Privacy Policy
Effective on: June 30, 2022
Privacy Summary |
|
OUR CONTACT INFORMATION |
|
| The Browning Group International Inc. DBA Emergenetics
Address: 2 Inverness Drive East, Suite 189
Contact details of our Data Protection Officer: Steven Douglas + 1-303-597-3830
Identity and contact details of the Representative in the EU: |
|
| VeraSafe Czech Republic s.r.o. Klimentská 46 Prague 1, 11002 Czech Republic |
VeraSafe Ireland Ltd Unit 3D North Point House North Point Business Park New Mallow Road Cork T23AT2P Ireland |
| Contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative | |
| GENERAL INFORMATION | |
| Do we collect Personal Data? | YES. Some categories include biographical and contact information, as well as your responses to questions in a Profile.
Click here to know which categories of Personal Data we collect and how we obtain them. |
| TRACKING | |
| Do we use cookies or similar tracking technologies on our website? | YES Click here to read our cookie notice. |
| Do we use cookies or similar tracking technologies on our app? | YES Click here to read our cookie notice. |
| PRIVACY RIGHTS | |
| Can you request to receive a copy of the Personal Data we have collected about you? | YES Click here to learn how. |
| Can you withdraw your consent to our processing of your Personal Data? | YES Click here to learn how.We also rely on lawful bases other than consent to process your Personal Data, such our need to perform a contract with you or our legitimate interests.Click here to learn more about our choice of legal bases. |
| Can you request to have your data deleted? | YES Click here to learn how. |
| SECURITY | |
| Do we protect your Personal Data? | YES Click here to learn more about how we protect your Personal Data. |
Introduction and Scope
The Browning Group International, Inc. doing business as Emergenetics International and its legal affiliates, including, without limitation, STEP, LLC, Emergenetics Europe Limited, Emergenetics Caelan & Sage PTE Ltd., and Emergenetics Asia, Pte. Ltd. (collectively, “Emergenetics,” “we,” “us,” “our”) takes the protection of personal data very seriously. This Privacy Policy (the “Policy”) addresses data subjects (each a “User”, and collectively, “Users”) whose personal data we may process via the following information systems:
- our hosted Emergenetics+ web application located at plus.emergenetics.com;
- our hosted ESP web application located at esp.emergenetics.com;
- our Emergenetics+ mobile application for iOS and Android;
- our website, located at emergenetics.com; and
- our offline mailing system (collectively, the “Emergenetics Platform” or the “Platform”).
The data subjects whose personal data we process within the context of this Policy include individuals who have taken one of our proprietary psychometric profiles, including, without limitation, the Emergenetics Profile, a STEP Youth Report, and/or an ESP Candidate Report (each, a “Profile”), including Emergenetics Associates and other representatives of our Partners (as defined below) who took a Profile as part of their Emergenetics training.
This Policy does not apply to personal data we collect by other means, such as personal data that we receive through our sales and marketing systems or personal data concerning our employees.
Categories of Personal Data
We may process the following types of personal data:
- biographical information such as your first, last name, gender, and the language you speak;
- contact information such as your email address, mailing address, and phone number;
- professional information, such as your role/job title or function; and
- to the extent they constitute personal data under the law, your responses to questions in a Profile.
Controllership
In the context of this Policy, Emergenetics typically acts as a joint data controller for the data we process with each of our Partners. If you sign up to use our services directly via our website as an individual participant or by invitation from an Emergenetics Associate located in the United States, Emergenetics acts as a data controller for your personal data.
Basis of Processing
Within the scope of this Policy, we may rely on one or more of the following legal grounds for processing your personal data:
- the need to perform our obligations under a contract, such as the Emergenetics User Agreement, or to perform related pre-contractual duties;
- the need to pursue our legitimate interests or those of our customers, such as providing Emergenetics psychometric profiling services to our customers or facilitating the provision of such services by our customers to their employees;
- your consent; and
- any other ground, as required or permitted by law in the specific respective context.
Where we receive your Personal Data as part of providing our Services to you to fulfill a contract, we require such Personal Data to be able to carry out the contract. Without that necessary Personal Data, we will not be able to provide the Services to you.
Purpose of Processing
We process personal data for the purposes of:
- creating a psychometric profile of your personality based on your responses to Profile questions;
- where applicable, creating a Candidate Report of your work preferences and abilities based on your responses to an ESP assessment question;
- where applicable, enabling your use of the Platform;
- where applicable, responding to client companies for debriefing purposes related to Profiles;
- where applicable, sending you information about your Profile results by mail;
- where applicable, sending you email marketing communications relating to Emergenetics which we think may be of interest to you; and
- responding to your inquiries, and/or other requests;
- sending you email notifications about updates or changes to the Platform or our services;
- performing research and analysis to ensure that the Profiles remain accurate and current with societal norms.
Data Retention
When the purposes of processing are satisfied, we will delete such personal data within six months.
Cookies
To learn more about our use of cookies please review our Cookie Policy.
Sharing Personal Data with Other Emergenetics Users
The Emergenetics Platform includes a social feature called “Connections” which allows you to connect with and share your Profile with other Users. You have complete control over whether your Profile is private or public. Private Profiles are not searchable by other Users of the Platform. If you choose to make your Profile public, other Users will have the ability to search for you by your name and email address, and to send a request to connect. Each User can send requests to connect with other Users, and each User can decide whether or not to accept a request to connect. If you choose to connect with another Platform User, that User will be able to see your Profile, including your name, contact information, and information about your personality type as determined by the Emergenetics Platform.
Sharing Personal Data with Service Providers
We share personal data with our service providers, who process personal data on behalf of Emergenetics. Such third parties include those:
- providing web and application hosting services; and
- providing software development services.
Our service providers may be located outside of the United States; however, we will either obtain your explicit consent to transfer your personal data to such third parties, or we will require that those third parties maintain at least the same level of confidentiality that we maintain for such personal data. Emergenetics remains liable for the protection of your personal data that we transfer to our service providers, except to the extent that we are not responsible for the event giving rise to any unauthorized or improper processing.
Also, some of these third parties may be located outside of the European Economic Area, Switzerland and the United Kingdom. In some cases, the European Commission may not have determined that the countries’ data protection laws provide a level of protection equivalent to European Union law. We will only transfer your Personal Data to third parties in these countries when there are appropriate safeguards in place.
Sharing Personal Data with Emergenetics Partners
Emergenetics works with a variety of individuals and organizations in the Americas, Europe, and Asia to bring Emergenetics science to participants around the world. Our partners are Emergenetics client organizations, independent Emergenetics, STEP, and ESP Associates, Country Representatives, Domain Administrators, and other third parties providing Emergenetics services globally (collectively, the “Emergenetics Partners” or the “Partners”).
In order to process your Profile(s), Emergenetics shares data with our Partners, who typically act as joint controllers with Emergenetics over the personal data processed via the Platform. If you took a Profile at the invitation of an Emergenetics, STEP, or ESP Associate, are an employee or member of a corporate client or client organization, or are a STEP participant, we likely received your data from a Partner. Emergenetics shares your personal data with its Partners in order to provide the Platform and services to you.
Other Disclosure of Your Personal Data
We may disclose your personal data (i) to the extent required by law or if we have a good-faith belief that such disclosure is necessary in order to comply with official investigations or legal proceedings initiated by governmental and/or law enforcement officials, or private parties, including but not limited to: in response to subpoenas, search warrants, or court orders, or (ii) if we sell or transfer all or a portion of our company’s business interests, assets, or both, or in connection with a corporate merger, consolidation, restructuring, or other company change, or (iii) to our subsidiaries or affiliates only if necessary for business and operational purposes as described in the section above.
We reserve the right to use, transfer, sell, and share aggregated, anonymous data, which does not include any personal data, about users of our Platform and services as a group for any legal business purpose, such as analyzing usage trends and seeking compatible advertisers, sponsors, clients, and customers.
If we must disclose your personal data in order to comply with official investigations or legal proceedings initiated by governmental and/or law enforcement officials, we may not be able to ensure that such recipients of your personal data will maintain the privacy or security of your personal data.
We will never sell your personal data to advertisers or marketers.
If you are a current Emergenetics client or user, we may send you occasional marketing newsletters. You will always have the ability to opt out or unsubscribe from marketing emails.
If you are not a current Emergenetics client or user, we will never send you any marketing materials without your express permission.
Data Integrity & Security
Emergenetics has implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect personal data from unauthorized processing such as unauthorized access, disclosure, alteration, or destruction.
Access & Review
If you are a data subject about whom we store personal data, you may have a right to request access to, and the opportunity to update, correct, or delete, such personal data. You may also have the right to data portability. To submit such requests or raise any other questions, please contact the Emergenetics Partner that initially collected your personal data or contact Emergenetics directly by one of the methods provided in the contact information section above.
Restriction & Objection to Processing
If you are a data subject whose personal data we process, you may have the right to ask that we limit our processing of your personal data, as well as the right to object to our processing of your personal data. To exercise such rights, where applicable, please contact us using one of the methods provided in the contact information section above.
Where we process your Personal Data based on your consent, you may withdraw it at any time using one of the methods provided in the contact information section above. However, this will not affect the lawfulness of our processing before you withdrew your consent. It will also not affect processing performed on other lawful grounds.
Personal Data of Children
Users older than 9 can use Emergenetics Platform. Privacy laws often requires that parents or legal guardians consent to or are notified prior to their child's personal data being disclosed to a third party. Teachers and schools must have proven parental consent before students provide any personal data to Emergenetics. The fact that teachers cannot invite students to Emergenetics Platform without confirming parental consent, combined with the impossibility of creating a student account without a unique control code, ensures that Emergentics does not collect any unconsented data from children.
EU-U.S. and Swiss-U.S. Privacy Shield Frameworks
With respect to personal data processed in the scope of this Policy, Emergenetics complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework (the “Privacy Shield”) as adopted and set forth by the U.S. Department of Commerce regarding the processing of personal data. Emergenetics commits to adhere to and has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
To learn more about the Privacy Shield, and to view Emergenetics’ certification, please visit https://www.privacyshield.gov and https://www.privacyshield.gov/list, respectively.
Please note that while Emergenetics continues to comply with the EU-US Privacy Shield
Framework and Swiss-U.S. Privacy Shield Framework, data transfers of Personal Data to the United States from the European Economic Area, Switzerland and the United Kingdom will be based primarily on the European-Commission-approved standard contractual data protection clauses, as applicable and as updated from time to time.
VeraSafe Privacy Program
Emergenetics is a member of the VeraSafe Privacy Program, meaning that with respect to personal data processed in the scope of this Policy, VeraSafe has assessed Emergenetics’ data governance and data security for compliance with the VeraSafe Privacy Program Certification Criteria. The certification criteria require that participants maintain a high standard for data privacy and implement specific best practices pertaining to notice, onward transfer, choice, access, data security, data quality, recourse, and enforcement.
Dispute Resolution
Where a privacy complaint or dispute cannot be resolved through Emergenetics’ internal processes, Emergenetics has agreed to participate in the VeraSafe Privacy Shield Dispute Resolution Procedure. Subject to the terms of the VeraSafe Privacy Shield Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Privacy Shield Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/
Binding Arbitration
If your dispute or complaint can’t be resolved by us, nor through the dispute resolution program established by VeraSafe, you may have the right to require that we enter into binding arbitration with you pursuant to the Privacy Shield’s Recourse, Enforcement and Liability Principle and Annex I of the Privacy Shield.
Regulatory Oversight
In the United States, Emergenetics is subject to the investigatory and enforcement powers of the United States Federal Trade Commission.
If you are a data subject whose personal data we process, you may also have the right to lodge a complaint with a data protection regulator in one or more of the European Union member states.
Changes to this Privacy Policy
If we make any material change to this Policy, we will post the revised Policy to this webpage and update the “Effective” date above to reflect the date on which the new Policy became effective.
Contact Us
If you have any questions about this Policy or our processing of your personal data, please write to our General Manager by email at privacy@emergenetics.com or by using the contact information above.
Please allow up to four weeks for us to reply.