EIMS Global Limited
Granville Chambers
21 Richmond Hill
Bournemouth
BH2 6BJ
DorsetT: +44 (0) 1202 55 55 33
E: enquiries@eims.biz

EIMS Data Privacy Policy
Who We Are
EIMS provides outsourced services to high technology vendors to help them build their businesses througheffective lifecycle management of new and existing customers and channel partners.
Our headquarters are in the UK and we have operations in the U.S., Asia Pacific and mainland Europe.
EIMS is registered with the UK Information Commissioners Office (ICO) as a Data Controller (registration:ZA290698). The ICO https://ico.org.uk/ is the UK’s independent authority set up to uphold information rights inthe public interest, promoting openness by public bodies and data privacy for individuals.

What Information We Collect
To manage our own business we process employee, client and business partner (e.g. supplier) data. We alsocollect and process data on behalf of our clients relating to their customers, business partners, and target accounts
in defined markets. Client data only relates to the campaigns EIMS delivers on their behalf and is restricted to thebusiness to business market. We do not collect data relating to consumers or activities of people in a personalcapacity.
We obtain business contact data (name, title, contact information [e.g. email, phone number and postal address,company name, size of business, industry, location]) from reputable agencies, public sources, our clients, andthrough our own research. Wherever possible originating data sources are recorded.
Information and policies specific to information collected on this website can be seen at the following link

Why We Need Personal Data
To manage our own business we process employee, client (existing and prospective) and supplier data to perform
Human Resource Management and Payroll duties and to manage relationships, projects and billing.
On behalf of clients we manage and process personal data to perform business-to-business CLM (CustomerLifecycle Management) tasks such as Marketing, Sales, and post-sales Customer Service and support.
Unless we specify otherwise the legal grounds for our collection and processing of personal data is the Legitimate
Business Interest of EIMS or our clients. We review the legitimacy of those interests on a case by case basis
considering the rights and interests of individuals whose data we hold. Our clients will normally define the legal
ground(s) for processing data where EIMS provides services to them as a processor. EIMS assumes obligations
to protect and manage your personal data.

1 of 4

EIMS Global Limited
Granville Chambers
21 Richmond Hill
Bournemouth
BH2 6BJ
DorsetT: +44 (0) 1202 55 55 33
E: enquiries@eims.biz

What We’ll Do with Your Personal Data
If we ask for your personal data, we’ll make it clear why we are asking for it. For instance, we may need your email
to send you something you have requested or a phone number if you have asked to be contacted.
When acting as a data controller will not provide your personal information to any third parties for the purpose of
direct marketing without your express consent. When acting as processor on behalf of a client we will share yourpersonal information with that client to the extent of our contractual and statutory obligations.
International Data Transfers - We may on occasion transfer data between any of the countries in which we or
our clients operate in a role as either controller or to fulfil our contractual obligations as a data processor.
EIMS will not use your personal data in any automated decision-making techniques that could result in decisions
that might affect you.
We may also share personal data with other organisations where there is a contractual obligation to fulfil aspectsof its processing, for example payroll suppliers for our own employee benefits or service providers who manage
aspects of our technical infrastructure.

How Long Do We Need It For?
We only keep data for the period for which we see it as relevant. This would typically be for as long as theindividual occupies the professional position that we have a legitimate interest in. This could be years in somecases, but our processes seek to update and refresh data to ensure that it remains accurate and relevant if held
for a significant period.
Data held on behalf of clients where EIMS acts as a data processor is subject to specific client agreements andwill typically be returned to the client at the end of an engagement and cease to be processed by EIMS.

How We Look After It?
We will take reasonable technical and organisational precautions to prevent the loss, misuse or unauthorised
alteration of your personal information.
We will store any personal information you provide on our secure servers in the UK.

Your Rights
EIMS recognises your rights as defined in the General Data Protection Regulation (GDPR), these can be reviewed
here. We will always seek to uphold those rights and should you wish to exercise any of these, please complete
the form in the ‘Your Rights’ section in our Website privacy policy with the relevant select as shown below

2 of 4

EIMS Global Limited
Granville Chambers
21 Richmond HillBournemouth
BH2 6BJ
DorsetT: +44 (0) 1202 55 55 33
E: enquiries@eims.biz

Your Rights cont.
Data Subject Right…

How EIMS satisfies your rights

 To be Informed

Read our Data Privacy Policy which details all aspects of how we may process
your data. If you have any questions, email us at dataprivacy@eims.biz

 to Rectification

If some of the data we hold about you needs correcting then complete the form
selecting the option:‘Update Personal Details (Right to Rectification)’ to Object

For us to stop communicating with you, complete the form selecting the option:‘Opt out (Right to Object)’ of Erasure

N.B if you chose this option we will stop communicating withyou until you choose to re-subscribe to communications.

For us to delete the personal data that we currently hold about you, complete theform selecting the option:‘Delete Personal Details(Right of Erasure)’

N.B - when your data is deleted it may not preclude us fromunknowingly re-acquiring it from other sources at a future
point in time of Access

If you would like us to send you the personal data that we hold for you, completethe online form selecting the option:‘Get my Data (Right of Access)’ to data portability

Where we provide your personal data to you, we will do so in a commonly used
format, for a specific request, complete the form by selecting:‘Extract Data in Specific Format (Right to Data Portability)’ of Restriction ofprocessing

Should there be any dispute about processing your data and you would like topause processing until the dispute is resolved, complete the form selecting:‘Put on Hold (Right to Restrict processing)’

EIMS does not use any form of Automated decision making; Should you have any in Relation toAutomated Decision queries about this, email us at dataprivacy@eims.biz
Making and Profiling

EIMS recognises your right to lodge a complaint with a supervisory authority. EIMS is registered with the UK ICO
and you can access their web site from this link.

3 of 4

EIMS Global Limited
Granville Chambers
21 Richmond Hill
Bournemouth
BH2 6BJ
DorsetT: +44 (0) 1202 55 55 33
E: enquiries@eims.biz

EIMS USA Inc. US Privacy Shield
EIMS USA Inc. based in Miami, FL is registered under the US Privacy Shield Framework and operates to ourglobal standard data privacy policy. Notices specific to our participation in the Privacy Shield Framework are asfollows:•••••••••••EIMS USA Inc. complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Departmentof Commerce regarding the collection, use, and retention of personal information transferred from theEuropean Union to the United States. EIMS USA Inc. has certified to the Department of Commerce thatit adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policyand the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about thePrivacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/EIMS USA Inc. processes the types of data described in the main body of this data privacy policy andconfirms its commitment to subject all personal data received from the EU/UK to those principles inreliance on the Privacy Shield.
In compliance with the Privacy Shield Principles. EIMS USA Inc. commits to resolve complaints about ourcollection of use of your personal information.
EU/UK individuals with inquiries or complaints regarding our Privacy Shield Policy should first contact
EIMS USA Inc. by completing the ‘Data Enquiry Form’ at the following link: 'Your Rights' or contact us bypost to Data Privacy Officer, Granville Chambers, 21 Richmond Hill, Bournemouth, BH2 6BJ, Dorset, UK.
Completion of the online form or writing to us will enable you to exercise your rights and access our internal
complaints mechanism.
EIMS USA Inc. participation in US Privacy Shield recognises the rights of data subjects described in thisprivacy policy in the section 'Your Rights' which describes how to request access to any personal data that
we may hold about you and exercise all of your rights in relation to that data . Your rights include but are
not limited to the right to ‘object’ (opt out) to the processing of your personal data. You can choose toexercise all rights by completing the simple form at this link. Your data will not be shared with any third
party other than as described below or used for any purpose other than as declared in this policy.
EIMS recognises your right to lodge a complaint with a Data Protection Authority. EIMS is registered with
the ICO (UK) and you can access their web site from this link.
EIMS USA Inc. has further committed to cooperate with the panel established by the EU data protection
authorities (DPAs) with regards to unresolved Privacy Shield Complaints concerning data transferred fromthe EU.
The purposes for which we collect and use personal information are described here
EIMS will not disclose your personal data to any third party except where required by contractual or
statutory obligation or to an organisation that processes data under our instruction and subject to aprocessor agreement that protects you and extends data privacy obligations to that sub-processor.
In the context of an onward transfer EIMS USA Inc. has responsibility for the processing of personal
information it receives under the Privacy Shield and subsequently transfers to a third party acting as anagent on its behalf. EIMS USA Inc. shall remain liable under the Principles if its agent processes such
personal information in a manner inconsistent with the Principles, unless the organization proves that it is
not responsible for the event giving rise to the damage
EIMS USA Inc. acknowledges that under US Privacy shield;o It is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
o The possibility, under certain conditions, for the individual (data subject) to invoke binding
arbitration, the requirement to disclose personal information in response to lawful requests by
public authorities, including to meet national security or law enforcement requirements, and its
liability in cases of onward transfers to third parties

4 of 4