Ovoru Consulting, Digital Business and Marketing Solutions
 

Legal Notices

Services Privacy Policy

Overview   |   Privacy Policy
Services Privacy Policy   |   Recruiting Privacy Policy

Services Privacy Policy

Privacy at Ovoru


  This Ovoru Services Privacy Policy ("Services Privacy Policy") is organized into three sections:


I. The first section (Services Personal Information Data Processing Terms) describes the privacy and security practices that Ovoru and its affiliates ("Ovoru") employ when handling Services Personal Information (as defined below) for the provision of Technical Support, Consulting, Cloud or other services (the "Services") provided to Ovoru customers ("You" or "Your") during the term of Your order for Services.

Services Personal Information is personal information that is provided by You, resides on Ovoru, customer or third-party systems and environments, and is processed by Ovoru on Your behalf in order to perform the Services. Services Personal Information may include, depending on the Services: information concerning family, lifestyle and social circumstances; employment details; financial details; online identifiers such as mobile device IDs and IP addresses, and first party online behavior and interest data. Services Personal Information may relate to Your representatives and end users, such as Your employees, job applicants, contractors, collaborators, partners, suppliers, customers and clients.

II. The second section (System Operations Data Processing Terms) describes the privacy and security practices that apply to personal information that may be incidentally contained in Systems Operation Data that is generated by the interaction of (end-)users of our Services ("Users") with the Ovoru systems and networks used to monitor, safeguard and deliver Services to our customer base.

Systems Operations Data may include log files, event files, and other trace and diagnostic files, as well as statistical and aggregated information that relates to the use and operation of our Services, and the systems and networks these Services run on.

III. The third section (Communications and Notifications to Customers and Users) applies to both Services Personal Information and personal information contained in Systems Operations Data, describes how Ovoru handles legally required disclosure requests, and informs You and Users how to communicate with Ovoru's Global Data Protection Officer or file a complaint.

The definitions of Services Personal Information and Systems Operations Data do not include Your or User contact and related information collected from the use of Ovoru websites, or Your or User interactions with us during the contracting process. Ovoru's handling of this information is subject to the terms of the General Ovoru Privacy Policy.

  I. SERVICES PERSONAL INFORMATION DATA PROCESSING TERMS


Ovoru treats all Services Personal Information in accordance with the terms of Sections I and III of this Policy and Your order for Services.

In the event of any conflict between the terms of this Services Privacy Policy and any privacy terms incorporated into Your order for Services, including an Ovoru Data Processing Agreement, the relevant privacy terms of Your order for Services shall take precedence.

1. Performance of the Services

Ovoru may process Services Personal Information for the processing activities necessary to perform the Services, including for testing and applying new product or system versions, patches, updates and upgrades, and resolving bugs and other issues You have reported to Ovoru.

2. Customer instructions

You are the controller of the Services Personal Information processed by Ovoru to perform the Services. Ovoru will process your Services Personal Information as specified in Your Services order and Your documented additional written instructions to the extent necessary for Ovoru to comply with its processor obligations under applicable data protection law or assist You to comply with Your controller obligations under applicable data protection law relevant to Your use of the Services. Ovoru will promptly inform You if, in our reasonable opinion, Your instruction infringes applicable data protection law. Additional fees may apply.

3. Rights of individuals

You control access to Your Services Personal Information by Your end users, and Your end users should direct any requests related to their Services Personal Information to You. To the extent such access is not available to You, Ovoru will provide reasonable assistance with requests from individuals to access, delete or erase, restrict, rectify, receive and transmit, block access to or object to processing of Services Personal Information on Ovoru systems.

4. Security and confidentiality

Ovoru has implemented and will maintain technical and organizational measures designed to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Services Personal Information. These measures, which are generally aligned with the standard, govern all areas of security applicable to the Services, including physical access, system access, data access, transmission, input, security oversight, and enforcement.

Ovoru employees are required to maintain the confidentiality of personal information. Employees' obligations include written confidentiality agreements, regular training on information protection, and compliance with company policies concerning protection of confidential information.

See additional details regarding the specific security measures that apply to the Services are set out in the security practices for these Services, including regarding data retention and deletion, available for review.

5. Incident Management and data breach notification.

Ovoru promptly evaluates and responds to incidents that create suspicion of or indicate unauthorized access to or handling of Services Personal Information.

If Ovoru becomes aware and determines that an incident involving Services Personal Information qualifies as a breach of security leading to the misappropriation or accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Services Personal Information transmitted, stored or otherwise processed on Ovoru systems that compromises the security, confidentiality or integrity of such Services Personal Information, Ovoru will report such breach to You without undue delay.

As information regarding the breach is collected or otherwise reasonably becomes available to Ovoru and to the extent permitted by law, Ovoru will provide You with additional relevant information concerning the breach reasonably known or available to Ovoru.

6. Subprocessors

To the extent Ovoru engages third party subprocessors to have access to Services Personal Information in order to assist in the provision of Services, such subprocessors shall be subject to the same level of data protection and security as Ovoru under the terms of Your order for Services. Ovoru is responsible for its subprocessors' compliance with the terms of Your order for Services.

Ovoru maintains lists of Ovoru Affiliates and subprocessors that may process Services Personal Information. Additional information is available in Support, or other applicable primary support tool provided for the Services.

7. Deletion or return of Services Personal Information

Except as otherwise specified in an order for services or required by law, upon termination of services or at your request, Ovoru will delete your production customer data located on Ovoru computers in a manner designed to ensure that they cannot reasonably be accessed or read, unless there is a legal obligation imposed on Ovoru preventing it from deleting all or part of the data. You may consult with your Ovoru services contact for additional information on data deletion prior to service completion.

  II. SYSTEMS OPERATIONS DATA PROCESSING TERMS


1. Responsibility and purposes for processing personal information.

Ovoru and its affiliated entities are responsible for processing personal information that may be incidentally contained in Systems Operations Data in accordance with Sections II and III of this Policy. See the list of Ovoru entities. Please select a region and country to view the registered address and contact details of the Ovoru entity or entities located in each country.

We may collect or generate Systems Operations Data for the following purposes:


To help keep our Services secure, including for security monitoring and identity management;
To investigate and prevent potential fraud or illegal activities involving our systems and networks, including to prevent cyber-attacks and to detect bots;
To administer our back-up disaster recovery plans and policies;
To confirm compliance with licensing and other terms of use (license compliance monitoring);
For research and development purposes, including to analyze, develop, improve and optimize our Services;
To comply with applicable laws and regulations and to operate our business, including to comply with legally mandated reporting, disclosure or other legal process requests, for mergers and acquisitions, finance and accounting, archiving and insurance purposes, legal and business consulting and in the context of dispute resolution.



For personal information contained in Systems Operations Data collected in the EU, our legal basis for processing such information is our legitimate interest in performing, maintaining and securing our products and services and operating our business in an efficient and appropriate manner. Personal information may also be processed based on our legal obligations or legitimate interest to comply with such legal obligations.

2. Sharing personal information

Personal information contained in Systems Operations Data may be shared throughout Ovoru's organization. A list of Ovoru entities is available as indicated above.

We may also share such personal information with the following third parties:


Third-party service providers (for example IT service providers, lawyers and auditors) in order for those service providers to perform business functions on behalf of Ovoru;
Relevant third parties in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings);
As required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside your country of residence, for national security and/or law enforcement purposes.



When third parties are given access to personal information contained in Systems Operations Data, we will take the appropriate contractual, technical and organisational measures to ensure, for example, that personal information is only processed to the extent that such processing is necessary, consistent with this Privacy Policy and in accordance with applicable law.

3. Security.

Ovoru has implemented appropriate technical, physical and organisational measures in accordance with the Ovoru Corporate Security Practices designed to protect personal information against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing.

4. User choices.

To the extent provided under applicable laws, Users may request to access, correct, update or delete personal information contained in Systems Operations Data in certain cases, or otherwise exercise their choices with regard to their personal information.

  III. COMMUNICATIONS AND NOTIFICATIONS TO CUSTOMERS AND USERS.


1. Legal requirements.

Ovoru may be required to provide access to Services Personal Information and to personal information contained in Systems Operations Data as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect Your or a User's safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside Your or a User's country of residence, for national security and/or law enforcement purposes.

Ovoru will promptly inform You of requests to provide access to Services Personal Information, unless otherwise required by law.

2. Global Data Protection Officer

Ovoru has appointed a Data Protection Officer. If You or a User believe that personal information has been used in a way that is not consistent with this Privacy Policy, or if You or a User have further questions, comments or suggestions related to Ovoru's handling of Services Personal Information or personal information contained in Systems Operations Data, please contact the Data Protection Officer.

Written inquiries to the Global Data Protection Officer may be addressed to:

Email: legal.officer@ovoru.com

3. Dispute resolution or filing a complaint.

If You or a User have any complaints regarding our compliance with our privacy and security practices, please contact us first. We will investigate and attempt to resolve any complaints and disputes regarding our privacy practices.

4. Changes to this Services Privacy Policy.

This Privacy Policy was last updated on January 23, 2022. However, the Services Privacy Policy can change over time, for example to comply with legal requirements or to meet changing business needs. The most up-to-date version can be found on this website. In cases of material changes, we will also inform you in another appropriate way (for example via a pop-up notice or statement of changes on our website) prior to the changes becoming effective.










We use cookies on this site to enhance your user experience. You can learn more about our use of cookies and your choices
here. By clicking on any link on this page or clicking "OK, I agree, you are giving your consent for us to set cookies."

Ok