Privacy Policy | Stansoft

STANSOFT PRIVACY POLICY

Stansoft is strongly committed to transparency, and we want you to understand how we collect, use, share and protect your personal information, as well as the rights and choices you have with respect to your personal information. This Privacy Notice applies to the personal information we obtain in various contexts, both online and offline, including when you access or use our websites (stansoft.org and its various sub domains), mobile applications, or any other applications or services that link to this Privacy Notice; interact or communicate with us; purchase or use our products, services, or features; engage with us on social media; interact with our advertising or marketing materials; or participate in any of our programs or events (collectively, our “Services”). This Privacy Notice also applies to individuals who apply for a position with us. Our privacy practices are subject to the applicable laws of the places in which we operate so you may see additional region-specific terms that only apply to customers located in those geographic regions, or as required by applicable laws. For example, Section 5 explains the policy for the purposes of EU and UK privacy laws.

By using our Services, you acknowledge the terms of this Privacy Notice. If you do not understand the terms of this Privacy Notice, please do not use our Services. If you have questions about this Privacy Notice, please contact us before using, or continuing to use, our Services. Our Services may include
links to websites and/or applications operated and maintained by third parties. Please note that we have no control over the privacy practices of websites or applications that we do not own. We encourage you to review the privacy practices of those third parties.

1. TYPES OF INFORMATION WE COLLECT

We collect two basic types of information from you when you provide it to us or when you use or interact with our Services or through our advertising and media across the Internet: personal information and non-personal information.

Personal information includes all information that relates to you or which are opinions about you personally and either identifies or may be used to identify you personally (collectively, “personal information”). We may only collect the following, limited types of personal information from you depending upon the device you are using and how you interact with us or use or interact with our
Services, such as your:

Contact Information. Name, address, email address, phone and fax number, company name, title, and other contact information.
Device Information. IP address, browser type and version, browser plug-in types and versions, operating system and platform, device type, device identifiers, and information about how you use our Services.
Geolocation Data. Information generated from your IP address that permits us to determine your general location.
Payment Information. Credit and debit card, bank account, and other financial information necessary to send and receive payments.
Purchase Information. Customer ID, record of purchases, service schedules, other information as requested to facilitate or complete delivery or to make available and provide ongoing support, maintenance, training, or other Services related to the Services being purchased.
Account Information. If you create an account, we may store and use your name, email address, zip or postal code and other personal information you may provide with your account. If you believe that someone has created an unauthorized account, you can request its removal.
Job Applicants. As part of the application process, we may collect your contact information as well as certain information about you, including, race, ethnicity, previous employment and education history, references, information relating to disabilities, physical or mental health information, veteran status, trade union membership, immigration or naturalization records, information relating to your criminal record and background check, interview notes, and any correspondence between us.

We strive to uphold data minimization principles and only seek to collect personal information from you for the purposes described in this Privacy Notice.

Non-personal information includes information that does not personally identify you or information that has been anonymized (collectively, “non-personal information”). When we combine non-personal information with personal information, we treat the combined information as personal information.

You can always refuse to provide your personal information, but please note that some personal information is necessary to provide our Services.

2. HOW WE COLLECT PERSONAL INFORMATION

We need to collect personal information from you in order to provide you with our Services, as well as to improve your experience. You may provide us with personal information in several ways, including,
for example when you:

Visit our website or use our Services;
Register or create an account;
Correspond with us in any way, including through questionnaires, surveys, and job applications;
Sign up to receive our newsletter or promotional information;
Ask for customer service, support or other assistance; or
Interact with us in any other way, online or offline, including through our Services.

Online Analytics

We also use various types of online analytics including Google Analytics, a web analytics service provided by Google, Inc. (“Google”), on our website. Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with and use the website, compile reports on the
related activities, and provide other services related to website and app activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website or app. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, visit the Google Opt-out page.

3. WHY WE USE PERSONAL INFORMATION

We may use personal information for a number of reasons:

to fulfill our contractual obligations to you, including to provide our Services to you;
the individual has given consent for a particular purpose (for example, where an individual has given us consent to send them electronic marketing);
when using the information is necessary for our legitimate interests or those of a third party, provided we have balanced these against the individual’s rights and interests; and
in order to comply with a legal obligation (for example, responding to government or law enforcement information requests).

Our legitimate interests for using personal information are:

to effectively administer and manage our business;
to ensure effective administration and management of the individual’s relationship with us, including providing our Services;
to understand how our customers use our Services and to manage our Services;
to carry out research and analysis on what Services or products our customers want or how they would like us to improve our Services and products;
to understand how our customers use our Services and identify any issues in how the Services are used and how we can improve the customer’s experience;
to tell our customers about the various products and Services we can offer;
to understand and respond to inquiries and feedback;
to better tailor and personalize the promotions and benefits that we can offer to our customers;
to ensure our systems and premises are secure;
to develop relationships with business partners;
to ensure debts are paid;
to operate suppressors to exclude you from direct marketing if you unsubscribe;
to share data in connection with acquisitions and transfers of our business;
to manage our relationships with business partners;
to prevent, detect, or investigate unauthorized use of our Services and ensure we comply with the law and our policies; and
to manage any dispute, accident or receive legal and other professional advice.

We do not sell personal information and we do not share personal information with third parties for cross-context behavioral advertising purposes.

We may share personal information with law enforcement and regulatory authorities or other third parties as required or permitted by law for the purpose of:

responding to a subpoena, court order, or other legal processes;
defending, protecting, or enforcing our rights; and
complying with applicable law.

If you are a job applicant, we may share your personal information with employment/recruitment agencies or background screening providers as part of the recruitment process.

In accordance with applicable law, we may also transfer or assign personal information to third parties as a result of, or in connection with, a sale, merger, consolidation, change in control, transfer of assets, bankruptcy, reorganization, or liquidation. If we are involved in defending a legal claim, we may disclose personal information about you that is relevant to the claim to third parties as a result of, or in connection with, the associated legal proceedings.

5. EUROPE / UNITED KINGDOM

This section only applies if you are a resident of a member state of the European Union (EU), the United Kingdom, or the European Economic Area (EEA).

Data Retention

We retain your personal information for as long as necessary for the purpose(s) for which it was initially collected. The criteria we use to determine the retention period is as follows:

whether there are contractual or legal obligations that exist which require us to retain the information for a certain period of time;
whether there is an ongoing legal claim that relates to any business (or otherwise) relationship you have with us, or that is otherwise related to your relationship with us; and
whether any applicable law, statute, or regulation allows for a specific retention period.

Your Privacy Rights

You may have – in accordance with applicable data protection laws – the following rights when it comes to our handling of your personal information. Please note that many of these rights are not absolute, and we may have grounds for refusing to comply with your request to exercise them (for example, where we are (a) required or permitted by law to process your personal data in a way that is incompatible with your request, or (b) able to rely on exemptions under data protection law which entitle us to process your personal data in a way that is incompatible with your request). Where such
circumstances apply, we will inform you of this at the time you make a request to exercise your rights.

Right of access – you may have the right to request a copy of the personal information we have about you and to request supporting information explaining how the personal information is used;
Right of rectification – you may have the right to request that we rectify inaccurate personal information about you;
Right of erasure – you may have the right to request that we erase personal information about you;
Right to restrict processing – in some situations, you may have the right to request that we do not use the personal information you have provided (for example, if you believe it to be inaccurate);
Right to data portability – you may have the right to receive your personal information in a structured, commonly used and machine-readable format and to transmit such information to another controller;
Right to withdraw consent – where we process your personal information based on consent (including direct marketing consents), you have the right to withdraw consent at any time. However, this will not affect the lawfulness of the processing based on consent before its withdrawal. Furthermore, even in case of a withdrawal we may continue to use your personal information as permitted or required by law; and
Right to object – where we are processing your personal information based on a legitimate interest (or those of a third party) you may challenge this. However, we may be entitled to continue processing your personal information where we can demonstrate that we have compelling legitimate grounds to process your information (which override your rights and freedoms), or where continuing to process your personal information is relevant to the establishment, exercise or defense of legal claims. You also have the right to object where we are processing your personal information for direct marketing purposes.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). Alternatively, you can also make a complaint to the supervisory authority in the Member State of the EU or EEA in which you are resident.