Customer Privacy Notice

Something Digital and our affiliated companies (“Something Digital”) is a global professional services firm focused on delivering digital transformation for our customers. The reason we collect your personal data is to improve our services to you.  We respect you and we are committed to honoring and protecting your privacy. This Customer’s Privacy Notice describes our approach to privacy and explains why we collect your personal data, what data we are collecting, how we process it, and how you can manage and delete your personal data. If you have any questions or concerns about this privacy notice or your personal data, please contact us at data.privacy@rightpoint.com.

Where we determine the purpose and means of processing personal data, Something Digital will be a controller. Where we act as a processor in our capacity of providing services to a customer, we will only process personal data in accordance with the instructions of the customer. The customer will be the data controller of that personal data and will be responsible to data subjects for the way in which their personal data is processed. Where applicable, in accordance with data protection laws we shall assist the data controller in effecting data subject rights.

What Personal Data We Collect and How We Collect It

Something Digital, may at times collect your personal data in one of the following ways:

  • By entering information such as your name, and email address, country of residence, company you represent, industry and details of an inquiry on our Contacts page as well as other forms throughout our website, you enable us to respond to a general/ business inquiry made by you or on behalf of the company that you represent. If you wish to be contacted by telephone, we may also collect your provided phone number(s).
  • Something Digital uses cookies and web beacons to collect data on how you use our websites. This may include for example information with respect to what Something Digital websites you have visited, how long you stayed on them, which items you clicked on and your IP-address. To know more about our use of cookies, please visit our website privacy notice and cookie policy.
  • You may provide Something Digital with information when subscribing and using the Something Digital subscription center. This data may include for example your name, email address and the company you represent. The subscription center also keeps track of your areas of interest (such as receiving newsletters, thought leadership content and/or marketing collateral) that you may have either opted into or opted out of.
  • E-mail Communications: If you are a recipient of our marketing communications, we may track when you receive, open, click a link, or share an e-mail you receive from Something Digital. To unsubscribe from Something Digital marketing communications, please visit our subscription center.
  • Information from Other Sources: Something Digital might receive information about you from other sources, such as public sources, social media, directories, registries to ensure the accuracy and completeness of your personal data.
  • Information when you access Something Digital content on our Third-Party Partner Website(s): From time to time, Something Digital publishes thought leadership, marketing collateral and webinars on third-party website platforms. By accessing Something Digital content, Something Digital may collect your name, email address, contact number, designation/job role, company you represent and any other Something Digital content/ links accessed.
  • Corporate Marketing and Thought Leadership Events: From time to time, Something Digital may host various sales, marketing and thought leadership events. Something Digital may collect your name, email address, contact number, designation/job role and the company you represent from such events. Additionally, Something Digital sales executives and business leaders may visit similar events conducted by other companies or forums. As part of these events, Something Digital sales executive and business leaders may receive business cards from you in order to establish a working relationship with you on behalf of the customer you represent.
  • Information obtained from Third-Party Business Contact Directory and Services: Something Digital has carefully selected and contracted with third-party agencies providing business contact directory services and may obtain the name, title, company you represent, work phone number, work email address and work address of potential business contacts.
  • Information obtained from our Business Leaders: Something Digital may receive information related to your name, company you represent, designation/job role and email address from Something Digital business leaders who have established professional/ personal connections with you.
  • Information obtained from public sources and professional networking platforms: Something Digital may also collect information related to your name, company you represent, designation/job role, and email address from public sources (where available) or professional network platforms such as LinkedIn.
  • Information received prior to/during fulfilment of contractual services: This may include for example your name, designation/job role, company you represent, telephone number and email address that you provide Something Digital with during the Request for Proposal stage, proposal discussions, contract negotiations and/or the duration of time for which Something Digital provides the customer with services.
  • Information to facilitate visits, travel and lodging: From time to time, Something Digital also provide assistance to our customers’ representatives visiting our premises by facilitating travel and accommodation. In such cases, Something Digital would collect your name, date of birth, contact number, company you represent, email address, travel and accommodation preferences, passport and visa details. Something Digital may engage carefully selected third-party vendors or applications to collect & process these details, as permitted under and in accordance with applicable laws.

 

Purpose and Lawful Basis for processing personal data 

  • With your consent. Where we require your consent, you will find opt-in mechanisms and you have the ability to withdraw consent at all times.
  • Where we need to perform the contract we are about to enter into or have entered into with you. For example, when we perform our services to you.
  • Where we need to comply with a legal or regulatory obligation. This will include maintaining records, compliance checks or screening and recording (e.g. anti-money laundering, financial and credit checks, fraud and crime prevention and detection, trade sanctions and embargo laws). This may include automated checks of personal data you provide about your identity against relevant databases and contacting you to confirm your identity or making records of our communications with you for compliance purposes.
  • Where it is necessary for our legitimate interests or those of a third-party and your interests and fundamental rights do not override those interests. Our legitimate interest will include for example, market research purposes, marketing purposes and appropriate controls to ensure our website, processes and procedures are running effectively for the prevention and detention of against fraud and for IT security purposes. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
  • To contact you in order to inform you of new products, services or promotions Something Digital may offer including to keep you appraised of Something Digital thought leadership and marketing collateral and to better assist your needs, in pursuit of Something Digital legitimate business interests and on occasion with your consent. If you are a prospective customer, we will seek your consent before we contact you with such information.
  • To invite you to Something Digital hosted or sponsored events in your geographical region that may be of interest to you based on your role within the company and/or industry, in pursuit of our legitimate business interests. If you are a prospective customer, we will seek your consent before sending such invite to you.
  • To conduct market research and to carry out marketing campaigns, in pursuit of Something Digital legitimate business interests. If you are a prospective customer, we will seek your consent before conducting such market research and carrying out such marketing campaigns.
  • To carry out the services for which Something Digital has been contracted by the customer you represent to deliver, and to contact you for customer care related purposes including regular communication regarding project status, notifying issues/concerns, sharing project deliverables and carrying out day-to-day project activities, in order to comply with Something Digital contractual obligations towards the customer you represent.
  • As part of our email campaigns, Something Digital may track whenever you receive, open, click a link, or share an e-mail you receive from Something Digital. Something Digital will carry out automated profiling of such information to evaluate your interest towards Something Digital service offerings or promotions. This processing will enable Something Digital to identify and target potential customers or business partners, tailor Something Digital marketing and provide you with relevant and timely content based on your interests, in pursuit of Something Digital legitimate business interests.
  • In certain cases, Something Digital may record the conversations/ interactions with you and Something Digital representatives during Request for Proposal/ Proposal discussions, trainings, transition workshops or project discussions that may be carried out over Voice over IP (VoIP) sessions for future reference and training. Something Digital will always inform you and obtain your verbal consent prior to recording any such sessions.
  • Something Digital engages carefully selected third-party vendors to conduct surveys to receive feedback from you on the services currently provided by Something Digital to the company you represent. We may also share your information with such third-party vendors to conduct anonymous survey to understand your perception about our brand. Something Digital uses your responses to better understand our strengths and identify improvement areas. This will help Something Digital serve the company you represent better and improve our overall service offerings and business strategies, in pursuit of Something Digital legitimate business interests.
  • To develop new and improved products and services to help Something Digital serve the company you represent better and to improve Something Digital overall service offerings in pursuit of Something Digital legitimate business interests.

 

If processing of personal data is subject to any other laws, then the lawful basis of processing personal data may be different to that set out above and in those circumstances will be based on national laws.

Something Digital shall only process the received information pursuant to pursue our legitimate business interests for example, inform you about new products and services, obtain feedback on the services we provide. We will seek prior consent, for example, to establish communication with prospective customers and personnel with general/ business inquiries.

You also have the option to subscribe/opt-in to receive thought leadership content and/or marketing collateral. You can always opt-out of such options using our subscription center or write to data.privacy@rightpoint.com. Something Digital shall adhere to your preferences.

Security

Something Digital implements industry standard security measures to keep your personal data secure and confidential, including but not limited to:

  • Restriction of access to your personal data to Something Digital employees strictly on a need to know basis, such as responding to an inquiry or request.
  • Implementation of physical, electronic, administrative, technical and procedural safeguards that comply with all applicable rules, laws, legislation and regulations to protect your personal data from unauthorized or inappropriate access, alteration, disclosure and/or destruction.
  • Something Digital employees who misuse personal data are subject to strict disciplinary action, as it is a violation of the Integrity Policy of Something Digital.

 

Who we may share your personal data with 

  • The personal data Something Digital collects from you is stored in one or more databases hosted by third-parties. These third-parties do not use or have access to your personal data for any purpose other than cloud storage and retrieval.
  • Something Digital has offices and operations in a number of international locations and we share information between our group companies, including our parent company Genpact, for business and administrative purposes. Please visit https://somethingdigital.com/about/and https://www.genpact.com/about-us/regions to see a list of the locations within our corporate group.
  • Where required or permitted by law, information may be provided to others, such as but not limited to regulators, under legal process, enforceable government directives.
  • From time to time, Something Digital may consider corporate transactions such as a merger, acquisition, reorganization, asset sale, or similar. In these instances, we may transfer or allow access to information to enable the assessment and undertaking of that transaction. If we buy or sell any business or assets, personal data may be transferred to third-parties involved in the transaction. In these instances Something Digital will continue to ensure your personal data is protected and private, and Something Digital will give any impacted data subjects notice before any personal data is transferred or subject to a different privacy policy.

 

International and group company transfers of personal data

We are part of an international group of companies and, as such, transfer personal data concerning you to countries outside the European Union (EU). Please visit https://somethingdigital.com/about/ and https://www.genpact.com/about-us/regions to see a list of the locations within our corporate group.

We transfer personal data between our group companies and data centers for the purposes described above. We may also transfer personal data to our third-party vendors outside of the EU as described above.

Your personal data may be stored in databases located outside of the EU including in India. The database is controlled by our administrative staff located outside of the EU including in India and can be accessed electronically.

Where we transfer personal data outside of EU, we either transfer personal data to countries that provide an adequate level of protection as determined by the European Commission or we have appropriate safeguards in place. Appropriate safeguards to cover these transfers are in the form of standard contractual/data protection clauses adopted by the European Commission. Please visit https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF to know more about standard contractual/data protection clauses.

Where we transfer personal data between our group companies we have covered these transfers by entering into standard contractual clauses adopted by the European Commission. If you would like more information on the any of the data transfer mechanisms on which we rely please contact us at data.privacy@rightpoint.com, details available in the contact section below.

Data Storage and Retention

Something Digital shall retain your personal data pursuant to the business purposes. We will only keep your personal data for as long as is reasonably necessary taking into consideration our purposes outlined above or to comply with legal, accounting or reporting requirements under applicable law(s).

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact data.privacy@rightpoint.com.

Existence of Automated Profiling

Something Digital uses automated profiling in limited circumstances relating to email campaigns. As part of our email campaigns, we may track when you receive, open, click a link, or share an e-mail you receive from Something Digital using a Something Digital managed automated solution. The automated solution profiles the information tracked to evaluate your interest in Something Digital’s service offerings and/or promotions. This enables us to identify and target potential customers and/or business partners and aims to provide you with relevant and timely content based on your indicated interests.

Data Subject rights

You may have certain rights relating to your personal data provided under the GDPR. These include the right to:

  • Request access to your personal data and request details of the processing activities conducted by Something Digital.
  • Request that your personal data is rectified if it is inaccurate or incomplete
  • Request erasure of your personal data in certain circumstances.
  • Request restriction of the processing of your personal data in certain circumstances.
  • Object to the processing of your personal data in certain circumstances.
  • Receive your personal data provided to us as a controller in a structured, commonly used and machine-readable format in certain circumstances.
  • Object to, and not to be subject to a decision based solely on, automated processing (including profiling), which produces legal effects or significantly affects you.
  • Withdraw your consent provided at any time by contacting us.

 

To exercise the rights outlined above in respect of your personal data you may write to us at data.privacy@rightpoint.com.

Contact us

If you have any questions or concerns as to how your data is being processed, you can contact us by writing to data.privacy@rightpoint.com.

Complaints

In the first instance, please contact us with concerns you may have. Data protection laws such as the GDPR gives you the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws has occurred.

Changes to our customer’s privacy notice

This Customer’s Privacy Notice was last updated in May 2021 and Something Digital will notify you of changes we may make to this privacy notice where required, however we would recommend that you look back at this notice from time to time to check for any updates.