Tanda Privacy Policy

Tanda ("We", "us", "our", "Tanda") is a group of affiliated companies ("Affiliates"). We offer workforce management solutions and services to employers around the world. This website targets visitors in Canada interested in finding more information on our products and services.

Personal information you provide to us

We collect personal information that you provide to us in our website's forms, such as when you request a demo or a call, request pricing information, consent to marketing communications, or download a whitepaper.

We collect the following personal information:

• First and last name
• Email address
• Company
• Number of staff in your business
• Any other personal information you may decide to provide to us voluntarily when you contact us or interact with us

Technical information

We collect information about your computer and user clicks each time you access our website through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and web beacons.

We collect the following information:

• Device operating system
• MAC address
• Device IP address
• Mobile device IDs
• Date and time of access
• Referring websites prior to accessing our website
• The volume of data transmitted

Information from other sources

We may also collect information about you from social media sites, data brokers and any other publicly available directories and sites. We use this information as stated in this Privacy Notice. We may collect information through marketing events, such as conferences and trade shows.

We collect the following information: your name, company and industry, and contact details including email addresses, telephone numbers, location, and various interests.

We collect and use the personal information you voluntarily provide to us:

• To communicate with you as a visitor to our website when you request further information on our products and services.
• To deliver the service you requested, for example a whitepaper or a demo session.
• To understand how you and other visitors to our website are interested in our products and to optimize the services offered.
• To improve the website and safeguard our information technology systems.
• To set up the user's company profile in our customer relationship management system.
• To send marketing information. You may unsubscribe at any time by clicking the "unsubscribe" link in our emails to you or by emailing us at privacy@tanda.com.au.

We collect and use the technical information automatically collected for the purposes of:

• Network security, for example to ward off cyberattacks.
• Better understanding our users' needs.
• Continuously improving our website.
• Personalizing content and your user experience.
• Enabling users to access the website from their computers.

We use the information collected from other sources for marketing activities as permitted by the legislation applicable to the individuals' jurisdiction.

All of the personal information collected is processed and stored in our cloud servers.

Tanda has implemented commercially reasonable and appropriate technical, physical, and organizational measures to protect personal information from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access during processing. We regularly review our security procedures to consider appropriate new technology and methods.

We hold personal information for as long as there is a business need, unless a longer retention period is required or permitted by law. In deciding the period for which we will hold personal information, we take into account the following:

• How long it has been since our relationship with you has ended.
• Whether we have a reasonable expectation that the individual would need to contact us in relation to previous purchases or previous interactions.
• The regulatory requirements applicable to the information and business process for which it was used.

We dispose of personal information in a safe and permanent way.

Depending on where you reside and on whether the local privacy regulations apply to Tanda's operations, you may have the right to receive information about what personal information we collect about you, receive a copy of your personal information, correct the personal information, and request its deletion.

To make an access request to your personal information or to exercise any of your privacy rights, please contact us at privacy@tanda.com.au.

Cookies are small pieces of information sent by a website or application to a visitor's computer. If you choose not to accept our cookies, we cannot guarantee that your website experience will be as fulfilling as it would otherwise be. We may also place cookies from third parties for functional and marketing purposes.

To learn how to opt out of being tracked on the internet, please visit this resource.

Please be aware that while visiting our websites you may follow links to other sites or services that are beyond our sphere of influence. We are not responsible for the content or their collection and use of your personal information. Consult their privacy policies and terms and conditions prior to using their services.

We do not sell your personal information.

If you have any questions about this Privacy Notice or need more information about our privacy practices, please contact us at privacy@tanda.com.au.

You have the right to complain to regulatory authorities in your jurisdiction.

For individuals from Canada, the applicable regulatory authority is the Office of the Privacy Commissioner of Canada. Further details on how to contact them can be found by visiting their website.

Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the "CCPA"), Tanda is providing the following Privacy Statement to explain how it collects, uses and discloses personal information collected from individuals who are residents of California.

Table 1. Personal information we collect

• Identifiers (such as first and last name, email address, telephone number).
  • Disclosed for business purposes to: service providers or subcontractors, affiliates, law enforcement and legal authorities, and third parties in the event of a corporate transaction (with your consent).
  • Shared for purposes of cross-context behavioral advertising with: advertising networks.
• Internet or network activity information (such as IP address, mobile device ID, MAC address, browsing and search history).
  • Disclosed for business purposes to: service providers or subcontractors, affiliates, law enforcement and legal authorities, and third parties in the event of a corporate transaction (with your consent).
  • Shared for purposes of cross-context behavioral advertising with: advertising networks.

Description of categories of third parties

This section describes in more detail the third parties referenced above:

• Service providers and subcontractors: Tanda may share your personal information with our subcontractors for certain business purposes. This information is provided in order for them to provide us with services such as payment processing, advertising services, marketing partners, web analytics, data processing, IT services, customer support, and other services such as auditing and fraud investigations.
• Related entities: Tanda may share personal information between and among its subsidiaries and affiliated companies for purposes of management and analysis, and other business purposes such as expanding and promoting our product and service offerings.
• Law enforcement and legal authorities: Tanda may be required to disclose your personal information to third parties including law enforcement agencies when required to protect and defend our legal rights, protect the safety and security of users of our services, prevent fraud, respond to legal process, or respond to a request for cooperation by a government entity, as required by law.
• Corporate transactions: In the event of a sale, transfer, merger, reorganization, or similar event, we may transfer your personal information to one or more third parties as part of that transaction, with the business entities or people involved in the deal negotiation or transfer.
• With your consent: Tanda may share personal information about you with other third parties and your authorized agents if you give us permission or direct us to share the information.

We do not sell and have not sold personal information in the preceding 12 months.

Sources of personal information

We collect this personal information actively (for example, direct input from you) or passively (for example, website cookies) from you. Additionally, we may also collect personal information from third party sources, who may include affiliates, business partners, and service providers.

Purposes for the collection, use, and sharing of personal information

Tanda uses personal information for the following business purposes:

• To provide the information or service requested by you.
• To complete business necessary activities: (i) to protect the privacy and security of the personal information we maintain, such as in connection with advanced security initiatives and threat detection; (ii) for compliance functions, including screening individuals against sanction lists in connection with anti-money laundering programs; (iii) for business structuring activities, including mergers, acquisitions, and divestitures; and (iv) for business activities, management reporting, and analysis.
• To develop and improve Tanda products and services, and for research, development, analytics, and business intelligence.
• To complete relationship management and marketing activities, including sending marketing and promotional communications to individuals who have not objected to receiving such messages.
• To complete operational activities such as (i) disaster recovery and business continuity; (ii) internal audits or investigations; (iii) implementation or verification of business controls; (iv) statistical, historical, or scientific research; (v) dispute resolution; (vi) legal or business counselling; (vii) compliance with laws and company policies; and (viii) insurance purposes.

Retention period

See section 5 in the main body of this Privacy Notice.

California consumer rights

If you are a California resident you may make the following requests, subject to applicable law.

Right to access and know. You may request that we disclose to you the following information covering the 12 months preceding your request:

• The categories of personal information we collected about you and the categories of sources from which we collected it.
• The specific pieces of personal information we collected about you.
• The business or commercial purpose for collecting or sharing personal information about you.
• The categories of personal information about you that we shared (as defined under the applicable privacy law) and the categories of third parties with whom we shared it.
• The categories of personal information about you that we otherwise disclosed, and the categories of third parties to whom we disclosed it, if applicable.

Right to request correction. You may request that we correct inaccuracies in your personal information.

Right to request deletion. You may request to have your personal information deleted.

Right to opt out of sharing for cross-context behavioral advertising. You may request to opt out of the "sharing" of your personal information for purposes of cross-context behavioral advertising.

We will not unlawfully discriminate against you for exercising your rights under the CCPA.

How to submit a California rights request

To make a privacy request, please contact us by emailing privacy@tanda.com.au. We will verify and respond to your request consistent with applicable law. We may need to request additional personal information from you, such as your name and email address, in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information. If you make a request to delete, we may ask you to confirm your request before we delete your personal information.

You may choose to designate an authorized agent to make a request under the CCPA on your behalf. No information will be disclosed until the authorized agent's authority has been reviewed and verified. Agents may be asked to provide proof of their status as an authorized agent.

Changes to this California Consumer Privacy Statement

We may change or update this Privacy Statement from time to time. When we do, we will communicate updates by posting the updated Statement on this page with a new "Last Updated" date.