Legal notice - Data protection (CSR assessment) Boris Abramovic January 24, 2020 13:57 Updated EcoVadis collects personal information from users of our web Services including but not limited to sites located at www.ecovadis.com, www.ecovadis-survey.com, all subdomains, and all other online services of EcoVadis SAS or EcoVadis Inc. (“Services”) and use for the purposes defined in the paragraphs below. EcoVadis collects and uses personal information of users of its Services, through: a) providing personal information by users in the online registration forms; b) submitting into the online forms by users of enterprise customers (“Requesting company(ies)”) and users of Requesting companies trading partners (“Assessed company(ies)”), their own users contact details; c) submitting into the online forms by Requesting companies users the contact details of Assessed company(ies) users ; d) providing personal information of the users of Requesting companies’ or Assessed companies through email messages. EcoVadis collects the following personal information of its users: first and last name, email address, phone number and job title for contacting purposes to provide requested Services. The Assessed company’s administrator contact created on the Ecovadis solution is visible to all users that are part of the Assessed company's EcoVadis network. In case of scorecard sharing by the Assessed company the administrator contact information is visible to the Requesting Company’s administrator and the administrators of its subsidiaries. EcoVadis may also contact users to conduct research via surveys relating to user opinions about Services, or to inform of other Services, or to inform about potential new services that may be offered in the future. EcoVadis collects described above personal information of its customers for its business, communication, marketing, managing relationships with its customers, improving its Services and internal purposes. The above processing of users personal information is based on EcoVadis legitimate interests in the meaning of Article 6. 1. f) of GDPR. The collected personal information via the mentioned above EcoVadis webpages is recorded in digital files by EcoVadis. It is kept until the end of the contract for Requesting companies which are requesting CSR assessments from their Assessed companies, and for five (5) years after the end of the subscription for the Assessed companies. The collected data are intended for our Customer facing teams (Success and Customer Engagement & Support teams). Personal Information submitted to EcoVadis may be transferred to EcoVadis subsidiaries, located outside of the European Union: EcoVadis (Mauritius) Ltd., EcoVadis (USA) Inc., EcoVadis (Hong Kong) Ltd., EcoVadis Tunisia SARL, EcoVadis Canada Ltd., EcoVadis Japan K.K., and other subsidiaries that may be formed on a later date. Access to this information is provided in order to assist and follow-up with customers. As a safeguard, this transfer is governed by (Data controller - Data controller) standard contractual clauses between EcoVadis SAS (France) and its subsidiaries if the county is considered not ensuring an adequate level of protection. The US subsidiary is registered in the EU - US Privacy Shield governing the transfer of personal information from the European Union to the United States. For the purpose of the processing, Ecovadis use providers (processors)based outside the European Union. As a safeguard, EcoVadis signed (Data controller - Data processor) standard contractual clauses or the provider is registered in the EU - US Privacy Shield. For more information please go to our trust center: https://www.ecovadis.com/fr/trust-center/#IS You have the right to access, rectify or erase your data, restrict processing concerning your data or object to processing, as well as the right to receive an export of your data by contacting us. You will find further information about data protection on our website: www.ecovadis.com/legal-notice/. You have the right to lodge a complaint with a supervisory authority: CNIL, 3 Place de Fontenoy, 75007 Paris, France if you consider that the processing of personal data relating to you infringes the regulation. Should you have any concerns with regards to the protection of your personal data and the exercise of your data protection rights, you can contact us using the information below. EcoVadis SAS Data Protection Officer 43 Avenue de la Grande Armée 75116 Paris, France Email: firstname.lastname@example.org Related articles How does EcoVadis ensure the security of my data? What type of supporting documents can I provide? How do I report concerns about confidentiality and security? How will EcoVadis use my documents? Who has access to my documents? How to use the corrective action plan feature Comments 0 comments Article is closed for comments.