Data Privacy Policy

As a data subject, you may exercise the following rights regarding the processing of your personal data:

• Right to information. You have the right to receive information about the processing of your personal data by CDQ, prior to as well as during the processing, upon request.
• Right of access. You have the right to receive a copy of your personal data currently processed by CDQ, upon request.
• Right to rectification. Data quality is our business, and we should process your personal data accurately. Should you discover any inaccuracy, you have the right to request the rectification of your affected personal data by CDQ.
• Right to erasure ("right to be forgotten"). You have the right to request the deletion of your personal data by CDQ, unless there are lawful grounds for CDQ to continue processing (e.g., legal obligation).
• Right to object. When CDQ processes your personal data based on a legitimate interest, you can object to such processing, on grounds relating to your individual situation, and we shall assess our processing activities to ensure compliance with all relevant rules and regulations.
• Right to withdraw consent. When CDQ processes your personal data based on your consent, you can withdraw your consent at any time, using the dedicated link in the communications you receive from us. The withdrawal of consent is not retroactive and shall not affect the lawfulness of prior processing.
• Right to restriction of processing. In the following cases, you have the right to request the restriction of processing of your personal data:
  • When exercising your rights to rectification and to object, while we are verifying your claim.
  • When processing is unlawful, and you would prefer restriction over deletion of your personal data.
  • When CDQ no longer needs to process your personal data, but you require them in the context of a legal claim.

These data subject rights depend on the categories of personal data and the processing activities in question. In all cases, CDQ will handle your requests in the best way possible. You may also contact and lodge a complaint with the data protection supervisory authority of your country.

Our core business is to provide collaborative data quality services, enabling our clients to improve the management of their business partner data, by sharing it within a network of trusted peers.

We collect business partner data from our clients and analyze them on their behalf to derive quality assessment reports and apply corrective data quality rules. We also update and add missing information to business partner data using external data sources such as open data repositories, commercial registers, or third-party services.

We host and run our cloud services and databases in data centers located in the EU (Germany and Ireland). Data records are encrypted "at rest" (in our databases) as well as "in transit" (when being transferred between your browser and our cloud platform).

Data collection and processing

Processing bases: customer contracts, legitimate interest
Data subjects = business customers or suppliers of CDQ clients:

• Legal name
• Legal form
• Tax and identification numbers
• Address(es)
• IBAN account number(s)
• Hierarchy relations

Webpages

Our website is the showcase of our business, and we rely on selected technology platforms (i.e., Google and HubSpot, see table below) to improve and analyze your experience, and for marketing purposes.

These platforms use cookies and similar technologies (such as web beacons and scripts) that gather and aggregate statistical data such as the time of your visit, the pages you viewed, how you arrived at our website (e.g., the social media platform or the search engine and keywords that lead you to us), information about your device and browser, as well as your approximate location based on your IP address.

This helps us to improve and customize your browsing experience, and to analyze trends and understand our audience. In particular, cookies are used to collect information about how you interact with our website and other media and allow us to remember you. Our website stores the following types of cookies on your computer:

• Necessary cookies are required for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or displaying blogs and filling in forms. We use our own necessary cookies, as well as those from HubSpot.
• Analytics cookies help us understand how visitors engage with the website. We may use a set of cookies to collect information and report site usage statistics. We use analytics cookies from HubSpot, Google Analytics and LinkedIn.

If you want to prevent our platforms from collecting your data and CDQ from processing it, you can do so using the cookie notice displayed upon your first visit on our website, or by clicking here. When you deactivate optional cookies, and a single cookie will be used in your browser to remember your preference not to be tracked (i.e., _hs_cookie_cat_pref).

CDQ also maintains a social media presence on LinkedIn and YouTube. Their respective privacy policies apply when you navigate to them from the CDQ website.

Finally, CDQ may use Google Ads to display advertisement in your Google search results.

Email communication

Various pages of our website contain registration forms that you can use to get in touch with us and/or receive further information from us. With these forms, we collect your information based on your explicit consent, and each of landing page lays out the purpose of the registration.

Our marketing platform handles our automated e-mail communications (e.g., newsletter, blog subscription, product updates, depending on what you registered to). These e-mails may contain web beacons to record, for instance, whether you opened our emails and how you acted upon reading them.

If you want to revoke your consent and stop receiving messages from us, each of our emails contain unsubscribe links that enable you to do so.

Data collection and processing

Data subjects = visitors of the CDQ website:

• First name and last name
• Email address
• Company and industry
• Job description
• IP address
• Web logging and browsing data

CDQ events and webinars

CDQ organizes events and webinars around the topic of data management. To process your registration to our events/webinar, we transfer some of your personal information to organization partners (e.g., a hotel for an in-person event, a partner company as co-organizer for a webinar).

Our event/webinar partners and channels are listed on each event/webinar registration page, and we ask for your consent when needed. Your registration data will be used to send event/webinar organization information (e.g., calendar invitation, agenda, directions, webinar link) to you, as well as follow-up information on future event and/or similar topics.

The provision of webinars is supported by web conferencing platforms. Webinars organized by CDQ rely on GoToWebinar from LogMeIn. As you access GoToWebinar and attend the webinar, information such as login and logout timestamps will be collected (“attendance data”). Once a webinar is over, participation data is exported from GoToWebinar to CDQ infrastructure and used for follow-up purposes by CDQ and its co-organizers.

If CDQ is co-organizer of a webinar managed by a partner company that uses a different web conferencing solution, this will be specified on the webinar registration page.

By registering and/or logging on to an event/webinar, you agree to the following:

• Your personal data may be heard, seen, read, collected, or used by CDQ and its event/webinar partners (as organizers), and by participants.
• Any communication or information transmitted during the event/webinar, such as voice, display names, presentations, are available to the event/webinar audience and may be recorded for CDQ's and its event/webinar partners' further promotion and information purposes.
• CDQ and its event/webinar partners may further use registration data (e.g., invitee lists, information on the event/webinar subject matter and the recording thereof).

Please note that webinars may be recorded and subsequently made available publicly on our website and social media channels (i.e., LinkedIn and YouTube), as well as on those of relevant webinar co-organizers.

Data collection and processing

Data subjects = attendees of CDQ events and webinars:

• Registration data:
  • First name and last name
  • Email address
  • Company and industry
  • Job description
• Attendance data (webinars only):
  • IP address
  • Webinar logging data

For our commercial processes, we collect and store information on our business and client contacts in our customer records management (CRM) system as well as within our digital signature platform, when applicable.

We collect and process personal data of our business contacts – if your company is not a client of CDQ, you become a business contact of ours when we have had an initial meeting, and follow-up activities have been agreed upon.

We collect and process personal data of our clients’ representatives as part of the initial contractual and negotiations process, for the execution of client contracts, as well as during usage of CDQ Cloud Apps. In the latter case, we collect and process personal data of our clients’ employees for the provision of and access to CDQ Cloud Services, as well as for sending relevant notifications (e.g., maintenance announcements) – we also log user actions for performance and security metrics of CDQ Cloud Services.

DATA COLLECTION AND PROCESSING

Processing bases: customer contract, legitimate interest
Data subjects = representatives of CDQ customers

• First and last name
• E-mail address
• Phone number
• Digital signature
• IP address and timestamp of various user actions