Last updated: April 28th, 2022.
Personal Information provided by you
When you register for our Services, we may collect your first and last name, user name, and email address.
Business contact information
We may receive professional contact details of employees and other individuals associated with our customers, partners and vendors, such as first and last name, email address, phone number, title and department, and other Personal Information relevant to the particular business relationship.
Communication with Holistic
When you contact us via a contact form, via email, via our helpdesk or by any other means (e.g., to request a demo, to request technical support, to download content, to ask a question via our online contact form), you may provide us with your name, email address, phone number, mailing address, company, title or role and the contents and nature of your correspondence with us.
Notifications and marketing messages.
When you sign up to receive our newsletters, you may provide us with your name, email address, company and title/role, depending on the sign-up form that you use.
Personal Information we collect from other sources
We may receive Information about you from other third parties whom you have authorized to share Your Information or who collect Your Information in connection with co-branded offerings.
How we use your Personal Information
We use Personal Information to provide, maintain and improve our Services and to provide and deliver our Services to you, including processing transactions.
Communicating with you
We use your contact details to contact you for administrative purposes (e.g., to send you confirmations, invoices, technical notices, updates and security alerts, to provide customer services and information that you request or to respond to comments and questions) or to follow up with you if you have indicated an interest in our products, services or business.
Marketing and interest-based advertising
Analytics, benchmarking and product development
We and our service providers use Personal Information, such as your interactions with our Services (including Personal Information collected via automated means), to perform benchmarking, to monitor and analyze usage of our Services, and to improve and enhance them.
We may use your Personal Information to enforce this Policy and our Terms of Service, to defend our legal rights and to comply with our legal obligations and internal policies.
For Holistic users located in the European Economic Area, the United Kingdom or Switzerland (“Europe”), the following legal grounds apply:
In certain cases, you will have consented to us using your Personal Information, for example to send marketing communications (where applicable law requires such consent), to collect information via certain cookies and similar technologies.
In other situations, we need your Personal Information to provide you with our Services, including for account registration and to respond to your inquiries.
In certain situations, we have a legal obligation to use your Personal Information, for example certain laws or regulations in certain territories may require us to disclose Personal Information for compliance.
In other situations, we or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in processing your Personal Information (a) to reach out to you on an individual basis if you have expressed an interest in our products, services or other content we offer via the Services, (b) for product development and improvement and internal analytics purposes, and (c) otherwise to improve the safety, security and performance of our Services. We only rely on our or a third party’s legitimate interests to process your Personal Information when these interests are not overridden by your fundamental rights and freedoms.
A "cookie" is a small text file that is placed onto a browser or device to record information related to the use of a device or a website. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. We and third parties automatically collect the following Personal Information via cookies, web beacons and/or similar technologies (collectively “cookies”) in your browser and in emails sent to you:
Information about your use of the Platforms
Including when and how many times you access our Platforms, pages viewed, and the page you visited before navigating to our Platforms.
Including the hardware model, operating system and version of the device that you use to access the Platforms, unique device identifiers and IP address.
Strictly necessary cookies
These cookies allow core website functionality such as user login and account management. Our relevant Services cannot function properly without these cookies.
We use these cookies to remember user preferences, e.g., language, timezone, and enhanced content, which allows us to personalize your experience with our Services.
We and certain third parties, such as content providers and banner networks, use these cookies to track activity of users of our Services over time and across the web. The cookies allow companies to engage in interest-based advertising, as described above.
How we share your Personal Information
We may disclose Personal Information to third parties if you consent to us doing so, as well as in the following circumstances:
We work with third party service providers to operate our Services, IT-hosting and maintenance, marketing, accounting and other services for us (e.g. Marketo). These third parties may have access to or process your Personal Information as part of providing those services for us.
We may disclose your Personal Information if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws, in response to a court order, judicial or other government subpoena or warrant, or otherwise in cooperation with law enforcement or other governmental agencies.
We also reserve the right to disclose your Personal Information that we believe, in good faith, is appropriate or necessary to (i) guard against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of our Services and any facilities or equipment used to make our Services available, or (v) protect our property or other legal rights, including to enforce our agreements, or the rights, property, or safety of others.
Merger or other corporate transactions
Information about our users, including Personal Information, may be disclosed and otherwise transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
Aggregated and de-identified Information
We aggregate and de-identify your Personal Information so that the information no longer relates to you individually. We may use and disclose aggregated and de-identified data to third parties for a lawful purpose (such as to conduct research collaborations on data usage patterns with universities or to share Platform usage patterns or statistics with customers or business partners).
How long we retain your Personal Information
We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period.
When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
How we transfer your Personal Information
We transfer your Personal Information to countries other than the country where you are located, including to the United States or any other country in which we or our service providers maintain facilities. This includes transfers to:
- countries for which adequacy decisions have been issued (which means any country recognized by the European Commission as providing an adequate level of protection);
- third parties covered by contractual protections (the ‘standard contractual clauses’ of the European Commission); and
- as otherwise permitted by applicable legal requirements.
How we secure your Information
We take appropriate security measures on both a technical and an organizational level, designed to keep your Personal Information secure. Our technical, administrative and physical procedures are designed to protect Personal Information from loss, theft, misuse and accidental, unlawful or unauthorized access, disclosure, alteration, use and destruction. The transmission of data via the internet is not completely secure, and we cannot guarantee the security of your information.
You also share responsibility for maintaining the privacy and security of your Personal Information, for example, by not allowing any third party to use your personal account to the Services and avoiding all other non-authorised access to your login and access code. We encourage you to immediately notify us of any unauthorized use of your personal account by sending an e-mail to [email protected].
Marketing opt out
You can unsubscribe from our marketing communications at any time by following the instructions contained within such communications, but you may still receive administrative messages from us regarding our Services.
European Privacy Rights
If you are located in Europe, you have the right to ask for an overview of the Personal Information we process about you, and for a copy of your Personal Information. In addition, you may request us to update and correct inaccuracies, delete your Personal Information, restrict processing of your Personal Information or exercise your right to data portability to easily transfer your Personal Information to another company. In some cases, you may object to the processing of your Personal Information and where we have asked you for your consent to process your Personal Information, you can withdraw it at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before its withdrawal. The above rights may be limited under applicable law. You have the right to lodge a complaint with the supervisory authority of your residence, place of work or where the incident took place.
Our Services may contain features or links to websites and services provided by third parties. Any information you provide on third-party websites or services is provided directly to the operators of such websites or services and is subject to those operators’ policies governing privacy and security, even if accessed via our Services. We are not responsible for the content or privacy and security practices and policies of third parties to which are linked through our Services. We encourage you to consult the third parties’ privacy and security policies to learn more about how they collect and use your Personal Information.
Contacting Holistic About Your Privacy