Privacy Policy
Who are you?
This Privacy Policy describes how we use “your” information. To understand which of our uses of information are actually applicable to you and your information see the following useful definitions. You may be a(n):
- Customer – an entity, or person representing an entity that has an agreement in place with Company-central, or one of its subsidiaries under which we provide you with SaaS.
- End-User – a person with a user account to one of our Customer’s instances of our SaaS. For example, you may be a user of your workplace or educational institution’sLearning Management System, of which we are the provider. Or you may be an applicant to your employer or prospective employers recruitment system, of which we are the provider.
- Visitor – a person who is visiting our website, or has expressed an interest in our products or services by filling in a contact form, or has had conversations about our products with our sales team and provided them with your details.
What Personal Information We Collect
This depends upon which of our Sites you are using. Broadly, the types of data we collect may include:
- Account details (username, password, log-in data, profile data)
- Contact details (name, work/institution phone or email, personal phone or email(for recruitment Sites only))
- Employment and performance-related data (for member management) (job roles or descriptions, working experiences, length of service, job title)
- Recruitment-related data (for Recruitment sites only) (home address, qualifications, work history, resume/CV data, job application data)
Personal information we collect automatically.
As you interact with our Services, we may automatically collect the following information:
- Information about your device and browser (name of browser);
- The date you accessed our Sites;
Disclose Your Personal Information
Our general policy is not to disclose your personal information to any third-party without your prior consent. We will protect your Personal Information as being strictly confidential. We may share your personal information with the parties set out below for the purposes set forth in thisPolicy:
- A member of our corporate group;
- Our professional advisors such as auditing firms, accountants and lawyers, etc.;
- Companies that provide services to help us with our business activities, such as data storage, maintenance services, database management, web analytics and payment processing; and
- Companies that succeed to our business or assets due to an organizational restructuring or a business transfer or the like.
We may also disclose your Personal Information to the extent required by law and only to the extent such disclosure of Personal Information is necessary, such as to protect your safety or the safety of others, investigate crimes, or respond to a request by the government or any other third party. Furthermore, we will notify you of any provision of your Personal Information to respond to a request by the government or a third party unless notification is prohibited by applicable laws and regulations. Where the GDPR applies to the processing of your Personal Information and your Personal Information is shared with a third party located in a country that has not received an adequacy decision by the European Commission, we will take appropriate security measures, such as use the European Commission-approved Standard Contractual Clauses.
How long do we keep your Personal Information
We retain Personal Information about you necessary to fulfill the purpose for which that information was collected and if applicable, in accordance with your employer’s contract with us, consistent with applicable law. Furthermore, we will store your PersonalInformation as necessary to comply with our legal obligations, resolve disputes, or enforce our rights, or if it is technically difficult to remove it immediately.
Security
We will take security control measures to prevent a leak, loss, or deletion of or damage to Personal Information. Furthermore, we will put in place appropriate measures to handle Personal Information incidents, and measures to prevent the damage from spreading. The security control measures we will take include executing appropriate agreements with outsourced parties or employees and supervising them. In case we process Personal Information overseas, we will confirm the systems of that foreign country and what protections it offers for Personal Information and we will take appropriate security control measures accordingly. We will conduct a review of the security control measures in a timely manner and appropriately improve them when necessary.
SSL/TLS
Our Site uses ‘SSL/TLS’ to protect Personal Information. By using a browser that supports security functions, when you access our Site and enter Personal Information including your name and e-mail address, and this Personal Information is transmitted to our server, SSL/TLS will enable the Personal Information to be automatically encrypted.Therefore, if the Personal Information you transmitted is intercepted by a third party, the content of it cannot be decoded. If you use a browser that does not support SSL, you may not be able to access our Site or load information.
Your Rights
You have multiple legal rights in relation to your Personal Information we hold about you. These rights may change according to data protection laws and regulations applied in relation to your location and the relationship between you and Company-central, but typically include the following.
- The right to access – You have the right to request that we provide you with copies of your personal data which we hold on record. In some scenarios, as permitted by law, we may charge you a small fee for this service.
- The right to rectification – You have the right to request that we correct any information we have on record that you believe is inaccurate. You also have the right to request that we complete any information we have on record that you believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.\
Where you believe that we have not complied with our obligations under this Policy or the GDPR, you have the right to make a complaint to the relevant data protection authorities.
Communication with End Users
Unless required by law, Company-central will not accommodate requests from EndUsers concerning data protection or privacy without the Customer’s written consent.Provided, however, that, in cases where a Customer provides account to an End User,Customer agrees that Company-central may contact such End User, using End User’s information provided by the Customer, for the purpose of providing such End Users with tips, advice and other useful information or product related information to help such EndUser make the best use of Company-central’s products and services. In such cases,Company-central shall obtain End User’s consent in advance. Furthermore,Company-central shall take commercially appropriate steps for suspending future communication whenever End User’s consent is not obtained.
Contact Information
If you have any questions regarding this Policy, please contact us using the Contact Us page on our Site