Last Updated: April 15, 2022
This Privacy Statement is effective from the date mentioned above to comply with the European Union’s General Data Protection Regulation (“GDPR”) and the applicable national data protection acts of the relevant member states (including the United Kingdom after it leaves the EU) as well as the California Consumer Privacy Act of 2018 (“CCPA”) or any other applicable privacy law all as amended from time to time.
Icertis, Inc. and its affiliates and subsidiaries listed on our website (“Icertis”, “we”, “us”, and “our”) are committed to protecting your privacy and providing you with a safe online experience. This Privacy Statement covers the collection, use and disclosure of personal information collected through the website at www.icertis.com (the “Website”) and limited amounts of personal information processed via the Icertis Contract Intelligence (ICI) Platform (“Platform”). To make this Privacy Statement easier to read, the Website and the Platform are collectively call the “Services.” This Privacy Statement applies where it is referred to, e.g. in electronic communication messages.
In this Privacy Statement “personal information” means information relating to an identified or identifiable natural person, as defined in Art. 4 (1) GDPR. Examples include your name, telephone number and email address.
Please note that unless otherwise stated herein, this Privacy Statement does not apply to personal information that the Platform processes on behalf of an Icertis’ subscriber (“Subscriber Data”). The Platform will process Subscriber Data only in accordance with the documented instructions of the Icertis’ subscriber as set forth in the applicable contract we have with the subscriber.
Collection of Your Personal Information
The categories of personal information we collect depend on how you interact with our Services. The recipients of personal information are the staff of the relevant Icertis department in need of your personal information.
- Customer or Potential Customer. If you are affiliated with an Icertis customer or a potential Icertis customer, we may collect personal information such as your name, gender, business e-mail address, job title / job function / role / department, home or work address, telephone and fax number, and other related information. We also might obtain personal information about you from third party business partners or sources, such as contact information provided by any of our referral partners or publicly available sources. We use this personal information to operate our business in accordance with this Privacy Statement, such as when you submit requests to us or send us email in the context of our relationship as an actual or potential service provider to you.
- Authorized User. If you are an authorized user of one of our subscribers, we may collect personal information associated with your Platform account such as your name, work email address, and information about how you use the Platform. We use this personal information to operate our business in accordance with this Privacy Statement.
- Supplier, Vendor, or Partner. If you are affiliated with an Icertis supplier, vendor, or partner, we may collect personal information from you such as your name, gender, business email address, job title / job function / role / department, home or work address, telephone and fax number, banking information (sole trader / independent contractors only) and other related information. We may collect personal information either directly from you or from other sources, such as from business contacts or publicly available sources. We use this personal information to operate our business in accordance with this Privacy Statement.
- Job Applicants. If you reply to one of the job openings or opportunities we post on our Website or on social media (e.g. LinkedIn), we will collect the personal information contained in your submission such as your maiden name, private email address and private telephone number, employment history, references, certificates, documents, work permit detail (if relevant), date of birth and age. Your personal information may be collected by an independent recruitment agency. We use this personal information to assess your suitability, aptitude, skills, and qualifications for employment with Icertis.
- Subscriber Data. In some cases, our subscribers may permit us to process personal information contained in Subscriber Data documents the Platform processes on their behalf such as name and business email address, job function. We use this personal information to improve and optimize Icertis’ offerings, provide information to machine learning mechanisms, and to generate internal industry relevant analyses through the use of algorithms.
- Automatic Data Collection. When you interact with our Services online, we may automatically collect personal information about your device, including its hardware and software. This personal information can include: your IP address, browser type, domain names, access times and referring website addresses, and other personal information about how you use the Services. We use this personal information to operate our business in accordance with this Privacy Statement, including to market Icertis’ products and services and to provide general statistics and analytics regarding use of the Services.
Use of Your Personal Information
Icertis collects and uses your personal information for a variety of business purposes, including:
To Provide the Services or Information Requested, such as:
- Fulfilling our contract with you or the organization on whose behalf you use the Services;
- Managing your information and account;
- Responding to questions, comments, and other requests;
- Processing payment card and/or other financial information to facilitate your use of the Services;
- Providing access to certain areas, functionalities, and features of our Services;
- Answering requests for customer or technical support; and
- Allowing you to register for events.
Administrative Purposes, such as:
- Pursuing legitimate interests, such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
- Contract management/administration (e.g., billing, etc.);
- Measuring interest and engagement in our Services;
- Improving the Services;
- Developing new products and services;
- Ensuring internal quality control and safety;
- Authenticating and verifying individual identities;
- Carrying out audits;
- Communicating with you about your account, activities on our Services and Privacy Statement changes;
- Preventing and prosecuting potentially prohibited or illegal activities;
- Assessing and recording information about a job applicant’s qualifications in order to decide to whom to offer the position;
- Enforcing our contracts; and
- Complying with our legal obligations.
Marketing Our Products and Services. We may use personal information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law.
If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may contact us at any time as set forth below.
Consent. We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.
De-identified and Aggregated Information Use. We may use personal information and other data about you to create de-identified and/or aggregated information, such as de-identified demographic information, de-identified location information, information about the device from which you access our Services, or other analyses we create. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, industry analysis, analytics, and any other legally permissible purposes.
We will share your personal information with third parties in the ways that are described in this Privacy Statement. Except as set forth in this Privacy Statement, Icertis does not sell, rent or lease its customer lists to third parties.
Icertis may share personal information with affiliates and subsidiaries, trusted partners and our service providers, to help us perform statistical analysis, send you email or postal mail, provide customer support, and support our business and the Services. All such third parties are required to maintain the confidentiality of your information.
Icertis will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary or advisable to: (i) comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) protect your, our or others’ rights, property, or safety; (iii) to enforce Icertis’ policies and contracts; (iv) to collect amounts owed to us; or (v) prevent financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity.
If Icertis is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, transition of service to another provider, or sale of all or a portion of its assets, then your personal information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.
International Data Transfers
All personal information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States, India or other third countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws. Transfer of personal information to third countries is based on the appropriate standard contractual clauses issued by the European Commission.
The Website uses “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your local storage (usually your browser’s storage) by a web page server. Cookies are useful to personalize your online experience.
Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser preferences to block or restrict them. The “help” portion of the toolbar on most browsers will tell you how to disable and manage your cookies settings. If you disable cookies you may still browse public areas of the Website, but some features and services may not function.
Website Analytics. As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use automated devices and applications, such as Google Analytics, to evaluate usage of our Website. We also may use other analytic means to evaluate our Services. We use these tools to help us improve our Services, performance and user experiences. We may link this automatically-collected data to personal information that can be used to identify you in the real world.
For more information about how Google Analytics uses data, please visit www.google.com/policies/privacy/partners/. You can opt out of Google Analytics’ collection and processing of data generated by your use of the Website by going to http://tools.google.com/dlpage/gaoptout.
Advertising. We partner with third parties to either display advertising on our Website or to manage our advertising on other sites. Our third-party advertising partners may use technologies such as cookies to gather information about visitor and customer activities on our Website and other sites in order to provide advertising based upon visitor and customer browsing activities and interests.
You may stop or restrict the placement of these advertising cookies on your device or remove them by adjusting your preferences as your browser or device permits.
The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these websites and learn more about targeted advertising and consumer choice and privacy,
at www.networkadvertising.org/managing/opt_out.asp, www.youronlinechoices.eu/, https://youradchoices.ca/choices/, and www.aboutads.info/choices/.
You must separately opt out in each browser and on each device. Please note this does not opt you out of being served non-personalized ads on our Website.
If you subscribe to our newsletter(s), or if otherwise permitted by law, we will use your name and email address to send promotional material and periodic updates to you. You may choose to stop receiving these communications by following the unsubscribe instructions included in these emails or you can contact us at [email protected].
Do Not Track
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
Our Lawful Basis for Processing
Icertis’ processing of your personal information may be supported by the following lawful bases:
- Performance of a Contract: Icertis processes personal information where it is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract with you.
- Legitimate Interest: Icertis processes personal information to further its legitimate interests but only where its interests are not overridden by your interests or fundamental rights and freedoms.
- Consent: In some cases, Icertis also relies on your consent to process personal information.
- Compliance with our Legal Obligations: Icertis processes personal information to comply with its legal obligations.
Data Subject Rights
For purposes of the CCPA, we do not “sell” your personal information.
In accordance with applicable law, you may have the right to request: (i) access to your personal information; (ii) rectification of your personal information; (ii) erasure of your personal information; (iii) restriction of processing of your personal information; (iv) portability of your personal information; (v) objection to the lawfulness of the processing of personal information; (vi) to withdraw your consent; and (vii) to not be subject to a decision based solely on automated processing, subject to certain exceptions prescribed by law.
Access: You have the right to obtain confirmation that we process data related to you and you have a right to a copy of that data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.
Objection: Please note that if you object to the lawfulness of the processing of personal information, this may affect our ability to carry out tasks for your benefit or to conduct business and provide services to the customer, supplier for whom you are acting, or to consider applications of employment applicants and/or hire you. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
If you would like to exercise any of these rights, please contact us at https://www.icertis.com/company/contact/ or [email protected].
We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request.
If you are a California resident, you have the right not to receive discriminatory treatment by Icertis for the exercise of your rights conferred by the CCPA.
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting us at [email protected] with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.
Security of Your Personal Information
The security of personal information is very important to us. Icertis uses commercially reasonable efforts to put measures in place that are designed to secure your personal information from unauthorized access, use or disclosure. We use commercially reasonable efforts to follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. That said, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot guarantee the security of any information you provide to us. To the fullest extent permitted by applicable laws, we do not accept liability for unauthorized access, use, or disclosure. If you have any questions about security on the Website, you can contact us at [email protected]
Retention of Personal Information
We will retain your personal information for as long as your account is active, as needed to provide you Services and as necessary to comply with our legal obligations, resolve disputes, and enforce our contracts.
Our Services may include links to other websites and/or applications whose privacy practices may differ from those of Icertis. If you submit personal information to any of these third-party services, your personal information is governed by their privacy policies. Icertis is not responsible for the privacy statements, content, or practices on third-party websites or applications.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.
Updates to the Privacy Statement
This Privacy Statement may be amended from time to time, in our sole discretion. If there are any material changes to this Privacy Statement, we will notify you as required by applicable law which may include posting to our intranet, sending an email, or other means.
If you believe that Icertis has not adhered to this Privacy Statement or have questions of if you wish to exercise any of your rights, please contact Icertis at [email protected]. Or you can reach us by telephone or mail at the contact information listed at https://www.icertis.com/company/contact/.
EU Representative of Icertis Inc. and its non-EU affiliates, incl. Icertis Group Limited (UK)
Email: [email protected]
Skyper Taunusanlage 1
60329 Frankfurt a.M.
UK Representative of Icertis Inc. and its affiliates
Icertis Group Limited
Email: [email protected]
Skyper Taunusanlage 1
60329 Frankfurt a.M.
Global Data Protection Officer
Name: Sandeep Kulkarni
Email: [email protected]
5th Floor, Tower A, ICC Tech Park, SB Road
Pune Maharashtra 411016
Data Protection Officer for Icertis GmbH (Germany)
Name: DMC Datenschutz Management & Consulting GmbH & Co. KG
Email: [email protected]
Zur Mühle 2-4