SERVICE DESK PRIVACY NOTICE

THIS PRIVACY NOTICE DESCRIBES HOW YOUR PERSONAL DATA MAY BE COLLECTED AND PROCESSED WHEN YOU USE SERVICE DESK, AND WHAT YOUR RIGHTS ARE WITH RESPECT TO YOUR PERSONAL DATA. PLEASE REVIEW IT CAREFULLY.

Introduction

We are committed to protecting the privacy and security of your personal information. This privacy notice applies to employees who use Service Desk (“consumers” or “you”). For this purpose, the term “Employee” includes current and former candidates, employees, volunteers, certain independent contractors and certain other individuals providing services to the Company. The term “Employment” includes, but is not limited to, full or part-time employment, acceptance as a volunteer, service as a consultant, etc. This notice is being provided to you in accordance with applicable privacy laws. This notice does not form part of any contract of employment or other contract to provide services.

Scope

Please note that this privacy notice does not cover third-party websites or applications. If you interact with us using a third-party website or application or use our services through a third-party website or application, such as Meta, you will share data with the third party in accordance with the third party’s privacy policy. The third party can use or share the data it receives according to its own practices and policies. We strongly encourage you to review the privacy notice published by any third party before using its websites or applications.

Definitions

“Personal Data” means any information relating to an identified or identifiable Data Subject; specifically including, but not limited to, name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that Data Subject.

A “Data Subject” is a natural person who can be identified, directly or indirectly, by reference to Personal Data.

The Company is a “Data Controller.” This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Process” and “processed” have a corresponding meaning.

Personal Data We Collect

We may collect, store and use the following types of your Personal Data:

• Personal contact details such as name, title, addresses, telephone numbers, and email addresses.
• Information about your use of our equipment, information and communications systems.
• Other miscellaneous personal data provided by you.

 

How and When do We Collect Your Personal Data?

We may lawfully collect your Personal Data directly from you when you interact with Service Desk.

Use of Personal Data

We will only use your Personal Data when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

1. Where it is necessary for performing services for you.
2. Where we need to comply with a legal obligation.
3. Where it is in the public interest to do so.

We may use or disclose the Personal Data we collect for one or more of the following business purposes:

• Fulfill or meet the purpose for which you provided the information, including but not limited to provide certain services to you.
• Facilitating and administering the use of the company’s property and resources, including the company’s information systems, electronic devices, network and data, and preventing unauthorized access of such.
• Complying with applicable state and federal laws, including labor, employment, tax, benefits, workers compensation, disability, equal employment opportunity, workplace safety and related laws.
• Exercising legal rights and defending legal claims.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sensitive Personal Data

We do not collect, store or use any Special Categories of Personal Data.

Sharing Personal Data

• We may disclose your Personal Data to affiliates or third-party service providers, including but not limited to Azure and Meta, when it is necessary to administer the working relationship with you. When we disclose personal information for this purpose, we enter into a contract with the third party that describes the purpose and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract.
• We may disclose your Personal Data to third parties to whom you or your agents authorize us to disclose your Personal Data.
• We may need to share your Personal Data with law enforcement or governmental authorities as required to comply with the law.

Cookies

We automatically collect personal and non-personal data from visitors to our website and users of our service by using automated technologies, including cookies. “Cookies” are small text files that a website saves on a computer or mobile device when an individual visits a website. Cookies assist us in enhancing a user’s experience when visiting our website or using our online services. They also help us understand how people use our site and services, so that we can better serve our members and users. You may configure your internet browser to reject cookies. However, this may affect your ability to effectively use our website and services.

Third-party companies that offer website analytics and application monitoring tools to us may gather personal and non-personal data, including by using cookies. These companies may use information collected from visitors over time and across third-party websites and online services.

Transfer of Personal Data

Your Personal Data is stored and held on servers in the United States. Some of your Personal Data may be processed offshore by one of our service providers. Your Personal Data receives the same level of protection when processed offshore as it does onshore.

Personal Data Security

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions. We have also put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Personal Data Storage and Retention

We will only retain your Personal Data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. If you subsequently agree to a new or additional purpose, your Personal Data may be retained for that.

Your Duty to Inform Us of Changes

It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.

Your Rights

Access: You have the right to access your Personal Data. If requested, we shall provide you with a copy of your Personal Data we hold about you.

Correct: In certain circumstances, you have the right to request correction of any incomplete or inaccurate Personal Data.

Delete: In certain circumstances, you have the right to ask us to delete or remove your Personal Data under certain conditions.

Object to Processing: You have a right to object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

Request the Restriction of Processing: You have the right to ask us to suspend the processing of Personal Data about you under certain conditions, for example if you want us to establish its accuracy or the reason for processing it.

Request Transfer: You have the right to ask us to transfer your Personal Data to another party or directly to you, under certain conditions.

Withdraw Consent: In the limited circumstances where you have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, based on exceptions under applicable law.

Exercising Your Rights

You can exercise any of your rights as described in this privacy notice and under applicable privacy laws by contacting us at PrivacyOfficer@berry.net. If you make a request, we have one month to respond to you.

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we are allowed under the law to charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we can refuse to comply with the request in such circumstances.

We sometimes need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact PrivacyOfficer@berry.net.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.

Contact Information

If you have any questions or comments about this privacy notice, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, or wish to exercise your rights under the law, please do not hesitate to contact us at:

730 South A Street
Oxnard, CA, 93030
PrivacyOfficer@berry.net