TPMS Personal Data Notice
Your Personal Data Notice
in connection with your use of TPMS
Types of personal information and why we process it
TRACE processes your personal information in connection with the provision of the Service (as defined below) and operation of the web site located at tpms.traceinternational.org (the “Site”). Such information may include: your name, title, the name of the company, business email, phone number, any other personal information you may choose to post, store or transmit using the Site or Service.
The “Service” includes (a) the Site, (b) third party risk and due diligence management system, gifts and hospitality risk management system, intermediary directory, and/or other tools and services provided or made available to you through the Site, and (c) all software, data, text, images, sounds, video, and content made available through the Site or services (collectively referred to as the “Content”).
In addition, when you access the Site or use tools and services made available to you through the Site, TRACE or its authorized service providers may process your login credentials, IP address, website cookies, internal unique identifier, and other session details to authenticate your account, determine your account permissions, perform market research, implement Site functionality, handle system errors, maintain the security of the Site, preserve your user settings, address your requests for technical support, and for other similar purposes.
Where we process it
Personal data may be processed by TRACE in Ireland, the United Kingdom, and the United States for the purposes specified above. Any transfers of your personal data between countries will be done strictly in compliance with applicable law. Any transfer of personal data from the European Union and the European Economic Area (EU/EEA) to the United States is based either on specific consent of data subjects or the standard contractual clauses executed by TRACE with relevant entities in the EU/EEA, as the case may be. Any transfer of personal data from the United Kingdom to the United States is based on specific consent of data subjects, the standard contractual clauses executed by TRACE with relevant entities in the United Kingdom, or TRACE’s certification under the EU-US Privacy Shield (https://www.privacyshield.gov/list).
How long we keep itWe keep your personal data for up to sixty days from the moment your account with the Site is cancelled. We may keep your basic personal information (such as your name, position, contact information, signature) for a longer period of time if you are a signatory of a contract or an agreement with TRACE. More information on our retention schedule can be found on TRACE’s website at https://www.traceinternational.org/policy.
What are your rights?At any time, you may:
- request to see your personal data that we have;
- request to correct or delete your personal data if you believe it is incorrect;
- object to our processing of your personal data or transfer of your data to TRACE; or
- bring a complaint on how we have handled your personal data.
In any such instance, you may contact TRACE by email at [email protected] In addition, if you reside in the European Union, you can contact TRACE’s EU Representative at [email protected] or TRACE’s Data Protection Officer at [email protected] If contacted, TRACE may seek additional information from you to make sure that the personal data we may possess belongs to you. Once verified, we will evaluate your request and provide you with a response.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you may file a complaint with the Data Protection Commissioner at [email protected] or the supervisory authority located in your jurisdiction.Effective Date: 22 July 2020