European Economic Area, United Kingdom, and Switzerland Privacy Policy
This Additional Notice supplements the information contained in our Privacy Policy and apply to individuals who reside in European Economic Area (“EEA”), United Kingdom (“UK”) and Switzerland, even temporarily. This Additional Notice provide information about how we collect, use, disclose and otherwise process personal information, either online or offline, within the scope of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), UK GDPR and Switzerland’s data protection legislation. Unless otherwise expressly stated, all terms in this note have the same meaning as defined in our Privacy Policy or as otherwise defined in the aforementioned laws.
I. Legal Basis For Processing Personal Information
We collect and process personal information for the purposes and on the legal bases identified in the following chart:
| Providing our Services | To perform our contracts with you for the use of our Services and to fulfill our obligations under applicable terms of use and to manage or organization and its day-to-day operations; where we have not entered into a contract with you, we base the processing of your personal information on our legitimate interest to operate and administer our Sites and to provide you with the content you access and request (e.g., to interact with content from our Sites), and to fulfill any other purpose for which you provide personal information. |
| Promoting the safety and security of our Services | In order to promote the safety and security of the Services, systems, and applications, and to protect our rights and the rights of others, we track the use of our Services, verify accounts and activity, investigate suspicious activity, and enforce our terms and policies. |
| Providing necessary functionality | To perform our contract with you for the use of our Services; where we have not entered into a contract with you, we base the processing of your personal information on our legitimate interest to provide you with the necessary functionality required during your use of our Services. |
| Managing user registrations | If you have registered for an account with us, we process your personal information in order to create and manage your user account for the purpose of performing our contract with you according to applicable terms and conditions. |
| Handling contact and user support requests | If you fill out a web form or request customer support, or if you contact us by other means including via a phone call, we process your personal information to verify your identity and entitlement to products or Services, facilitate customer benefits and Services, including customer support; to perform our contract with you, and to the extent it is necessary for our legitimate interest in fulfilling your requests and communicating with you. |
| Managing payments | If you have provided financial information to us, we process your personal information to verify that information and to collect payments to the extent that doing so is necessary to complete a transaction and perform our contract with you. |
| Administering, developing and improving our Services | To analyze trends and to track your usage of and interactions with our Services to the extent it is necessary for our legitimate interest in developing and improving our Services, including by recognizing an individual and remembering their information when they return to our Services; testing, enhancing, updating and monitoring the Services, or diagnosing or fixing technology problems; providing our users with more relevant content and Service offerings; or where we seek your valid consent. |
| Reviewing compliance with applicable usage terms | To review compliance with the applicable usage terms in our customer’s contract to the extent that it is in our legitimate interest to ensure adherence to the relevant terms. |
| Identifying customer opportunities | To assess new potential customer opportunities to the extent that it is in our legitimate interest to ensure that we are meeting the interests of our customers and their users’ experiences. |
| Legitimate business opportunities | To supply commercial data about businesses to other businesses; to license and sell business contact information for marketing and other purposes; to supply data about Buildertrend customer’s business, clients, contacts, or subcontractors to other businesses for business opportunities. |
| Displaying personalized advertisements | To conduct marketing research, advertise to you, provide personalized information about us on and off our Sites and to provide other personalized content based upon your activities and interests to the extent it is necessary for our legitimate interest in advertising our Sites or, where necessary, to the extent you have provided your prior consent. |
| Sending marketing and advertising communications | For marketing and advertising purposes, including to send you marketing information, product recommendations and other non-transactional communications (e.g., marketing newsletters, telemarketing calls, SMS, or push notifications) about us and our affiliates and partners, including information about our products or Services we think you may be interested in, promotions or events as necessary for our legitimate interest in conducting direct marketing or to the extent you have provided your prior consent; this may include device and usage data. Where applicable, we may send you marketing messages if you have given us your consent to do so or where we have relied on the soft opt-in rule); |
| Complying with legal obligations | To cooperate with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws and contractual obligations, to personal information protect our rights or as is necessary for our legitimate interest in protecting against misuse or abuse of our Sites, protect personal property or safety, pursue remedies available to us and limit our damages, comply with judicial proceedings, court orders or legal processes, to respond to lawful requests, and for any other lawful purpose, or other purpose that you consent to. |
II. Your Privacy Choices
In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:
- Right of access. You have the right to obtain:
- confirmation of whether, and where, we are processing your personal information;
- information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
- information about the categories of recipients with whom we may share your personal information; and
- a copy of the personal information we hold about you.
- Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
- Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
- Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
- Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
- Right to withdraw consent. There are certain circumstances where we require your consent to process your personal information. In these instances, and if you have provided consent, you have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal.
You have the right to provide instructions regarding the retention, deletion and disclosure of your personal information after your death. In the absence of instructions from you, it is possible for your heirs to request the disclosure or deletion of your personal information.
You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.
You also have the right to lodge a complaint to your local data protection authority. If you are based in the European Union, information about how to contact your local data protection authority is available here. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner’s Office (https://ico.org.uk/global/contact-us/) and the Swiss Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb/en/home/deredoeb.html).
If you wish to exercise one of these rights, we kindly ask you to contact us at privacy@buildertrend.com.
Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights. This can be done by providing a scanned copy of a valid identity document or a signed photocopy of a valid identity document.
III. Local Representative and Data PRotection Officer
VeraSafe has been appointed as Buildertrend’s representative and Data Protection Officer in the European Union for data protection matters, pursuant to Article 27 of the GDPR of the European Union. You may contact VeraSafe, in addition to Buildertrend, by using the “Contacting Us” section below. To make an inquiry related to the processing of personal information to Verasafe, please use this contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative or via telephone at: +420 228 881 031.
Alternatively, VeraSafe can be contacted at:
VeraSafe Ireland Ltd.
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland
If you wish to raise a concern about our data processing practices, you have the right to do so with your local supervising authority.
IV. International Transfer of PErsonal Information
The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are located in the EEA, United Kingdom or Switzerland, your personal information may be processed outside of those regions, including in the United States.
In the event of such a transfer, we ensure that: (i) the personal information is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission (including additional safeguards as recommended by the European data Protection Board).
If you wish to enquire further about these safeguards used, please contact us using the details set out under the Contact Us section of the Privacy Policy.