Effective Date: August 13, 2012
US-EU SAFE HARBOR FRAMEWORK AND US-SWISS SAFE HARBOR FRAMEWORK – Consistent with its commitment to protect personal privacy, KBACE adheres to the US-EU Safe Harbor Framework and the US Swiss Safe Harbor Privacy Framework, and the Safe Harbor Privacy Principles, as applicable, regarding the transfer of Personal Information from EU Member States and Switzerland to the United States.
Personal Information. “Personal Information” means any information or set of information that is transferred from the European Union and Switzerland to the United States, is recorded in any form, pertains to or is about any individual, or can be linked to or used to identify that individual.
Sensitive Personal Information. “Sensitive Personal Information” is Personal Information that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or that concerns health or sexual activity.
STATUS AS A DATA CONTROLLER – In limited circumstances, such as contact information relating to the personnel of KBACE’s clients based in EU Member States and Switzerland, KBACE may be considered a “data controller” for purposes of the transfer of Personal Information from EU Member States and Switzerland to the United States. Accordingly, in these instances, the Safe Harbor Privacy Principles apply to KBACE’s transfer of such Personal Information from EU Member States and Switzerland to the United States. A data controller is an organization that decides what Personal Information and/or Sensitive Information to hold and for what purposes.
STATUS AS A DATA PROCESSOR – In the provisioning of its primary business as a global consulting and technology company for Oracle® Software products and services, KBACE acts solely as a “data processor” for the transfer of its customer services data from EU Member States and Switzerland to the United States for processing. A data processor is an organization that processes Personal Information and/or Sensitive Information purely on behalf of and pursuant to the instructions of a data controller. KBACE provides these services under contract to its clients and, accordingly, KBACE holds, processes and/or transfers such customer services data at the direction of its client, which acts as a data controller. KBACE does not control this customer services data and any access to or use of such data is incidental to KBACE completing its contractual obligations for its clients. (See US-EU Safe Harbor Framework Guide to Self-Certification, FAQ X)
As a data processor, KBACE has no relation with the data subjects. Any obligation to determine whether to provide notice to data subjects regarding what Personal Information is collected about them and how it is used, or to obtain their consent, rests with KBACE’s client as the data controller. KBACE will process Personal Information only as directed by its clients. KBACE, however, complies with the Safe Harbor principle of Onward Transfer whenever appointing sub-contractors who may process Personal Information. In addition, KBACE will, whenever necessary, assist its clients in dealing with individual access requests from data subjects.
Whether acting as a data controller or data processor, KBACE takes the security of Personal Information very seriously. It takes appropriate technical and organizational measures against unauthorized or unlawful processing of Personal Information and against accidental loss of, or damage to, Personal Information.
INQUIRIES AND DISPUTE RESOLUTION
Where KBACE is the data controller, inquiries regarding the Personal Information collected by KBACE should be directed to:
VP Global HR & Privacy
Phone: (603) 821-7000
Fax: (603) 821-7030
American Arbitration Association provides KBACE’s third-party, independent dispute mechanism as required under the Safe Harbor Framework. If you have a complaint about KBACE’s Safe Harbor compliance that cannot be resolved directly with KBACE, contact American Arbitration Association at www.adr.org
KBACE’s Safe Harbor certification statement may be accessed at www.export.gov/safeharbor/