Privacy Notice: Website and Social Media
1. Introduction
Siteimprove respects your privacy and is committed to protecting it. This notice explains how Siteimprove processes the Personal Data that it collects through:
- the Siteimprove website (siteimprove.com) and browser extensions;
- information that you provide to us as a vendor (prospective and current);
- information and submissions that you provide to us, both online and offline, through forms on our website; and
- your interaction with us through third-party websites and services (e.g., social networking providers).
For the sake of simplicity in this Notice, all of these methods of collection will be referred to as the “Website”.
2. How does Siteimprove define Personal Data?
“Personal data” as defined in the General Data Protection Regulation (GDPR) and “personal information” as defined in the California Consumer Privacy Act (CCPA) shall have the same meaning as in the respective legislation (in the following both are referred to as “Personal Data”). Personal Data includes your name, address, e-mail, telephone number, IP address, or any other identifier.
Siteimprove does not sell your Personal Data. Further, Siteimprove does not share your Personal Data with third parties for other purposes than specified in this Privacy Notice. Through the Website, Siteimprove does not seek to collect any sensitive data (e.g., health or sex life information; political opinions or religious/philosophical beliefs; trade-union membership; or racial or ethnic origin.
3. Who is responsible for processing my Personal Data?
The Siteimprove affiliate with which you either communicate, that is operating the website you are visiting, or is located in your country of residence, is responsible for the processing of your Personal Data (i.e. the data controller). Contact information for each of those affiliates is listed here: https://www.siteimprove.com/contact/
If you have any questions about the processing of your Personal Data by Siteimprove or the information in this Notice, please contact:
OR
Mads Sørensen, General Counsel
Havneholmen 33
DK-1561 København V
Denmark
mso@siteimprove.com
4. How and why does Siteimprove get Personal Data?
Below, you can see the various purposes for which Siteimprove may collect and use (i.e. process) Personal Data from you and through which channels.
4.1 Website Visitors:
Siteimprove collects your Personal Data in order to respond to your inquiries, identify areas of interest on the Website, and identify potential new Siteimprove customers based on Website activity.
Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email, phone, and IP address.
4.1.1 How does Siteimprove get your Personal Data in these instances?
You provide it indirectly to Siteimprove if you consent to optional Cookies and directly through online chat interactions. Please also read our Cookie Notice.
4.1.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
- Consent
- Legitimate interest in knowing the countries and companies that might be interested in the Siteimprove Intelligence Platform. Specific individuals are not targeted and only companies are identified as potential customers. Siteimprove will honor “Do Not Track” if a user has set that preference.
4.1.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software)
- Drift (online chat system)
- Zendesk (IT ticket management system)
- Hubspot (marketing contact management system)
- LinkedIn (professional network platform)
- Salesforce (customer relationship management system)
- Pardot (Marketing automation platform)
- Vidyard (online video platform)
4.1.4 How long does Siteimprove keep your Personal Data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned.
4.2 Prospective Customers/Online Form Submissions:
For website visitors interested in our products as a prospective customer, Siteimprove collects your Personal Data in order to fulfill your requests for additional information, to facilitate your attendance at a Siteimprove-sponsored event, or to set up an account and provide you with a demo.
Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email, address, and phone.
4.2.1 How does Siteimprove get your Personal Data in these instances?
You provide it directly through online forms and/or interactions with the Siteimprove employee at event or when setting up/conducting a demo. We perform a pre-crawl of prospect websites.
4.2.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
- Consent (to either receipt of specific content or direct marketing).
- Legitimate interest:
- in processing the contact information of individuals interested in buying our services so we as a business can come in contact with said individuals.
- in processing the potential Personal Data found on a prospects’ public website to provide this prospect with an offer and demo directed at the business of the prospect.
4.2.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software)
- Hubspot (marketing contact management system)
- Pardot (Marketing automation platform)
- Eventbrite (event invitation system)
- GoToWebinar/GoToMeeting (online meeting system for demos)
- Atlassian (ticketing system for review of customer contracts)
- DocuSign (e-signature tool for contracts)
- Interxion (server/storage vendor)
- Amazon Web Services (server/storage vendor)
4.2.4 How long does Siteimprove keep your Personal Data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned. Pre-crawl results of prospect websites will be deleted after 30 days unless the prospect schedules a demo, in which case it will be retained for the sales and customer cycle.
4.3 Job Applicants:
Siteimprove collects your Personal Data in order to facilitate your requests to be considered for employment with Siteimprove.
Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, address, email, phone, image (if included in your submission materials), and answers to personality tests (if you agree to take one during the process).
4.3.1 How does Siteimprove get your personal data in these instances?
You provide it directly to Siteimprove through emails or submission of an application, or through agreeing to take a personality test (where applicable).
4.3.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
- Necessary in order to take steps at your request prior to entering into a contract of employment.
- Legitimate interest in processing the contact information of a job applicant.
4.3.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software);
- Jobvite (employment application management system);
- Cubiks (personality test administrator).
4.3.4 How long does Siteimprove keep your personal data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned. In general, Personal Data will be deleted after two (2) years from termination, unless there are special reasons for a longer retention period. However, the following exemptions apply:
- Jobvite documents are retained for six (6) months.
- Cubiks documents are retained six (6) months for candidates that are not accepted; one (1) year for candidates that receive a job offer.
4.4 Social Media Pages:
For visitors of our social media pages, Siteimprove collects your Personal Data in order to respond to your inquiries, identify areas of interest on page, and identify potential new Siteimprove customers based on page activity.
Siteimprove potentially collects the following categories of ordinary Personal Data for the above purpose(s): name, email, IP addresses and associated information, other information directly provided by the visitor.
4.4.1 How does Siteimprove get your Personal Data in these instances?
You provide it indirectly to Siteimprove if you consent to optional cookies and directly through online interactions on our social media pages.
4.4.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
- Consent for processing activities through optional Cookies (Please see also our Cookie Notice).
- Legitimate interest in knowing the interest in Siteimprove. Data is generally aggregated and Personal Data is only processed where you provide it yourself through comments or chat-messages.
4.4.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software)
- Falcon (Social Media Management Platform used for managing social media accounts)
4.4.4 How long does Siteimprove keep your Personal Data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned.
4.5 Vendors:
Siteimprove collects your Personal Data to facilitate consideration of your offer of goods or services. Siteimprove collects the following categories of ordinary Personal Data for the above purposes: name, address, email, and phone.
4.5.1 How does Siteimprove get your Personal Data in these instances?
You provide it directly to Siteimprove through emails or submission of bid, quote or similar documentation.
4.5.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
- Necessary in order to take steps prior to entering into a contract.
4.5.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software);
- Danske Bank (company bank for facilitating payments);
- Atlassian (ticket administration for vendor management/vetting process);
- DocuSign (E-signature system).
4.5.4 How long does Siteimprove keep your Personal Data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned.
4.6 Whistleblowing Reports:
Siteimprove employees, customers, partners, suppliers and/or any other third parties (each an “Associate”) may file a report under Siteimprove's Whistleblower Policy. Siteimprove collects Personal Data in order to investigate a case filed through a whistleblowing report. We will hold the Personal Data you provide to us securely and only use it to help us to handle and process your whistleblowing report. Siteimprove will process Personal Data of the Associate making the report, the reported person and any other third parties involved as may be necessary for the investigation of the reported incident, including the assessment of the facts reported and the preparation of reports on the course and completion of the investigation.
Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email address, phone and any information you provide to us in your report. Siteimprove will process Personal Data in accordance with the principles set out in the Whistleblower Policy and with the provisions of applicable data protection laws.
4.6.1 How does Siteimprove get your Personal Data in these instances?
The Associate provides the Personal Data through the online form submission.
4.6.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?
Siteimprove processes Personal Data for the purposes provided in the Whistleblower Policy on basis of one or more of the following:
- Consent of the Associate to provide Personal Data about him/herself in the report;
- Necessary for compliance with a legal obligation to which Siteimprove is subject;
- Necessary for the purposes of the legitimate interests pursued by Siteimprove in order in ensuring compliance with applicable laws throughout all of Siteimprove’s operations.
4.6.3 Who else has access to your Personal Data in these instances (and why)?
- Microsoft (Office 365) (primary business communication software to which the whistleblowing report is submitted).
4.6.4 How long does Siteimprove keep your Personal Data in these instances?
Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned above.
5. Is Siteimprove transferring my Personal Data outside the EU/EEA?
In some cases, Siteimprove does transfer your Personal Data to vendors in the following countries outside the EU/EEA: US.
Such transfers only take place for the specific purposes mentioned above. Because the US has not been deemed by the EU Commission to have an adequate level of protection of personal data, Siteimprove provides appropriate safeguards for the transfer in accordance with Chapter 5 of the GDPR. You may obtain a copy of (or access to) these terms by contacting us at privacy@siteimprove.com. Below is the current list of US-based vendors to which Siteimprove may transfer Personal Data:
- DocuSign
- Jobvite
- Eventbrite
- Drift
- Atlassian
- Hubspot
- GoToWebinar / GoToMeeting
- Drift
- Pardot
- Vidyard
6. What rights do I have to Personal Data that Siteimprove processes?
-
- You have the right to request access to and rectification or erasure of your Personal Data.
- You have the right to object to the processing of your Personal Data and have the processing of your Personal Data restricted.
- You have an unconditional right to object to the processing of your Personal Data for direct marketing purposes.
- If processing of your Personal Data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by emailing privacy@siteimprove.com.
- You have the right to receive your Personal Data in a structured, commonly used and machine-readable format.
- You have the right to not receive discriminatory treatment for exercising these rights.
- You may always lodge a complaint with a data protection supervisory authority, e.g. The Danish Data Protection Agency.
Be advised that there may be legal conditions or limitations on these rights. If you wish to inquire about or exercise your right to the above rights, please read our Notice – Exercising your Privacy Rights or contact us at: privacy@siteimprove.com.
7. Does Siteimprove collect Personal Data from children under the age of 16?
No. Siteimprove does not knowingly collect Personal Data from children under 16. If Siteimprove learns that it has collected or received Personal Data from a child under 16 without verification of parental consent, Siteimprove will delete that information. If you believe Siteimprove might have any information from or about a child under 16, please contact privacy@siteimprove.com.
8. Does Siteimprove use any other means of tracking behavior of individuals on the Website?
Yes. Pages of Siteimprove.com and e-mails from Siteimprove employees to prospects and customers may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags and single-pixel gifs) that permit Siteimprove to, for example, count users who have visited a page or opened an e-mail.
9. Country-Specific Policies
Finland:
Customer Data File
This Policy constitutes a description of customer’s data file as required under Finnish Personal Data Act (523/1999), Chapter 2, Section 10.
US:
Your California Privacy Rights
California Civil Code Section § 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an e-mail to privacy@siteimprove.com or write us at: Siteimprove, 5600 West 83rd Street, Suite 400, Bloomington, MN 55437; ATTN: Legal Department.