Privacy Policy
247Digitize LLC (247Digitize) and its affiliates complies with the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Frameworks, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States.
Consistent with its commitment to protect personal privacy, 247Digitize has made a decision to voluntarily adhere to the principles set forth in the Data Privacy (the “Data Privacy Principles”). As such, 247Digitize has certified its compliance with the Data Privacy Principles with the U.S. Department of Commerce. If there is any conflict between the terms in this privacy policy and the Data Privacy Principles, the Data Privacy Principles shall govern.
247Digitize complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. 247Digitize has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. 247Digitize has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov
1. DATA PRIVACY OVERVIEW
The U.S. Department of Commerce and the European Commission as well as the Swiss Federal
Council have agreed on a set of data protection principles and associated supplemental principles to enable U.S. companies to satisfy European Union (“EU”) and Swiss law requiring that Personal Data transferred from the EU and Switzerland to the U.S. be adequately protected (the “EU-U.S. Data Privacy” and the “Swiss-U.S. Data Privacy” respectively, together the “Data Privacy”). The European Economic Area (the “EEA”), which as of the date of this Policy includes all member states of the EU and Iceland, Liechtenstein and Norway, and Switzerland have recognized the Data Privacy as providing adequate protection of Personal Data.
Should there be any conflict between the Data Privacy Principles and this Policy, this Policy shall be interpreted to be consistent with the Data Privacy Principles.
2. SCOPE
This Policy applies to all Personal Data received by 247Digitize in the United States from the EEA and/ or from Switzerland, either directly from individuals, from its affiliates or from other third party organizations, and in any format whatsoever, including electronic, paper or oral transmission.
This Policy also applies to 247Digitize’s Subcontractors (defined below) that process Personal Data received by 247Digitize or its affiliates from the EEA and/ or from Switzerland on behalf of 247Digitize.
3. DEFINITIONS
For purpose of this Policy, the following definitions shall apply:
“Personal Data” and “Personal Information” means data about an identified or identifiable individual that are within the scope of the Directive 95/46/EC or the Swiss Federal Act on Data Protection, received by an organization in the United States from the European Union and/ or Switzerland, and recorded in any form. Personal Data includes all Sensitive Personal Data (as defined below).
“Sensitive Personal Data” or “Sensitive Personal Information” means personal information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information specifying the sex life of the individual or, where received from a third party, data that is identified and treated as sensitive by the third party. Where Swiss individuals are concerned, “Sensitive Personal Data” or “Sensitive Personal Information” also includes ideological views or activities, and information on social security measures or administrative or criminal proceedings and sanctions, which are treated outside pending proceedings.
“Processing” of personal data means any operation or set of operations which is performed upon personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure or dissemination, and erasure or destruction.
“Controller” means a person or organization which, alone or jointly with others, determines the purposes
and means of the processing of personal data.
“Subcontractors” means any third party that collects or uses Personal Data provided by 247Digitize to perform tasks on behalf of 247Digitize under the instructions of, and solely for, 247Digitize.
“247Digitize,” “we,” “our” or “us” means 247Digitize LLC and its successors, assigns and wholly owned affiliates and subsidiaries and their respective divisions and groups, each of which are located within the U.S.
4. PRIVACY PRINCIPLES FOR PROCESSING OF PERSONAL DATA RECEIVED FROM THE EEA AND/OR SWITZERLAND
The privacy principles set forth in this Policy have been developed based on the Data Privacy Principles.
4.1 NOTICE
Where 247Digitize collects Personal Data directly from individuals in the EEA and/ or Switzerland or receives it from its European or Swiss affiliates, it or its European or Swiss affiliates will inform those individuals about the purposes for which they collect and use Personal Data about them; the transfer of Personal Data to 247Digitize in the U.S., the types or identity of third parties to which 247Digitize discloses that information and the purposes for which it does so; and the choices and means 247Digitize offers individuals for limiting the use and disclosure of their Personal Data. Notice will be provided in clear and conspicuous language when individuals are first asked to provide Personal Data to 247Digitize, or as soon as practicable thereafter, and in any event before 247Digitize uses the information for a purpose other than that for which it was originally collected.
247Digitize may from time to time process certain Personal Data about customers, business partners, suppliers, vendors, service providers, employees and candidates for employment, including information recorded and stored on various types of media, including electronic media.
247Digitize will process these types of data in conformity with the Data Privacy Principles and will continue to apply the Principles to personal data received under the application of the Data Privacy as long as it holds this data.
Purposes for which we may collect and use Personal Data from our customers, consumers and other non-employees include:
- Communicating to individuals about our products, services and related issues.
- Notifying individuals of, and administering, contests, sweepstakes, promotions and other offers.
- Evaluating the quality of our products and services.
- Allowing individuals to register for our websites, online communities and other social networking services, and administering and processing these registrations.
- Transferring Personal Data in connection with 247Digitize’s legal, regulatory compliance and auditing purposes.
- Facilitating 247Digitize’s internal administrative purposes and application functionality, maintaining, administering and complying with 247Digitize’s legal, regulatory compliance and auditing obligations, policies and procedures.
- Execution of contracts and delivery of products and services to customers; execution and management of development, engineering and construction projects; manufacturing execution and supply chain management.
We may share Personal Data within the U.S. family of 247Digitize companies. 247Digitize may also share Personal Data with its third party Subcontractors for the sole purpose of, and only to the extent needed to, support 247Digitize’s or our customers’ business needs. We may also disclose Personal Data to our Subcontractors in the U.S. and other third parties when required to do so under law or by legal process. Third Party Subcontractors are required to keep confidential Personal Data received from 247Digitize and may not use it for any purpose other than originally intended.
4.2 CHOICE
247Digitize will offer individuals in the EEA or Switzerland the opportunity to choose (by either opt-out or opt-in) if their Personal Data is (a) to be disclosed to a third party that is not an Agent, or (b) to be used for a purpose materially different from the purpose for which it was originally collected or subsequently authorized by the individual.
For Sensitive Personal Data, 247Digitize will give individuals the opportunity to affirmatively and explicitly consent (opt-in) to permit 247Digitize to (a) disclose their Sensitive Personal Data to a third party that is not an Agent or (b) use Sensitive Personal Data for a purpose materially different from the purpose for which it was originally collected or subsequently authorized by the individual.
247Digitize will provide individuals with reasonable, clear and conspicuous and readily available mechanisms to exercise these choices.
4.3 ACCOUNTABILTY FOR ONWARD TRANSFER
247Digitize will transfer Personal Data to Subcontractors only for limited and specific purposes. 247Digitize will obtain contractual assurances from its Subcontractors that they will safeguard Personal Data in a manner consistent with this Policy and that they will provide at least the same level of protection as is required by the relevant Data Privacy Principles. 247Digitize recognizes its responsibility and potential liability for onward transfers to Subcontractors. Where 247Digitize has knowledge that an Agent is using or disclosing Personal Data in a manner contrary to this Policy and/or the level of protection as required by the Data Privacy Principles, 247Digitize will take reasonable steps to prevent, remediate or stop such use or disclosure.
If 247Digitize transfers Personal Information to non-agent third parties acting as a Controller, 247Digitize will apply the Notice and Choice principles and will obtain contractual assurance from these parties that they will provide the same level of protection as is required under the principles, unless derogation for specific situations under European data protection law applies.
4.4 ACCESS
Upon request and in accordance with the Data Privacy Principles, 247Digitize will grant individuals reasonable access to their Personal Data that is held by 247Digitize. In addition, 247Digitize will take reasonable steps to permit individuals to correct, amend, or delete their Personal Data that is demonstrated to be inaccurate, incomplete or processed in violation of the Data Privacy Principles. In accordance with the Data Privacy Principles, 247Digitize may limit or deny access to Personal Data where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy, where the legitimate rights of persons other than the individual would be violated or if necessary to safeguard important countervailing public interests (e.g., national security) or in other limited circumstances (e.g., disclosure would breach a legal or other professional privilege).
4.5 SECURITY
247Digitize will take reasonable precautions to protect Personal Data in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into due account the risks involved in the processing and the nature of the Personal Data.
4.6 DATA INTEGRITY AND PURPOSE LIMITATION
247Digitize will use Personal Data only in ways that are compatible with the purposes for which it was originally collected or as subsequently authorized by the individual. 247Digitize will also take reasonable steps to ensure that Personal Data is relevant to its intended use, accurate, complete, and current. 247Digitize will adhere to the Data Privacy Principles for as long it retains Personal Information received under its Data Privacy certification.
4.7 RECOURSE, ENFORCEMENT AND LIABILITY
247Digitize utilizes the self-assessment approach to verify its compliance with this Policy. 247Digitize periodically verifies that this Policy is accurate, comprehensive for the information intended to be
covered, prominently displayed, completely implemented, and in conformity with the Data Privacy Principles.
247Digitize will investigate complaints and disputes regarding use and disclosure of Personal Data in accordance with the Data Privacy Principles. 247Digitize will also investigate suspected infractions of this Policy.
247Digitize’s participation in the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework is subject to investigation and enforcement by the Federal Trade Commission.
If 247Digitize determines that any employee of 247Digitize is in violation of this Policy, such person will be subject to disciplinary action up to and possibly including termination of employment. 247Digitize encourages interested persons with questions or concerns relating to this Policy to contact us using the contact information below.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, 247Digitize commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact 247Digitize at:
247Digitize LLC
Attn: Murali Parvataneni
311 South Wacker Drive,
Suite 2575
Chicago, IL 60606
Unites States Email: dataprivacy@247digitize.com
Phone: 312-242-3029
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, 247Digitize commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States, the European Union, the United Kingdom, and/or Switzerland (as applicable)]. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint. The services JAMS are provided at no cost to you.
Under certain conditions detailed in the Data Privacy, Data Subjects may be able to invoke binding arbitration before the Data Privacy Panel.
247Digitize agrees to periodically review and verify its compliance with the Data Privacy Principles, and to remedy any issues arising out of failure to comply with the Data Privacy Principles. 247Digitize acknowledges that its failure to provide an annual self-certification to the U.S. Department of Commerce will remove it from the Department’s list of Data Privacy participants.
5. LIMITATIONS
247Digitize’s adherence to the Data Privacy Principles may be limited (a) to the extent necessary to meet applicable national security, public interest, or law enforcement requirements, e.g. in the course of lawful requests by public authorities (b) by statute, government regulation, or case law that creates conflicting obligations or explicit authorizations, provided that, in exercising any such authorization, an organization can demonstrate that its non-compliance with the principles is limited to the extent necessary to meet the overriding legitimate interests furthered by such authorization; or (c) if the effect of the Directive or Member State law is to allow exceptions or derogations, provided such exceptions or derogations are applied in comparable contexts.
6. CONTACT INFORMATION
Questions or comments regarding this Policy or our practices concerning Personal Data should be submitted to 247Digitize by mail or e-mail as follows:
247Digitize LLC
311 South Wacker Drive,
Suite 2575
Chicago, IL 60606
Unites States Email: dataprivacy@247digitize.com
Phone: 312-242-3029
7. CHANGES TO THIS POLICY
This Policy may be amended from time to time, consistent with the requirements of the Data Privacy Principles. Appropriate public notice will be given concerning such amendments.
8. EFFECTIVE DATE
This Policy is effective as of July 10, 2017.
Last updated: 5th September, 2024