Latest Update: April 15, 2019.
Personal Data describes any information about you. This information can often be used or combined with other information to identify you, contact you, or locate you and includes information such as your name, company name, email address, billing address, payment information, or any other personal information that is provided to us by you, whether mandatory or voluntary.
All processing and transferring of Personal Data is performed in accordance with privacy rights and regulations following the General Data Protection Regulation – EU Regulation n. 2016/67 (GDPR), and K-Rev processing will take place in accordance with the GDPR.
2 PLATFORMS AND APPLICATIONS USERS’ DATA
By using the K-Rev Platforms and/or the K-Rev Applications, you consent to the collection and use of your Personal Data as described herein. If you do not agree with the terms set out herein, please do not use the K-Rev Platforms and/or the K-Rev Applications. Your Employer is responsible for collecting your explicit consent to process Personal Data collected and used on the K-Rev Platforms and/or K-Rev Applications. If you do not grant the requested consent to the processing of your Personal Data, use of the K-Rev Platforms and/or K-Rev Applications may not be possible. If you do not grant consent to store or process your personal data on K-Rev, please contact your Employer.
2.1 Data collected
When your account or user profile is open on the K-Rev Applications, certain personal information are associated with your account or user. Mandatory data required for your personal account setup collected includes your first & last name, email address, company. Additional optional data may be collected for the purposes of making your profile more interesting and includes location and addresses, cell phone number, profile image, job title, role, birthday.
2.2 Purpose of processing personal data
K-Rev uses data collected from the creation and use of a K-Rev account to improve use of various features of our service, to collect and report use metrics for your employer to determine overall application adoption within your company, to troubleshoot and debugging the service, to notify you about changes to the K-Rev service relevant to your account or user profile, gather feedback on the Application, and to identify users who submit support tickets in order to provide direct and effective customer support.
The content of the evaluations and comments sent by a user through K-Rev will be provided and disclosed to that user’s Employer to enable the Employer to identify the user for the purposes of rewards, performance reviews and coaching. These information will be provided also to the HR office of your organization for the purposes of rewards, performance reviews and training.
We may gather information about the location, device, and operating system used by users of the K-Rev Applications in order to distribute K-Rev Applications and guide future development of the service.
2.3 Processing methods and data retention time
Data held in the K-Rev Platforms and/or K-Rev Applications will be stored until an authorized Administrator from your company initiates data anonymization of your User account. If you wish to have your data anonymized, please notify your Administrator.
Note that the K-Rev Platforms and K-Rev Applications retain 6 months of backup data which will still contain your Personal Data. In the event that the K-Rev Platforms or K-Rev Applications require a data backup, your user information will automatically be re-anonymized upon recovery. After six months have passed, your data will no longer be held in any versions of the backup data stored by the K-Rev Platforms and/or K-Rev Applications.
2.4 Rights of the data subject
You have the right to change, request deletion of, or know the extent of personal information collected by organizations. You may update your Personal Data sending a request to the authorized Administrator from your company with the information that you wish updated, added, or removed: we will honour requests to update, correct, change, or delete personal data.
2.5 What happens to my K-Rev account if I leave my company?
The K-Rev Platforms and/or K-Rev Applications have a built-in function for businesses to delete all Personal Data of employees that have left the company or otherwise do not wish to be a part of the K-Rev Platforms and/or K-Rev Applications. To request that your data be cleared by your employer for this reason, please reach out to the department in your organization that is responsible for your K-Rev Platforms and/or K-Rev Applications account.
3 WEBSITE VISITORS’ DATA
By visiting this Website, you consent to the collection and use of your Personal Data as described herein. If you do not agree with the terms set out herein, please do not visit this Website. If required by applicable law, we will seek your explicit consent to process Personal Data collected on this Website or volunteered by you. Kindly note that any consent will be entirely voluntary. However, if you do not grant the requested consent to the processing of your Personal Data, the use of certain sections of this Website may not be possible.
3.1 Data collected
Furthermore, K-Rev may collect and process any Personal Data that you volunteer to us in our Website’s forms, when you write to K-Rev using an email published on this Website such as when you request a demo or certain marketing content from the K-Rev Websites such as white papers, case studies, articles, and other materials. Collected Personal Data may include your IP address, first and last name, your postal and email address, your telephone number, your job title, department, data for social networks, your areas of interest, interest in K-Rev products, and certain information about the company you are working for (company name and address), as well as information as to the type of relationship that exists between K-Rev and yourself.
3.2 Purpose of processing personal data
K-Rev uses the collected navigation data to communicate with Visitors, to provide information requested by Visitors, to show ads on other websites to Visitors, and to improve its Website by analyzing how Visitors navigate its Website.
K-Rev also collects Personal Data submitted through our Website for the following purposes:
•identifying potential new clients who have interacted with us on our Website,
• contacting you with educational and informational materials related to performance management and evaluation culture.
3.3 Processing methods and data retention time
Processing will be carried out in automated or manual way, with methods and instruments aimed at guarantee maximum security and confidentiality, by persons specifically appointed to do so. Personal data submitted on the K-Rev Website will be stored for a period not exceeding the purposes for which the data were collected and subsequently processed. You may request deletion of your data from K-Rev marketing databases by contacting privacy@K-Rev.com.
3.4 Rights of the data subject
In any moment, about the information collected by our Website, you can:
a. request confirmation of the existence of personal data in our database;
b. obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
c. obtain correction and deletion of data;
d. obtain the treatment limitation;
e. obtain data portability, ie receive them from the data controller, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without hindrance;
f. oppose the processing at any time and also in the case of treatment for direct marketing purposes;
g. oppose to an automated decision-making process concerning individuals, including profiling;
h. revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
i. make a complaint to the supervisory authority.
If you wish to update, remove or modify your data, you may submit your request to privacy@K-Rev.com.
3.5 Sharing personal data
Your personal data, won’t not be shared if not within the limits expressed in the present policy n order to comply with contracts or related purposes.
K-Rev may share such Personal Data with service vendors or contractors (service providers, consultants, authorities) in order to provide a requested service or transaction or in order to analyze the Visitor behavior on its Website. Any further sharing of your personal data will only take place upon your explicit consent.
In the event that K-Rev is acquired or transfers some or all of its operations and/or assets to another organization or entity, you consent to a transfer of your Personal Data, provided that the entity will be bound to the same data-protection commitments outlined in this policy and all related policies at the time of acquisition.
4. DATA STORING
Data collected in the K-Rev Applications are stored on cloud-based servers located in the European union. By using K-Rev, you acknowledge that your personal information will be transmitted to, stored, and accessed in the European union. The K-Rev Websites could use third-party & analysis tracking tools and whose servers may be located in any country in which these third parties have their facilities.
5. DATA PROTECTION
5.1 Protection against intrusion
K-Rev has adopted reasonable physical, technical and organizational safeguards against accidental, unauthorized or unlawful destruction, loss, alteration, disclosure, access, use or processing of the personal data in K-Rev’ possession. Personal Data submitted to K-Rev either through the K-Rev Platforms, the K-Rev Applications, or the Websites are encrypted using SSL-encrypted connections and a token. K-Rev will promptly notify the User in the event of any known unauthorized access to, or use of personal data.
5.2 Protection against loss of data
The K-Rev Applications are secure in the cloud and running on data storage infrastructure that has achieved ISO 27001 certification. ISO 27001 is a widely adopted global security standard that sets out requirements and best practices for a systematic approach to managing company and customer information. The data centers that run the K-Rev infrastructure are equipped with video surveillance, biometric and pin-based locks, strict personnel access controls and detailed entry logs for visitors. Finally, Servers that store customer data are physically and logically separated from the K-Rev web application servers.
6. DATA PROCESSOR AND DATA CONTROLLER
With regard to the K-Rev Platforms and K-Rev Applications, the employer, the organization using it is considered the Data Controller and K-Rev is the Data processor. For data collected on the K-Rev Website, K-Rev is the Data Controller, and the Data Processor, except in circumstances where the Data Processor is another third party service.
7. LINKS TO OTHER SITES
8. CHANGES TO THIS POLICY
Via Cavour 2 – 22074 Lomazzo (CO) – ITALIA