Privacy Shield Notice
DATE: 28 SEPTEMBER 2016
Avetta, LLC and Avetta Subsidiary Holdings, LLC (together, “AVETTA”) comply with the EU-U.S. Privacy Shield Framework as set forth by the US Department of Commerce regarding the transfer of personal data from the EU to the US (“Personal Data”). “Personal Data” are data about an identified or identifiable individual that are within the scope of EU Directive 95/46/EC, received by an organisation in the US from the EU, and recorded in any form. AVETTA has self-certified to the US Department of Commerce and declared its commitment to adhere to the Privacy Shield principles of: notice; choice; accountability for onward transfer; security; data integrity and purpose limitation; access; and recourse, enforcement and liability (the “Principles”).
You can learn more about Privacy Shield at https://www.privacyshield.gov and see our Privacy Shield self-certification at https://www.privacyshield.gov/list. AVETTA’s self-certification to the Privacy Shield is subject to the investigatory and enforcement authority of the Federal Trade Commission.
Information that we process. In accordance with the Privacy Shield Principles, we collect the categories of information described in Section 2 (Collection of information) of our Privacy Policy. We process this information for the purposes described in Section 3 (Use of your personal data) of our Privacy Policy. The information that we process may include Personal Data.
Accessing Personal Data. The Privacy Shield Principles provide individuals located in the EU whose Personal Data we process the right to access their Personal Data and to review, correct, amend or delete their Personal Data. EU individuals who would like to access their Personal Data may contact us at [email protected].
Transfers to third parties and your choices. As described in Section 4 (Sharing or disclosing your personal data) of our Privacy Policy, we may transfer Personal Data to third parties. We contractually require those third parties to provide the same level of protections to Personal Data as required under the Principles. AVETTA currently does not transfer Personal Data to a third party for its own use; if in the future it does, individuals may choose to opt out of this type of transfer by emailing us at [email protected]. AVETTA will remain liable under the Principles if a third party processes Personal Data in a manner inconsistent with the Principles, unless AVETTA proves that it is not responsible for the event giving rise to the damage.
In accordance with our legal obligations, we may also transfer, subject to a lawful request, Personal Data to public authorities for law enforcement or national security purposes.
Contacting us, complaints and dispute resolution. We encourage EU individuals who have questions or complaints about how we process their Personal Data under Privacy Shield to contact us as described in Section 11 (Contacting us) of our Privacy Policy. We will work to resolve your issue as quickly as possible, but in any event no later than 45 days following receipt.
If you have unresolved privacy or data use complaints that we have not addressed satisfactorily, please contact, free of charge, our US-based third-party dispute resolution provider, JAMS, at https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim.
If you are an EU individual and are unable to resolve any complaints through any of the above methods, you may invoke a binding arbitration in accordance with the Privacy Shield Framework at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint.
Internal dispute resolution. In compliance with the Privacy Shield Principles, Avetta commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Avetta at:
[email protected]
Avetta has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.