You can generally visit our websites without actively entering any personal information about yourself. However, in certain areas of this site, we may ask you to contact us with questions or comments, or request more information about our services. In these cases, we will collect personal information from you directly as described below.
We may be required to collect certain personal information about you either by law or as a consequence of any contractual relationship we have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations. We will inform you at the time your information is collected whether certain data is compulsory and the consequences of the failure to provide such data.
1.1 Information we collect
We collect the following categories of information:
Some of our services (such as our CGLytics and Diligent Director Network services) include personal information that has not been directly collected from you. For these services, we collect information from publicly available websites and filings (such as publicly available proxy statements), our business partners (such as associations of directors), and other users of the services (such as those who seek to invite you to use the services).
1.2 Special categories of personal data
We collect sensitive categories of personal data (known under some laws as sensitive personal information or protected classifications of data) with your consent when you directly submit it to us through our services such as Diligent Director Network. This information may include information revealing racial or ethnic origin, sexual orientation, religious or philosophical beliefs or trade union membership, or data concerning health.
We use your personal information to:
We may post customer testimonials on our websites which might contain personal information. We obtain the customer’s consent via email prior to posting the testimonial to post their name, title, and organization name along with their testimonial. If you wish to update or delete your testimonial, you can contact us at email@example.com.
Where a customer of ours has retained us to provide services and either provides us with personal information or requires us to collect personal information on their behalf in connection with such services, then our use of such personal information shall be limited to the purpose of providing these services.
In the circumstances described under this Section, we have no direct relationship with the individuals whose personal information we process. If your data is processed on behalf of one of our customers, please contact the customer you interact with directly. We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our customers.
An individual whose data is being processed in the circumstances described in this section should direct any queries with respect to access, correction, amendment, or deletion of inaccurate data to our customer (the data controller). If requested to remove data, we will respond within a reasonable timeframe.
Personal information processed under this section will be retained as long as needed to provide services to our customer. We will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
You have certain rights regarding your personal information, subject to local law. These may include the following rights to:
If you would like to discuss or exercise these rights, please contact us at the details below. We will request that you provide us with information for us to verify your identity and process your request. Once we verify your request, we will comply with it to the extent required by applicable law. Note, that in some cases, we may be prohibited from disclosing certain information, such as Social Security numbers, or may be permitted to retain information, for example to complete the transaction for which it was provided.
We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.
We will contact you if we need additional information from you in order to honor your requests.
If you are a California resident, we will not deny you goods or services, charge a different price or rate, or provide a different level or quality of goods or services on account of your decision to exercise any of the above rights which may apply to you.
We may share your personal information with third parties under the following circumstances:
Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on “International Data Transfer” below for more information.
We do not have actual knowledge of disclosure of the information of minors under age 16 for valuable consideration.
We implement technical and organizational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the ongoing integrity and confidentiality of personal information. We evaluate these measures on a regular basis to ensure the security of the processing.
Where we collect personal information from you, we will keep your personal information for as long as we have a relationship with you. Where we collect personal information from third-party sources and do not have a relationship with you, we will keep your personal information for a period of time that is consistent with the reason for which we collected it (see the section on How we use your personal information and the basis on which we use it above). This retention period shall take into account the amount, nature and sensitivity of the relevant personal information. When these retention periods have ended, we will retain your personal information for a period of time that enables us to:
We will delete your personal information when it is no longer required for these reasons. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.
Your personal information may be transferred to, stored and processed in various countries, including those that are not regarded as ensuring an adequate level of protection for personal information under European Union law or by the European Commission. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.
Diligent Corporation (“Diligent”) participates in and has certified its compliance with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework. Diligent is committed to subjecting all personal data received from European Union (EU) Member States, the United Kingdom (UK) and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework and to view our certification, visit the US Department of Commerce’s Privacy Shield List: https://www.privacyshield.gov/list.
Diligent is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Diligent complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, the UK and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred under the Privacy Shield Frameworks, Diligent is are subject to the regulatory enforcement powers of the US Federal Trade Commission. In certain situations, Diligent may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Diligent commits to cooperate with the panel established by the EU data protection authorities (DPAs) and/or the Swiss Federal Data Protection and Information Commissioner and comply with the advice given by the panel and/or Commissioner with regard to data transferred from the EU and/or Switzerland, as applicable.
Under certain conditions, described in more detail on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Our site includes links to other websites whose privacy practices may differ from our practices. If you submit personally identifiable information to any of those sites, your information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any sites to which our sites provide links. We encourage you to carefully read the privacy statement of any website you visit.
Social Media Widgets
Our websites includes Social Media Features, such as the Facebook Like button, and Widgets, such as the Share this button or interactive mini-programs that run on our websites (the “Features”). These Features may collect your Internet protocol address, which page you are visiting on our website, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our website. Your interactions with these Features are governed by the privacy statement of the company providing it.
Diligent Corporation and, with respect to individual service specific inquiries or relationships, the relevant group companies available here, are the controllers responsible for the personal information we collect and process.
Our European Union representative is Diligent Governance Ireland Limited, whose registered office is located at 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland.
Our United Kingdom representative is Diligent Boardbooks Limited, whose registered office is located at 1 Strand, Grand Buildings, First Floor, London, WC2N 5HR United Kingdom.
Our Data Protection Officer can be contacted at: firstname.lastname@example.org.
If you have questions or concerns regarding the way in which your personal information has been used, please contact email@example.com. If you have inquiries related to data subject access requests, please contact firstname.lastname@example.org. If you prefer an alternative to email, you may reach out through our support phone number (1.866.262.7326 or otherwise at our page here) and our representatives will attempt to assist. If you would like to opt out of certain disclosures, please click here: Do Not Sell My Personal Information.
If you submit a request relating to your personal information, we will take steps to verify your identity before addressing your requests by comparing the information you provide against datasets that we may hold. You may be asked to confirm certain data points or confirm that you have made the request through an account that you have either with us or third party (such as an email address or other messaging address).
If you are a California resident, you may also submit data subject access requests via an authorized agent registered with the California Secretary of State. Authorized agents may submit requests through the methods listed above. When a request is submitted by an authorized agent, we may require the authorized agent to provide evidence of its authority to act and evidence of the authorized agent’s identity. We may also contact the consumer to verify that they provided permission to submit the request.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority.
Last Updated: The 18th Day of February, 2021