Izjava o varstvu osebnih podatkov

Ustvarjanje in upravljanje uporabniških računov

Da bi lahko varno dostopali do naših spletnih strani, platform, aplikacij ali drugih izdelkov in storitev ter jih uporabljali, se boste morda morali pri nas registrirati za uporabniški račun in ga vzdrževati. Vaše osebne podatke obdelujemo ob registraciji za te račune ter med preverjanjem pristnosti, upravljanjem in vzdrževanjem teh računov.

Če se odločite ustvariti predstavitveni ali preizkusni račun, da bi spoznali naše spletne strani, platforme, aplikacije ali druge izdelke in storitve, lahko zberemo vaše osebne podatke in jih uporabimo za preverjanje pristnosti vašega dostopa, zagotavljanje začasnih funkcionalnosti storitve, spremljanje vaše uporabe ter komunikacijo z vami v zvezi s predstavitvenim ali preizkusnim računom.

V primerih, ko naše spletne strani, platforme, aplikacije ali drugi izdelki in storitve napotujejo na drugo obvestilo o zasebnosti, v katerem je pojasnjeno, zakaj in kako se osebni podatki zbirajo in obdelujejo, vam priporočamo, da se seznanite s tem obvestilom.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), datum in ura registracije, prijave, podatki o uporabi, podatki o dejavnosti.

Pravna podlaga za obdelavo vaših osebnih podatkov je pogodba, ki smo jo sklenili z vami, da lahko vzpostavimo, upravljamo in vzdržujemo vaš račun.

Odgovor na zahteve

Vaše osebne podatke lahko zbiramo, da bi z vami komunicirali in obdelali vašo zahtevo, ki ste nam jo poslali prek funkcij za klepet, kontaktnih obrazcev ali na drug način.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), poštni naslov, država, vsebina zahteve, datum zahteve, drugi podatki, ki nam jih lahko prostovoljno posredujete.

Pravna podlaga za obdelavo vaših osebnih podatkov je, kjer je to primerno, izpolnjevanje naših zakonskih obveznosti ali pogodbenih zavez do vas, v drugih primerih pa naš zakoniti interes za upravljanje naših interakcij z vami ter zagotavljanje zadovoljivih storitev in izkušnje.

Objave in komentarji

Na naših spletnih mestih, platformah, aplikacijah in drugih izdelkih ter storitvah lahko objavljate in komentirate. Vaša vsebina je lahko v tem primeru javno dostopna. Upoštevajte, da lahko vaš prispevek ali komentar pred objavo še vedno ročno pregledamo, zaradi česar lahko pride do zamude pri prikazu. Če navedete ime ali vzdevek, bo to ime objavljeno ob vašem prispevku ali komentarju.

Zadevni osebni podatki: ime ali vzdevek, vsebina prispevka ali komentarja, čas in datum ter drugi podatki, ki nam jih prostovoljno posredujete.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za upravljanje naših odnosov z vami ter za izboljšanje naših izdelkov in storitev.

E-novice

Na naše e-novice se lahko prijavite, da boste prejemali informacije o aktualnih trendih in poudarkih v IT-panogi, novih izdelkih ali storitvah, prihajajočih dogodkih, posebnih ponudbah ter pomembnih datumih za odločevalce na področju IT.

Pri prijavi potrebujemo vaš e-poštni naslov. V nekaterih regijah vam lahko po izpolnitvi prijavnega obrazca pošljemo potrditveno e-poštno sporočilo. V takem primeru prijava ni aktivirana, dokler ne kliknete povezave v potrditvenem e-sporočilu.

Če se prijavite na naše e-novice, lahko vanje vključimo posebne tehnologije sledenja, s katerimi lahko prepoznamo, kdaj ste dostopali do e-novic, ki smo vam jih poslali, oziroma kdaj ste jih odprli, ter prilagodimo povezave v e-novicah, da ugotovimo, kdaj ste kliknili katero povezavo.

Od prejemanja naših e-novic se lahko kadar koli odjavite. Preprosto uporabite povezavo za odjavo, ki je na koncu naših sporočil, ali pa pošljite e-poštno sporočilo na naslov info.global@softwareone.com.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), država, metrike interakcij (npr. ali so bile e-novice odprte ali ne, datum/ura odprtja, kolikokrat so bile e-novice odprte, kliki na povezave).

Pravna podlaga za obdelavo vaših osebnih podatkov je vaša privolitev v prejemanje e-novic.

Trženje

Za namene trženja zbiramo vaše osebne podatke, ko z nami komunicirate v imenu naših strank ali partnerjev, vključno s potencialnimi strankami. Osebne podatke lahko prejemamo tudi od preverjenih tretjih ponudnikov, ki so zakonsko upravičeni do posredovanja takšnih podatkov za uporabo v našem trženjskem komuniciranju. Te osebne podatke bomo obdelovali za namene trženja, med drugim za obveščanje o prihajajočih dogodkih, izdelkih, storitvah in ponudbah, ki bi vas lahko zanimale.

Poleg tega lahko uporabljamo posebne tehnologije sledenja, da samodejno zbiramo podatke o IP-naslovu in metrike interakcij, kot so odpiranje e-poštnih sporočil in kliki na povezave, kar nam pomaga spremljati uspešnost ter izboljšati ustreznost in učinkovitost naših trženjskih prizadevanj.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja) ter vsi drugi podatki, ki nam jih posredujete.

Pravna podlaga za obdelavo vaših osebnih podatkov je vaša privolitev ali naš zakoniti interes za pošiljanje tržnih sporočil.

Analiza licenc in uporabe tehnologije

V okviru našega poslovnega razmerja s strankami lahko obdelujemo podatke v zvezi z licencami za programsko opremo in okolji uporabe tehnologije, da bi bolje razumeli, upravljali in podpirali potrebe strank skozi celoten življenjski cikel razmerja.

Če so nam stranke omogočile dostop do svojih tehnoloških okolij ali se vključile v naša orodja oziroma odobrena orodja tretjih ponudnikov, lahko pridobimo vpogled v vrste licenc, dodelitve in uporabo v okviru zadevne platforme ali tehnologije. To lahko vključuje licence, pridobljene prek nas, pa tudi licence, pridobljene pri drugih ponudnikih, če je bil tak dostop odobren.

Te podatke uporabljamo za podporo optimizaciji licenc in uporabe, preverjanje upravičenosti do storitev, upravljanje storitev, katerih cena se določa ali ki se zagotavljajo na podlagi števila uporabnikov ali licenc, ter za analizo združenih trendov v naši bazi strank. Te analize lahko prispevajo tudi k razvoju novih izdelkov in storitev, izboljšanju obstoječe ponudbe ter odkrivanju ustreznih poslovnih priložnosti.

Do podatkov o licencah ali uporabi ne dostopamo in jih ne obdelujemo v obsegu, ki presega dostop, ki nam ga je odobrila stranka, ali veljavne pogodbene dogovore.

Zadevni osebni podatki: identifikatorji uporabnika ali naprave, podatki o dodelitvi licenc in uporabi, metrike uporabe storitev ter povezani tehnični metapodatki.

Pravna podlaga za takšno obdelavo osebnih podatkov je naš zakoniti interes za upravljanje in razvoj naših izdelkov in storitev, podporo našim strankam skozi celoten življenjski cikel razmerja ter izvajanje naših poslovnih dejavnosti, pa tudi izpolnjevanje pogodbenih obveznosti, kjer je to primerno.

Piškotki in druge podobne tehnologije

Ko uporabljate naše spletne strani, platforme, aplikacije ter druge izdelke in storitve, lahko uporabljamo piškotke in podobne tehnologije. Piškotki so majhne besedilne datoteke, ki jih na vašo napravo shranijo spletne strani, ki jih obiščete. Pomagajo spletnim stranem, da si zapomnijo vaše nastavitve, podatke za prijavo in dejavnosti brskanja, s čimer zagotavljajo bolj prilagojeno, učinkovito in nemoteno spletno izkušnjo; pogosto se uporabljajo tudi za analizo prometa na spletni strani, upravljanje uporabniških sej in prilagajanje vsebin vašim interesom.

Nujni piškotki

Ti piškotki so nujni za delovanje spletne strani in jih ni mogoče onemogočiti.

Funkcionalni piškotki

Ti piškotki omogočajo delovanje dodatnih funkcij in vsebin tretjih ponudnikov, kot so pisave, videoposnetki, zemljevidi, vtičniki družbenih omrežij in vgrajene storitve.

Piškotki za analitiko in trženje

Ti piškotki nam pomagajo razumeti, kako uporabniki uporabljajo spletno stran, ter podpirajo oglaševalske in trženjske dejavnosti.

Eden od namenov, za katerega lahko te tehnologije uporabimo, je obdelava vaših podatkov o uporabi, da bi analizirali, kako uporabljate naše spletne strani, platforme, aplikacije ali druge izdelke in storitve ter kako ste z njimi v interakciji, s čimer želimo izboljšati vašo spletno izkušnjo. Poleg tega lahko uporabljamo orodja tretjih ponudnikov za ustvarjanje anonimiziranih posnetkov sej, ki nam pomagajo analizirati uporabo spletne strani in izboljšati njeno delovanje. Ti posnetki ne vsebujejo nobenih osebnih podatkov, polja z občutljivimi podatki pa so zamaskirana, da se zagotovi vaša zasebnost.

Poleg tega lahko uporabljamo tehnologije za sledenje med napravami, da prikazujemo ciljno oglaševanje zunaj naše spletne strani in ocenjujemo učinkovitost oglaševanja. Tretji ponudniki, navedeni v naši pasici za piškotke (če so omogočeni nenujni piškotki), lahko dostopajo do vašega brskalnika ali naprave, analizirajo vaš IP-naslov, shranjujejo ali berejo prepoznavne značilnosti ali dostopajo do sledilnih pikslov. Te značilnosti se lahko uporabijo za prepoznavanje vaše naprave na drugih spletnih straneh. Če se pri tretjem ponudniku registrirate z uporabo svojih uporabniških podatkov, se lahko prepoznavne značilnosti z različnih naprav (npr. prenosni računalnik, pametni telefon, tablični računalnik) povežejo. To ponudniku omogoča upravljanje oglaševalskih kampanj na različnih napravah.

Poleg tega lahko uporabljamo orodja za spletno analizo, da ustrezno oblikujemo naše spletne strani in prepoznamo ponovne obiskovalce. Ta orodja ustvarjajo psevdonimizirane datoteke o uporabi in uporabljajo piškotke, kot je opisano v naši pasici za piškotke.

V naša spletna mesta vdelujemo tudi določene storitve, ki niso shranjene na naših strežnikih. Z uporabo zemljevidov lahko na primer ugotovite točno lokacijo družbe SoftwareOne ali pa si ogledate videoposnetke. V določenih regijah bomo morda zagotovili, da dostop do naših spletnih mest, platform, aplikacij in drugih izdelkov ter storitev z vdelano vsebino tretjim ponudnikom ne bo samodejno zagotovil nobenih informacij; prikazali bomo samo lokalno shranjene sličice. V takem primeru se vsebina tretjih ponudnikov naloži šele potem, ko podate svojo privolitev prek pasice za piškotke. Ko si ogledate vsebino, tretji ponudnik prejme informacijo, da ste dostopili do našega spletnega mesta, ter podatke o uporabi, ki so v tem smislu potrebni za njegovo storitev. Na nadaljnjo obdelavo podatkov tretjega ponudnika ne vplivamo.

Našo pasico za piškotke zagotavlja tretja oseba in prikazuje seznam piškotkov, ki jih uporabljamo, vključno z njihovimi ponudniki. Pri privzeti nastavitvi so omogočeni samo nujni piškotki. Prek pasice za piškotke lahko določite, ali dovolite shranjevanje dodatnih piškotkov ali ne. Svoje nastavitve lahko kadar koli spremenite prek pasice za piškotke.

Zadevni osebni podatki: IP-naslov, podatki o napravi in brskalniku, signali za varnost in zaznavanje botov, nastavitve privolitve za piškotke, podatki o interakciji s spletno stranjo (npr. ogledi videoposnetkov, uporaba zemljevidov, interakcije z vgrajeno vsebino), približna lokacija, izpeljana iz IP-naslova, tehnični podatki o zahtevah in delovanju, obiskane strani in vedenje pri brskanju (npr. kliki, pomikanje po strani, navigacijske poti), čas, preživet na straneh, in trajanje seje, identifikatorji piškotkov in oglaševalski ID-ji, dogodki konverzij in interakcij (npr. oddaja obrazcev, interakcije) ter podatki o uspešnosti trženja in kampanj.

Pravna podlaga za obdelavo vaših osebnih podatkov v zvezi z nujnimi piškotki je naš zakoniti interes, da vam zagotovimo prikaz spletne strani, platform in aplikacij. Kar zadeva nenujne piškotke in podobne tehnologije, je pravna podlaga vaša privolitev.

Uporaba umetne inteligence v naših digitalnih izdelkih in storitvah

Uporabljamo lahko tudi orodja umetne inteligence (»UI«), vključno z generativno UI, da podpremo vašo interakcijo z našimi spletnimi stranmi, platformami, aplikacijami in drugimi izdelki ali storitvami (npr. za delovanje klepetalnih pomočnikov, prevajanje ali povzemanje vsebin, prilagajanje prikazanih vsebin, moderiranje objav in komentarjev ter zagotavljanje ali izboljševanje funkcij izdelkov), pri čemer v primerih, ko bi lahko imel rezultat pomemben vpliv na vas, zagotovimo človeški pregled.

Vaše osebne podatke lahko obdelujemo, ko obiščete naše glavne strani v družbenih medijih (glavni profili so navedeni spodaj):

• LinkedIn: https://www.linkedin.com/company/SoftwareOne
• X: https://x.com/SoftwareOne, https://x.com/SWO_Careers
• Facebook: https://www.facebook.com/Softwareone/, https://www.facebook.com/softwareonecareers
• Instagram: https://www.instagram.com/softwareone/, https://www.instagram.com/swocareers/
• YouTube: https://www.youtube.com/SoftwareOne-global
• TikTok: https://www.tiktok.com/@swocareers?_r=1&_t=ZN-94SU63n1PIl

Za obdelavo vaših osebnih podatkov smo skupaj s ponudnikom zadevne strani v družbenih medijih skupno odgovorni. Ponudnik strani v družbenih medijih v zvezi s tem določa tudi namene in sredstva dejavnosti obdelave vaših osebnih podatkov, na kar lahko vplivamo le v omejenem obsegu.

Podatke, ki jih vnesete na naših straneh v družbenih medijih, kot so komentarji, videoposnetki, slike, všečki, javna sporočila itd., objavi ponudnik strani v družbenih medijih, mi pa jih ne uporabljamo za noben drug namen. Kljub temu si pridržujemo pravico, da po potrebi izbrišemo vsebino. Vašo vsebino lahko delimo na našem spletnem mestu, če je to funkcija vira družbenega medija, z vami pa lahko komuniciramo prek strani v družbenem mediju.

Če nam zahtevo pošljete na eni od strani v družbenih medijih, vas lahko, odvisno od vaše zahteve, napotimo tudi na druge varne komunikacijske kanale, ki zagotavljajo zaupnost. Zaupne zahteve nam lahko kadar koli pošljete prek drugih navedenih kanalov. Če želite ugovarjati določeni dejavnosti obdelave vaših osebnih podatkov, stopite v stik z nami, kot je opisano v razdelku »Kontaktne informacije«. Preučili bomo vašo zahtevo in ugotovili, ali vam lahko odgovorimo ter ali imamo vpliv na takšno dejavnost obdelave. V nasprotnem primeru se boste morda morali obrniti neposredno na ponudnika strani v družbenem mediju.

Naše strani v družbenih medijih lahko uporabljamo za namene oglaševanja. Pri tem bomo morda uporabili demografske značilnosti ciljne skupine ter značilnosti ciljne skupine, ki temeljijo na interesih, vedenju ali lokaciji, ki jih zagotavlja ponudnik zadevne strani družbenega medija. Na obdelavo podatkov lahko vplivamo samo do določenega obsega, ne moremo pa onemogočiti statistike, ki nam jo da na razpolago ponudnik zadevne strani družbenega medija.

Za posamezne kanale družbenih medijev uporabljamo možnosti sledenja konverziji. Za ta namen smo za zbiranje podatkov o konverziji na naše spletno mesto vključili ustrezne piksle ali oznake. Prek pasice za piškotke lahko določite, ali dovoljujete takšne nenujne piškotke ali ne, ter prilagodite svoje nastavitve.

Za podporo našim dejavnostim v družbenih medijih lahko uporabljamo orodja umetne inteligence (UI), vključno z generativno UI (npr. za pripravo ali prevajanje napisov, ustvarjanje ali prilagajanje vizualnih vsebin, moderiranje komentarjev na naših straneh ter analizo interakcij v združeni obliki), pri čemer vsebino pred objavo pregleda naša ekipa. Za funkcije UI, ki jih upravljajo sami ponudniki družbenih medijev, še naprej veljajo njihova obvestila o zasebnosti.

Obdelava podatkov s strani ponudnika strani v družbenem mediju

Ponudnik strani v družbenem mediju lahko uporablja metode spletnega sledenja. Spletno sledenje se lahko izvaja ne glede na to, ali ste prijavljeni v račun na platformi družbenega medija ali ne. Kot smo že pojasnili, so metode spletnega sledenja na strani v družbenem mediju zunaj našega nadzora in teh funkcij ne moremo onemogočiti. Upoštevajte, da lahko ponudnik zadevne strani v družbenem mediju uporabi vaše profilne in vedenjske podatke za ocenjevanje vaših navad, osebnih odnosov in preferenc. Na obdelavo vaših podatkov s strani ponudnika zadevne strani v družbenem mediju nimamo nobenega vpliva.

Za več informacij o obdelavi vaših osebnih podatkov na straneh v družbenih medijih si oglejte obvestila o zasebnosti posameznih ponudnikov, ki so navedena spodaj:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• X: https://x.com/en/privacy
• Facebook: https://www.facebook.com/privacy/explanation
• Instagram: https://help.instagram.com/155833707900388
• YouTube: https://policies.google.com/privacy?hl=en
• TikTok: https://www.tiktok.com/legal/page/us/privacy-policy/en

Zadevni osebni podatki: ime, podjetje, e-poštni naslov, država ter vse druge informacije, ki nam jih prostovoljno posredujete.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za oglaševanje in promocijo naše blagovne znamke, storitev in izdelkov na platformah družbenih medijev ter za povečanje učinkovitosti in ustreznosti naših trženjskih dejavnosti z namenom izboljšanja splošne trženjske uspešnosti; prav tako vaše osebne podatke obdelujemo v interesu naših odnosov z javnostmi in komuniciranja. Poleg tega se pri uporabi nenujnih piškotkov opiramo na vašo privolitev, ki jo lahko kadar koli spremenite prek pasice za piškotke.

Nakup in uporaba naših izdelkov ali storitev

Da bi olajšali nakup in uporabo naših izdelkov ali storitev, lahko obdelujemo vaše osebne podatke. Te osebne podatke nam lahko posredujete neposredno vi ali pa zadevna stranka, dobavitelj ali poslovni partner.

Osebne podatke obdelujemo v dveh različnih vlogah, odvisno od ponujenega izdelka ali storitve:

• Pri določenih izdelkih ali storitvah sami določamo namene in sredstva obdelave osebnih podatkov;
• Pri drugih izdelkih ali storitvah delujemo v imenu naše stranke kot obdelovalec. V teh primerih so posamezne dejavnosti obdelave podrobno opisane v veljavni pogodbi o obdelavi podatkov, sklenjeni med nami in stranko.

Ta obdelava nam omogoča, da upravljamo in vodimo naše razmerje z vami in podjetjem, ki ga zastopate, vključno s pogajanji in sklepanjem pogodb ter posredovanjem informacij o cenah.

Prav tako lahko pri zagotavljanju nekaterih naših izdelkov ali storitev obdelujemo določene podatke, da bi odkrivali, preiskovali in se odzivali na grožnje kibernetski varnosti. To vključuje spremljanje sistemov, analizo varnostnih dogodkov in odzivanje na morebitne incidente, ki vplivajo na okolje naše stranke.

Če se odločite pred nakupom ustvariti predstavitveni ali preizkusni račun, da bi spoznali naše izdelke ali storitve, lahko zberemo vaše osebne podatke in jih uporabimo za preverjanje pristnosti vašega dostopa, zagotavljanje začasnih funkcionalnosti storitve, spremljanje vaše uporabe naših izdelkov ali storitev ter komunikacijo z vami v zvezi s predstavitvenim ali preizkusnim računom.

Včasih izvajamo tržne raziskave in ankete o zadovoljstvu, saj si nenehno prizadevamo bolje razumeti vaše izkušnje, interese in povratne informacije o naših izdelkih ali storitvah, hkrati pa si prizadevamo za njihovo izboljšanje ter za krepitev odnosov s strankami, poslovnimi partnerji in drugimi zainteresiranimi stranmi. V takšnem primeru lahko takšni obdelavi ugovarjate. Več informacij o tem, kako uveljaviti svojo pravico, najdete v razdelku »Kontaktne informacije«.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), prijavni podatki, datum in ura registracije, podatki o uporabi, sistemski in varnostni dnevniki (npr. dnevniki preverjanja pristnosti, metapodatki o omrežnem prometu, telemetrija končnih naprav), IP-naslov, identifikatorji naprav, podatki o napravah in aplikacijah (npr. imena gostiteljev, podatki o operacijskem sistemu, metapodatki o uporabi aplikacij), podatki v zvezi z incidenti (npr. datoteke, podatki iz pomnilnika ali dnevniki, povezani z domnevno zlonamerno dejavnostjo), kot tudi drugi podatki, ki nam jih prostovoljno posredujete med nakupom in uporabo naših izdelkov ali storitev.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za prodajo naših izdelkov ali storitev z upravljanjem, sklepanjem in izpolnjevanjem pogodbe, ki jo sklenemo s subjektom, ki ga zakonito zastopate. Na isto pravno podlago se opiramo pri izvajanju tržnih raziskav ali anket ter pri ustvarjanju vašega predstavitvenega računa, da vam lahko (kot zakonitemu zastopniku potencialne stranke) ponudimo predogled naših izdelkov ali storitev.

Izboljšanje izdelkov in storitev

Med uporabo naših izdelkov ali storitev lahko obdelujemo vaše osebne podatke, da jih analiziramo za statistične namene in namene izboljšav.

Zadevni osebni podatki: ime, e-poštni naslov, IP-naslov, ogledana vsebina, datum in ura obiska, količina prenesenih podatkov, stanje dostopa, spletni brskalnik in operacijski sistem, napotitvena povezava, ki kaže, s katere spletne strani ste prišli.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za razumevanje naše splošne uspešnosti ter izboljšanje naših izdelkov ali storitev, pa tudi vaše izkušnje z nami.

Preverjanje bonitete strank

Osebne podatke lahko obdelujemo za izvedbo bonitetnih preverjanj strank pred sklenitvijo pogodbe, da lahko med trajanjem poslovnega odnosa ustrezno obvladujemo finančno tveganje. To lahko vključuje tudi notranje preverjanje podatkov o strankah in kreditnih limitov v naših sistemih za načrtovanje virov podjetja (ERP) pred odobritvijo transakcij.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), finančna zgodovina, bonitetna ocena, plačilno vedenje, neporavnane obveznosti, identifikacijske številke (npr. številka za DDV ali matična številka podjetja), podatki, prejeti od bonitetnih agencij (če se nanašajo na vas kot posameznika).

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za oceno kreditne sposobnosti in zmanjšanje našega finančnega tveganja.

Skrbni pregled in preverjanje

Pred poslovanjem lahko obdelujemo vaše osebne podatke, kadar z nami komunicirate v imenu naših strank, poslovnih partnerjev ali katere koli zainteresirane strani, da bi lahko izvedli skrbni pregled ali preverjanje. Naše dejavnosti skrbnega pregleda ali preverjanja lahko vključujejo preverjanje varnosti, zasebnosti in integritete v obsegu, ki ga dovoljujejo veljavni zakoni.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), drugi podatki, ki nam jih prostovoljno posredujete.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za zagotavljanje ustreznosti vašega podjetja ter učinkovito obvladovanje vseh povezanih tveganj.

Uporaba umetne inteligence pri sodelovanju s strankami in partnerji

Za podporo našim poslovnim in operativnim dejavnostim lahko uporabljamo orodja umetne inteligence (UI), vključno z generativno UI (npr. za pripravo in prilagajanje sporočil, povzemanje sestankov in e-poštne korespondence, prevajanje vsebin, analizo podatkov o računih, razvrščanje zahtevkov za podporo in odgovarjanje nanje ter pomoč pri pripravi ponudb ali pogodb), pri čemer vsak rezultat, ki bi lahko imel pomemben vpliv na vas, pregleda človek. Odločitve, ki imajo pravne ali podobno pomembne posledice, se ne sprejemajo izključno z avtomatiziranimi sredstvi, razen če to dovoljuje veljavna zakonodaja.

Prijava na dogodke in njihovo upravljanje

Vaše osebne podatke lahko obdelujemo za komunikacijo z vami ter za organizacijo in izvedbo seminarjev, spletnih seminarjev, usposabljanj, virtualnih sestankov in drugih dogodkov (»dogodki«), ki jih organiziramo mi ali kateri koli od naših partnerjev in ki se jih odločite udeležiti.

Pri tem nam lahko pomagajo zunanji tretji ponudniki (npr. ponudniki videokonferenčnih in komunikacijskih storitev), s katerimi delimo vaše osebne podatke.

V nekaterih primerih lahko naše dogodke tudi snemamo. Za več informacij si oglejte naslednji razdelek o avdiovizualnih vsebinah.

Včasih vam lahko pošljemo tudi ankete, na katere lahko prostovoljno odgovorite, da nam pomagate oceniti, kako lahko učinkovito izboljšamo ali razširimo naše dogodke.

Če dogodki niso virtualni, ampak zahtevajo vašo osebno prisotnost, vas napotujemo na obvestilo o zasebnosti za dogodek, ki bo na voljo ločeno in bo vsebovalo ustrezne podrobnosti o tem, kako obdelujemo vaše osebne podatke v zvezi s tem konkretnim dogodkom.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), ime sestanka ali vzdevek, IP-naslov, podatki o napravi/strojni opremi (npr. naslovi MAC, različica), besedilni, zvočni in video podatki, podatki o povezavi (npr. telefonske številke, imena držav, čas začetka in konca), drugi podatki, ki nam jih prostovoljno posredujete med postopkom registracije ali med dogodkom.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za upravljanje naših dogodkov in oglaševanje naših dejavnosti ter za pošiljanje anket, da lahko razumemo, ocenimo in izboljšamo splošno uspešnost naših dogodkov.

Avdiovizualna vsebina

Med dogodki, ki jih organiziramo mi ali kateri koli od naših partnerjev, lahko udeležence fotografiramo ali snemamo videoposnetke (»avdiovizualna vsebina«). Takšna avdiovizualna vsebina lahko zajame vas, skupino ljudi ali kogar koli, ki je na primer govorec ali nastopa na odru. Te vsebine lahko objavimo na naših spletnih straneh, platformah družbenih medijev ali v katerih koli drugih digitalnih ali tiskanih medijih. Če ne želite biti prikazani v takšnih avdiovizualnih vsebinah, o tem obvestite osebo, ki snema ali fotografira, ali organizatorja dogodka. Poleg tega vam priporočamo, da med dogodki z osebno udeležbo pazite, da ne stopite v kader fotografij ali videoposnetkov, ko se ti ustvarjajo oziroma snemajo.

V primeru individualne avdiovizualne vsebine udeležencev vas bomo o obdelavi osebnih podatkov obvestili posebej in vas prosili za privolitev, preden bomo izvedli takšno dejanje.

Imate pravico do ugovora zoper takšno obdelavo ali do preklica svoje privolitve, če je bila ta od vas predhodno pridobljena. Čeprav si bomo prizadevali, da bi vaši zahtevi ustregli, je splošno znano, da so vse informacije, objavljene na internetu, vključno s platformami družbenih omrežij, dostopne po vsem svetu in jih lahko zlahka kopirajo ter razširjajo tretje osebe, s katerimi nismo povezani in nad katerimi nimamo nadzora. Zato lahko te informacije ostanejo dostopne na internetu tudi potem, ko jih bomo izbrisali. Nadaljnje zahteve za izbris je treba nasloviti na zadevni spletni iskalnik ali ponudnika družbenih medijev.

Če je vaša fotografija uporabljena v tiskanem gradivu (npr. letaku, reviji, glasilu) in bi bila njena odstranitev iz takšnega gradiva povezana z nesorazmernim naporom, se lahko zgodi, da se bo tiskano gradivo še naprej uporabljalo, dokler že natisnjena naklada ne bo porabljena. Kljub temu vaša fotografija ne bo uporabljena v nobenem novem tiskanem gradivu.

Zadevni osebni podatki: fotografije, videoposnetki, zvočni posnetki in drugi biometrični podatki, ki se zbirajo ali nam posredujejo.

Pravna podlaga za obdelavo vaših osebnih podatkov je naš zakoniti interes za upravljanje naših dogodkov in oglaševanje naših dejavnosti, razen kadar pripravljamo individualno avdiovizualno vsebino, v tem primeru pa se opiramo na vašo privolitev.

Uporaba umetne inteligence med našimi dogodki

Za izvedbo, dokumentiranje in izboljšanje naših dogodkov lahko uporabljamo funkcije, ki temeljijo na umetni inteligenci (UI) in jih ponujamo mi ali naši ponudniki storitev za dogodke in videokonference, da pripravimo prepise v živo ali po dogodku, pisne povzetke, zapiske in poudarke, zagotovimo podnapise v živo ali prevajanje v realnem času, podpremo vprašanja in odgovore ter klepet ter v združeni obliki analiziramo interakcije. Če je omogočeno prepisovanje, povzemanje ali snemanje, vas bomo o tem obvestili na začetku dogodka in vas po potrebi prosili za privolitev.

V okviru zaposlitvenih priložnosti lahko obdelujemo vaše osebne podatke, ki jih prejmemo neposredno od vas ali iz javno dostopnih virov (npr. spletnih strokovnih omrežij, strani v družbenih medijih ali zaposlitvenih portalov) ali od tretjih oseb (npr. ponudnikov kadrovskih storitev, univerz, agencij za zaposlovanje/nabor kadrov, oseb, ki vas priporočajo, davčnih organov in organov socialnega zavarovanja ali drugih pristojnih organov).

Vaše osebne podatke lahko obdelujemo za naslednje namene:

• ustvarjanje računa za vas v našem prijavnem sistemu;
• ocenjevanje vašega življenjepisa, prijave za zaposlitev ali drugih dokumentov, ki nam jih posredujete, ter po potrebi ocenjevanje vašega znanja, izkušenj in kvalifikacij z uporabo sistemov UI;
• organizacijo razgovorov in izvedbo ocenjevanj;
• kadar to dovoljuje ali zahteva zakon, izvedbo preverjanja preteklosti ali javnih profilov v družbenih medijih kot pogoja za ponudbo zaposlitve;
• obveščanje o poteku obravnave vaše prijave;
• kjer je primerno, povračilo potnih stroškov, nastalih med postopkom zaposlovanja;
• hranjenje vaše prijave v kadrovski evidenci in vzpostavitev delovnega razmerja z vami, če bo vaša prijava uspešna;
• ponujanje zaposlitvenih priložnosti na podlagi vaših interesov in veščin ter obveščanje o najnovejših novicah v zvezi z zaposlovanjem;
• izvajanje anket z namenom izboljšanja naših postopkov zaposlovanja itd.

Ko se prijavljate na eno od naših prostih delovnih mest, vas prosimo, da v prijavo vključite le podatke, ki so pomembni za zadevno delovno mesto. Za nekatere prijave lahko na prostovoljni osnovi zaprosimo za določene demografske podatke (kot so spol, rasa/etnična pripadnost in državljanstvo), da bi izpolnili zahteve glede enakih zaposlitvenih možnosti in zakonske obveznosti poročanja. Te informacije niso del izbirnega postopka in ne vplivajo na odločitve o zaposlitvi.

Za nekatera delovna mesta lahko v okviru našega postopka zaposlovanja uporabljamo tehnološko podprta ocenjevanja in orodja za zaposlovanje, ki jih zagotavljajo tretji ponudniki (npr. platforme za video razgovore, strukturirana ocenjevanja, simulacije delovnih nalog; postopki predizbora s podporo UI). Ta orodja nam lahko pomagajo na strukturiran način zbrati podatke o prijavi, načrtovati in izvesti razgovore ali ocenjevanja, preveriti veščine, povezane z delovnim mestom, ter pripraviti strukturirane povzetke ali ugotovitve, ki so v pomoč našim kadrovikom pri pregledu. Glede na delovno mesto in uporabljeno orodje lahko to vključuje pregled vašega življenjepisa in prijavnega gradiva, povabilo k odgovarjanju na strukturirana vprašanja (v besedilni, zvočni in/ali video obliki) ter pripravo povzetka, ocene ali kazalnika zanesljivosti za kadrovika. Te rezultate uporabljamo kot podporo pri odločanju, pri čemer naši kadroviki ostajajo odgovorni za pregled relevantnih informacij in sprejemanje odločitev o zaposlovanju. Kadar je določena stopnja ocenjevanja prostovoljna, bomo to jasno navedli in, če bo mogoče, ponudili alternativno možnost.

Uporabljamo lahko tudi UI za pomoč pri iskanju kandidatov v javnih strokovnih omrežjih in na zaposlitvenih portalih, načrtovanje razgovorov, prepisovanje in povzemanje razgovorov, prevajanje prijavnega gradiva ter pripravo osnutkov sporočil kadrovikov. Rezultati se uporabljajo za podporo našim kadrovikom, ne pa za njihovo nadomestitev, pri čemer se nobena odločitev o zaposlitvi ne sprejme izključno z avtomatiziranimi sredstvi. Človeški pregled katerega koli rezultata, podprtega z UI, lahko zahtevate neposredno pri kadroviku ali prek kontaktnih podatkov v razdelku »Umetna inteligenca«.

Ko pri nas ustvarite račun, imate možnost spreminjati nastavitve osebnih podatkov ter naročnine na e-novice; te funkcije so na voljo v nadzorni plošči vašega računa na portalu. V vsakem trenutku pa se lahko obrnete tudi na nas na naslov iCIMS.help@softwareone.com in ustrezno vam bomo pomagali.

Če vaša prijava za delovno mesto ni bila uspešna in ste se strinjali, da vaše osebne podatke hranimo dlje (če bi vas morda zanimale prihodnje zaposlitvene priložnosti), jih bomo hranili še dve leti, nato pa jih bomo ustrezno izbrisali. Če se niste strinjali s podaljšanim obdobjem hrambe, bomo vaše podatke izbrisali v šestih mesecih po zaključku prijavnega postopka, kot to zahtevajo veljavni zakoni. Seveda nam lahko kadarkoli pošljete zahtevo za izbris podatkov, kot je navedeno v poglavju »Vaše pravice«.

Zadevni osebni podatki: kontaktni podatki (npr. ime, e-poštni naslov, telefonska številka, delovno mesto, ime podjetja), življenjepis (vključno s fotografijami ali slikami, ki ste jih posredovali), motivacijsko pismo, priporočilna pisma, domači naslov, identifikacijski podatki (npr. datum rojstva, državljanstvo, osebna izkaznica ali potni list itd.), podatki o zaposlitvi (npr. zgodovina zaposlitev, pogodba o zaposlitvi, pretekle zaposlitve, trenutni zaposlitveni status, vrsta zaposlitve, funkcija, delovno dovoljenje ali dovoljenje za prebivanje, če je potrebno, itd.), podatki o izobrazbi in kvalifikacijah (npr. diplome, potrdila, pretekle poklicne izkušnje, dopolnilno delo, reference, drugi povezani dokumenti, ki dokazujejo vašo strokovno usposobljenost in izkušnje), vprašalniki in rezultati ocenjevanja, zdravstveni podatki, kadar to dovoljuje in/ali zahteva veljavna zakonodaja, podatki o bančnem računu (npr. za povračilo potnih stroškov, če je to dogovorjeno); drugi podatki, ki nam jih posredujete prostovoljno.

Pravna podlaga za obdelavo vaših osebnih podatkov je:

• naš zakoniti interes za ustvarjanje vašega računa, obravnavo vaše prijave, izvedbo razgovorov ali ocenjevanj, preverjanje preteklosti ter splošno vodenje postopka zaposlovanja za zapolnitev naših prostih delovnih mest;
• naš zakoniti interes, da vam pošiljamo ankete, da bi razumeli in ocenili, kako lahko najbolje izboljšamo naš postopek zaposlovanja ter našo splošno uspešnost in učinkovitost;
• naš zakoniti interes, da se branimo in uveljavljamo vse pravice za zaščito sebe in naše blagovne znamke v primeru pravnih zahtevkov;
• vaša privolitev za varno hrambo vaših osebnih podatkov za daljše obdobje, če niste bili uspešni pri prijavi na zadevno delovno mesto;
• vaša privolitev, kjer je to potrebno, za uporabo orodij UI v postopku vaše prijave (npr. ocenjevanje s podporo UI ali video razgovori);
• pogodbena podlaga pri vzpostavitvi delovnega razmerja z vami;
• zakonska obveznost za izpolnjevanje regulativnih zahtev, obravnavanje pritožb ali pomislekov ter za lastno obrambo, kadar je to potrebno.

This Supplement applies to individuals located in Latin America and the Caribbean (“LATAM”), in addition to the above Privacy Notice, and provides additional clarifications to certain region specific processing activities and legal requirements.

Applicability of Local Data Protection Laws

In Brazil, when personal data is processed or relates to individuals located in Brazil, such processing is carried out in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais – “LGPD”, Law No. 13.709/2018).

In Mexico, the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) is the key regulation governing data processing by companies and individuals in Mexico. Under the new law of 2025, the Anti-Corruption and Good Governance Secretariat is the entity responsible for supervising and enforcing the law.

In Ecuador we will process and treat your Personal Data in accordance with the provisions of the Organic Law of Personal Data Protection (LOPDP) and other relevant regulations issued by the Superintendence of Personal Data Protection. The consent required by the (LOPDP) will be provided by you in the manner established in the Privacy Notice for each type of relationship.

In Chile, we will process your data in accordance with Law Nº 19.628: Sobre Protección de la Vida Privada.

In Puerto Rico, we process your personal data in accordance with applicable laws of the Commonwealth of Puerto Rico and relevant United States federal privacy and data security laws, including, where applicable, data breach notification and consumer protection regulations. SoftwareOne implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data in line with generally accepted privacy standards.

In the Dominican Republic, we will process and handle your personal data in accordance with the provisions of Law No. 172-13 on the Protection of Personal Data, as well as other applicable regulations. The required consent under Law No. 172-13 will be obtained in the manner described in this Privacy Notice, depending on the nature of the relationship and the processing activities involved.

In Jamaica, when your personal data is processed or if you are located in Jamaica, we will process such data in accordance with the Data Protection Act, 2020, and any applicable regulations issued by the competent authority. SoftwareOne ensures that personal data is processed lawfully, fairly and transparently, and that appropriate safeguards are in place, including for international data transfers.

In Trinidad and Tobago, we will process your personal data in accordance with the Data Protection Act, 2011, and applicable regulations issued by the Office of the Information Commissioner. Personal data will be processed in a manner that ensures its confidentiality, integrity and security, and in line with the purposes described in this Privacy Notice.

Legal Basis – Regular Exercise of Rights (Brazil)

Where applicable, personal data may be processed for the regular exercise of rights in judicial, administrative or arbitration proceedings, in accordance with Article 7, item VI of the LGPD, including proceedings governed by the Brazilian Arbitration Law (Law No. 9,307 / 1996).

Communications (Brazil)

Individuals located in Brazil may submit privacy‑related requests and receive responses in Portuguese.

In accordance with ANPD Resolution No. 18 / 2024, SoftwareOne ensures that communications with data subjects and the Brazilian Data Protection Authority (ANPD) are carried out clearly and precisely in Portuguese.

Local Social Media Presence (Brazil)

In addition to global social media channels, SoftwareOne maintains local social media presences, as follows:

• LinkedIn: https://www.linkedin.com/company/softwareone-latam/
• X: https://x.com/softwareone_br
• Facebook: https://www.facebook.com/SoftwareOneBrasil/
• Instagram: https://www.instagram.com/softwareone_br/
• YouTube: https://www.youtube.com/@softwareonebrasil

Processing of personal data in this context is subject to the respective platforms’ local privacy policies: 

• LinkedIn: https://br.linkedin.com/legal/privacy-policy
• X: https://x.com/pt/privacy
• Instagram: https://help.instagram.com/155833707900388
• YouTube: https://policies.google.com/privacy

International Data Transfers (Brazil and Ecuador)

Personal data may be transferred to third countries, provided that international treaties have been signed with those countries that allow the transfer of data and do not contravene local legislation.

International transfers of personal data originating from Brazil are conducted in accordance with the LGPD and ANPD Resolution CD/ANPD No. 19 of December 18, 2024 (Regulation of the International Transfer of Personal Data) and SoftwareOne relies on legal mechanisms that ensure an adequate level of protection for your personal data.

International Transfers of personal data originating from Ecuador will comply with the provisions of the LOPDP and SoftwareOne will only transfer personal data to countries and territories that comply with the standards of protection required by Ecuadorian laws and regulations.

Data Protection Rights (Brazil)

Individuals subject to the LGPD have the following rights:

• confirmation of the existence of processing; 
• access to their data;
• rectification of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data or data processed in noncompliance with the LGPD;
• data portability upon express request;
• deletion of personal data processed with consent, to the extent permitted by law;
• information about public and private entities with which their personal data has been shared;
• information about the possibility of denying consent and its consequences;
• revocation of consent; 
• upon request, obtain the full text of the clauses used to carry out an international data transfer, subject to trade and industrial secrets;
• lodge a complaint with a supervisory agency if they believe that the processing of their personal data infringes applicable data protection regulations.

In Brazil, the supervisory agency is the National Data Protection Agency (Agência Nacional de Proteção de Dados - ANPD).

Contact for data protection requests (Brazil and Ecuador)

In accordance with the LGPD and ANPD Resolution No. 18/2024, SoftwareOne has appointed a Data Protection Officer for Brazil. You may contact our DPO for any inquiries related to the processing of your personal data or to exercise your rights under the LGPD:

Vanessa Siqueira
data-protection.br@softwareone.com

The Data Protection Officer appointed for Ecuador (Encargado):

Nombre: Paul S Harris 
Dirección: Ave. Naciones Unidas E699, Oficina 501. – Quito Ecuador
Teléfono: +593998325618

This Supplement applies to the handling of personal information of individuals located in Japan which is collected in Japan by SoftwareOne Japan K.K. or any other SoftwareOne entity with which you have established a relationship, as the case may be (individually or collectively, “SoftwareOne” or “we”) or a third party acting as a data processor on behalf of SoftwareOne, and supplements the above Privacy Notice. We comply with the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003; the “APPI”).

Corporate Information

Under this Supplement, the entity responsible for handling your personal information is as follows:

Name: SoftwareOne Japan K.K.
Address: Hulic JP Akasaka Building 8F, 2-5-8 Akasaka, Minato-ku, Tokyo 107-0052
Representative: Kenji Hasegawa, CEO

Personal Information

“Personal information”, “personal data” and other related terms in this Supplement are to be interpreted as used in the APPI, unless otherwise defined herein; accordingly:

• “personal information” means information relating to a living individual which falls under any of the following items: 
• information containing a name, date of birth, or other identifier or the equivalent (meaning all items (excluding individual identification codes) made by writing, recording, sound or motion, or other means, in a document, drawing, or electronic or magnetic record (this includes a record created in electronic or magnetic form (meaning electronic form, magnetic form, or any other form that cannot be perceived with the human senses; the same applies in the following item (ii)) which can be used to identify a specific individual (this includes any information that can be easily collated with other information and thereby used to identify that specific individual); and 
• those containing an individual identification code; and
• “personal data” means personal information compiled in a personal information database or the equivalent.

Purposes of Use

We handle personal information solely within the scope necessary to achieve the purposes of use specified in the above Privacy Notice, except where otherwise permitted by the APPI or with your prior consent.

Proper Acquisition

We collect personal information in an appropriate manner and will not acquire any personal information through deception or other improper means.

Security Control Measures

We implement necessary and appropriate security control measures, including organizational, personnel, physical and technical safeguards, in order to prevent the leakage, loss or damage of any personal data we handle.

Joint Use

We may share and jointly use your personal data among our group companies.

• Items of Personal Data: As described in the “Relevant personal data” paragraph in each situation set forth in the above Privacy Notice. 
• Scope of Joint Users: SoftwareOne AG and its consolidated subsidiaries. 
• Purposes of Use: As described in Section 3 “Purposes of Use” above. 
• Responsible Party for managing the personal data: SoftwareOne Japan K.K. (as identified in Section 1 above).

Cross Border Transfers

If we transfer your personal data to a third party outside Japan (excluding the EU and the UK), we will obtain your prior consent unless the recipient ensures an APPI-adequate level of protection or another legal exception under the APPI applies. Before seeking to obtain your prior consent, we will provide you with information on the name of the relevant foreign country, the personal information protection system of the foreign country, and the measures taken by the relevant third party to protect personal information.

Provision to Third Parties & Record-Keeping

We will not provide your personal data to any third party without your prior consent, except where permitted by the APPI or otherwise provided in this Supplement. When providing or receiving personal data from a third party, we will create and retain records in accordance with the APPI.

Your Rights under the APPI

In accordance with the APPI, you may request us for: 

• notification of the purposes of use of the personal data we hold; 
• disclosure of the content of your personal data we hold and the records we retain, or correction, addition or deletion of the content of your personal data we hold, if the content of such personal data is factual; 
• suspension of use or erasure of your personal data we hold if the personal data has been obtained or is being handled in violation of the APPI; or 
• cessation of third-party provision of your personal data we hold if the personal data is being provided to a third party in violation of the APPI. 

You may also make a complaint about our handling of your personal data we hold, in accordance with the APPI. Such request or complaint must be made by submitting an inquiry to our contact point which can be found in Section 11. We will respond to such request or complaint in accordance with the APPI. Please note that we may collect the actual costs from you for taking the relevant measures in responding to your request for notification of the purposes of use of the personal data we hold or your request for disclosure of the content of the personal data we hold.

Sensitive Personal Information

We will not acquire any “sensitive personal information” as specified in the APPI (e.g., race, creed, social status, medical history, criminal record, the fact of having suffered damage by a crime) unless permitted under the APPI or with your prior consent.

Contact Point

To exercise your rights or for inquiries regarding our handling of personal data in Japan, please contact: 

SoftwareONE Japan K.K.
Hulic JP Akasaka Building 8F, 2-5-8 Akasaka, Minato-ku, Tokyo 107-0052
+81 3 5005 2801
info.jp@softwareone.com

This Supplement applies where personal data is processed in the United Arab Emirates (“UAE”) or where the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) is applicable. This Supplement shall be read together with the above Privacy Notice. Where any conflict arises, the provisions of this Supplement prevail for processing activities subject to the UAE PDPL.

Overseas Transfers (Articles 22–24 UAE PDPL)

SoftwareOne may transfer personal data outside the UAE only in accordance with the requirements of the UAE PDPL. Such transfers may take place where:

• The destination country appears on the UAE Data Office’s approved adequacy list; 
• Appropriate contractual safeguards or legally recognized transfer mechanisms are implemented; or
• An exception under the UAE PDPL applies.

SoftwareOne ensures that all cross border transfers are supported by appropriate protection measures consistent with the UAE PDPL and the internal data protection standards.

Personal Data Breach Notification (Article 9 UAE PDPL)

In the event of a personal data breach that may pose a risk to the confidentiality, privacy, security or rights of individuals, SoftwareOne will:

• Notify the UAE Data Office without undue delay, and
• Notify affected individuals where the breach is likely to cause significant harm or impact.

SoftwareOne may maintains internal incident response processes to ensure timely detection, assessment, reporting, and mitigation of personal data breaches.

Data Protection Officer Requirement (Articles 10–11 UAE PDPL)

SoftwareOne appoints a Data Protection Officer (“DPO”) where required under the UAE PDPL, including scenarios involving:

• High risk processing operations, or
• Large scale processing of sensitive personal data.

The DPO supports ongoing compliance with the UAE PDPL, monitors internal controls, advises on data protection obligations and acts as a liaison with the UAE Data Office. 

Rights of Individuals (Articles 13–20 UAE PDPL)

In addition to the rights outlined in the above Privacy Notice, individuals subject to the UAE PDPL may exercise the following rights:

• Right of access to personal data;
• Right to request correction or erasure;
• Right to restrict or stop processing;
• Right to data portability;
• Right to object to automated processing or automated decision making.

Requests may be submitted through the contact channels specified in the above Privacy Notice, and SoftwareOne will respond within the timelines mandated by the UAE PDPL.

Legal Basis for Processing (Article 4 UAE PDPL)

SoftwareOne processes personal data based on one or more legal bases recognized under the law, including:

• Consent;
• Necessity for performance of a contract;
• Compliance with legal obligations;
• Protection of public interest;
• Legitimate interests, to the extent permitted under the UAE PDPL.

Retention (Article 21 UAE PDPL)

Personal data subject to the UAE PDPL is retained only for the duration necessary to fulfil the purposes for which it was collected or as required by applicable legislation. SoftwareOne applies internal retention schedules aligned with the UAE PDPL’s data minimization and storage limitation principles. 

Contact for UAE PDPL Requests

Individuals seeking to exercise their rights or raise concerns under the UAE PDPL may contact SoftwareOne at data-protection.me@softwareone.com.

This Supplement applies where personal data is processed within the State of Qatar or where the Qatar Personal Data Privacy Protection Law – Law No. 13 of 2016 (“Qatar PDPL”) is applicable. This Supplement shall be read together with the above Privacy Notice. Where any conflict arises, the provisions of this Supplement prevail for processing activities subject to the Qatar PDPL.

Overseas Data Transfers (Articles 15 & 16 Qatar PDPL)

SoftwareOne may transfer personal data outside the State of Qatar only in accordance with the requirements of the Qatar PDPL. Transfers may take place where:

• The receiving country provides an adequate level of protection;
• Explicit consent of the individual is obtained; or
• Appropriate safeguards or legally recognized transfer mechanisms are implemented.

SoftwareOne ensures that all cross border transfers follow the protection standards mandated under the Qatar PDPL.

Personal Data Breach Notification (Article 14 Qatar PDPL)

In the event of a personal data breach, SoftwareOne will:

• Notify the Ministry of Communications and Information Technology (MCIT) immediately, as required under the Qatar PDPL; and
• Notify affected individuals where the breach is likely to result in harm or adverse impact.

SoftwareOne maintains internal procedures to detect, assess and report breaches in accordance with statutory obligations.

Consent Requirements (Article 4 Qatar PDPL)

SoftwareOne obtains consent in accordance with the Qatar PDPL, ensuring that:

• Consent is explicit and informed;
• Consent is obtained prior to the processing of personal data;
• Additional safeguards are applied when processing sensitive personal data.

Where consent is withdrawn, SoftwareOne will cease processing activities unless another lawful basis under the Qatar PDPL applies.

Rights of Individuals (Articles 7–10 Qatar PDPL)

Individuals whose personal data is processed under the Qatar PDPL may exercise the following rights:

• Right of access to personal data;
• Right to request correction or erasure;
• Right to object to processing;
• Right to withdraw consent at any time.

Such rights can be exercised by reaching SoftwareOne at data-protection.me@softwareone.com. Replies will be received within the timelines specified under the Qatar PDPL.

This Supplement applies where personal data is processed within Australia or where the Privacy Act 1988 (Cth) (“Privacy Act”) is applicable. This Supplement shall be read together with the above Privacy Notice. Where any conflict arises, the provisions of this Supplement prevail for processing activities subject to the Privacy Act.

The type of personal data we use and what we do with that depends on the relationship we have with you. Therefore, some parts of this Supplement, as well as of the above Privacy Notice may not be relevant for you or more than one part of this Supplement, as well as of the above Privacy Notice may apply to you.

The meaning of the term “personal data” in this Supplement, as well as in the above Privacy Notice, has the same meaning as set out in the Privacy Act.

This Supplement, as well as the above Privacy Notice may be replaced or supplemented in order to fulfil legal requirements, as well as to provide you with all necessary information on how we process your personal data.

Why we collect personal data

We collect personal data so that we can provide our services to you and your service provider, as well as reasonable associated purposes. These purposes include but are not limited to the purposes already reflected in the above Privacy Notice.

We may also collect your personal information for a purpose which is additional to the original purpose pursuant to which we originally received or collected the personal data.

Personal data we collect

The types of personal data we may receive or collect include the following:

• Name or alias;
• Contact details (such as address, postal address, email, phone number);
• Date of birth;
• Sex, gender, or gender identity;
• Nationality or proof of residence (such as residence permits, work right permits or visa);
• Employment data (such as current employment, past employment or other work history);
• Educational qualifications (such as degrees, accreditations, occupational permits or occupational licences);
• Identification documents (such as passport, driver’s licence, identity card or other similar documentation);
• Pictures (such as head shots);
• Transaction and bank account details;
• Any personal information that is inherently disclosed when you or your service provider communicate with us (such as metadata); and
• Criminal history.

In limited circumstances we may need to obtain health information from you.  In such circumstances we will make an express request and will treat any information as strictly confidential.

Further details about the personal data we collect and how it is processed or used depending on our relationship with you can be found in the above Privacy Notice.

How we collect personal data

We receive or collect personal data directly from your or your service provider’s in interactions with us, such as when you create a user account, sign up for our services, submit queries or engage with the services we provide. In addition to this, any personal data that you provide to us will constitute the collection of personal data for the purposes of this Supplement, as well as the above Privacy Notice.

Personal data may also be collected via our website, forms, phone calls, emails or through third-party providers with your consent or to the extent necessary to provide the services to you.

How we hold and protect personal data

We will only retain your personal data only so long as is necessary to provide our services, after which time we will destroy it, unless we:

• are required by law to retain it; or 
• are required to preserve it for the purposes of providing services to another customer; or 
• have agreed to a request by you or your service provider to preserve that personal information; or 
• have a legitimate purpose for retaining it.

We take all reasonable steps to protect all information we hold, including personal data.

Cookies and other similar technologies

We may use cookies and similar technologies (for simplicity reasons, hereinafter referred to as “Cookies”), when you use our websites, platforms, applications as well as other products and services.

Our Cookie Banner and consent management system show you a list of the Cookies we use, including their provider, purpose, description and other relevant information. In the default setting, only the essential Cookies are enabled. Via the consent management system, you can determine whether you allow the setting of additional Cookies or not. You can adjust your preferences at any time via the consent management system.

Further information about the ways that we may track your personal information including on social media (e.g., Facebook) can be found in the above Privacy Notice.

Disclosure to third parties

We may disclose your personal data to parties to fulfil the purposes described above, including to provide services to you or your service provider. Due to SoftwareOne’s international group structure, personal data will be disclosed to certain departments and persons on a need-to-know basis to process personal data so that we can provide our services. For all intragroup personal data access and transfers, we comply with the provisions of the Privacy Act.

Third party service providers contracted by SoftwareOne may also receive personal data to provide or facilitate the provision of our services. These include, service providers who support us with order fulfilment, payment / billing, customer service, finance, auditing, fraud detection, IT services, communication, hosting, logistics, email delivery, marketing, sales, data analysis, event management, training, surveys, printing, archive, advisory and consulting services.

We may disclose your personal data to further recipients, such as private as well as public entities and institutions, including law enforcement, data protection authorities, tax authorities, credit  agencies, debt collectors, banks, courts, hotels or other companies insofar as there is a legal basis for such disclosure.

Disclosure overseas

As we operate in a number of countries it is possible that your personal data may need to be transferred outside of Australia to countries in which we operate including the European Union, the United Kingdom and Switzerland, in order to provide our services. We will take reasonable steps to ensure that such recipients comply with the Privacy Act and maintain the confidentiality and security of your personal information.

Accessing or correcting personal data

You may contact us to access your personal data we hold about you and to request corrections if any details are inaccurate or incomplete. We may refuse to provide access you with to your personal data if:

• we are legally permitted to do so and consider it appropriate; or
• are required by law to deny the request.

Questions and complaints

If you have any requests, comments, queries or complaints in relation to your personal data, our handling of your personal data or how we handle personal data generally, please contact our information officer at data-protection.apac@softwareone.com.

We will respond to any requests or complaints within a reasonable period (usually 30 days).

If you disagree with our response or any decision that we make in respect of your personal data, including in respect of any complaint that you have made, you may refer your complaint to the Office of the Australian Information Commissioner by visiting www.oaic.gov.au, calling 1300 363 992 or by emailing enquiries@oaic.gov.au.

This Supplement applies where personal data is processed within New Zealand or where the Privacy Act 2020 (“Privacy Act”) is applicable. This Supplement shall be read together with the above Privacy Notice.

The type of personal data we use and what we do with that depends on the relationship we have with you. Therefore, some parts of this Supplement, as well as of the above Privacy Notice may not be relevant for you or more than one part of this Supplement, as well as of the above Privacy Notice may apply to you.

The meaning of the term “personal data” in this Supplement, as well as in the above Privacy Notice has the same meaning as set out in the Privacy Act.

This Supplement, as well as the above Privacy Notice may be replaced or supplemented in order to fulfil legal requirements, as well as to provide you with all necessary information on how we process your personal data.

Why we collect personal information

We collect personal data so that we can provide our services to you and your service provider, as well as reasonable associated purposes. These purposes include but are not limited to the following:

• communicate with you and your service provider, process requests and respond to requests; 
• process comments or posts; 
• register and send newsletters to you which you subscribe to; 
• marketing purposes;  
• registration, authentication and administration of user accounts; 
• license monitoring purposes; 
• provision of demo products and services as well as trials (also from third parties); 
• analysis purposes in order to improve our products and services; 
• tailor our website content and experience to your interests; 
• maintain the security of our websites, platforms, applications as well other products and services; 
• comply with legal and regulatory requirements and requests; and 
• establish, exercise and defend legal claims.

We may also collect your personal data for a purpose which is additional to the original purpose pursuant to which we originally received or collected the personal data.

You are not required to give us your personal data, however, if you choose not to we may be unable to provide, in whole or in part, our services to you and your service provider.

Further details about the personal data we collect and how it is processed or used depending on our relationship with you can be found in the above Privacy Notice.

Personal data we collect

The types of personal data we may receive or collect include the following:

• Name or alias; 
• Contact details (such as address, postal address, email and phone number); 
• Date of birth; 
• Sex, gender or gender identity; 
• Nationality or proof of residence (such as residence permits, work right permits or visa);
• Employment data (such as current employment, past employment or other work history); 
• Educational qualifications (such as degrees, accreditations, occupational permits or occupational licences); 
• Identification documents (such as passport, driver’s licence, identity card or other similar documentation); 
• Pictures (such as head shots); 
• Transaction and bank account details; 
• Any personal data that is inherently disclosed when you or your service provider communicate with us (such as metadata); and 
• Criminal history.

During the course of providing services to you or your service provider we may create information about you which constitutes personal data including things such as emails, letters or other internal records.

Further details about the personal data we collect and how it is processed or used depending on our relationship with you can be found in the above Privacy Notice.

How we collect personal data

We receive or collect personal data directly from your or your service provider’s in interactions with us, such as when you create a user account, sign up for our services, submit queries or engage with the services we provide. In addition to this, any personal data that you provide to us will constitute the collection of personal data for the purposes of this Supplement, as well as the above Privacy Notice.

Information which we create as a result of providing services to you or your service provider which constitutes personal data will also constitute the collection of personal data for the purposes of this Supplement, as well as the above Privacy Notice.

Personal data may also be collected via our website, forms, phone calls, emails or through third-party providers with your consent or to the extent necessary to provide the services to you.

How we hold and protect personal data

We will only retain your personal data only so long as is necessary to provide our services, after which time we will destroy it unless we:

• are required by law to retain it; or  
• are required to preserve it for the purposes of providing services to another customer; or 
• have agreed to a request by you or your service provider to preserve that personal data; or 
• have a legitimate purpose for retaining it.

We take all reasonable steps to protect all information we hold, including personal data.

Cookies and other similar technologies

We may use cookies and similar technologies (for simplicity reasons, hereinafter referred to as “Cookies”), when you use our websites, platforms, applications as well as other products and services.

Our Cookie Banner and consent management system show you a list of the Cookies we use, including their provider, purpose, description and other relevant information. In the default setting, only the essential Cookies are enabled. Via the consent management system, you can determine whether you allow the setting of additional Cookies or not. You can adjust your preferences at any time via the consent management system.

Further information about the ways that we may track your personal data including on social media (e.g., Facebook) can be found in the above Privacy Notice.

Disclosure to third parties

We may disclose your personal data to parties to fulfil the purposes described above including to provide services to you or your service provider. Due to SoftwareOne’s international group structure, personal data will be disclosed to certain departments and persons on a need-to-know basis to process personal data so that we can provide our services. For all intragroup data access and transfers, we comply with the provisions of the Privacy Act.

Third party service providers contracted by SoftwareOne may also receive personal data to provide or facilitate the provision of our services. These include, service providers who support us with order fulfilment, payment / billing, customer service, finance, auditing, fraud detection, IT services, communication, hosting, logistics, email delivery, marketing, sales, data analysis, event management, training, surveys, printing, archive, advisory and consulting services.

We may disclose your personal data to further recipients to the extent required to fulfil the purpose, such as private as well as public entities and institutions, including law enforcement, data protection authorities, tax authorities, credit  agencies, debt collectors, banks, courts, hotels or other companies insofar as there is a legal basis for such disclosure.

Disclosure overseas

As we operate in a number of countries it is possible that your personal data may need to be transferred outside of New Zealand to countries in which we operate including the European Union, the United Kingdom and Switzerland, in order to provide our services.  We will take reasonable steps to ensure that such recipients comply with the Privacy Act and maintain the confidentiality and security of your personal data.

Accessing or correcting personal data

You may contact us to access your personal data we hold about you and to request corrections if any details are inaccurate or incomplete. We may refuse to provide access you with to your personal data if:

• we are legally permitted to do so and consider it appropriate; or 
• are required by law to deny the request.

Questions and complaints

If you have any requests, comments, queries or complaints in relation to your personal data, our handling of your personal data or how we handle personal data generally, please contact our information officer at data-protection.apac@softwareone.com.

We will respond to any requests or complaints within a reasonable period (usually 30 days).

If you disagree with our response or any decision that we make in respect of your personal data including in respect of any complaint that you have made, you may refer your complaint to the Privacy Commissioner (Te Mana Matapono Matatapu) by visiting www.privacy.org.nz, calling 0800 803 909 or by emailing enquiries@privacy.org.nz.

Applicability

This Supplement forms an integral part of the above Privacy Notice and applies solely to Data Principals located in India.

This Supplement governs the processing of digital personal data by SoftwareOne in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made thereunder ("DPDP Rules"), including:

• personal data collected in digital form within India; 
• personal data collected in non-digital form and subsequently digitized; and 
• processing of digital personal data carried out outside India in connection with the offering of goods or services to Data Principals within India, in accordance with Section 3 of the DPDP Act.

In the event of any inconsistency between this Supplement and the above Privacy Notice, the provisions of this Supplement shall prevail to the extent of such inconsistency for processing governed by Indian law.

Definitions

Unless otherwise defined herein, capitalized terms used in this Supplement shall have the meanings ascribed to them under the DPDP Act and the DPDP Rules.

For the purposes of this Supplement:

• "Board" means the Data Protection Board of India established under the DPDP Act; 
• "Data Principal" means the individual to whom the personal data relates and where such individual is 
• a child, includes the parents or lawful guardian of such child; or 
• a person with disability, includes her lawful guardian acting on her behalf.
• "SoftwareOne" means the relevant SoftwareOne entity acting as a Data Fiduciary in relation to the processing of personal data under Indian law.

Notice to Data Principals

Consent to the processing of personal data by SoftwareOne shall be obtained only upon the Data Principal’s acceptance of this Supplement and the above Privacy Notice.

Contact for Data Protection Requests

Any request for withdrawal of consent, request for access to information, correction, erasure, grievance or any other communication under the DPDP Act may be addressed to:

Designation / Department: Regional General Counsel
Email ID: data-protection.apac@softwareone.com

Alternately, the Data Principal may communicate his request at: Shweta.Sinha@softwareone.com.

Grievance Redressal Mechanism

SoftwareOne has established an effective grievance redressal mechanism to address grievances raised by Data Principals in relation to the processing of their personal data.

A Data Principal may submit a grievance by contacting the Grievance Officer at:

Name: Regional General Counsel 
Designation: Grievance Officer – India
Email ID: data-protection.apac@softwareone.com
Postal Address: 7th Floor, Tower 1A, International Tech Park, Near Sector 59, Behrampur, Gurugram, Haryana-122101.

SoftwareOne shall acknowledge the grievance and endeavor to resolve it within 30 days from the date of receipt.

A Data Principal shall exhaust the grievance redressal mechanism provided herein before approaching the Board, in accordance with Section 13 of the DPDP Act.

Nomination

A Data Principal may nominate one or more individuals to exercise her rights under the DPDP Act in the event of her death or incapacity.

Such nomination may be made by:

• submitting a request through the user account or digital interface made available by SoftwareOne; or
• submitting a written request to SoftwareOne using the contact details provided in this Supplement, along with such information and verification details as may be reasonably required by SoftwareOne.

Processing and Transfer of Personal Data Outside India

SoftwareOne may transfer personal data outside the territory of India only in accordance with:

• any restrictions notified by the Central Government on the transfer of personal data to specified countries or territories; and
• the conditions and safeguards specified by the Central Government through general or special orders.

Where such transfers occur, SoftwareOne shall ensure compliance with all applicable requirements under the DPDP Act, the DPDP Rules, and other applicable Indian laws.

Updates to this Supplement

This Supplement may be updated from time to time to reflect changes in applicable law, including amendments to the DPDP Act or the DPDP Rules, or guidance, directions or orders issued by the Government of India or the Data Protection Board of India. Material changes shall be notified to Data Principals through appropriate and reasonable means.

Children’s Personal Data

SoftwareOne does not knowingly process personal data of children, as defined under the DPDP Act.

Where processing of personal data of a child becomes necessary under applicable law, SoftwareOne shall ensure compliance with the requirements relating to verifiable parental consent and other safeguards prescribed under the DPDP Act and the DPDP Rules.

Additional DPDP-Specific Disclosures

Right to Withdraw Consent: Withdrawal of consent shall not affect the legality of processing carried out prior to such withdrawal.

Data Retention: SoftwareOne shall retain personal data only for such period as is necessary to fulfil the specified purpose or to comply with applicable law, after which such data shall be erased in accordance with the DPDP Act and the DPDP Rules.