Fair Processing Notice

Fair Processing Notice

For Website Users, Clients and Potential Clients

Vitech processes data about our website users, potential clients, and clients. This Fair Processing Notice explains what data we process, why we process it, our legal basis, how long we keep it, and your rights.

We will always make sure that any personal data is protected and treated securely. Any information that we process will be held in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other UK or EU data protection legislation.

Our contact details:
Vitech
Address: 2270 Kraft Drive, Suite 1600, Blacksburg, VA 24060

When you use our website, we will process the following personal data about you:

  • First name, last name, company, country, phone, email, title, and any inquiry you make via any informational request forms we use
  • Email when you subscribe to our blog from our website
  • Name and email when you request an on-demand resource
  • IP address / MAC address when you use the website

Why do we need it?

We need your name and contact details in order to answer your inquiry, and we process this data with your consent.

We need your IP address and MAC address for security reasons.

You have the right to unsubscribe to marketing at any time. Every email we send has an unsubscribe link. If you do choose to unsubscribe, we will keep your name and email address on a suppression list so that we don’t email you again by accident.

OUR LEGAL BASIS FOR PROCESSING PERSONAL DATA

By law, we need a legal basis for processing the personal data of a website user. We will process your data using the legal basis of consent and legitimate interests.

Consent
Consent is given where we ask you for permission to use your information in a specific way and you agree to this. Where we use your information for a purpose based on consent, you have the right to withdraw consent for this purpose at any time.

In order to answer your inquiry effectively, we may pass your details on to one of our authorized resellers who will be able to assist you further.

Legitimate interests
We have a basis to use your personal information if it is reasonably necessary for us to do so, and if it is within our “legitimate interests” (provided that the use of information is fair and does not unduly impact your rights).

For example, Vitech has a legitimate interest to process your data if you subscribe to a webinar or download content from our website. We will also keep your personal data on a suppression list so that we don’t email you again if you have opted out.

We process the following data because we have a legitimate interest:

  • the IP address and the MAC address when you visit our website enables us to keep our website secure
  • keeping your data in our system in order to keep it secure
  • your email in a suppression list so that we don’t email you again by accident
  • sending you marketing communications when you have subscribed to a webinar or downloaded any content

HOW LONG DO WE HOLD YOUR PERSONAL DATA?

We hold your data until you withdraw your consent or we deem that the data is no longer reliable and/or relevant to the legitimate interests for which it was obtained.

WHO DO WE SHARE YOUR INFORMATION WITH?

  • Our software and cloud service providers: SalesForce and Hubspot
  • Authorized resellers, if applicable

Salesforce is a Customer Relationship Management platform. Salesforce is located in the United States, which is a non-adequate country for data transfer as determined by the European Commission. Your data is protected by Salesforce as they participate in and have certified their compliance with the EU-U.S. and US-Swiss Privacy Shield Frameworks and Principles (collectively, the “Privacy Shield Principles”).

Salesforce will comply with the Privacy Shield Principles with respect to the personal data that it receives in the United States from the European Economic Area and Switzerland. You can review the Privacy Shield Principles, learn more about Privacy Shield, and view Salesforce’s Privacy Shield certification at https://www.privacyshield.gov/. Salesforce’s commitments under the Privacy Shield are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

HubSpot provides digital marketing automation services. HubSpot is located in the United States, which is a non-adequate country for data transfer as determined by the European Commission. Your data is protected by Salesforce as they participate in and have certified their compliance with the EU-U.S. and US-Swiss Privacy Shield Frameworks and Principles (collectively, the “Privacy Shield Principles”).

HubSpot will comply with the Privacy Shield Principles with respect to the personal data that it receives in the United States from the European Economic Area and Switzerland. You can review the Privacy Shield Principles, learn more about Privacy Shield, and view HubSpot’s Privacy Shield certification at https://www.privacyshield.gov/. HubSpot’s commitments under the Privacy Shield are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

Resellers
Your local authorized reseller may be located within a country which is a non-adequate country for data transfer as determined by the European Commission. In this instance, your data is protected by EU Standard Contractual Clauses between Vitech and our authorized resellers. The EU Commission has determined that Standard Contractual Clauses are sufficient safeguards on data protection for the data to be transferred internationally. You can learn more about Standard Contractual Clauses at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

If your local authorized reseller is located in Japan or Canada, then Standard Contractual Clauses are not required, as the EU Commission has determined that Japan and Canada are adequate for data transfer. (Canada has a partial adequacy statement for commercial organizations only.)

YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION, OR GDPR

You have rights with respect to our processing of your personal data, which are as follows:

  • To access to your personal data and information regarding our processing of it. You also have the right to request a copy of your personal data, although we will need to remove information about other people.
  • To rectify incorrect personal data that we are processing.
  • To request that we erase your personal data if:
  • we no longer need it;
  • we are processing your personal data by consent and you withdraw that consent;
  • we no longer have legitimate grounds to process your personal data; or
  • we are processing your personal data unlawfully
  • To object to our processing if it is due to legitimate interest.
  • To restrict our processing if it was due to legitimate interest.
  • To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out via automated means.

If you want to exercise any of these rights, please contact us.

If you have a concern about the way we are collecting or using your personal data, please raise your concern with us in the first instance.