123Insight Privacy Policy: How we use data

123Insight Ltd, a company incorporated in the United Kingdom, and its global subsidiaries (hereinafter "Forterro" or "we" or "us" or the "Forterro Group") respect the privacy of its and their customers, suppliers, business partners, contractors and other third parties ("you" or "your") with whom it interacts from day to day and in the course of business dealings.

The Controller of your personal data is the Forterro entity in respect of which your business relationship exists from time to time. These relationships could be existing, past or prospective. The personal data arises largely from existing business relationships; orders and licensing requests; contractual enquiries; discussions and negotiations; email and website enquiries that we receive; personal interactions at trade shows and conferences; direct personal referrals; and other circumstances where your information is provided to us.

This page describes the personal data that the Forterro Group collects and manages within its systems, platforms, networks, software, hardware and infrastructure, as well as all third-party systems and/or services that are integrated and/or leveraged by a Forterro company in order to process personal data. It also outlines what security measures we take to protect the integrity of your personal data.

We might amend or update this policy from time to time to update our processes or comply with changes made in relevant law. We recommend that you visit this page regularly to keep up to date with how your personal data is being processed.

Last update: 2021-09-30

What type of personal data does Forterro's companies collect? 

We collect and use business contact information that you chose to give us when you, for example, download a document, register for an event, or contact a sales representative or customer support agent. We may ask you to provide us with your name, role/title, phone number, and email address. In some cases, for example when registering for an event, we may ask for additional relevant information, such as dietary requirements. Whenever we ask for personal data, our primary objective is to enhance and personalize your experience with Forterro and our solutions. 

We may also collect information about you which we receive from other sources, such as external partners and other third parties. The information collected from other sources is collected on the provision of your consent or our legitimate business interest.

Forterro does not control the content that you may post to its companies' community forums or social networks; in some cases, such content may be publicly available on the Internet. For example, our companies subscribe to services offered by LinkedIn in order to recruit employees, as well as learn more about persons who may have a legitimate interest in them and their solutions. These services are available to us based on your consent and participation on LinkedIn, as well as how you have chosen to configure your personal profile. You should carefully consider whether or not you wish to submit personal information to forums or social networks, as well as whether or not you wish to make your profile available to other users. 

Please note that the collected personal data mentioned above is not exhaustive and that Forterro's companies may also collect and process personal data to the extent this is useful or necessary for the provision of our services. 

Why do Forterro's companies collect and use your personal data? 

Customer Support: Customer support collects and processes information about you so that when you contact us regarding an incident or ticket, we can report back to you in a timely and efficient manner. 

Marketing: Our marketing team processes limited personal data in order to ensure that the promotional and educational content provided to you (e.g., emails, newsletters, webinars) is relevant. Additionally, we may use such information to carry out customer satisfaction surveys or obtain customer testimonials, comments, or reviews. Unless we explicitly request your consent to process your personal data, we rely on Forterro's and your company's legitimate interest to send you relevant marketing communications. You can opt out of processing for direct marketing purposes by clicking on the "unsubscribe" link situated within any marketing emails sent to you. You also have the right to object to the processing at any time by contacting privacy@forterro.com. Where you withdraw your consent or unsubscribe (as applicable), we will retain certain personal data (only to the extent that it is absolutely required) on our "do not contact" list. 

Sales: Aligning personal data with individual goals and objective helps our sales team offer your business the best possible solution. Sales holds and manages personal data of contacts associated with customer accounts in order to manage the customer relationship. If you are not yet a customer but we see a potential future relationship, our sales team may contact you. During the first point of contact with our sales team, you have the right to request to be removed from our records. If you do wish to be removed, just tell our team and they will process your request immediately. 

Professional Services: If you are a customer, our consultants may process your information in order to fulfill their duties as part of your Service Agreement. 

Human Resources: If you have applied for a job at one of our companies or have registered your information in the career site for a potential future job opportunity, please read each company's separate privacy policy on recruitment.

Legal/Finance: If you are entering into or have entered into an agreement with us, we will process business contact information in order to negotiate, draft, and enter into an agreement with you, and for the ongoing management of the legal and financial obligations in respect of such agreement. Additionally, we may use such information for the purpose of seeking financial, taxation or legal advice, if required.

When we process your personal data, we do so on one of the following legal bases:

  • Performance of a contract: The use of your personal data may be necessary to perform the contract that you have with one of our companies, for instance as it relates to your potential employment or engagement.  
  • Consent: We may, with your consent, process your personal data for specifically expressed reasons. You can withdraw your consent at any time provided that there are no legal obligations for us to continue processing the data.
  • Legal obligation: In certain cases, we may need to process your data to handle and resolve legal disputes, for regulatory investigations and compliance, or to comply with lawful requests from law enforcement or other official authorities. 
  • Legitimate business interests: We may, where we already hold your personal data and there is an existing or potential relationship between Forterro and your company, process your personal data in the legitimate interests of Forterro and your company. This could be because you have already indicated an interest in hearing about existing or new products/or services, or we are obligated to fulfill our contractual obligations toward your company (e.g., in the provision of support or services).

How do we share your information with third parties? 

In certain circumstances, we will share your personal data within the Forterro Group of companies, as necessary, in order to develop or improve products and services, or provide services and fulfill our contractual obligations. We may also share your personal data with third parties for a specific purpose or to undertake a specific task on our behalf. This could include using your information for marketing and market research if we think one of our products, services, or offers or those of our third party partners may interest you. Where Forterro shares your personal data with third parties, we ensure that relevant agreements are in place according to applicable data protection law, and we only share the personal data that is necessary for Forterro to use or provide the relevant services, as applicable, or with your consent where explicitly required. Forterro does not sell your personal data.

Our subsidiaries in India and the United States (if applicable to your product or service) have access to read-only personal data required to resolve support tickets. In accordance with our standard support and maintenance agreements, we do not store, manage, or remove any personal data in India. We may need to download a customer's database in cases where we need to perform extensive testing. Downloading a customer database will only occur when we have explicit approval from a customer. In those cases, we do not store, manage, share, alter or remove any personal data kept within the database after the ticket is closed.

As we have integrated our products with other systems we work together with third party partners to provide the best possible product for our customers. In certain cases, we may need to provide our third-party partners with your personal data in order for them to contact you regarding the use and integration of their product. We will always ask for your permission before doing so.

When we arrange external activities, such as events, we may need to share your information with external parties, such as event coordinators and facility providers. In those cases, we will only provide any information deemed necessary in order to provide you with the best experience during your meeting with us. Any sensitive information you provide us, such as allergies or other health-related information, will only be shared in accordance with local laws.

We may undertake the carrying out of customer satisfaction or engagement surveys, reviews, or feedback sessions, in order to improve our products or services, or support strategic objectives. We may do this ourselves or through a third party, and we do so on the basis of our legitimate business interests.

We often publish pictures and videos of our customers (typically either at their facility, our offices, or at an event). Any personal data, including images, used for promotional or educational purposes is governed by our Media Release agreement, which can be revoked by an individual at any time by contacting the marketing department.

We use recruiting firms in the process of finding a new colleague. If you want to read more, please read our separate privacy policies on recruitment.

We use third-party system providers (such as, marketing automation systems, CRM systems, Professional Services automation systems, web site tracking systems, etc.), to process data about our customers or future potential customers. Third party system providers are bound by confidentiality clauses and relevant data processing agreements and are not allowed to process your personal data for other purposes than those instructed by one of our companies. All personal data stored and managed in these systems is encrypted and secure. All systems are GDPR compliant, and we have processes in place to handle personal data removal by request, as well as the permanent removal of personal data no longer being used.

We disclose personal data to law enforcement insofar as it is required by law or is strictly necessary for the prevention, detection or prosecution of criminal acts and fraud or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or properties, or the rights and properties of our business partners.

When third parties are given access to personal information, we will take appropriate contractual, technical and organizational measures designed to ensure that personal information is processed only to the extent that such processing is necessary, consistent with this Privacy Policy, and in accordance with applicable law.

Transfer of your personal data to third countries

We generally process your personal information within the EU/EEA. Should personal data be transferred outside EU/EEA, such transfers shall be in accordance with applicable data protection laws and require the receiving entity, if located in a country outside EU/EEA, to have adequate levels of data protection and safeguards in place. The transfer is based on the legal basis outlined in the "Why do Forterro's companies collect and use your personal data?" section above.

What security measure do we take to safeguard your personal data? 

In accordance with GDPR, we observe reasonable procedures to prevent unauthorized access to, and the misuse of, personal data.

We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorized personnel are permitted to access personal data in the course of their work.

How can you control the personal information you have provided to us? 

We take responsibility for your personal data very seriously. You have the right to review the personal information we keep about you. You can request an overview of your personal data by emailing us at privacy@forterro.com. Please write 'Request personal information' in the subject line of your email to speed things along a bit. 

You can also contact us if you believe that the personal information we have for you is incorrect; if you believe that we are no longer entitled to use your personal data; or if you have any other questions about how your personal information is used or about this Privacy Policy. You can also ask us to erase or delete all or some of the information about you, in accordance with GDPR and local laws. Limitation or deletion of your personal data may result in Forterro not being able to fulfill its commitments to you or your company. In any of these circumstances or you have any questions about how your personal data is processed, please email us to contact our DPO at privacy@forterro.com.