Why we process Personal Data

ClauseMatch processes certain Personal Data in order to promote its legitimate interests as the data controller in its sphere of activities. These activities include:

— Conducting sales and marketing activity (such as outbound sales, newsletters and event marketing)
— Responding to website enquiries such as product demonstration requests and other enquiries
— Providing products and services
— Providing support services
‍
In all cases ClauseMatch shall ensure that Your fundamental rights and interests (as the data subject) are not overridden by such processing. You may opt out of receiving sales and marketing messages at any time.

For certain categories of Personal Data it is necessary for ClauseMatch to conduct processing for the performance of a contract which You are a party to or for the purposes of entering into a contract at your request. Such processing activities include:

— Obtaining and reviewing Personal Data that relates to prospective employees or contractors.
— Carrying out certain background checks in connection with Your employment in compliance with our information security policies.

Where ClauseMatch enters into a contract with a Customer, ClauseMatch shall act as the data processor on behalf of the Customer which shall be the data controller. ClauseMatch will not use your Personal Data for any different purpose than for which it was obtained. ClauseMatch will use appropriate technical and organisational measures to ensure the security and integrity of all Personal Data processed, with regard to the state of technical advancement.

Processing of Sensitive Personal Data

ClauseMatch does not routinely process special categories of Personal Data (as set out in the GDPR) in the provision of its products or services. Such Personal Data includes data that is sensitive such as relates to, health, heritage, orientation or beliefs. Where it may be necessary for ClauseMatch to process Personal Data which falls into a special category, for example in an application for employment, you expressly consent to the processing of such data. Such confirmation will also be requested in writing prior to processing.

ClauseMatch does not otherwise process special categories of Personal Data unless you as the Data Controller choose to submit such data to ClauseMatch through use of the products and services. Where this is the case You confirm that You (including end users) have expressly consented to such processing by ClauseMatch.

Your Rights

You have the right to object to further processing at any time where such processing is carried out for the purposes of direct marketing or on the basis of ClauseMatch's legitimate interests where ClauseMatch is the data controller. You may request access to, transfer or correction of, or restriction to processing Personal Data that ClauseMatch processes as data controller at any time. Except where processing is necessary for the continuation of a contract, product or service, or for compliance with a legal obligation, you may also request erasure of Your Personal Data at any time.

In all cases, where ClauseMatch acts as the data controller you may raise your request by contacting the Data Protection Officer (privacy.dpo@clausematch.com). No fee is payable to enforce your Access Rights however ClauseMatch may charge a reasonable fee for requests that are repetitive or excessive.

ClauseMatch shall only process Personal Data for as long as is reasonably necessary to conduct its legitimate interests. Where ClauseMatch provides you with products and/or services any Personal Data shall be deleted following termination of Your agreement in accordance with ClauseMatch's retention policy.

Where You are an end user of a ClauseMatch Customer you should submit your Access Rights request to your employer as the data controller. ClauseMatch will assist the data controller with any such request.

If you have any complaint concerning the processing of Your Personal Data you may contact the Information Commissioner's Office.

Sharing or Transfers of Personal Data

ClauseMatch transfers Personal Data to affiliate entities and key suppliers (including suppliers based outside the EEA). In such cases ClauseMatch will ensure at all times that such Personal Data is only processed using lawful mechanisms (such as the standard contractual clauses for secure data processing or Privacy Shield for transfers to the USA) and adequate safeguards for the transfer of such Personal Data. ClauseMatch only shares (instructs processors or sub-processors) of Personal Data in the following categories:

— Cloud Storage Providers
— Cloud Office software
— CRM providers
— Sales and Marketing tool providers
‍
Where you exercise any Access Rights ClauseMatch shall notify any recipient of Your Personal Data to fulfil your request.