Harnham Search and Selection

Avis de confidentialité

1. Général

1.1 Harnham Search and Selection Limited et ses sociétés du groupe (« nous », ou « Harnham ») prennent la confidentialité de vos informations très au sérieux. Cet avis de confidentialité vise à vous informer de nos pratiques concernant la collecte, l'utilisation et la divulgation de renseignements personnels recueillis en personne auprès de vous, obtenus via nos sites Web ou recueillis par d'autres moyens, notamment par un formulaire en ligne, par courriel ou par téléphone.

1.2 Cet avis s'applique aux informations personnelles fournies par nos clients et fournisseurs sur leurs employés et autres personnes affiliées à eux ainsi qu'aux candidats ou candidats potentiels (« Candidats ») dont nous traitons les données pour les emplois proposés avec nos clients ou prospects. Lorsqu'une fonction donnée avec notre client doit être remplie par une société à responsabilité limitée ou un autre entrepreneur, nous pouvons traiter des données relatives aux administrateurs ou aux actionnaires de cette société et, dans le cadre de cette politique, un « Candidat » peut inclure des administrateurs et actionnaires des sous-traitants des entreprises.

1.3 Dans le présent avis, « vous » désigne toute personne dont nous détenons ou traitons les données personnelles (c.-à-d. un candidat individuel ou un candidat potentiel, un individu affilié à un candidat entrepreneur d'entreprise, ou une personne ou un employé associé ou affilié à notre client ou fournisseur.

1.4 En général, nos services sont liés à la prestation de services de recrutement aux clients et nous ne traitons pas les données personnelles à grande échelle, mais nous conserverons certaines données concernant les candidats et les personnes affiliées à nos clients et fournisseurs, et cet avis établit la base sur laquelle nous détenons ces données.

1.5 Le présent avis est régi par le Règlement général de l'UE sur la protection des données (le « RGPD ») du 25 mai 2018.

2. Base juridique sur laquelle nous traitons les données personnelles

2.1 Les données personnelles que nous détenons à votre sujet seront traitées soit parce que :

2.1.1 le traitement est nécessaire pour nous permettre de respecter nos obligations en vertu d'un contrat entre vous et nous, en particulier pour la prestation de nos services ; ou

2.1.2 le traitement est nécessaire dans la poursuite d'un « intérêt légitime », un intérêt légitime dans ce contexte signifie un intérêt valide dont nous disposons ou dont un tiers dispose dans le traitement de vos données personnelles qui ne soit pas supplanté par vos intérêts en matière de confidentialité et de sécurité des données

2.1.3 Pour certaines « catégories spéciales » de données personnelles sensibles, dont les données relatives à la santé et à l'origine ethnique que nous traitons de temps à autre, nous traiterons ces données sur la base de votre consentement.

3. Données personnelles que nous collectons

3.1 Nous pouvons collecter et traiter les données personnelles suivantes (informations qui peuvent être identifiées de manière unique avec vous) :

3.1.1 pour les personnes associées à nos clients, nous pourrions détenir des informations de contact telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Contact Client ») ;

3.1.2 Pour les personnes associées à nos fournisseurs et autres tiers avec lesquels nous interagissons, nous pouvons détenir des informations de contact telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Informations de contact avec une tierce partie ») ;

3.1.3 Pour les candidats, nous pouvons détenir des informations personnelles sur vous, votre historique, votre historique de travail, etc. Ces informations peuvent inclure le nom, l'adresse, le numéro de téléphone, l'adresse e-mail, le CV, l'historique de travail, les qualifications éducatives (« Informations sur le candidat ») ;

3.1.4 un enregistrement de toute correspondance ou communication entre vous et nous (« Information de communication ») ;

3.1.5 informations de marketing que nous pouvons détenir à votre sujet afin de fournir des informations sur nos services, telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Information marketing »).

3.2 Nous collecterons des informations directement auprès de vous ou d'un tiers (par exemple votre employeur ou un introducteur). Si nous obtenons vos données personnelles par l'intermédiaire d'une tierce partie, vos droits de confidentialité en vertu de cet avis ne seront pas affectés et vous serez toujours en mesure d'exercer les droits contenus dans cet avis.

3.3 Bien que vous n'ayez pas à nous fournir d'informations personnelles dans la pratique, nous pourrions être dans l'impossibilité de vous fournir nos services sans données personnelles (par exemple nous aurons besoin des informations de contact pour communiquer avec vous). Vous pouvez nous retirer notre autorisation à traiter vos données personnelles (ou demander que nous limitions notre traitement) à tout moment, mais il y a des circonstances dans lesquelles nous pourrions avoir besoin de continuer à traiter des données personnelles (veuillez vérifier ci-dessous). 

4. Comment nous traitons vos données personnelles 

4.1 Veuillez consulter le tableau ci-dessous, qui décrit la manière dont nous traiterons les différents types de données personnelles que nous détenons :

Pour chaque type de données énumérées ci-dessus, les définitions sont incluses dans la clause 3.1.

5.1 Rétention des données

Notre politique actuelle de conservation des données consiste à supprimer ou détruire (dans la mesure où nous sommes en mesure de le faire) les données personnelles que nous détenons à votre sujet conformément à ce qui suit :

5.2 Pour toute catégorie de données personnelles non spécifiquement définie dans cet avis, et sauf disposition contraire de la loi applicable, la période de conservation requise pour toute donnée personnelle sera réputée être de 7 ans à compter de la date de réception de ces données.

5.3 Les délais de conservation indiqués dans cet avis peuvent être prolongés ou raccourcis au besoin (par exemple, dans le cas où des poursuites judiciaires seraient appliquées aux données ou s'il y a une enquête en cours relative aux données).

5.4 Nous examinons régulièrement les données personnelles (et les catégories de données personnelles) que nous détenons afin de nous assurer que les données que nous détenons sont toujours pertinentes pour notre activité et exactes. Si nous découvrons que certaines données que nous détenons ne sont plus nécessaires ou exactes, nous prendrons des mesures raisonnables pour corriger ou supprimer ces données si nécessaire.

5.5 Si vous souhaitez demander que les données que nous détenons à votre sujet soient modifiées ou supprimées, veuillez vous référer à l'article 8 ci-dessous, qui explique vos droits en matière de confidentialité.

6. Partage de vos informations

6.1 Nous ne divulguons aucune information que vous fournissez à des tiers autrement que comme suit :

6.1.1 Nous divulguerons les Données du candidat à nos clients ou clients potentiels et nos clients deviendront les contrôleurs de données pour les données du candidat ;

6.1.2 Nous pouvons divulguer des informations à nos sociétés du groupe ;

6.1.3 si nous sommes dans l'obligation de divulguer ou de partager vos données personnelles afin de nous conformer à toute obligation légale (par exemple, si cela est requis par une décision judiciaire ou à des fins de prévention de fraude ou d'autres délits) ;

6.1.4 afin de faire respecter les termes et conditions ou accords pour nos services qui pourraient s'appliquer ;

6.1.5 si nous sous-traitons des services à un tiers, nous pouvons fournir des informations à ce tiers afin de fournir les services appropriés ;

6.1.6 nous pouvons transférer vos informations personnelles à un tiers dans le cadre de la vente d'une partie ou de la totalité de nos activités et de nos actifs à un tiers ou dans le cadre d'une restructuration ou d'une réorganisation d'entreprise, mais nous prendrons des mesures afin de garantir la protection de vos droits ;

6.1.7 pour protéger nos droits, propriété et sécurité, ou les droits, la propriété et la sécurité de nos utilisateurs ou d'autres tiers. Cela comprend l'échange d'informations avec d'autres sociétés et organisations à des fins de protection contre la fraude et de réduction du risque de crédit.

6.2 À l'exception de ce qui est indiqué ci-dessus, nous ne divulguerons aucune de vos informations personnelles à moins que vous nous en donniez la permission. Si nous fournissons vos informations personnelles à un tiers, nous prendrons des mesures pour garantir que vos droits de confidentialité seront protégés et que les tiers respecteront les termes de cet avis.

7. Sécurité

7.1 Nous prendrons toutes les mesures raisonnables pour nous assurer que des mesures techniques et organisationnelles appropriées sont mises en œuvre afin de protéger les informations que nous collectons auprès de vous et de vous protéger contre  un accès illégal et des pertes ou dommages accidentels. Ces mesures peuvent inclure (si nécessaire) :

7.1.1 protéger nos serveurs avec des pare-feu logiciels ;

7.1.2 localiser nos installations de stockage de traitement de données dans des emplacements sécurisés ;

7.1.3 crypter toutes les données stockées sur notre serveur avec une méthode de cryptage standard qui crypte les données entre votre ordinateur et notre serveur afin que, dans le cas d'un réseau non sécurisé, aucune donnée ne soit transmise dans un format facilement déchiffrable ;

7.1.4 lorsque cela est nécessaire, éliminer ou supprimer vos données de façon à ce qu'elles soient sécurisées ;

7.1.5 sauvegarder régulièrement toutes les données que nous détenons.

7.2 Nous veillerons à ce que nos employés soient conscients de leurs obligations en matière de confidentialité et de sécurité des données. Nous prendrons des mesures raisonnables pour nous assurer que les employés des tiers travaillant pour notre compte soient conscients de leurs obligations en matière de confidentialité et de sécurité des données.

7.3 Cette notification et nos procédures de traitement des données personnelles seront revues si nécessaire. 

7.4 Malheureusement, la transmission d'informations via Internet n'est pas totalement sécurisée. Bien que nous fassions de notre mieux pour protéger vos données personnelles, nous ne pouvons garantir la sécurité de vos données transmises au Site ; Toute transmission se fait à vos risques et périls. Une fois que nous aurons reçu vos informations, nous utiliserons les procédures strictes et les fonctions de sécurité mentionnées dans cette clause pour tenter d'empêcher tout accès non autorisé.

8. Vos droits de confidentialité

8.1 Le RGPD vous confère les droits suivants en ce qui concerne les données personnelles que nous détenons à votre sujet :

8.2 Tous les SAR et autres demandes ou notifications concernant vos droits ci-dessus doivent nous être envoyés par écrit à Harnham Search and Selection Limited, 3 ^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com

8.3 Nous nous efforcerons de répondre à ces demandes dans les plus brefs délais, mais dans tous les cas, nous nous y conformerons dans un délai d'un mois à compter de leur réception (à moins qu'un délai plus long pour répondre s'avère raisonnable en raison de la complexité ou du nombre de vos demandes).

9. Infractions aux données

9.1 Si les données personnelles que nous détenons à votre sujet font l'objet d'une violation ou d'une divulgation ou d'un accès non autorisé, nous en informerons le bureau du Commissaire à l'information (ICO) et/ou notre responsable de la protection des données.

9.2 Si une violation est susceptible d'entraîner un risque pour vos droits et libertés, nous vous en informerons dès que possible.

10. Transférer vos informations en dehors de l'Europe

10.1 Dans le cadre des services fournis à nos clients, les informations que vous nous fournissez peuvent être transférées, traitées et stockées dans des pays ou des organisations internationales en dehors de l'EEE.

10.2 Notre client peut être basé hors de l'EEE et nous pouvons transférer des données personnelles à notre client en dehors de l'EEE. Par exemple, nous pouvons transférer des informations sur les candidats à notre client en dehors de l'EEE lorsque cela est nécessaire pour exécuter un contrat entre nous et le client et cela sera dans l'intérêt du candidat.

10.3 Les données peuvent être traitées par nos sociétés du groupe situées en dehors de l'EEE, mais nous veillerons à ce que toutes les données accessibles par nos sociétés du groupe soient soumises à un accord de transfert de données ou à des règles d'entreprise contraignantes.

10.4 Si vous nous contactez pendant que vous êtes en dehors de l'EEE, vos informations pourront être transférées en dehors de l'EEE afin de communiquer avec vous.

10.5 Si nous transférons vos informations en dehors de l'EEE autrement que conformément à la présente clause et si le pays tiers ou l'organisation internationale en question n'a pas été considéré par la Commission européenne comme disposant de lois adéquates sur la protection des données, nous fournirons des garanties appropriées et nous serons tenus de veiller à ce que vos droits à la protection de la vie privée continuent d'être protégés comme indiqué dans cet avis.

11. Notification des modifications aux contenus de cet avis

Nous afficherons les détails de toute modification apportée à notre politique sur www.harnham.com pour vous assurer que vous êtes toujours au courant des informations que nous collectons, de la façon dont nous les utilisons et dans quelles circonstances, le cas échéant, nous les partageons avec d'autres parties.

12. Nous contacter

Si, à tout moment, vous souhaitez nous contacter pour nous faire part de vos opinions sur nos pratiques de confidentialité, ou pour toute réclamation ou réclamation relative à vos informations personnelles ou à leur traitement, vous pouvez le faire via l'adresse suivante : Harnham Search and Selection Limited, 3^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com

Si nous ne sommes pas en mesure de résoudre les problèmes que vous pourriez rencontrer ou si vous souhaitez déposer une autre plainte, vous pouvez contacter le Commissariat à l'information en visitant https://www.ico.org.uk/ pour obtenir de l'aide.

DATENSCHUTZERKLÄRUNG 

Harnham Search and Selection

Datenschutzerklärung

1. Allgemeines

1.1 Harnham Search and Selection Limited und seine Konzernunternehmen („wir", „uns" oder „Harnham") nehmen den Schutz Ihrer Daten sehr ernst. Diese Datenschutzerklärung soll Sie über unsere Praktiken bezüglich der Erfassung, Nutzung und Offenlegung von personenbezogenen Daten informieren - diese können persönlich von Ihnen gesammelt, über unsere Websites erhalten oder auf andere Weise, beispielsweise durch ein Onlineformular, eine E-Mail oder eine Telefonkommunikation gesammelt werden.

5.2 Für jede Kategorie personenbezogener Daten, die nicht ausdrücklich in dieser Mitteilung definiert ist, und wenn nicht durch geltendes Recht anders bestimmt, gilt der festgelegte Archivierungszeitraum von 7 Jahren ab dem Datum, an dem wir die Daten erhalten haben.

6. Teilen Ihrer Daten

Harnham GmbH

Privacy Notice

1. General
   • For the purposes of applicable data protection law (in particular, the General Data Protection Regulation (EU) 2016/679 ("GDPR")) your data will be controlled by Harnham GmbH ("we", "us" or "Harnham").
   • This Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal data ("data"), i.e. all information relating to you, which may be collected in person from you, obtained via our websites or collected through other means such as by an online form, email, or telephone communication.
   • This notice applies to personal data provided by our clients and suppliers about their employees and other individuals affiliated with them and also to candidates or prospective candidates ("Candidates") whose personal data we process for proposed roles with our clients or prospective clients. Where a given role with our client is to be filled by a limited company or other corporate contractor we may process personal data relating to that company's directors or shareholders and in this Privacy Notice a "Candidate" may include directors and shareholders of corporate contractors.
   • In this notice "you" refers to any individual whose personal data we hold or process (i.e: an individual candidate or potential candidate, an individual affiliated with a corporate contractor candidate, or an individual or employee associated or affiliated with our client or supplier).
   • In general, our services are related to the provision of recruitment services to clients and Candidates, and the provision of recruitment and market related information to clients and Candidates, and we do not process personal data on a large scale, but we will hold certain data in relation to Candidates and individuals affiliated with our clients and suppliers, and this notice sets out the basis on which we hold that data.
2. Personal data we collect
   • We may collect and process the following personal data about you:
     • for individuals associated with our clients we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Client Contact Information");
     • for individuals associated with our suppliers and other third parties we interact with we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Third Party Contact Information");
     • for Candidates we may have personal data about you, your background, work history etc. This information may include name, address, telephone number, email address, CV, work history, educational qualifications ("Candidate Information");
     • a record of any correspondence or communication between you and us ("Communication Information");
     • marketing information we may hold about you in order to provide information about our services (as set out in clause 1.4); this may include names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Marketing Information");
     • technical, profile and usage data, including passwords to Harnham websites, your preferences in receiving marketing information from us, your communication preferences. To learn more about our use of cookies or similar technology please check our Cookies Policy.
   • We will collect information either from you directly or from a third party (for instance your employer, a job site or social media platform you have registered with, or an introducer). If we do obtain your personal data from a third party your privacy rights under this notice are not affected and you are still able to exercise the rights contained within this notice.
   • Although you do not have to supply any personal data to us in practice we may be unable to provide our services to you without personal data (for instance we will need contact information in order to communicate with you). You may withdraw our authority to process your personal data (or request that we restrict our processing) at any time but there are circumstances in which we may need to continue to process personal data (please see below).
3. How we process your personal data
   • Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

For each type of data listed above, definitions are included under clause 2.1.

4. Website
   • Google Analytics

If you consent, we will use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA ("Google"). Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the U.S. and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analysis and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the U.S. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c) GDPR.

Your data remains stored with Google Analytics for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google's privacy policy .

The use of Google Analytics is based on your consent (Art 6 Para 1 lit a) GDPR).

You can withdraw your consent at any time and deactivate Google Analytics using a browser add-on. Alternatively, you can withdraw your consent by clicking on "Privacy Settings" at the bottom of the page.

• Integrated third-party content

We have also included third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it is not excluded that these providers can take note of the IP address assigned to you. As far as personal data is processed, this is done on the basis of the data protection declarations of the respective third party providers. The integration by us takes place on the basis of our legitimate interests, to be able to provide our users with the appropriate content and functionalities and to operate our website economically, as well as the fact that your legitimate interests do not prevail, Art 6 Para 1 lit f) GDPR. We include the following third-party content:

YouTube

We use YouTube videos. YouTube is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

• Facebook Fanpage

You can also find us on Facebook at https://www.facebook.com/HarnhamDataandAnalytics.

When you visit our Facebook fan page, we process certain data about you when you interact with our page, mark a post with "Like" or comment on it, or provide other content. The data processing in this regard takes place regularly on the basis of our legitimate interest in providing the corresponding functions on our Facebook fan page, as well as on your consent to Facebook (Art 6 Para 1 lit a) GDPR) or your contractual relationship with Facebook (Art 6 Para 1 lit b) GDPR). In addition, together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, we are responsible for the processing of so-called Insights data when you visit our Facebook fan page.

With the help of this Insights data, Facebook analyses the behaviour on our Facebook fan page and provides us with this data in an anonymous form. For this purpose, we have concluded an agreement on the shared responsibility of data processing with Facebook Ireland Ltd., here. Facebook Ireland Ltd. among other things, undertakes to assume primary responsibility in accordance with the GDPR for the processing of Insights data and to fulfil all obligations under the GDPR with regard to the processing of Insights data. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook fan page, Art 6 Para 1 lit f) GDPR. We also draw your attention to the following:

If you, as a registered Facebook user, visit or like our Facebook page, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook") collects personal data from you. If you are not registered on Facebook and visit the Facebook page, Facebook can collect pseudonymous usage data from you.

The following information is collected by Facebook:

• View a page, post, or video from a page
• Subscribe to or unsubscribe from a page
• Mark a page or a post with "Like" or "Unlike"
• Recommend a page in a post or comment
• Comment, share, or respond to a page post (including the type of response)
• Hide a page post or report it as spam
• From another page on Facebook or from a website outside of Facebook, click on a link that leads to the page
• Move the mouse over the name or profile picture of a page to see a preview of the page content
• Click on the website, telephone number, "plan route" button or another button on a page
• Information about whether you are logged in using a computer or a mobile device while visiting or interacting with a page or its content.

You can find more information in Facebook's data protection information here.

Facebook also processes the data in the U.S. There is no adequacy decision by the EU Commission for the U.S. Therefore, with Facebook, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c) GDPR.

You can find out more about how Facebook uses your data when you visit or like our Facebook page here.

5. Data Retention
   • Unless otherwise stated, we will delete or anonymise your personal data as soon as it is no longer required for the purposes for which we collected or used it. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website plus a period of 30 days in which we keep backup copies after the deletion.
   • As far as data has to be kept for legal reasons, processing is restricted. The data will then no longer be available for further use.
   • Storage beyond the contractual relationship takes place on the basis of our legitimate interests in accordance with Art 6 Para 1 lit f GDPR.
   • The retention periods stated in this notice can be prolonged or shortened as may be required (for example, in the event that legal proceedings apply to the data or if there is an on-going investigation into the data).
   • We review the personal data (and the categories of personal data) we are holding on a regular basis to ensure the data we are holding is still relevant to our business and is accurate. If we discover that certain data we are holding is no longer necessary or accurate, we will take reasonable steps to correct or delete this data as may be required.
   • If you wish to request that data we hold about you is amended or deleted, please refer to clause 8 below, which explains your privacy rights.
6. Sharing your information
   • We do not disclose any information you provide to any third parties other than as follows:
     • We will disclose Candidate Data to our clients or potential clients and our clients will be the data controller for that Candidate Data;
     • We may disclose information to our group companies;
     • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);
     • in order to enforce any terms and conditions or agreements for our services that may apply;
     • If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;
     • we may transfer your personal data to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, but we will take steps with the aim of ensuring that your privacy rights continue to be protected;
     • to protect our rights, property and safety, or the rights, property and safety of our users or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
   • Other than as set out above, we shall not disclose any of your personal data unless you give us permission to do so. If we do supply your personal data to a third party we will take steps to ensure that your privacy rights are protected and that third party complies with the terms of this notice.
7. Security
   • We will take all reasonable steps to ensure that appropriate technical and organisational measures are carried out in order to safeguard the information we collect from you and protect against unlawful access and accidental loss or damage. These measures may include (as necessary):
     • protecting our servers with software firewalls;
     • locating our data processing storage facilities in secure locations;
     • encrypting all data stored on our server with an industry standard encryption method that encrypts the data between your computer and our server so that in the event of your network being insecure no data is passed in a format that could easily be deciphered;
     • when necessary, disposing of or deleting your data so it is done so securely;
     • regularly backing up all data we hold.
   • We will ensure that our employees are aware of their privacy and data security obligations. We will take reasonable steps to ensure that the employees of third parties working on our behalf are aware of their privacy and data security obligations.
   • This notice and our procedures for handling personal data will be reviewed as necessary.
   • Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use the strict procedures and security features referred to in this clause to try to prevent unauthorised access.
8. Your privacy rights
   • The GDPR gives you the following rights in respect of personal data we hold about you:

• Data processing when exercising your rights

Finally, we would like to point out that we process your personal data when exercising your rights according to Art 15 - 22 GDPR transmitted by you for the purpose of implementing these rights and in order to be able to provide proof of this. This processing is based on the legal basis of Art 6 Para 1 lit c) GDPR in conjunction with Art 15 - 22 GDPR and Section 34 Para 2 BDSG.

• To exercise your rights, you can reach out to us by post or email to the address mentioned below (section "Contact Us")

9. Data Breaches
   • If personal data we hold about you is subject to a breach or unauthorised disclosure or access, we will report the competent data protection authority and/or our data protection manager.
   • If a breach is likely to result in a risk to your data rights and freedoms, we will notify you as soon as possible.
10. Transferring your information outside Europe
    • As part of the services provided to our clients offered to you the information you provide to us may be transferred to, processed and stored at, countries or international organisations outside of the EEA.
    • Our client may be based outside of the EEA and we may transfer personal data to our client outside of the EEA. For instance we may transfer Candidate Information to our client outside of the EEA where this is necessary to perform a contract between us and the client and this is in the interests of the Candidate.
    • Data may be processed by our group companies based outside of the EEA, but we will ensure that any data accessible by our group companies will be subject to a data transfer agreement or binding corporate rules to maintain your rights as a data subject.
    • If you contact us while you are outside the EEA, your information may be transferred outside the EEA in order to communicate with you.
    • If we transfer your information outside of the EEA other than in accordance with this clause and the third country or international organisation in question has not been deemed by the EU Commission to have adequate data protection laws, we will provide appropriate safeguards and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this notice. We adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c GDPR.
11. Notification of changes to the contents of this notice

We will post details of any changes to our Privacy Notice on www.harnham.com to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.

12. Contact us

If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal data or how it is handled, you can do so via the following address:

Harnham GmbH, Skalitzer Str. 104, 10997 Berlin or dataprotection@harnham.com.

Status as of 1 December 2022

Privacy Statement for Harnham B.V.

Last updated 1 April 2023

1. General

1.1 Harnham B.V. together with its group companies ("we", "us" or "Harnham") take the privacy of your information very seriously. This Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal information which may be collected in person from you, obtained via our websites or collected through other means such as by an online form, email, or telephone communication.

1.2 This notice applies to personal information provided by our clients and suppliers about their employees and other individuals affiliated with them and also to candidates or prospective candidates ("Candidates") whose data we process for proposed roles with our clients or prospective clients. Where a given role with our client is to be filled by a limited company or other corporate contractor we may process data relating to that company's directors or shareholders and in this policy a "Candidate" may include directors and shareholders of corporate contractors.

1.3 In this notice "you" refers to any individual whose personal data we hold or process (i.e: an individual candidate or potential candidate, an individual affiliated with a corporate contractor candidate, or an individual or employee associated or affiliated with our client or supplier).

1.4 In general, our services are related to the provision of recruitment services to clients and Candidates, and the provision of recruitment and market related information to clients and Candidates, and we do not process personal data on a large scale, but we will hold certain data in relation to Candidates and individuals affiliated with our clients and suppliers, and this notice sets out the basis on which we hold that data.

1.5 This notice is governed by the EU General Data Protection Regulation (the "GDPR") from 25 May 2018. This Privacy Notice is applicable as of 11 April 2023 and supersedes all previous versions.

2. Legal Basis on which we process personal data

2.1  Personal data we hold about you will be processed either because:

2.1.1 the processing is necessary in order for us to comply with our obligations under a contract between you and us, specifically for the provision of our services; or

2.1.2 the processing is necessary in pursuit of a "legitimate interest", a legitimate interest in this context means a valid interest we have or a third party has in processing your personal data which is not overridden by your interests in data privacy and security;

2.1.3 for certain 'special categories' of sensitive personal data including data relating to health and ethnic background which we may process from time to time we will process this data on the basis of your consent.

3. Personal data we collect

3.1  We may collect and process the following personal data (information that can be uniquely identified with you) about you:

3.1.1 for individuals associated with our clients we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Client Contact Information");

3.1.2 for individuals associated with our suppliers and other third parties we interact with we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Third Party Contact Information");

3.1.3 for Candidates we may have personal information about you, your background, work history etc. This information may include name, address, telephone number, email address, CV, work history, educational qualifications ("Candidate Information");

3.1.4 a record of any correspondence or communication between you and us via e-mail, social media networks, video calls and interviews and chatbots for Candidates ("Communication Information");

3.1.5 marketing information we may hold about you in order to provide information about our services (as set out in clause 1.4); this may include names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Marketing Information").

3.2 We will collect information either from you directly or from a third party (for instance your employer, a job site or social media platform you have registered with, or an introducer). If we do obtain your personal data from a third party your privacy rights under this notice are not affected and you are still able to exercise the rights contained within this notice. We only collect information from public social media platforms if we have a legitimate reason to believe that you would be interested in work or our services.

3.3  Although you do not have to supply any personal information to us in practice we may be unable to provide our services to you without personal data (for instance we will need contact information in order to communicate with you). You may withdraw our authority to process your personal data (or request that we restrict our processing) at any time but there are circumstances in which we may need to continue to process personal data (please see below).

4. How we process your personal data

4.1 Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

For each type of data listed above, definitions are included under clause 3.1.

5. Data Retention

5.1 Our current data retention policy is to delete or destroy (to the extent we are able to) the personal data we hold about you in accordance with the following:

5.2 For any category of personal data applies that personal data will not be kept longer than necessary for the purpose for which the data was collected.

5.3 The retention periods stated in this notice can be prolonged or shortened as may be required (for example, in the event that legal proceedings apply to the data or if there is an on-going investigation into the data).

5.4 We review the personal data (and the categories of personal data) we are holding on a regular basis to ensure the data we are holding is still relevant to our business and is accurate. If we discover that certain data we are holding is no longer necessary or accurate, we will take reasonable steps to correct or delete this data as may be required.

5.5 If you wish to request that data we hold about you is amended or deleted, please refer to clause 8 below, which explains your privacy rights.

6. Sharing your information

6.1  We do not disclose any information you provide to any third parties other than as follows:

6.1.1 We will disclose Candidate Data to our clients or potential clients and our clients will be the data controller for that Candidate Data;

6.1.2 We may disclose information to our group companies;

6.1.3 if we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);

6.1.4 in order to enforce any terms and conditions or agreements for our services that may apply;

6.1.5 If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;

6.1.6 we may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, but we will take steps with the aim of ensuring that your privacy rights continue to be protected and we will inform you about this;

6.1.7 to protect our rights, property and safety, or the rights, property and safety of our users or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

6.2 Other than as set out above, we shall not disclose any of your personal information unless you give us permission to do so. If we do supply your personal information to a third party we will take steps to ensure that your privacy rights are protected and that third party complies with the terms of this notice.

7. Security

7.1 We will take all reasonable steps to ensure that appropriate technical and organisational measures are carried out in order to safeguard the information we collect from you and protect against unlawful access and accidental loss or damage. These measures may include (as necessary):

7.1.1 protecting our servers with software firewalls;

7.1.2 locating our data processing storage facilities in secure locations;

7.1.3 encrypting all data stored on our server with an industry standard encryption method that encrypts the data between your computer and our server so that in the event of your network being insecure no data is passed in a format that could easily be deciphered;

7.1.4 when necessary, disposing of or deleting your data so it is done so securely;

7.1.5 regularly backing up all data we hold.

7.2 We will ensure that our employees are aware of their privacy and data security obligations. We will take reasonable steps to ensure that the employees of third parties working on our behalf are aware of their privacy and data security obligations.

7.3 This notice and our procedures for handling personal data will be reviewed as necessary.

7.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use the strict procedures and security features referred to in this clause to try to prevent unauthorised access.

8. Your privacy rights
   • The GDPR gives you the following rights in respect of personal data we hold about you:

8.2  All SARs and other requests or notifications in respect of your above rights must be sent to us in writing to Harnham B.V., Herengracht 124, 128, 1015 BT, Amsterdam, dataprotection@harnham.com.

8.3 We will endeavour to comply with such requests as soon as possible but in any event we will comply within one month of receipt (unless a longer period of time to respond is reasonable by virtue of the complexity or number of your requests).

9. Data Breaches

9.1 If personal data we hold about you is subject to a breach or unauthorised disclosure or access, we will report this to the Information Commissioner's Office (ICO) and/or our data protection manager.

9.2 If a breach is likely to result in a (high) risk to your data rights and freedoms, we will notify you and to the relevant supervisory authority as soon as possible.

10. Transferring your information outside Europe

10.1 As part of the services provided to our clients offered to you the information you provide to us may be transferred to, processed and stored at, countries or international organisations outside of the Economic European Area (EEA).

10.2 Our client may be based outside of the EEA and we may transfer personal data to our client outside of the EEA. For instance we may transfer Candidate Information to our client outside of the EEA where this is necessary to perform a contract between us and the client and this is in the interests of the Candidate.

10.3 Data may be processed by our group companies based outside of the EEA, but we will ensure that any data accessible by our group companies will be subject to a data transfer agreement or binding corporate rules to maintain your rights as a data subject.

10.4 If you contact us while you are outside the EEA, your information may be transferred outside the EEA in order to communicate with you.

10.5 If we transfer your information outside of the EEA and the third country or international organisation in question has not been deemed by the EU Commission to have adequate data protection laws, we are required to ensure that the transfer is subject to an equivalent level of protection as it would within the EEA, including by concluding Standard Contractual Clauses approved by the European Commission with the receiving party in such third country. We take the appropriate (supplemental) necessary safeguards to ensure that your data is kept securely and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this notice and the applicable laws.

11. Notification of changes to the contents of this notice

We will post details of any changes to our policy on www.harnham.com to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.

12. Contact us

If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is handled, you can do so via the following address: Harnham B.V., Herengracht 124, 128, 1015 BT, Amsterdam, dataprotection@harnham.com.

If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap

GENERAL PRIVACY POLICY

Last Updated on: March 22^nd, 2023

Harnham Corporation (together with its relevant subsidiaries, associates, and affiliated companies, “Harnham”, “Company”, “we”, “us” or “our”) respects your right to privacy. This General Privacy Policy (“Privacy Policy”) will provide you with information regarding how Harnham collects, uses, and discloses information about you, including the choices we offer with respect to that information.

It is the Company’s policy to comply with all applicable consumer privacy and data protection laws, including the choices we offer with respect to your personal information, as defined by applicable laws. This commitment reflects the value we place on earning and keeping the trust of our customers, business partners, and others who disclose their personal information with us.

This Privacy Policy applies to the Company’s website (the “Website”), located at www.Harnham.com. It also applies to personal information we may otherwise collect: (i) through our products and services; (ii) when you interact with us by means other than the Website, for example, in person or by telephone; (iii) from our distributors, suppliers, vendors, and other business partners (collectively “Business Partners”); and (iv) from your company or employer. We encourage you to read this Privacy Policy in full before using the Website or any other online service that posts a link to this Privacy Policy, opening our e-mails or otherwise submitting personal information to us (collectively, the “Service” or our “Services”). For certain Services, there may be additional notices about information practices and choices. Please read those additional privacy disclosures to understand how they apply to you.

By visiting or otherwise using the Service, you agree to this Privacy Policy.

To see and print our full Privacy Policy, click here. Our website has an accessibility tool integrated into the site and pages. More information on this service can be found at this link: www.harnham.com/accessibility. If you are visually impaired, and wish to view this Privacy Policy using a screen reader or setup your device to make this page more accessible, the National Federation for the Blind recommends the KNFB Reader App (https://nfb.org/programs-services/knfb-reader) and the UK Royal National Institute for the Blind also has information for setting up and optimizing Microsoft Windows and Apple Mac OS operating system tools: https://www.rnib.org.uk/living-with-sight-loss/assistive-aids-and-technology/tech-support-and-information/computers/computer-accessibility/.

I.                    Information We Collect

To the extent required by applicable law, whenever the Company collects personal information, we will:

• provide timely and appropriate notice to you about our data practices through this Privacy Policy;
• collect your personal information only for specified and legitimate purposes. The information we collect will be relevant, adequate and not excessive for the purposes for which it is collected;
• process your personal information in a manner consistent with the purposes for which it was originally collected or to which you have subsequently consented; and
• not use your personal information for direct marketing purposes without giving you an opportunity to opt-out.

Harnham, and/or its Service Providers (defined below), may collect information that you provide directly to Harnham and/or its Service Providers via the Service. For example, Harnham collects information when you use or register for the Service, apply for a position for which we are recruiting on behalf of a Client (“Client(s)”) subscribe to notifications, contact us via the Contact Us form, participate in promotional activities, or communicate or transact through the Service. Harnham may also collect information about you from our Clients or your current or former employers to enable us to provide services to you or Harnham’s Clients. In addition, when you interact with Third-Party Services (defined below), you may be able to provide information to those third parties. For more information on Third-Party Services’ data collection and practices please refer to the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section. For more information on Service Provider data collection practices please refer to the Information We Disclose to Third Parties section.

Information Harnham, its Service Providers and/or Third-Party Services may collect includes personal information you provide us, which may include: (i) contact information, such as your name, company name, job title, address, e-mail address, and phone number; (ii) information about your education and work history (iii) additional information about how you use our products or services; (iv) comments, questions, requests, and other communications between you and Harnham; (v) information about your personal characteristics and traits from employment references; and (vi) information about your preferences, such as your preferred methods of communication and the types of products and services in which you are interested.

II.                  Information Collected Automatically

Harnham, its Service Providers, and/or Third-Party Services may also automatically collect certain information about you when you access or use the Service, including as follows:

Device and Browser Information:

The Company may collect technical information about your device, such as device type, browser type, IP address, operating system, and device identifier. The Company collects this information automatically from your device and web browser through cookies and similar technologies.

Information About How You Interact with Us:

The Company may collect technical data about your usage of the Website and how you interact with our digital advertisements and promotions, such as content viewed or downloaded, features used, links clicked, Company promotional emails opened, and dates and times of interactions. The Company collects this information using cookies and similar technologies.

Location Information:

The Company may collect location information from your device and imprecise location information derived from, for example, your IP address or postal code.

For more information on Third-Party Services’ data collection and practices please refer to the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section. For more information on Service Provider data collection practices please refer to the Information We Disclose with Third Parties section. For information on choices some of these third parties may offer you regarding automated data collection, please refer to the Choices: Tracking and Communications section.

The methods we use to automatically collect your information (“Tracking Technologies”) include:

Cookies
A cookie is a small text file that is stored on a user’s device, which may be session ID cookies or tracking cookies. Session cookies make it easier for you to navigate the Service and expire when you close your browser. Tracking cookies remain longer and help in understanding how you use the Service and enhance your user experience. Cookies may remain on your hard drive for an extended period. If you use your browser’s method of blocking or removing cookies, some but not all types of cookies may be deleted and/or blocked, and as a result, some features and functionalities of the Service may not work. For information on how to do this on the browser of your mobile phone or tablet you will need to refer to your device manual. Please note that you will not be able to opt out of receiving certain cookies that are strictly necessary for the delivery of a service requested by you.

The Website uses “session cookies.” A session cookie does not identify you personally and expires after you close your browser. The Website also uses “persistent cookies.” These cookies do not expire when you close your browser. Persistent cookies stay on your computer until you delete them or they expire. By assigning your computer a unique identifier, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits.

Web Beacons (“Tracking Pixels”)

Web beacons are small graphic images, also known as “Internet tags” or “clear gifs,” embedded in web pages and e-mail messages. Web beacons may be used, without limitation, to count the number of visitors to the Service, to monitor how users navigate the Service, and to count content views.

Embedded Scripts

An embedded script is programming code designed to collect information about your interactions with the Service. It is temporarily downloaded onto your computer from Harnham’s web server, or from a third party with which Harnham works and is active only while you are connected to the Service and deleted or deactivated thereafter.

Device Recognition Technologies

Technologies, including application of statistical probability to data sets, as well as linking a common unique identifier to different device use (e.g., Facebook ID), which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user or household) (“Cross-device Data”).

Device and Activity Monitoring and Session Replay

Technologies that monitor, and may record, certain of your interactions with the Service, and/or collect and analyze information from your device, such as, without limitation, your operating system, plug-ins, system fonts, and other data, for purposes such as identification, security, fraud prevention, troubleshooting, tracking and/or improving the Services and customizing or optimizing your experience on the Services. This may also include technologies that monitor and record usage sessions to help us better understand, track, and improve the usage of our Services.

Information from Clients, Business Partners, and Other Third Parties

The Company collects personal information through our Clients and Business Partners. This information may include contact information, such as name, company name, job title, address, e-mail address, and phone number. The Company may also obtain personal information from other third-party sources, including employment references and publicly and commercially available sources. We may combine the information we receive from our Clients, Business Partners, and other third-party sources with information that we collect from you or your device, as described above.

Some information about your use of the Service and certain other online services may be collected using Tracking Technologies across time and services and used by Harnham and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on the Service and certain their online services. Please refer to the Choices: Tracking and Communications section for more information regarding certain choices regarding these activities.

You have choices about the personal information you provide the Company. You may choose not to provide information that we request, but if you do so, we may not be able to provide you a relevant product or service or a particular feature of the Website.

III.                Information We Collect from Other Sources

We may also obtain information about you from other sources, including Service Providers and Third-Party Services. We are not responsible nor liable for the accuracy of the information provided to us by third parties or for third-party policies or practices.

IV.               How We Use Your Personal Information

Harnham may use your personal information for any purpose not inconsistent with our statements under this Privacy Policy, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including without limitation, to:

• DEVELOP AND MANAGE OUR RELATIONSHIPS WITH YOU AND OUR CLIENTS

This may include: (i) delivering services or carrying out transactions that you or our Clients have requested; (ii) providing information about the Company’s products, services, transactions, and advertisements, that may be of interest to you; (iii) providing you and our Clients a more consistent experience in interacting with the Company, including by learning more about you and how you use and interact with the Website, products, and services; and (iv) planning, managing, and performing under our contractual relationships with our Clients.

• COMMUNICATE WITH YOU OR our CLIENTS

This may include: (i) informing you of career opportunities, the Company’s products, services, and promotional activities that may be of interest to you or our Clients; (ii) providing information about relevant positions, Company products, services, and transactions, including, for example, technical data, information regarding your application status, interviews, and other details relevant to the recruitment process, or information about product or service improvements; (iii) responding to questions or inquiries that you make, including customer service requests; and (iv) inviting you to participate in, or informing you of the results of, customer satisfaction or market research surveys.

• PROVIDE AND IMPROVE OUR WEBSITE, PRODUCTS, AND SERVICES

This may include: (i) customizing them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; (ii) maintaining the security of and otherwise protecting our Services; and (iii) developing new Company Websites, products, and services.

• ADDRESS LEGAL ISSUES

This may include: (i) complying with our obligations to retain certain business records for minimum retention periods; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal process; (iv) detecting, preventing, and responding to fraud, intellectual property infringement, violation of our contracts or agreements, violations of law, or other misuse of the Website, products or services; and (v) protecting the Company’s rights or property, or yours or others’ health, safety, welfare, rights, or property.

To the extent permitted by law, Company may anonymize or aggregate any of the information we collect and use it for any purpose, including for research and product-development purposes. We will do our best to ensure the information will not identify you individually, but we do not make assurances that such information is not capable of re-identification.

V.                 Information We DISCLOSE TO Third Parties

Generally, we may disclose information about you for any purposes not inconsistent with our statements under this Privacy Policy, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including, without limitation, as described below.

• We may disclose your personal information to other Company entities and our agents, vendors, consultants, and other service providers (“Service Providers”). The Company may also disclose your personal information to Service Providers we hire to perform support services for us and to help us use your personal information as described above.
• The Company may disclose your personal information with third parties who partner with us to provide products and services to our Clients, such as background check and drug and alcohol screening vendors.
• The Company may disclose your personal information to other third parties when we have a good faith belief that disclosure is necessary: (i) to comply with a law, regulation, court order, or other legal process; (ii) to detect, prevent, and respond to fraud, intellectual property infringement, violation of our contracts or agreements, violation of law, or other misuse of the Website, products or Services; (iii) to protect the Company’s rights or property or yours or others’ health, safety, welfare, rights, or property; (iv) if the Company believes your actions are inconsistent with our user agreements, applicable terms or policies; or (v) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
• The Company may disclose your personal information to send you marketing communications, however, Harnham will not disclose your personal information to third parties for their own direct marketing purposes except in connection with corporate transactions, as set forth in the next bullet, absent your consent (which may be by means of third-party interaction described in the last bullet point).
• The Company may disclose your personal information to third parties in connection with the sale, purchase, merger, reorganization, liquidation, or dissolution of the Company, or under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
• The Company may disclose your information with your permission or at your request. As more fully described in the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section, your activities on the Service may, by their nature, result in the sharing of your information with third parties and by engaging in these activities you consent to that and further sharing and disclosure to third parties. Such third-party data receipt and collection is subject to the privacy and business practices of that third party, not Harnham.

The Company may disclose anonymized or aggregated information internally and to third parties for any purpose, to the extent permitted by law. We will do our best to ensure the information will not identify you individually, but we do not make assurances that such information is not capable of re-identification.

VI.               Third-Party content, Third-Party Services, Social Features, Advertising and Analytics

The Services may contain links to websites or mobile apps that are not operated by the Company and plugins from social media platforms and other third parties. Some examples of links to a third-party website include those websites operated by our Business Partners, suppliers, advertisers, sponsors, licensors, and other third parties. Examples of social media plugins are the option to “Share” the Website through your email, Twitter, LinkedIn, Tiktok, and Instagram (“Social Features”). The inclusion of these Social Features on the Service does not imply any endorsement of the activities or content of the related websites, apps, or social media platforms, nor any association with their operators. To learn about the information collected by these third-party websites, apps, and plugins, please visit their privacy policies. We encourage you to review the privacy policies for the websites, apps, and social media platforms you visit before using them or providing personal information.

If you use Social Features, and potentially other Third-Party Services, information you post or provide access to may be publicly displayed on the Service or by the Third-Party Service that you use. Similarly, if you post information on a Third-Party Service that references Harnham (e.g., by using a hashtag associated with Harnham in a tweet or status update), your post may be used on or in connection with the Service or otherwise by Harnham. Also, both Harnham and the third party may have access to certain information about you and your use of the Service and any Third-Party Service.

Harnham may engage and work with Service Providers and other third parties to serve advertisements on the Service and/or on other online services. Some of these ads may be tailored to your interest based on your browsing of the Service and elsewhere on the Internet, which may include use of precise location and/or Cross-device Data, sometimes referred to as “interest-based advertising” and “online behavioral advertising” (“Interest-based Advertising”), which may include sending you an ad on another online service after you have left the Service (i.e., “retargeting”).

Harnham may use Google Analytics or other Service Providers for analytics services. These analytics services may use cookies and other Tracking Technologies to help Harnham analyze Service users and how they use the Service. Information generated by these analytics services (e.g., your IP address and other usage Information) may be transmitted to and stored by these Service Providers on servers in the U.S. (or elsewhere) and these Service Providers may use this information for purposes such as evaluating your use of the Service, compiling statistic reports on the Service’s activity, and providing other services relating to Service activity and other Internet usage.

Harnham is not responsible for, and makes no representations regarding, the policies or business practices of any third parties, including, without limitation, analytics Service Providers and Third-Party Services associated with the Service, and encourages you to familiarize yourself with and consult their privacy policies and terms of use. Please refer to the Choices: Tracking and Communications Options section for more on certain choices offered by some third parties regarding their data collection and use, including regarding Interest-based Advertising and analytics.

VII.             Choices: Tracking and Communications Options

A.                 Tracking Technologies Generally

Regular cookies may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. Browsers offer different functionalities and options, so you may need to set them separately. Please be aware that if you disable or remove these technologies, some parts of the Service may not work and that when you revisit the Service your ability to limit browser-based Tracking Technologies is subject to your browser settings and limitations.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Harnham currently does not alter its practices when Harnham receives a “Do Not Track” signal from a visitor’s browser. To learn more about “Do Not Track,” you can visit https://www.allaboutdnt.com, but Harnham is not responsible for the completeness or accuracy of this third-party information.

B.                 Analytics and Advertising Tracking Technologies

As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You may choose whether to receive some Interest-based Advertising by submitting opt-outs. Some of the advertisers and Service Providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, including use of Cross-device Data for serving ads, visit https://www.aboutads.info/choices/. Some of these companies may also be members of the Network Advertising Initiative’s (“NAI”). To learn more about the NAI and your opt-out options for their members, please refer to their educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work/ and https://www.networkadvertising.org/choices/. Please be aware that even if you are able to opt out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads. Opting out only means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Harnham supports the ad industry’s Self-regulatory Principles for Online Behavioral Advertising and expects that ad networks Harnham directly engages to serve you Interest-based Advertising will do so as well, though Harnham cannot guarantee their compliance.

We may also use Google Ad Services. To learn more about the data Google collects and how your data is used by it and to opt out of certain Google browser Interest-Based Advertising, please visit here . You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Harnham is not responsible for effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

C.                 Communications

You can opt out of receiving certain promotional communications (e-mails) from Harnham at any time by following the instructions provided in e-mails to click on the unsubscribe link. Please note that your opt-out is limited to the e-mail address used and will not affect subsequent subscriptions. If you opt-out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, Harnham may, subject to applicable law, continue to send you non-promotional communications, such as those about positions you have applied to, transactions, servicing, or Company’s ongoing business relations.

VIII.           Security of Your Personal Information

Harnham maintains reasonable safeguards to protect the confidentiality, security, and integrity of your personal information. Although we use security measures to help protect your personal information against unauthorized disclosure, misuse, or alteration, as is the case with all computer networks linked to the Internet, we cannot guarantee the security of information provided over the Internet and will not be responsible for breaches of security beyond our reasonable control.

IX.               Retention of Your Personal Information

How long we keep your personal information will vary and will depend on the purpose and use of the information collected. There are legal requirements that we keep some types of data for specific periods. Otherwise, we will retain it for no longer than is necessary for the purposes for which the data was collected.

X.                  Children

The Website is not intended for children under 13 years of age. If we obtain knowledge that we have collected information regarding children under 13, we will remove such data to the extent required by applicable law.

XI.               Changes to This Privacy Policy

We reserve the right to change this Privacy Policy prospectively effective upon the posting of the revised Privacy Policy. Changes to this Privacy Policy will be posted on this website, along with information on any material changes. The Company reserves the right to update or modify this Privacy Policy at any time and without prior notice. Any modifications will apply only to the personal information we collect after posting the updated Privacy Policy. To the extent any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

XII.             International transfer

Harnham is based in the U.S. and the information Harnham and its Service Providers collect is governed by U.S. law. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service may be transferred to, processed, stored, and used in the U.S. Data protection laws in the U.S. may be different from those of your country of residence. Under such circumstances, we comply with all applicable global privacy and data protection requirements. All cross-border transfers of your information will comply with the local privacy laws of the jurisdiction from which we are transferring the data or as otherwise applicable, as well as in compliance with the terms of this Privacy Policy. Furthermore, we will provide appropriate safeguards for cross-border transfers in accordance with our legal obligations under applicable data protection laws.

XIII.           Questions About This Privacy Policy

If you have any questions about this Privacy Policy or our use of your personal information, please contact:

Harnham, Inc.
99 Water St 33rd Floor

New York, NY 10038, United States

dataprotection@harnham.com