Last updated: 6 February 2020
iProspect (referred to as “our”, “us” and “we” in this notice) is an advertising agency that is part of a global media group. We help our clients to improve how they advertise and market, whether by print, post, email or on websites. We believe that the responsible use of data supports business growth and builds strong relationships between brand and consumer. As a business, we are committed to respecting and protecting the privacy of all individuals with whom we interact. We are committed to being transparent in our handling and processing of personal data at all times in accordance with applicable privacy and data protection laws.
This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us on any website where this Privacy Notice appears. iProspect is the data controller of any personal data you provide to us, including in relation to this website.
The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents with additional rights with respect to their personal information. Those rights are explained below in Section 7 (Your California Rights). This Privacy Notice includes certain disclosures required under CCPA.
This Privacy Notice explains the following:
In the Supplementary Information section of this Privacy Notice, we explain what is meant by “personal data”, “personal information” and other terms used in this notice.
1. INFORMATION WE MAY COLLECT
The type of information we collect will depend on the circumstances and the service you are using. Generally speaking, we will collect information relating to you and/or your use of our services in the following ways:
Information relating to your use of the website
We and our third-party service providers use cookies and other tracking tools to automatically collect information about how you use our website. This includes information relating to the pages you visit on our website, the services or information you search for and the links and content you choose to access on our website. We may use this information to provide you with relevant content and to inform our marketing strategy. This type of activity is known as “profiling” – using automated means to process your personal data to analyze or predict your personal preferences, interest or behaviors. You may object to profiling (see Section 5 of this Notice, below)
Technical data
We and our third-party service providers automatically collect information about the device(s) you use to access our website. This includes collecting information about the type of device you are using, as well as unique mobile device ID or the internet protocol (IP) address online identifiers, which are numbers that can uniquely identify a specific computer or other network device on the internet. This information is linked to a cookie ID, which we receive and process. You may find more information on the cookies we use and the purposes for which we use them on our Cookie Notice below. We also collect information about your internet service provider and domain name and the type of browser and operating system you are using.
Contact data
We collect contact details directly from you when you sign-up to receive email alerts, attend one of our events, download our content, subscribe to our newsletters or where you ask us to respond to a query you have. The personal data we collect may include your name, email address, employer and job title, and location.
Marketing and communications preferences
We collect information about your preferences in receiving marketing information from us and your communication preferences.
2. HOW WE USE THIS INFORMATION
Except where required by law or court order, we use your personal data for the following purposes:
In the table below we set out further information about the purposes for which we use your personal data and the legal basis we rely on for its use. Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. In the second column, we also specify how such personal data is categorized under CCPA. For more information about the categories of personal information under CCPA, see Your California Rights.
Purpose/Activity |
Types of personal data that may be processed (and CCPA categories of personal information) |
Lawful basis for processing includingbasis of legitimate interest |
To send you information about our services:
|
(Identifiers: personal information; professional or employment related information) |
Where you have requested information from us, such as newsletters, publications or event invitations, we send such communications based on your consent. You can ask us to stop such communications at any time by clicking on the unsubscribe link at the bottom of the message.
|
To improve and develop our website:
|
(Identifiers: internet or other similar network activity) |
Necessary for our legitimate interest (to define types of clients for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). |
To deliver relevant content to you, and measure or understand the effectiveness of the content we serve to you. |
(Identifiers; personal information; professional or employment related information; internet or other similar network activity) |
Necessary for our legitimate interests (to study how clients use our service and engage with our content. To develop our service, to grow our business and to inform our marketing strategy). |
To respond to any enquiries or feedback that you send us To update you with any changes to our terms and conditions/other policies
|
(Identifiers; personal information; professional or employment related information) |
It is in our legitimate interest to respond to communications that you send to us, inform you of relevant information in relation to the services that we provide and utilize your information to improve our business. |
To send you information on our products and services relevant to your needs |
(Identifiers; personal information; internet or other similar network activity) |
It is our legitimate interests to work out which of our products or services may interest you and tell you about them. |
To protect this website, our company, our employees, and our users from malicious attacks, hacking, fraud, or other illegal or unauthorized activity |
(Identifiers; personal information; geolocation data; internet or other similar network activity) |
It is our legitimate interests to investigate and take steps to prevent potential fraud or other wrongdoing. |
To share information with our service providers. |
(Identifiers; personal information; internet or other similar network activity) |
It is our legitimate business interest to share your data with trusted third parties who provide us with services relevant to the provision of our website. |
To share information within the Dentsu Aegis Network group for business purposes. |
(Identifiers; personal information; internet or other similar network activity) |
As Dentsu Aegis Network operates as a global operating media company, it is our legitimate business interest to share your data within the Dentsu Aegis Network group in order to manage our business effectively and provide our products and services. |
To share information with other third parties, such as regulator and law enforcement agencies |
(Identifiers; personal information; internet or other similar network activity; geolocation data) |
We share your data as necessary for compliance with any legal obligation to which we are subject or in order to satisfy our legitimate business interests. |
3. INFORMATION SHARING AND DISCLOSURE
Information shared within the Dentsu Aegis Network
The Dentsu Aegis Network is a globally operating media group consisting of multiple companies. Therefore, we may from time to time disclose your personal data within our group of companies. All of the categories of personal information under CCPA (see Your California Rights) may be shared (and have been shared within the last 12 months) within our group of companies.
Information shared with our third-party service providers
We use a number of third parties to perform business functions on our behalf, such as sending our newsletters and hosting our online services and customer relationship management. We will disclose personal data to these vendors and service providers to enable them to provide their services. All of the categories of personal information under CCPA (see Your California Rights) may be shared (and have been shared within the last 12 months) with our third-party service providers.
Information shared due to corporate mergers or restructuring
We may disclose personal data with any successor to all or part of our business. For example, if part of our business is sold, we may give our customer list as part of that transaction. All of the categories of personal information under CCPA (see Your California Rights) may be shared with any successor for this purpose.
Information shared with other parties as required by law or to prevent or investigate illegal activities
Where required or permitted by law, personal data may be provided to others, such as regulator and law enforcement agencies, for example in response to a court order or a subpoena, or in response to a law enforcement agency’s request, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities or to protectiProspect, our websites, customers, employees, and business partners from fraud or other malicious activity, and as otherwise required by law. All of the categories of personal information under CCPA (see Your California Rights) may be used by us or shared with other parties for these purposes.
We may use and share personal data as otherwise disclosed to you from time to time when collecting your personal information or as otherwise permitted by law. All of the categories of personal information under CCPA (see Your California Rights) may be used by us or shared with other parties for these purposes.
We do not sell or rent any personal data about you to any third party, and have not done so within the past 12 months
4. INTERNATIONAL AND GROUP COMPANY TRANSFERS
Dentsu Aegis Network is a globally operating media group consisting of multiple companies. Therefore, we may from time to time disclose your personal data within our group of companies. Some of our group companies are located outside the European Union (“EU”) or European Economic Area (“EEA”), but we implement and maintain policies designed to ensure the security of such disclosures and transfers in accordance with the applicable privacy and data protection laws.
If you reside in the EU or EEA, we will only transfer your personal data outside the EU or EEA where we are satisfied that adequate levels of protection are in place designed to protect the integrity and security of any information being processed in compliance with applicable privacy and data protection laws. These measures may include, as applicable, the use of standard contractual/data protection clauses adopted by the European Commission and where transfers are to the United States of America, the EU-US Privacy Shield, Swiss-US Privacy Shield or your consent. Where we transfer personal data between our group companies we have covered these transfers by entering into standard contractual clauses adopted by the European Commission.
You may request further information on the measures used for such transfers via the contact details given in this Privacy Notice
5. YOUR CHOICES
You have certain choices about how we use your information.
You can control cookies and tracking tools. To learn more about your choices related to cookies and our Do-Not-Track Policy, please see our Cookie Notice.
You may choose not to receive marketing communications from us. You can ask us to stop such messages at any time by clicking on the “unsubscribe” link at the bottom of the message. Please note that even if you choose not to receive marketing communications from us, you still may receive non-marketing communications, such as responses to your inquiries or notices regarding your account or our relationship with you.
6. YOUR EU/EEA RIGHTS
Under EU data protection law we are required to advise you on the legal basis for processing your personal data. For the most part, the processing of your personal information is based either on a) our legitimate interests related to us providing you services you have requested or otherwise your customer relationship with us, or b) your consent, where requested.
Where provided under applicable law, you may have the following rights:
If you exercise the rights above and there is any question about who you are, we may require you to provide information from which we can satisfy ourselves as to your identity.
Right to Request Deletion
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.
8. UPDATES
This Privacy Notice may be updated from time to time to reflect changes in law, best practice or a change in our practices regarding the treatment of personal data. The date of the most recent revision will appear at the top of this page. If you do not agree to the changes, please do not continue to use our services and please refrain from sharing your personal data with us. You should check this notice frequently for updates.
9. CHILDREN
This website is not intended for children aged 16 or under. We do not actively seek to collect personal data about children aged 16 or under. If you have any concerns about your child’s privacy in relation to our services, or if you believe that your child under the age of 16 may have entered personal data onto our website, please contact us at dpo@dentsuaegis.com. We will delete such personal data from our records or seek verifiable parental or legal guardian consent to retain such information within a reasonable time.
10. CONTACT US
If you have any questions about this Privacy Notice, our approach to privacy or you would like to exercise any of the rights mentioned in this Privacy Notice you can contact our Data Protection Officer in any of the following ways:
Postal Address:
Data Protection Officer, Dentsu Aegis Network
Regent’s Place, 10 Triton Street, London, NW1 3BF
---
Data Privacy Office, Dentsu Aegis Network, Legal Department
32 Avenue of the Americas, 18th Floor
New York, NY 10013
Telephone:
Dentsu Aegis UK: (+44) (0) 207 070 7700
Dentsu AegisUS Privacy Office Toll Free: 1-877-570-5939
(877) 570-4844
Email:
EU/EEA - dpo@dentsuaegis.com
Americas – Americas.dpo@dentsuaegis.com
Contact.PrivacyUS@iProspect.com
SUPPLEMENTARY INFORMATION
In this Supplementary Information section, we explain some of terminology used in this Privacy Notice.
“data controller” – the person or company that controls the purposes and means of processing personal data.
"personal data" – any information that relates to you (or from which you can be identified).
“personal information” – information that identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” excludes information that is lawfully made available from federal, state or local government records as well as de-identified or aggregated information.
“processing” – means doing anything with data. For example, it includes collecting it, holding it, disclosing it and deleting it.
“profiling” - using automated means to process personal data in order to work out certain things about people, like analyzing or predicting their performance at work, reliability, economic situation, personal preferences, interests, behavior, location or movements.
"transfer" – sending personal information outside the European Economic Area (e.g. by storing it on equipment located outside the European Economic Area), or allowing someone from outside the European Economic Area to access the personal information.
Cookie Notice
Please read below for more information on the cookies we use, the purposes for which we use them, and how to reject cookies.
How to reject cookies
Our Do-Not-Track Policy: If you don’t want to receive cookies, you can alter your browser settings. The procedure for doing so varies from one browser application to another. If you wish to reject cookies from our site, but wish to accept those from other sites, you may choose the option in your browser settings to receive a notice before a cookie is stored on your device. If you block or reject cookies, not all of the tracking described below will stop. Please consult the “Help” section of your browser for more information.
To find out more or to opt out of having your online behavior collected for advertising purposes, please consult the following:www.youronlinechoices.com (for EU users) or http://optout.aboutads.info/?c=2&lang=EN (for U.S. users). Choices you make are device-specific and browser-specific. By disabling cookies, you may be prevented from accessing some features of our site or certain content or functionality may not be available.
How we deploy “cookies”
Cookies are small packets of information stored by your web browser when you visit certain websites, including our website. Cookies are generally used by websites to improve your user experience by enabling that website to ‘remember’ you, either strictly for the duration of your visit (using a “Session” cookie which is erased when you close your browser) or for repeat visits (using a “Permanent” cookie).