WGSN隐私政策

ASCENTIAL隐私政策

本全球隐私政策解释了Ascential Group Limited和/或其关联公司（“ Ascential”简称“我们”或“我们的”）如何处理您的个人数据，包括我们收集的您的个人数据的类型，您的个人数据如何被使用，何时将被披露，我们如何保护您的个人数据以及您在处理个人数据方面的权利。Ascential尊重您的隐私，我们致力于根据适用的数据隐私法和我们的内部政策保护您的个人数据。

若本全球隐私政策的翻译版本与英文版本存在不一致，则以英文版本为准。

谁是我的个人数据的控制者？

除非我们另行通知，则Ascential Group Limited为您个人数据的控制者，由实体独自或共同决定如何或为何处理您的个人数据。在某些情况下，我们的关联公司可能为您个人数据的控制者（取决于我们的关系以及我们为您提供的服务）。我们的关联公司列表可在此找到。

我们如何收集您的个人数据？

我们使用不同的方法收集有关您的个人数据，包括：-

直接向您收集

我们处理的有关您的大多数个人数据直接来自于您本人。当您填写表格或通过电子邮件、电话、邮件、亲身与我们联系或其他情况（如下）时，会给予我们您的姓名和联系方式：-

订阅我们的服务、产品或电子邮件简讯；和
购买我们的产品和服务或表达对其感兴趣（包括参加活动）。

自动收集

当您使用我们的网站时，我们会自动收集技术信息，例如：-您浏览我们网站时的IP地址、登录数据、浏览器类型、时区设置、位置和插件类型。我们还通过cookie收集数据。请参阅我们的Cookies政策以获取更多详细信息。

从其他来源收集

我们可能会从第三方和公共资源（例如公共数据库和社交媒体网站）收集有关您的信息。这是为了确保我们获得准确、最新或必要的信息，以便我们与您交流或提供最佳服务。我们可能收集的信息类型包括个人信息（包括姓名、年龄、性别和其他人口统计数据）和联系信息（包括邮寄地址和电话号码）。

我们将出于何种目的和依据哪些法律处理您的个人数据？

下表列出了我们使用您的个人数据的目的以及法律基础。在适当的情况下，我们确认了我们的合法利益。

法律基础	目的
遵守我们应承担的法律义务所需。	符合法律要求。
履行您作为当事方的合约所需。	管理我们与您的合约关系。
确保我们业务运作正常的合法利益。	运营和管理我们的业务和/或改善我们的产品、服务和活动体验。
确保我们能够开展和增加业务的合法权益。	向您推销或与您交流产品或服务信息。若您未曾拒绝第4节“我们如何将个人数据用于直接营销？”中定义的处理，我们也可能出于此目的与我们的关联公司共享个人数据，详见第7节。
确保我们能够开展和扩大我们以及我们的业务合作伙伴的业务的合法利益。	与选定的合作伙伴（包括赞助商）共享个人数据，详见第7节。
确保网络和信息安全的合法权益。	监测您对我们系统的使用（包括使用技术工具来自动监测对我们网站的使用以及您使用的任何应用程序和工具）。
确保您获得出色的用户体验的合法权益。	改善我们的网站、网络和信息的安全性和功能。
确保我们的业务正常运作的合法利益。	进行数据分析，即：将分析应用于业务运营，将数据用于描述、预测和改善Ascential的业务绩效和/或提供更好的用户体验。（有关在网站上运行分析的更多详细信息，请参见Cookie政策。）

我们如何将个人数据用于直接营销？

我们可能会向您发送营销信息，以使您了解我们的产品和服务，包括我们认为您可能感兴趣的产品和服务。

我们是否会发送针对性的电子邮件？

我们会根据适用的营销法律，将针对性的电子营销发送给我们希望与之建立或维持业务关系的客户或其他公司。我们的电子营销通常包括网站信标、Cookie和类似技术，使我们能够知道您是否打开、阅读或删除邮件，以及您点击的链接。当您点击电子营销邮件中的链接时，即使您未在我们的网站上注册或登录，我们也会使用Cookie记录您查看的页面和从我们的网站下载的内容。请参阅我们的Cookies政策以获取更多详细信息。

我们是否维护客户关系管理（CRM）数据库？

与大多数公司一样，Ascential使用客户关系管理（CRM）数据库技术来管理和跟踪我们的营销工作。我们的CRM数据库包括属于我们的客户的商业伙伴和我们已经建立或试图建立业务关系的其他公司的个人数据。用于这些目的的个人数据包括以下信息：联系数据、公开可用的信息（例如，董事会成员，已发表文章，新闻稿，您在社交媒体网站发布的与业务相关的公开帖子），您对针对性的电子营销（包括点击我们电子邮件链接后进行的网络活动）的回应，我们网站注册用户的网站活动以及Ascential专业人员根据与您的联系而包括的其他业务信息。

我们会合并和分析个人数据吗？

我们可能会合并来自公开来源，我们的电子邮件、网站以及与您联系的数据（包括我们的所有网站，例如我们的职业和公司网站收集的信息以及您注册或登录我们的网站或使用您的社交媒体凭据连接到我们的网站时收集的信息）。我们将这些数据结合起来，以更好地评估您在Ascential的体验，并执行本隐私政策中所述的其他活动。

您对营销通讯有什么权利？

您可以选择不接收我们的营销信息或使用我们发送给您的电子邮件中的退出机制。您也可以通过www.ascential.com/data与我们联系，拒绝接收市场营销通讯或请求从我们的CRM数据库中删除您的个人数据。

敏感数据呢？

我们通常不收集敏感数据（也称为特殊类别个人数据），因此，请您不要向我们提交敏感数据。在极少数情况下，我们需要收集此类数据时，我们将根据数据隐私法的规定和/或征得您的同意后收集。

术语“敏感数据”是指以下类型的个人数据，包括种族或族裔出身、政治见解、宗教、哲学或其他相似的信念、工会的成员身份、身体或精神健康状况、生物辨识或遗传数据、性生活或性取向、刑事定罪和违法行为（包括有关涉嫌犯罪活动的信息）。

18岁以下的人士呢？

我们关注保护儿童的隐私。我们无意向18岁以下的人士联系或收集信息。公司网站无意向18岁以下的人收集任何形式的信息。

若您认为我们已收到有关18岁以下人士的信息，请通过www.ascential.com/data或dpo@ascential.com与我们联系。若我们得知18岁以下人士已向我们提供了个人信息，我们将采取措施删除此类信息。

我们会与第三方共享您的个人数据吗？

我们可与以下类别的接收人共享个人数据：

我们的关联公司，使得他们可以向您发送有关其产品和服务的资讯（如上文第4节所述）
我们的第三方服务提供商，包括IT服务提供商，营销自动化，解决方案和分析提供商，营销机构，专业顾问，和
我们选定的合作伙伴、代表和赞助商，例如我们可与活动赞助商共享参会者名单，以便他们可以更好地计划赞助以改善参会者的体验，并选择被邀请者参加私人简报会、会议或晚餐，或者我们可提供可用的联系方式，以在某些行业和市场中创造营销机会。

我们还可依据法律要求与公共当局和政府部门共享您的个人数据，或者与潜在的公司或商业交易有关的第三方共享您的个人数据。

在我们与任何第三方共享您的个人数据之前，我们会采取必要的步骤，以确保您的个人数据将根据相关的数据隐私法和Ascential的内部政策得到充分的保护。

我们会将您的个人数据保留多长时间？

我们保留您的信息的时间将不超过需要使用所收集信息的时间。我们维护记录管理和保留政策和程序，在确定您的信息将存储多长时间时，我们将考虑：

现在和将来您的信息的收集目的和用途；
我们的全球法律和合约义务；和
我们需要什么信息来管理您与我们的关系以及开发和交付我们的产品和服务。

我们会在国际范围内传送您的个人数据吗？

由于我们是全球性组织，在多个司法管辖区和国家都有分支机构，因此我们可能会将您的个人数据传送到我们的国际分支机构。若您位于EEA中，则可能涉及将数据传送到EEA之外。为确保此类传送符合适用法律并得到妥善管理以保护您的隐私权，公司间对个人数据的传送均受协议的约束，使我们有义务确保在公司集团内传送时个人数据得到充分和一致的保护。

我们还可能与第三方共享您的个人数据（请参阅第7节），其中一些是位于EEA之外的。当我们将您的个人数据传送到EEA之外时，我们会通过实施适当的保障措施以确保提供相似程度的保护，例如，我们可能会使用欧盟委员会批准的特定合约。

若您想了解将个人数据传送到EEA之外时我们使用的机制的更多信息，请与我们联系（请参阅下面第10节的信息）。

数据安全。

我们维护所拥有的所有个人数据的组织、物理和技术安全安排。我们拥有协议、控制措施和相关政策、程序及指南维护这些安排，考虑与个人数据类别和数据处理相关的风险，包括：-

个人数据的假名化和加密；

确保处理系统和服务的持续保密性、完整性、可用性和韧性的能力；

在发生物理或技术事件时能够及时恢复可用性和对个人数据的访问的能力；和

定期测试评估程序，评估技术和组织措施的有效性以确保个人数据安全。

您在处理个人数据方面拥有哪些权利？

若您位于EEA，则在某些情况下您有权：-

请求访问我们处理的有关您的个人数据：此权利使您有权获知我们是否拥有您的个人数据，若有，还可获取个人数据的信息和副本。

要求更正您的个人数据：此权利使您有权对不正确或不完整的个人数据进行更正。

反对处理您的个人数据：此权利使您有权要求Ascential不再处理您的个人数据。

要求删除您的个人数据：此权利使您有权要求删除您的个人数据，包括这些个人数据已完成收集目的的情况。

请求限制处理您的个人数据：此权利使您有权要求Ascential仅在有限的情况下（包括在您同意的情况下）处理您的个人数据。

请求您的个人数据的可传输性：此权利使您有权接收您提供给Ascential的个人数据的副本（结构化，常用和机器可读格式），或请求Ascential将此类个人数据传输到另一数据控制者。

要求不接受任何对您的数据进行自动处理（包括分析）有重大影响的决定。

若您居住在加利福尼亚州，则您拥有第11条所列的许多权利，并且在某些情况下您有权：

请求访问我们出于直接营销目的与第三方共享的个人数据的某些信息。

请通过www.ascential.com/data 联系我们行使这些权利。我们将根据当地法律以及我们的政策和程序处理所有请求。出于安全目的，在向您披露信息之前，我们可能会要求您提供其他信息以确认您的身份。

若您有疑问或需要更多信息时如何处理？

关于本隐私条例的任何问题请使用www.ascential.com/data 或写信邮寄至Director of Compliance and DPO, Ascential Group Limited, The Prow, 1 Wilder Walk, London, United Kingdom, W1B 5AP，或发送电子邮件至dpo@ascential.com与我们联系。

若您想投诉我们对您的信息的使用，请通过www.ascential.com/data与我们联系，我们将尽力提供帮助。若您位于EEA，则有权向您所在国家的数据保护监管机构投诉。我们希望在您与当地监管部门联系之前为您解决问题，请您首先与我们取得联系。

Legal basis	Purpose
Necessary for the compliance with a legal obligation to which we are subject.	Complying with legal requirements.
Necessary for the performance of a contract to which you are a party.	Managing our contractual relationship with you.
Justified on the basis of our legitimate interest in ensuring the proper functioning of our business operations.	Operating and managing our business operations and/or improving our products, service and event experience.
Justified on the basis of our legitimate interest in ensuring that we can conduct and increase our business.	Marketing or communicating information to you related to our products and services, unless you have objected to such processing, as further described in the section 3 “How do we use personal data for direct marketing purposes?” We may also share personal data with our affiliates for this purpose, as further described at section 6 below.
Justified on the basis of our legitimate interest in ensuring we can conduct and increase our business and those of our business partners.	Sharing personal data with selected partners (including sponsors), as further described in section 6 below.
Justified on the basis of our legitimate interest in ensuring network and information security.	Monitoring your use of our systems (including using technical tools to automatically monitor the use of our website and any apps and tools you use).
Justified on the basis of our legitimate interest in ensuring the proper functioning of our business operations.	Improving the security and functioning of our website, networks and information.
Justified on the basis of our legitimate interest in ensuring that you receive an excellent user experience.	Undertaking data analytics, i.e. applying analytics to business operations and data to describe, predict and improve business performance within Ascential and/or to provide a better user experience. More details on how we run analytics on our website can be found in our cookie policy.

4. How do we use personal data for direct marketing purposes?

We may send you marketing communications to keep you up to date with our products and services, including those we think may be of interest to you.

Do we send targeted e-mails?

We send targeted electronic direct marketing to business contacts at our clients or other companies with whom we want to develop or maintain a business relationship in accordance with applicable marketing laws. Our electronic direct marketing typically includes web beacons, cookies, and similar technologies that allow us to know whether you open, read, or delete the message, and links you may click. When you click a link in an electronic direct marketing message, we will also use a cookie to log what pages you view and what content you download from our websites, even if you are not registered at or signed into our site. Please see our cookies policy for further details.

Do we maintain Customer Relationship Management (CRM) databases?

Like most companies, Ascential uses customer relationship management (CRM) database technology to manage and track our marketing efforts. Our CRM databases include personal data belonging to business contacts at our clients and other companies with whom we already have a business relationship or want to develop one. The personal data used for these purposes includes relevant business information such as: contact data, publicly available information (e.g. board membership, published articles, press releases, your public posts on social media sites if relevant for business purpose), your responses to targeted electronic direct marketing (including web activity following links from our e-mails), website activity of registered users of our website and other business information included by Ascential professionals based on their personal interactions with you.

Do we combine and analyse personal data?

We may combine data from publicly available sources, and from our different e-mail, website, and personal interactions with you (this includes information collected across our different websites such as our careers and corporate sites and information collected when you sign-up or log on to our sites or connect to our sites using your social media credentials). We combine this data to better assess your experience with Ascential and to perform the other activities described throughout this privacy policy.

What are your rights regarding marketing communications?

You can elect to not receive marketing communications from us by, or by utilising opt-out mechanisms in e-mails we send to you. You can also object to receiving marketing communications or request that your personal data be removed from our CRM databases by contacting us at www.ascential.com/data.

5. What about sensitive data?

We do not generally seek to collect sensitive data (also known as special categories of personal data) from individuals and we request that you please do not submit sensitive data to us. In the limited cases where we do seek to collect such data, we will do this in accordance with data privacy law requirements and/or ask for your consent.

The term “sensitive data” refers to the various categories of personal data including racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, membership of a trade union, physical or mental health, biometric or genetic data, sexual life or orientation, or criminal convictions and offences (including information about suspected criminal activities).

6. What about persons 18 or under?

We are concerned to protect the privacy of children. We do not knowingly contact or collect information from persons under the age of 18. The website is not intended to solicit information of any kind from persons under the age of 18.

If you believe that we have received information pertaining to or from persons under the age of 18 please contact us at contacting us at www.ascential.com/data ; or dpo@ascential.com. If we become aware that a person under the age of 18 has provided us with personal information, we will take steps to delete such information.

7. Will we share your personal data with third parties?

We may share personal data with the following categories of recipients:

Our affiliates, so they can send you communications about their products and services (as further described in section 3 above)
Our third-party service providers, including IT service providers, marketing automation, solutions and analytics providers, marketing agencies, professional advisors, and
Our selected partners, representatives and sponsors, for example we may share attendee lists with event sponsors so that they can better plan their sponsorship to enhance attendee experience and, where applicable, to choose invitees to private briefings, meetings or dinners, or we may make available contact details to create marketing opportunities in certain industries and markets.

We may also share your personal data with public and governmental authorities if we are required to do so, or with third parties in connection with potential corporate or commercial transaction.

Before we share your personal data with any third parties, we take the necessary steps to ensure that your personal data will be given adequate protection in accordance with relevant data privacy laws and Ascential’s internal policies.

8. How long will your personal data be retained by us?

We retain your information for no longer than necessary for the purpose for which it was collected. We maintain specific records management and retention policies and procedures, so that in determining how long your information will be stored, we will consider:

the purpose(s) and use of your information both now and in the future;
our global legal and contractual obligations; and
what information we need to manage your relationship with us and to develop and deliver our products and services.

9. Do we transfer your data internationally?

As we are a global organisation with a presence in a number of jurisdictions and countries, we may transfer your personal data to our affiliates internationally. If you are located in the EEA, this may involve transferring your data outside the EEA. To ensure that such transfers are in accordance with applicable law and carefully managed to protect your privacy rights, any inter-company transfers of personal data are covered by agreement(s) which contractually oblige(s) us to ensure adequate and consistent levels of protection wherever personal data is transferred within our group of companies.

We may also share your personal data with third parties (see section 6), some of which are based outside the EEA. Whenever we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded it by ensuring appropriate safeguards are implemented, for example we may use specific contracts approved by the European Commission.

Please contact us (see our details at section 10 below) if you would like further information on the mechanism used by us when transferring your personal data outside the EEA.

10. Data security.

We maintain organizational, physical and technical security arrangements for all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake, including as appropriate: –

The pseudonymisation and encryption of personal data;
The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident; and
A process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of personal data.

11. Which rights do you have with respect to the processing of your personal data?

If you are based within the EEA, you may be entitled under certain circumstances to: –

Request access to the personal data we process about you: this right entitles you to know whether we hold personal data about you and, if we do, to obtain information on and a copy of that personal data.

Request a rectification of your personal data: this right entitles you to have your personal data corrected if it is inaccurate or incomplete.
Object to the processing of your personal data: this right entitles you to request that Ascential no longer processes your personal data.
Request the erasure of your personal data: this right entitles you to request the erasure of your personal data, including where such personal data would no longer be necessary to achieve the purposes.
Request the restriction of the processing of your personal data: this right entitles you to request that Ascential only processes your personal data in limited circumstances, including with your consent.
Request portability of your personal data: this right entitles you to receive a copy (in a structured, commonly used and machine-readable format) of personal data that you have provided to Ascential, or request Ascential to transmit such personal data to another data controller.
Request not to be subject to any decision that significantly affects you being taken by automated processing, including profiling.

If you are based in CALIFORNIA you have many of the rights set out at section 11 and you are entitled under certain circumstances to:-

Request access to certain information about the personal data we have shared with third parties for direct marketing purposes.

Please contact us at www.ascential.com/data to exercise any of these rights. We will process any request in line with any local laws and our policies and procedures. We may ask you for additional information to confirm your identity and for security purposes, before disclosing information requested to you.

12. What if you have questions or want further information?

Any questions regarding this notice and our privacy practices should be sent using www.ascential.com/data or by writing to Director of Compliance and DPO, Ascential Group Limited, 33 Kingsway, London, WC2B 6UF, or by email at dpo@ascential.com.

If you wish to make a complaint about how we use your information, please contact us using www.ascential.com/data and we will do our best to help. If you are located in the EEA, you have the right to lodge a complaint with the appropriate data protection supervisory authority in your country. We would, however, appreciate the chance to deal with your concerns before you approach your local supervisory authority so please contact us in the first instance.