1. Introduction
Siteimprove respects your privacy and is committed to protecting it. This notice explains how Siteimprove processes the Personal Data that it collects through:

the Siteimprove website (siteimprove.com) and browser extensions;
information that you provide to us as a vendor (prospective and current);
information and submissions that you provide to us, both online and offline, through forms on our website; and
your interaction with us through third-party websites and services (e.g., social networking providers).
For the sake of simplicity in this Notice, all of these methods of collection will be referred to as the “Website”.

2. How does Siteimprove define Personal Data?
“Personal data” as defined in the General Data Protection Regulation (GDPR) and “personal information” as defined in the California Consumer Privacy Act (CCPA) shall have the same meaning as in the respective legislation (in the following both are referred to as “Personal Data”). Personal Data includes your name, address, e-mail, telephone number, IP address, or any other identifier.

Siteimprove does not sell your Personal Data. Further, Siteimprove does not share your Personal Data with third parties for other purposes than specified in this Privacy Notice. Through the Website, Siteimprove does not seek to collect any sensitive data (e.g., health or sex life information; political opinions or religious/philosophical beliefs; trade-union membership; or racial or ethnic origin.

3. Who is responsible for processing my Personal Data?
The Siteimprove affiliate with which you either communicate, that is operating the website you are visiting, or is located in your country of residence, is responsible for the processing of your Personal Data (i.e. the data controller). Contact information for each of those affiliates is listed here: https://www.siteimprove.com/contact/

If you have any questions about the processing of your Personal Data by Siteimprove or the information in this Notice, please contact:

privacy@siteimprove.com

OR

Mads Sørensen, General Counsel

Havneholmen 33

1561 København

Denmark

mso@siteimprove.com

4. How and why does Siteimprove get Personal Data?
Below, you can see the various purposes for which Siteimprove may collect and use (i.e. process) Personal Data from you and through which channels.

4.1 Website Visitors:
Siteimprove collects your Personal Data in order to respond to your inquiries, identify areas of interest on the Website, and identify potential new Siteimprove customers based on Website activity.

Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email, phone, and IP address.

4.1.1 How does Siteimprove get your Personal Data in these instances?

You provide it indirectly to Siteimprove if you consent to optional Cookies and directly through online chat interactions. Please also read our Cookie Notice.

4.1.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?

Consent
Legitimate interest in knowing the countries and companies that might be interested in the Siteimprove Intelligence Platform. Specific individuals are not targeted and only companies are identified as potential customers. Siteimprove will honor “Do Not Track” if a user has set that preference.
4.1.3 Who else has access to your Personal Data in these instances (and why)?

Microsoft (Office 365) (primary business communication software)
Google Analytics (website analytics)
Drift (online chat system)
Zendesk (IT ticket management system)
Hubspot (marketing contact management system)
LinkedIn (professional network platform)
Salesforce (customer relationship management system)
Pardot (Marketing automation platform)
Vidyard (online video platform)
4.1.4 How long does Siteimprove keep your Personal Data in these instances?

Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned.

4.2 Prospective Customers/Online Form Submissions:
For website visitors interested in our products as a prospective customer, Siteimprove collects your Personal Data in order to fulfill your requests for additional information, to facilitate your attendance at a Siteimprove-sponsored event, or to set up an account and provide you with a demo.

Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email, address, and phone.

4.2.1 How does Siteimprove get your Personal Data in these instances?

You provide it directly through online forms and/or interactions with the Siteimprove employee at event or when setting up/conducting a demo. We perform a pre-crawl of prospect websites.

4.2.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?

Consent (to either receipt of specific content or direct marketing).
Legitimate interest:
in processing the contact information of individuals interested in buying our services so we as a business can come in contact with said individuals.
in processing the potential Personal Data found on a prospects’ public website to provide this prospect with an offer and demo directed at the business of the prospect.
4.2.3 Who else has access to your Personal Data in these instances (and why)?

Microsoft (Office 365) (primary business communication software)
Hubspot (marketing contact management system)
Pardot (Marketing automation platform)
Eventbrite (event invitation system)
GoToWebinar/GoToMeeting (online meeting system for demos)
Atlassian (ticketing system for review of customer contracts)
DocuSign (e-signature tool for contracts)
Interxion (server/storage vendor)
Amazon Web Services (server/storage vendor)
4.2.4 How long does Siteimprove keep your Personal Data in these instances?

Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned. Pre-crawl results of prospect websites will be deleted after 30 days unless the prospect schedules a demo, in which case it will be retained for the sales and customer cycle.

4.3 Whistleblowing Reports:
Siteimprove employees, customers, partners, suppliers and/or any other third parties (each an “Associate”) may file a report under Siteimprove's Whistleblower Policy. Siteimprove collects Personal Data in order to investigate a case filed through a whistleblowing report. We will hold the Personal Data you provide to us securely and only use it to help us to handle and process your whistleblowing report. Siteimprove will process Personal Data of the Associate making the report, the reported person and any other third parties involved as may be necessary for the investigation of the reported incident, including the assessment of the facts reported and the preparation of reports on the course and completion of the investigation.

Siteimprove collects the following categories of ordinary Personal Data for the above purpose(s): name, email address, phone and any information you provide to us in your report. Siteimprove will process Personal Data in accordance with the principles set out in the Whistleblower Policy and with the provisions of applicable data protection laws.

4.3.1 How does Siteimprove get your Personal Data in these instances?

The Associate provides the Personal Data through the online form submission.

4.3.2 What is Siteimprove’s legal basis for processing your Personal Data in these instances?

Siteimprove processes Personal Data for the purposes provided in the Whistleblower Policy on basis of one or more of the following:

Consent of the Associate to provide Personal Data about him/herself in the report;
Necessary for compliance with a legal obligation to which Siteimprove is subject;
Necessary for the purposes of the legitimate interests pursued by Siteimprove in order in ensuring compliance with applicable laws throughout all of Siteimprove’s operations.
4.6.3 Who else has access to your Personal Data in these instances (and why)?

Microsoft (Office 365) (primary business communication software to which the whistleblowing report is submitted).
4.3.4 How long does Siteimprove keep your Personal Data in these instances?

Siteimprove will store Personal Data as long as it is necessary in order to fulfill the purposes mentioned above.

5. Is Siteimprove transferring my Personal Data outside the EU/EEA?
In some cases, Siteimprove does transfer your Personal Data to vendors in the following countries outside the EU/EEA: US.

Such transfers only take place for the specific purposes mentioned above. Because the US has not been deemed by the EU Commission to have an adequate level of protection of personal data, Siteimprove provides appropriate safeguards for the transfer in accordance with Chapter 5 of the GDPR. You may obtain a copy of (or access to) these terms by contacting us at privacy@siteimprove.com. Below is the current list of US-based vendors to which Siteimprove may transfer Personal Data:

DocuSign
LinkedIn
Jobvite
Eventbrite
Drift
Atlassian
Hubspot
GoToWebinar / GoToMeeting
Drift
Pardot
Vidyard
6. What rights do I have to Personal Data that Siteimprove processes?
You have the right to request access to and rectification or erasure of your Personal Data.
You have the right to object to the processing of your Personal Data and have the processing of your Personal Data restricted.
You have an unconditional right to object to the processing of your Personal Data for direct marketing purposes.
If processing of your Personal Data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by emailing privacy@siteimprove.com.
You have the right to receive your Personal Data in a structured, commonly used and machine-readable format.
You have the right to not receive discriminatory treatment for exercising these rights.
You may always lodge a complaint with a data protection supervisory authority, e.g. The Danish Data Protection Agency.
Be advised that there may be legal conditions or limitations on these rights. If you wish to inquire about or exercise your right to the above rights, please read our Notice – Exercising your Privacy Rights or contact us at: privacy@siteimprove.com.

7. Does Siteimprove collect Personal Data from children under the age of 16?
No. Siteimprove does not knowingly collect Personal Data from children under 16. If Siteimprove learns that it has collected or received Personal Data from a child under 16 without verification of parental consent, Siteimprove will delete that information. If you believe Siteimprove might have any information from or about a child under 16, please contact privacy@siteimprove.com.

8. Does Siteimprove use any other means of tracking behavior of individuals on the Website?
Yes. Pages of Siteimprove.com and e-mails from Siteimprove employees to prospects and customers may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags and single-pixel gifs) that permit Siteimprove to, for example, count users who have visited a page or opened an e-mail.

9. Country-Specific Policies
Finland:
Customer Data File
This Policy constitutes a description of customer’s data file as required under Finnish Personal Data Act (523/1999), Chapter 2, Section 10.

US:
Your California Privacy Rights
California Civil Code Section § 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an e-mail to privacy@siteimprove.com or write us at: Siteimprove, 7807 Creekridge Circle, Minneapolis, MN 55439; ATTN: Legal Department.