personal data only as consistent with applicable
data protection laws.
This Privacy Policy sets out how we may collect personal
data from or about you, how we might use it and, importantly, what rights you have over
your own personal data, and applies to all of our products, services, activities and
websites (unless they have their own privacy notice). Please note that this Privacy Policy
does not apply to the extent we process personal data as a processor or service provider
on behalf of our customers, including where we provide customers various products and
services through which our customers (or their affiliates) collect, use, share or process
personal data. We are not responsible for and have no control over the privacy and data
security practices of our customers, which may differ from those explained in this privacy
policy.
When we write “you” or “your” we mean
you as a website visitor, business contact person (B2B contact), such as the contact
person of a company or an organisation we do business with, job applicant or other
relevant third party reaching out to us.Please read this Privacy Policy carefully to
understand how we will use and look after your personal data.
The Precis Digital company group (the “Precis Group”) is made up of
different legal entities, contact information and details of which can be found
here. This Privacy Policy is issued on behalf of the Precis Group, so unless explicitly
specified, when we mention “Precis Digital”, “Precis”,
“us”, “we” or “our” in this Privacy
Policy we are referring to the relevant entity in the Precis Group responsible as (data)
controller for processing your personal data, which will vary depending on your
relationship with the Precis Group (whether it be as a B2B contact, job applicant or other
relevant relationship).
For the purposes of data protection laws such as
Regulation (EU) 2016/679 (“EU GDPR”) and the EU GDPR as
amended and incorporated into UK law under the UK European Union Withdrawal Act 2018
(“UK GDPR”) (EU GDPR and UK GDPR jointly referred to as
“GDPR”), the (data) controller will generally be:
In certain instances, two or more entities within the Precis Group may act as joint (data)
controllers of your personal data, whereby the relevant entities in the Precis Group
together determine the means and purposes of the relevant processing. Examples of such
situations include where companies within the Precis Group engage in collaborative
projects, jointly manage the relationship with you or the company you work for or carry
out group wide business operations or administration.
Regardless of which
company within the Precis Group is (data) controller, you may always get in touch with our
Data Protection Officer (DPO)
if you have any inquiries or wish to exercise a right in relation to your personal
data.
If and to the extent you are based in the EU/EEA and your personal data
is processed by our non-EU/EEA entities, you may also get in touch with such entity’s EU
Representative if you have any inquiries or wish to exercise a right in relation to your
personal data under the UK GDPR. Precis Digital Ltd’s EU Representative, where applicable,
is Precis Digital AB, and Bannerboy Ltd and Bannerboy Corp’s EU Representative is
Bannerboy AB.
If and to the extent you are based in the UK and your personal
data is processed by a non-UK based Precis entity, you may get in touch with our UK
representative if you have any inquiries or wish to exercise a right in relation to your
personal data under the EU GDPR. Our UK representative, where applicable, are Precis
Digital Ltd. and Bannerboy Ltd.
Contact information and details to each entity
can be found
here.
We may collect and process your personal data in different cases, such as when you visit
our websites or social media channels, use our products or services (and where we act as a
controller of your personal data), reach out to us, fill in a form, attend a meeting or
event or when we otherwise do business with you or the company you represent. Your
decision to provide us your personal data when reaching out to us is voluntary, except if
the information is required by law. However, please note that if you do not provide
certain information when requested, we may not be able to perform a contract we have
entered into with you or the organisation you represent or respond to your requests, or we
may be prevented from complying with our legal obligations.
In addition to
personal data collected directly from you, we may also obtain personal data from someone
else, such as your employer or an organisation to which you belong, a previous employer, a
credit reference agency, a public authority, or other publicly available databases,
websites and social media.
The types of personal data that you may be requested
to provide will vary based upon the context and the type of relationship(s) you have
established with us. Most commonly, we may collect personal data such as general personal
data (e.g. name and contact details), financial and insurance information, work related
information, user generated data, technical, cookie (and similar technologies) and usage
data, correspondence data and customer specific information such as budget and contact
details, account information and other information in relation to a customer’s (i.e. you
or the company you represent) use of our products and/or services.
More
specifically, depending on the context and your relationship to us, we may collect and
process various categories of personal data through our websites and social media
channels, such as:
Where we collect personal data from you, for example, technical data and information about
your interaction with our website(s), this may be done through the use of cookies, server
logs and similar technologies on our websites. Please see the cookie policies on our
respective website(s) for further information on our use of cookies, since this may differ
based on the website and entity.
We may also use third-party services such as
Google Analytics to monitor and analyse the use of our websites. Google Analytics is a web
analytics service offered by Google that tracks and reports website traffic. Google uses
the data collected to track and monitor the use of our websites. This data is shared with
other Google services. Google may use the collected data to contextualise and personalise
the ads of its own advertising network.
You can opt-out of making your activity
on our website available to Google Analytics by installing the Google Analytics opt-out
browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js
and dc.js) from sharing information with Google Analytics about visits activity.
For
more information on Google’s privacy practices, please visit the Google Privacy Terms web
page:
https://policies.google.com/privacy?hl=en
More information on how Google uses information from sites or apps that use Google
services is also available here:
https://policies.google.com/technologies/partner-sites
Our websites may contain links to other sites or services that are not operated by us. If
you click a third party link, you will be directed to that third party’s site or service.
We strongly advise you to review the privacy policy of every site or service you visit.
We
have no control over and assume no responsibility for the content, privacy policies or
practices of any third party sites or services.
Examples of how we may use your personal data are set out in the table below, including the legal basis relied on in relation to each listed purpose. We will request your prior consent to process your personal data for any of the purposes to the extent such consent is mandatory under applicable law.Note that we may process your personal data for more than one lawful ground. Please get in touch if you need details about the specific legal basis we are relying on to use your personal data.
To manage or enter into a contractual relationship with you.
The processing of personal data is necessary for the performance of a contract between you and us, or in order to take steps at the request by you prior to entering into a contract with you.
Recruitment, such as may be necessary for us in order to receive and process your job application.
The processing of personal data is justified on the basis of our legitimate interests to ensure that we recruit the appropriate employees. If we want to keep your data for possible future openings, we will ask you to consent to this.
To facilitate communications with you (including to respond to inquiries and requests).
The processing of personal data is justified on the basis of our legitimate interests to ensure proper communications with you, including provision of correct information.
To manage our business relationship with the company or organisation you represent/work for, such as may be necessary in order for us to achieve the purpose of a contract, evaluate potential business partners or partner solutions and manage existing business relations (including communication, procurement, contract signing and financial transactions).
The processing of personal data is justified on the basis of our legitimate interests to manage our business relations and/or to achieve the purpose of a contract, including to carry out our contractual rights and obligations.
Managing our everyday business needs and operations.
The processing of personal data is justified on the basis of our legitimate interests to ensure the proper functioning of our business operations.
To provide our products and services.
The processing of your personal data is necessary for the performance of a contract or is justified on the basis of our legitimate interests to provide and administer our products and services.
To evaluate, develop and improve our services for our customers in general, e.g. by analysing the use of our services or the content of a feedback form you provide us.
The processing of personal data is justified on the basis of our legitimate interests to evaluate, develop and improve our services and the way we provide them.
To coordinate and administer different types of events, such as meetings and conferences, we will process personal data of the invited persons. Certain events may be recorded and transcribed.
The processing of personal data is justified on the basis of our legitimate interests to manage and follow up on events.
When we create, use and/or publish content such as articles, interviews, videos or case studies for our internal use or other channels (such as our website, in presentations or our social media channels) we will process your personal data if you appear in such content. We may also use personal data to prepare, facilitate, follow up on interviews, case studies and other content.
Except where applicable law requires us to obtain your consent, the processing of personal data is justified on the basis of our legitimate interests to create and, as applicable, publish content and marketing material.
To maintain and provide our websites and social media channels to you (including to allow you to participate in interactive features, when you choose to do so).
Except where applicable law requires us to obtain your consent, the processing of personal data is justified on the basis of our legitimate interests to provide and maintain our website. You can find further information about our use of cookies and how you can disable them in the website’s cookie policy.
We may monitor and analyse the use of our websites in order to improve the user experience and make our websites more effective.
Except where applicable law requires us to obtain your consent, the processing of personal data is justified on the basis of our legitimate interests to provide and maintain our website. You can find further information about our use of cookies and how you can disable them in the website’s cookie policy. Regarding our use of Google Analytics and how it may be disabled, please see the section “Google Analytics” above.
To detect, prevent and address technical issues in relation to our websites.
Except where applicable law requires us to obtain your consent, the processing of personal data is justified on the basis of our legitimate interests to provide and maintain our website. You can find further information about our use of cookies and how you can disable them in the website’s cookie policy.
In order to ensure ongoing security, we may monitor your access and use of our websites, systems and services (including, as applicable, external systems, apps and tools utilised in the provision of our services) for security reasons, e.g. by logs and access management systems.
Except where applicable law requires us to obtain your consent, the processing of personal data is justified on the basis of our legitimate interests to ensure the ongoing security and access to our website, systems and services, to the extent permitted by applicable law.
To manage, detect, register, investigate and resolve IT and information security incidents.
Except where the processing of personal data is necessary for the compliance with a legal obligation to which we are subject (such as the notification requirements under applicable law in case of a personal data breach), the processing of your personal data is justified on the basis of our legitimate interest to properly handle IT and information security incidents, to the extent permitted by applicable law.
To comply with our legal requirements, such as requirements related to accounting and the protection of your personal data in our systems.
The processing of personal data is necessary for the compliance with a legal obligation to which we are subject.
To establish, exercise or defend our legal rights.
The processing of personal data is justified on the basis of our legitimate interest to manage legal issues and disputes.
Marketing our products and services to you (as a B2B contact person), unless you objected to such processing.
Except where applicable law requires us to obtain your consent, the processing of
personal data is justified on the basis of our legitimate interests to market our
products and services, including to create and publish content and marketing material.
If you receive any newsletters from us, you can always opt-out. You can do so either by
clicking an opt-out link provided in such newsletter or by contacting us, please see our
further contact details below. When you opt-in to receiving marketing communications
from us (including newsletters), we use Hubspot to send you such marketing
communications. Please see Hubspot’s Privacy Policy for more information about Hubspot’s
use of your personal information.
We will only use your personal data for the purposes for which we collected it, unless we
reasonably consider that we need to use it for another purpose and that purpose is
compatible with the original purpose. If we need to use your personal data for an
unrelated purpose, we will (when required by applicable law) provide you appropriate
notice and explain the legal basis which allows us to do so.
If the processing
of your personal data for any the purposes set out in this Privacy Policy involves
automatic decision making and/or profiling, we will only make such automated decision
and/or profiling with your prior consent (if required by applicable law) and after
providing you information about such automatic decision making and/or profiling.
We will retain your personal data only for as long as is necessary for the purposes set
out in this Privacy Policy. We will retain and use your personal data to the extent
necessary to comply with our legal obligations (for example, if we are required to retain
your data to comply with applicable laws), resolve disputes and enforce our legal
agreements and policies. We perform regular disposals and erase personal data that is no
longer necessary to process.
Technical data and usage data used for internal
analysis purposes is generally retained for a shorter period of time, except when this
data is used to strengthen the security or to improve the functionality of our website,
services or systems, or we are legally obligated to retain this data for longer periods.
The security of your personal data is important to us and you should always feel safe when you provide us with your personal data. Therefore, we maintain organisational, physical and technical security arrangements for all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.
We will primarily store and access your personal data in the countries we operate in within the European Economic Area (EEA), but we may also transfer to and process your personal data in a country outside the EEA, including to the United Kingdom (UK) (e.g. to an affiliate, a business partner or services provider located in such country). We will take all reasonable measures necessary to ensure that your personal data is handled securely and in accordance with applicable law. We will ensure that all personal data transfers outside the EEA are done in accordance with Chapter 5 of the GDPR, for instance by entering into standard data protection clauses in the absence of an adequacy decision from the EU Commission, and that all personal data transfers outside the UK are done in accordance with applicable provisions of the UK GDPR.
Your personal data may be shared within the Precis Group for the purposes described in
this Privacy Policy (for further information on the companies within Precis Group, please
see our contact page). Access to your personal data within the Precis Group will be
limited to those employees who have a need to know the information for the purposes
described in this Privacy Policy.
Furthermore, where there is a need, we may
forward your personal data to third parties outside the Precis Group as may be required to
carry out our business operations, provide our services and for the purposes described in
this Privacy Policy, but we will never sell your personal data for marketing purposes to
such third parties.
Third parties to whom we may forward your personal data
usually includes:
Where there is a need, our third party service providers (such as suppliers of IT systems,
applications and support as well as other service providers) and professional advisers
(such as lawyers, accountants, auditors, banks, insurance companies and other professional
advisers) may gain access to and process your personal data.
Any third party
service providers and professional advisors to whom your personal data are disclosed, are
expected and required to protect the confidentiality and security of your personal data
and may only use your personal data in compliance with applicable data protection laws.