Effective starting: 1 July 2018
Ansarada Pty Limited and our related entities (“Ansarada”, “us”, “we” and “our”) are committed to protecting the privacy of our customers and users.
“Ansarada Services” are all the products and services we may provide to you, including our websites, our online virtual data rooms and associated services, the Material Information Platform™, the Tender Platform™ and the Ansarada Intelligent Deal Assistant™.
Where our changes are material, we will try to notify you – this may be by way of an email or a notice on our websites, or an alert on the login screens for the Ansarada Services that will appear for at least 30 days. We may not notify you if the way in which we use your personal information has not changed.
We collect your personal information to supply you with the Ansarada Services and to further develop, enhance and safeguard those services. We may also use your personal information to:
If we do not collect this information from you, you might not be able to use the Ansarada Services or create an account or profile with us, some of the functions comprising the Ansarada Services might not be available to you, and/or we might not be able to communicate with you (including through marketing communications).
The personal information we may collect includes information that you provide voluntarily to us, information that we collect automatically and information that we obtain from third party sources. This may include:
We may also process personal information incorporated in the content that users create, provide, post, host, upload, store, communicate or display when you use the Ansarada Services (“User Content”). This may include sensitive information, such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. Where we process personal information in content, we do so on behalf of our customers and users and it is their responsibility to have lawful grounds to use that personal information. We will not be responsible for obtaining consent for the use of any sensitive information that is incorporated in any User Content.
We collect personal information in a number of ways, including:
We may disclose the personal information we collect:
Some of the recipients described above, including our service providers, your team administrator, other users of the Ansarada Services, any new owner of Ansarada, and the SEC, are or may be located offshore.
We may disclose your personal information to third parties to allow them to market to you (including through direct marketing) if we have first obtained your consent or if we have other lawful grounds to do so.
If you are a visitor from the European Economic Area, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person (e.g. other users).
If we ask you to provide personal information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
Most of the ways in which we use your personal data are based on our legitimate interests in:
When we rely on our legitimate interests as a lawful ground to process your personal information, we do so taking into account the potential impact on your privacy and we offer the right to object to or opt out from processing as described below in the “Your privacy rights” section below.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contacting Ansarada about Privacy” heading below.
Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have privacy laws that are different to the laws of your country (and, in some cases, may not be as protective).
Specifically, our group companies and third party service providers and partners operate around the world and, in particular, in Australia, the United States of America, Amsterdam, Germany, Hong Kong, the United Kingdom and Vietnam. This means that when we collect your personal information we may process it in any of these countries.
We currently host our servers for the Ansarada Services in Australia using a third party hosting provider (Amazon Web Services or ‘AWS’).
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to continue providing access to the Ansarada Services or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
We only retain User Content for such time as permitted by our contracts with our customers or for such time as they instruct or permit us to do so.
You have the following privacy rights:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable privacy laws.
Please note that we do not offer any of the rights described above with respect to any personal information that is incorporated in any User Content. We process such content on behalf of our customers and if your personal information is contained in any such content, you should contact the customer on whose behalf we have stored the information.
In storing your personal information, we use a number of security and organisational measures and technologies to safeguard your personal information from unauthorised access, modification or disclosure and misuse, interference or loss. We have personnel tasked with protecting your information, developing new security features, and identifying and mitigating vulnerabilities. Our existing security measures include encryption, two-factor authentication, and notifications when new devices and apps are connected with your user account. We also have in place security measures and policies focused on restricting access to sensitive information to authorised personnel.
While we hold your information on a secured server behind a firewall and we encrypt data transfer using 256 bit SSL encryption, please be aware that there are inherent risks in transmitting information using the internet.
The Ansarada Services are certified to meet ISO 27001 information security standards. Please contact us for further information on the scope of our ISO 27001 certification.
Level 2, 80 George Street, The Rocks
Sydney NSW 2000
Telephone: +61 2 8241 0800
Email: [email protected]
Position title and name:
Group General Counsel – Natasha Davidson
Deputy General Counsel – Michael Bates
Where you are located in the European Economic Area (EEA), you may also contact Ansarada UK Limited, our UK related company who also acts as our EU representative for the purposes of European privacy law:
EC2M 4QP, UK
Telephone: +44(0) 20 3058 1060
Email: [email protected]
Position title and name: Head of Client Services – EMEA: Kerri Murphy
When you request that we access or correct your personal information, we will need to locate the relevant information, so it would assist us if you could supply as much supporting detail as possible. Where we refuse your access or correction request, we will comply with any requirements under applicable laws to notify you of our reasons for doing so and the mechanisms through which you may complain. Where we deny a request to correct information and where you make a request to us, we will comply with any applicable legal requirement to associate with the information a statement that it is inaccurate, out of date, incomplete, irrelevant or misleading.
We take your privacy complaints seriously. Where you inform us that you have a complaint about our handling of your personal information, we will contact you to let you know which of our team members will investigate your matter and the timeframe within which they will aim to respond to you.