Stibo Systems - The Master Data Management Company

Data Privacy Framework





INTRODUCTION
Stibo Systems Inc. is committed to protecting the privacy of personal data collected and processed in the course of our business operations. Stibo Systems Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. Stibo Systems Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit www.dataprivacyframework.gov.

PERSONAL DATA THAT WE COLLECT

The goal of Stibo Systems and its subsidiaries and affiliates, including Stibo Systems Inc. (‘Stibo Systems’), is to provide you with a personalized Internet experience that delivers the information, resources, and services that are most relevant and helpful to you. In order to achieve this goal, we may collect personal data during your visits to understand what differentiates you from each of our other users.

Likewise, we might process personal information for certain legitimate business purposes, which include the following:

  • where the processing enables us to enhance, modify, personalize, or otherwise improve our services/communications for the benefit of our customers.
  • to better understand how people interact with our Site.
  • to determine the effectiveness of promotional campaigns and advertising.
  • To respond to inquiries and requests.
  • To manage consents and subscriptions to our mailing lists.

END USER DATA FROM THE WEBSITE
Data is generated by you when you browse the Stibo Systems Site or submit forms and give consent to receive marketing material, newsletters, or other forms of communication. The list below shows the type of personal data that is logged or sent to Stibo Systems when you use the Site.

  • IP or MAC address.
  • Click behavior on the Site
  • Time of visit and referring location (e.g. the Site or page that offered a link to a Stibo Systems page).
  • Browsing data, statistical data, and aggregated data on your page visits.
  • Browser and device information.
  • Information about marketing consent is submitted through the Site. When you submit an online form we obtain the information you provide.
  • This will typically be your name, email address, phone number, title, and the company you represent.
  • CV, job application, and other information you submit when you apply for a job with Stibo Systems.

We use this information for the following purposes:

  • To personalize your experience on our Site and present you with relevant information.
  • To continuously optimize and improve our Site and content based on the information and feedback we receive from you and your activity on our Site.
  • To manage consents and subscriptions to our mailing lists.
  • To respond to requests received through the Site.
  • To be able to send you newsletters and other marketing material which you have consented to receive.
  • To assess whether we want to offer you a job with Stibo Systems.
  • For the purpose of carrying out statistics and analytics.
  • To assess whether we want to offer you a job with Stibo Systems.
  • For the purpose of carrying out statistics and analytics.

HOW INFORMATION IS PROTECTED
Stibo Systems has implemented security features to prevent the unauthorized release of or access to personal data. For example, the server hosting the Site is located off-site in a secure facility, where only certain personnel have access. The server also has firewalls designed to protect it from outside access and to detect any intruders. Any remote access requires a password and browser security. Please be advised, however, that the confidentiality of any communication or material transmitted to or from Stibo Systems via this Site or email cannot be guaranteed. If you need to send sensitive or otherwise confidential information to Stibo Systems, you may contact Stibo Systems.

STORAGE PERIOD
We keep personal data about customers, partners, and contractors for 3 years from termination of the business relationship. However, correspondence that is necessary for the purpose of documenting orders, etc., and information that is part of book keeping material is kept for 5 years from the closing of the current financial year to comply with requirements set out in applicable financial legislation.

If you have consented to receive marketing material, we keep your personal data for 2 years from opt-out. We do this to ensure necessary documentation regarding the consent. Personal data that we have received in relation to the organization of events, exhibitions, or competitions will be deleted when the event, exhibition, or competition has been held.

Job applications that do not result in employment with Stibo Systems will be kept for as long as they are necessary, e.g. for being able to defense potential legal claims against Stibo Systems in relation to the recruitment. However, job applications will usually be deleted within 1 year.

 

THIRD-PARTIES
Stibo Systems does, as a general rule, not sell, trade, or otherwise disclose personally identifiable information to third-parties unless it occurs in connection with a change of Stibo Systems company structure. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to law enforcement, lawyers, auditors, courts, public authorities, or affiliated companies.

To fulfill the purposes mentioned above, Stibo Systems uses external partners who, on the basis of a contractual relationship with Stibo DX provide relevant services, e.g. marketing companies, IT solutions, and hosting of the website. Such service providers will only process personal data in accordance with our instructions pursuant to the data processor agreements entered into.

 

Some of the third-parties who receive personal data have not registered under EU-U.S. DPF. However, US-based third-parties engaged with Stibo Systems with Standard Contractual Clauses to meet the requirement of requisite sufficiency in a country outside the EU/EEA.


We use the following services and cookies from trusted third-parties:

Google Analytics: For website and user statistics

HotJar: For advanced user statistics and feedback

Wistia: For video analytics purposes

Hubspot: For consent management, site analytics, and subscriptions

Salesforce: For customer relationship management

Communigator: For IP business naming information

PathFactory: For content analytics purposes

Stibo Systems remains liable under the DPF Principles if the connected third-party transfer onward transfers relevant Personal Data in a manner inconsistent with the DPF Principles unless Stibo Systems proves that it is not responsible for the event giving rise to the damage.

 

LINKS TO OTHER WEBSITES

This Site may also contain links to other websites or advertisements for or placed by third parties. If you access a third-party website from a link on this Site, any information you disclose on that site is not subject to this Privacy Policy. Stibo Systems is not responsible for the privacy practices of such websites, advertisers, or third parties, or for the content of such websites or advertisements. It is possible that these links or advertisements, themselves, may be used by third parties or others to collect personal or other information about Site visitors. Stibo Systems is not responsible for the privacy practices of such websites, such third parties, or the content of such websites. Stibo Systems does not control these third parties' use of cookies, collection of information, or how they manage such information. It is solely your obligation to review and understand the privacy practices and policies of these other websites and of these third parties.

 

EVENTS

Stibo Systems collects the personal information you provide when making a registration for an event. The categories of information may include name, title, business email, company name, and any preferences such as food preferences and interests/preferred session/tracks at the event. We use this information as we have a legitimate interest in organizing/planning the event, and provide confirmation and relevant information about the event our products and services.


At some events, Stibo Systems will provide RFID badges to attendees. This allows attendees to have their badge scanned by exhibitors in order to provide consent for receiving follow-up communication regarding the event/sessions/products or services. Please note that this is optional and all attendees may refuse to have their badge scanned.


At events, whether in person or virtual, we may transfer the personal data collected to sponsoring partners, who may use this information for marketing purposes.


Personal data collected in relation to events will be deleted 1 year after the event has been held. Your contact information will, however, be kept for longer if you have provided your consent for receiving marketing material.

 

YOUR RIGHTS

You have a right of access to the personal data, which we process and store about you, subject to certain statutory exceptions.

Furthermore, you have the right to object to the collection and further processing of your personal data. Moreover, you have the right to rectification of your personal data, or to require us to restrict the processing of your personal data.

If you so request, we will erase the personal data that we have registered on you without undue delay, unless we may continue the processing on another legal basis, e.g. if the processing is necessary to defend a legal claim or to answer on a request from you.

Under certain circumstances, you may also request that we provide you with an overview of your personal data in a structured, commonly used, and machine-readable format and request us to transmit such data to another data controller.

 

DISPUTE RESOLUTION

The panel established by the EU DPAs is the independent dispute resolution body designated to address complaints and provide appropriate recourse free of charge.

Following the dispute resolution process, the matter can be referred to the U.S. Federal Trade Commission, which has DPF investigatory and enforcement powers over Stibo Systems. Under certain circumstances, it is possible to invoke binding arbitration. For additional information follow this link.

 

CONTACT

If you wish to exercise your rights as described above or if you have any questions, concerns, or complaints about this policy or our data processing practices, please contact us at notice@stibosystems.com.

 

By using our products and services, you acknowledge that you have read and understood this Data Privacy Policy and agree to its terms.

 

STIBO SYSTEMS’ RIGHT TO CHANGE THIS PRIVACY POLICY

We reserve the right to amend this privacy policy based on substantial changes in the legislation, new technical solutions, new or improved functions, and to improve the website.

 

Stibo Systems Inc.

3200 Windy Hill Road, S.E.,

Suite 1200 West, Atlanta

GA, 30339

United States of America