Ivanti Privacy Policy and Notice
The Scope of this Policy and NoticeThis Ivanti Privacy Policy and Notice (the “Notice”) is designed to provide transparency into
Ivanti’s privacy practices and principles in a format you can navigate, read, and understand.
This Notice applies to all the personal data that you provide and Ivanti collects through its
products, apps, services, websites, events, and other communications. References to Ivanti
products in this statement include Ivanti software, apps, services, events, and websites.
This Notice describes how Ivanti collects, uses, shares, and secures personal data. It also
describes your choices regarding use, access, and correction of your personal data. For additional
information, please visit Ivanti’s Privacy & Legal web page.
Ivanti may provide you with additional privacy documentation when you use a specific site,
product, or service from Ivanti. In that case, the documentation you received should be read in
conjunction with this Notice.

Your Privacy Rights
Where granted by applicable law, you may have the following rights with respect to your personaldata:-of access,to rectification,
to erasure,
to restriction of processing,to data portability,
to object to certain types of processing,to withdraw consent at any time, without affecting the lawfulness of processing based onconsent before its withdrawal, andto lodge a complaint with a supervisory authority.

Upon request Ivanti will provide you with information about whether Ivanti holds any of yourpersonal data. You can access, correct, update, or request deletion of your accounts or personal
data by managing your account settings or by emailing Ivanti at: privacy@ivanti.com or by visiting
the Ivanti Privacy Center.
Ivanti will respond to requests in accordance with the requirements of applicable data protection
law. Please note that in order to fulfill your request, Ivanti may need you to provide certain
information to verify your identity.
When Ivanti receives a request to exercise a privacy right, Ivanti will review information Ivanti hascollected about you (if any) with identifying information you may have provided Ivanti (such as alogin, email address, mailing address, zip code, or transaction or order number) to authenticate
your identity. If you use an authorized agent to submit a request, Ivanti may require the authorized
agent to provide proof that you gave the agent signed permission to submit the request. Ivanti
may also require you to directly confirm with Ivanti that you provided the authorized agent
permission to submit the request. There may be situations where Ivanti cannot grant your request.
In such a situation, Ivanti will explain Ivanti’s reasoning to you and will honor your right to appeal
when applicable.

If you are a product end user of an Ivanti business customer, you will need to contact the businesscontact directly to exercise your rights.
If you feel that Ivanti has not been able to assist with your complaint or concern, and you arelocated in the EEA or the UK, you have the right to lodge a complaint with the competentsupervisory authority.
In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the
EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), Ivanti commits tocooperate and comply respectively with the advice of the panel established by the EU dataprotection authorities (DPAs), the UK Information Commissioner’s Office (ICO) and the Gibraltar
Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information
Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal
data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the
Swiss-U.S. DPF.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S.
DPF, Ivanti commits to resolve DPF Principles-related complaints about our collection and use ofyour personal information. EU, UK and Swiss individuals with inquiries or complaints regarding
our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the
EU-U.S. DPF and the Swiss-U.S. DPF should first contact us by emailing privacy@ivanti.com or
via mail to: Attn: Data Protection Officer, Ivanti, Inc, 10377 South Jordan Gateway, Suite 110,
South Jordan, Utah 84095, USA.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S.
DPF, Ivanti commits to refer unresolved complaints concerning our handling of personal data
received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the SwissU.S. DPF to International Centre for Dispute Resolution-American Arbitration Association (ICDRAAA), an alternative dispute resolution provider based in the United States. If you do not receive
timely acknowledgment of your DPF Principles-related complaint from us, or if we have notaddressed your DPF Principles-related complaint to your satisfaction, please visit
https://go.adr.org/dpf_irm.html for more information or to file a complaint. The services of ICDRAAA are provided at no cost to you.
You have the possibility, under certain conditions, to invoke binding arbitration for complaints
regarding DPF compliance not resolved by any of the other mechanisms set out in this Notice.
For more information, please see Annex 1 of the DPF Principles, available here.

Your Controls and Choices
If you have previously signed up to receive emailed information about our products or special
offers, and no longer wish to receive these communications, you may opt-out through the“Unsubscribe” link included in each email. You may also submit a request through the Ivanti
Privacy Center.
If you register for an account on the Ivanti Community site, you may be listed in Ivanti’s publicly
accessible member directory. You can control this by customizing your profile visibility in yourprofile settings. If you need assistance with your profile settings, or wish to have your accountclosed, please contact Ivanti Support through the Ivanti Community.
If a third party has provided your personal data to Ivanti as part of a database, you should direct
your requests to that third party.

You can also see a description of your privacy rights in the section titled, “Your Privacy Rights”
above.
No Obligation to Provide Personal Data
In general: the provision of your personal data is voluntary. You are neither legally nor
contractually obliged to do so. Ivanti does not contractually oblige you to provide Ivanti withpersonal data.
Many Ivanti products require some personal data to provide you with a service. If you choose notto provide the personal data necessary for Ivanti to provide you with a product or feature, you
cannot use that product or feature and Ivanti may need to suspend or cancel it. Likewise, where
Ivanti needs personal data to enter or carry out a contract with you, and you do not provide thepersonal data, Ivanti will not be able to enter, or perform under, the contract. Where providing
personal data is optional, and you choose not to share personal data, features like personalizationthat use such personal data will not work.

Data Collected from You
Ivanti automatically collects statistical data that may include personal data when you use Ivanti
products. Ivanti also collects personal data when you ask for or consent to receive products ormarketing materials from Ivanti. Ivanti may associate that data with personal data Ivanti collects
in other ways or receive from third parties. The data Ivanti collects depends on the context of yourinteractions with Ivanti and the choices you make, including your privacy settings, email
subscription settings, and the products and features you use. Ivanti processes personal data in amanner that is compatible with the initial purpose of the personal data collection.
When you use Ivanti products, you provide Ivanti with personal data that may include thefollowing:
Name and contact data. Your first and last name, email address, postal address, phone number,and other similar contact data.
Credentials. Passwords, password hints, and similar security information used for authentication
and account access.
Demographic data. Data about you such as your age, gender, country, and preferred language.
Payment data. Data to process payments, such as your payment instrument number (e.g., acredit card number), and the security code associated with your payment instrument.
Subscription and licensing data. Data about your subscriptions, licenses, and otherentitlements to our products.
Interactions. Data about your use of Ivanti products. In some cases, this is data you provide touse the products. In other cases, such as error reports, this is data Ivanti generates. Other
examples of interactions data include:
Device and usage data. Data about your device and the product and features you use,
including information about your hardware and software, how Ivanti products perform, as
well as your settings. For example, device, connectivity, and configuration data; error
reports and performance data; troubleshooting and help data.

Location data. Data about your device’s location, which can be either precise or
imprecise. For example, Ivanti collects location data using Global Navigation Satellite
System (GNSS) (e.g., GPS) and data about nearby cell towers and wi-fi hotspots. Location
can also be inferred from a device’s IP address or data in your account profile thatindicates where it is located with less precision, such as at a city or postal code level.
Other input. Other inputs provided when you use Ivanti products.
Content. Content of your files and communications you input, upload, receive, create, andcontrol. Please be aware that any data you provide in public areas, including Ivanti websites, may
be read, collected, and used by others who access them.
Feedback and ratings. Data you provide to Ivanti and the content of messages you send to
Ivanti, such as feedback, survey data, and product reviews you write.
Mobile Apps. When using an app on a mobile device, Ivanti may automatically collect data about
the device running the app, such as the type of device, the version of the operating system, thedevice identifier (“UDID”) and mobile network information. Ivanti may also record information suchas how often the app is used, the events that occur within the app, aggregated usage,
performance data, any exceptions that occur within the app, and the source from which the app
was downloaded.
Metadata and other information. Ivanti may collect metadata and other information to analyze
and benchmark your use of Ivanti products. Ivanti may use that information to generate reports,
analyze product usage, administer, and improve the products, both for your individual use andIvanti’s user base. Ivanti may also use the information to improve or create new products and to
make recommendations to you and other Ivanti customers about how to better use Ivanti products
and services.
Data collected when you visit Ivanti websites. Ivanti’s websites gather certain information
automatically and store it in log files. This information may include internet protocol (IP)addresses, browser type, browser language, device identifier, Internet service provider (ISP),
referring/exit pages, duration of visit, pages viewed, operating system, date/time stamp,
clickstream data, crashes, system activity, hardware settings, the date and time of requests andother usage data.
Data that Ivanti collects and processes when being contacted otherwise. If you contact Ivanti
over the telephone or via facsimile, Ivanti may also log information such as your phone number,forwarding calls, SMS routing information, and types of calls.
Data We Process on Behalf of our Business Customers. Data Ivanti collects through Ivanti
products under the direction of its business customers shall be limited to such data necessary forthe purpose of providing the product and for purposes identified in the contract between Ivanti’s
business customer and Ivanti. Ivanti has no direct relationship with the business customer’s end
users whose personal data Ivanti processes. Ivanti may transfer personal data to companies that
help us provide Ivanti’s products. Transfers to subsequent third parties are covered by theunderlying agreements with Ivanti’s business customers.
Database information. As a business customer, if you receive technical support for an Ivanti
product, you may also provide Ivanti with database information that contains personal data of third
parties such as your employees, clients, and end users. Ivanti has no control over what you
provide to Ivanti, nor what steps you have taken to ensure that the data is reliable for its intended
use, non-infringing, accurate, complete, and current. If you provide any personal information

about any third parties to Ivanti, you must have an appropriate legal basis for processing as
required by applicable law. You must also provide instructions on how Ivanti is to use that
information.

Personal Data Gathered from Other Sources
Ivanti obtains personal data from third parties. Ivanti protects personal data obtained from third
parties according to the practices described in this Notice, plus any additional restrictions imposedby the source of the personal data. Third party data that Ivanti obtains may include, but are notlimited to, the following:-

Data brokers from which Ivanti purchases demographic data to supplement the data Ivanticollects.
Service providers that help Ivanti determine your device’s location.
Partners with whom Ivanti offer co-branded services or engage in joint marketing activities.
Publicly available sources, such as open government databases.

Why Ivanti Processes Your Data
If not otherwise described in this Notice, Ivanti may process personal data collected from or about
you for any of the following purposes:-

To inform you about Ivanti products, services, and events by means of the Ivanti
newsletter; sending you surveys about Ivanti products and your use of Ivanti products; orother information. Sending you such information is based on your consent.
To respond to and record your requests, whether it be a product purchase, a downloaded
whitepaper, or product demonstrations and evaluations.
To provide Ivanti’s products and communicate with you to fulfill any contractual obligations
Ivanti may have with you, including providing product testing, post-purchase technicalsupport, implementation services, and updates for the products.
Processing of payments.
To provide online forums such as user groups and bulletin boards.
To deliver live or online events such as training seminars or conferences, including third
party events Ivanti sponsors.
To manage and verify your account and the identity of users of the products.
To allow you unhindered and trouble-free access to Ivanti websites and to improve thesecurity of Ivanti systems.
To provide videos on the Ivanti websites.
To respond to other support requests; requests for product-related information; and to
feedback, survey data, and product reviews, including for product improvement purposes.
To analyze your use of Ivanti products to operate, maintain, improve, and create new
products.
To process your data to comply with statutory reporting requirements, court summonses,
court decisions or other court orders.
To protect against, investigate and prevent fraudulent, unauthorized, or unlawful acts
against us, you, and third parties.
For any other legal, business, or marketing purposes that are not inconsistent with theterms of this Notice.

Legal Basis for Processing Your Data
Ivanti relies on a variety of legal reasons and permissions to process personal data. These legal
reasons and permissions include when you have given your consent, as part of the performanceof a contract, to comply with legal obligations, and for other legitimate interests.

Additional legitimate interests consist of:-

Optimizing and increasing the visibility of Ivanti’s website.
Increasing the attractiveness and usability of Ivanti’s services.
Enabling and promoting the use and sale of Ivanti’s products.
Conducting direct marketing activities and to inform you about our products and services.
In doing so, Ivanti will also send you information that is appropriate to your interests, which
Ivanti determines from the data available to Ivanti, e.g. from products you have used,
events or other campaigns for which you have registered, as well as product interests
indicated at registration.

When Ivanti Shares Your Data
Ivanti shares your personal data as necessary, to complete any transaction or provide any productyou have requested or authorized or otherwise fulfill your request, with Ivanti-controlled affiliates
and subsidiaries. Ivanti may share your personal data with Ivanti’s business partners, resellers,and subcontractors who use your personal data to fulfill product orders, process payments,
develop and improve products, contact you about product orders or in connection with theperformance, operation, and support of the products, perform marketing or consulting services,
respond to your requests, or as otherwise appropriate in order for Ivanti to provide you with the
products.
As defined by certain state laws, Ivanti does not believe Ivanti has sold (for monetary or othervaluable consideration) or shared (for cross-context behavioral advertising purposes) yourpersonal data in the last 12 months.
Ivanti may furthermore disclose your personal data to:-Service providers who host or facilitate the delivery of online training, seminars, andwebinars.
Third parties who conduct data analytics.
An acquiring company in the event of a merger, acquisition, or other sale of all or a portionof our assets.

Subject to applicable law or as otherwise agreed to by you, the use and disclosure of all personal
data transferred to a third party will be subject to this Notice.
Ivanti may disclose your personal data in the following cases:-

When required by law, regulation, legal process, or other legal requirement.
When Ivanti believes that disclosure is necessary or appropriate to respond to an
emergency.
To protect Ivanti’s rights, your safety, or the safety of others.
To investigate fraud.
To enforce Ivanti’s agreements, policies, and terms of use.
To comply with a judicial proceeding, subpoena, court order, law enforcement or
government request, or national security requirements.
When you consent to such disclosure.

Securing Your Data
Ivanti implements reasonable and appropriate technical and organizational measures to protect
personal data from loss, misuse, and unauthorized access, disclosure, alteration, anddestruction, taking into due account the risks involved in the processing and the nature of thepersonal data. However, no method of transmission over the Internet or method of electronicstorage is 100% secure. Therefore, we cannot guarantee its absolute security. If you have any
questions about our security, you can contact our Security Team at security@ivanti.com.

Ivanti’s Commitment to Protecting Data Belonging to Children
Ivanti products are not intended for children. Ivanti does not knowingly collect data from children.
Do not use our products or provide us any data unless you are capable of consent in your territory
or country.

Cookies and Other Technologies
Ivanti and our partners use technologies such as “cookies” and “web beacons” to collect datafrom you when you use our products. Ivanti uses cookies and similar technologies to analyze
trends, administer and track the use of our products, gather demographic information about ouruser base, remember user settings, improve the functionality of our products, and understandproduct and Internet usage.
Ivanti may use cookies and similar technologies to personalize your experience at our websites(e.g., to recognize you by name when you return to our site or to prefill a form to download awhitepaper). Ivanti may also use cookies to help us offer you information about products,
programs, or services that may be of interest to you. In some cases, Ivanti also use cookies toenable relevant advertising on websites owned by third parties.
You can prevent cookies from being stored on your computer or device by configuring yourbrowser to not accept cookies or to notify you when a cookie is being placed on your hard drive.
You can learn more about how to manage and remove cookies in your browser or device's online
help. You can also visit http://www.aboutcookies.org for more information on how to manage andremove cookies across a number of different internet browsers.
If you choose not to accept cookies at all, you can still use Ivanti products. However, not allfeatures of Ivanti products will function as intended if you reject cookies.
Ivanti websites also gather certain data automatically and store it in log files. This data may include
internet protocol (IP) addresses, browser type, browser language, device identifier, Internet
service provider (ISP), referring/exit pages, length of visit, pages viewed, operating system,
date/time stamp, clickstream data, crashes, system activity, hardware settings, the date and timeof requests and other usage data.
Your Internet browser and mobile device may allow you to adjust your browser settings so that
“do not track” requests are sent to the websites you visit. Ivanti respects your wishes and will nottrack user activity once “do not track” signals have been activated. However, Ivanti’s third-party
service providers may not respond to “do not track” signals.
Ivanti products may include social media features, such as the Facebook “Like” button. Thesefeatures may collect your IP address and which page you are visiting on Ivanti’s website and may
set a cookie to enable the feature to function properly. Social media features and widgets areeither hosted by a third party or hosted directly on Ivanti’s websites. Your interactions with thesefeatures are governed by the privacy policy of the company providing them. Ivanti encourages
you to read each company’s privacy policy.
Social Media Link to the privacy policy
Plugins
Facebook

https://www.facebook.com/legal/FB_Work_Privacy

LinkedIn

https://www.linkedin.com/legal/privacy-policy

X (Formerly https://twitter.com/en/privacy
known
asTwitter)

Ivanti may also partner with a third party to display advertising on Ivanti’s website or to manage
Ivanti’s advertising on other sites. Ivanti’s third-party partner may use cookies or similar
technologies in order to provide you advertising based upon your browsing activities and interests.
You may utilize the DIGITAL ADVERTISING ALLIANCE (DAA) SELF-REGULATORYPROGRAM to manage your level of desired advertising and opt out at any time of interest-based
advertising in the U.S. or the European Interactive Digital Advertising Alliance in European Unionand United Kingdom, depending upon your location. Please note you will continue to receive
generic ads.
You can manage your settings at any time by visiting the “Cookie Settings” link in the footer ofIvanti’s website.
Google Analytics
Ivanti uses Google Analytics, an analyzing service provided by Google LLC, 1600 Amphitheatre
Parkway, Mountain View, California, USA (“Google”). Google Analytics uses “cookies.” The data
generated by the cookie on your use of Ivanti’s website will generally be transmitted to and stored
by Google on servers in the USA.
IP-anonymization is activated on Ivanti’s website, i.e. your IP address will be shortened within thearea of Member States of the European Union or European Economic Area. Only in exceptional
cases will the whole IP address be first transferred to a Google server in the USA and shortened
there.
Google will use this data on behalf of Ivanti for the purpose of evaluating your use of Ivanti’s
website, compiling reports on website activity for website operators and providing them otherservices relating to website activity and internet usage. Pseudonymous user profiles of the users
can be created from the processed data. The IP-address that your browser conveys within thescope of Google Analytics, will not be associated with any other data held by Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser,
however, please note that if you do this you may not be able to use the full functionality of thiswebsite.
You can also opt-out from being tracked by Google Analytics with effect for the future bydownloading and installing Google Analytics Opt-out Browser Add-on for your current web
browser: https://tools.google.com/dlpage/gaoptout?hl=en.
Further information on the use of personal data for advertising purposes by Google, setting andobjection options can be found on the Google websites, for example under:-

https://www.google.com/intl/en/policies/privacy/partners/ (“How “Google uses informationfrom sites or apps that use our services”)-

https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”)

-https://www.google.com/settings/u/0/ads/authenticated?hl=en
advertising Google shows you”)(“Determine

what

Vimeo
On Ivanti websites you can watch videos uploaded to Vimeo (Vimeo Inc., 555 West 18th Street,
New York, NY 10011, USA) and integrated on our website via an iFrame. The iFrames are set toconnect first when you click the “Play” button.
If you are logged in to your Vimeo account at the same time as pressing “Play”, Vimeo can
associate your surfing behavior with your user profile. You can prevent this data processing by
logging out of your account before visiting Ivanti websites.
As this is a third-party service, Ivanti has no control over the processing of this data by Vimeo.
The purpose and scope of the data collection and the further processing and use of the data by
Vimeo as well as your rights and settings to protect your privacy can be found at:https://vimeo.com/privacy.
YouTubeOn Ivanti websites, you can watch videos uploaded to YouTube. The entity providing the Service
is Google LLC, a company operating under the laws of Delaware, located at 1600 Amphitheatre
Parkway, Mountain View, CA 94043. These videos are uploaded to YouTube and integrated on
our website via an iFrame. The iFrames are set to connect first when you click the “Play” button.
If you are logged in to your YouTube account at the same time as pressing “Play”, YouTube canassociate your surfing behavior with your user profile. You can prevent this data processing by
logging out of your account before visiting Ivanti websites.
As this is a third-party service, Ivanti has no control over the processing of this data by YouTube.
The purpose and scope of the data collection and the further processing and use of the data by
YouTube as well as your rights and settings to protect your privacy can be found at:https://safety.google/privacy/data/.
Global Privacy Control
If you would like to control the use of cookies and similar internet technologies on your computer,you can use web browsers listed with the Global Privacy Control tool built into them. These
browsers limit cookie technologies and how they work while you browse the internet. You canfind a list of browsers with the Global Privacy Control tool built into it here:
https://globalprivacycontrol.org/#download.
The use of website and web browsers located at the site above is at your own risk, subject to theagreements from those web browsers’ developers, and subject to their privacy policies. Ivantidoes not accept any liability associated with your use of the website above or the content you
may download from that website.

Our Global Data Transfer Practices
Your personal data may be transferred to other countries including countries outside the EU andthe EEA (the latter also referred to as "third countries"). These countries may apply privacy
standards that are different from those of your place of residence. Please note that data processedin another country may be subject to different laws and may be accessible to the authorities,
courts, law enforcement agencies and supervisory authorities of those countries.

A transfer to third countries will only take place if an adequate level of protection or appropriate
safeguards for a secure level of protection are in place, e.g. in the form of standard contractual
clauses or other data transfer mechanism.
Data Privacy Framework
Ivanti, Inc., and its US affiliates, complies with the EU-U.S. Data Privacy Framework (EU-U.S.
DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (SwissU.S. DPF) as set forth by the U.S. Department of Commerce. Ivanti has certified to the U.S.
Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EUU.S. DPF Principles) with regard to the processing of personal data received from the European
Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on
the UK Extension to the EU-U.S. DPF. Ivanti has certified to the U.S. Department of Commercethat it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles)with regard to the processing of personal data received from Switzerland in reliance on the SwissU.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF
Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about
the Data Privacy Framework (DPF) program, and to view our certification, please
visit https://www.dataprivacyframework.gov/.
The Federal Trade Commission has jurisdiction over Ivanti’s compliance with the EU-U.S. Data
Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the SwissU.S. Data Privacy Framework (Swiss-U.S. DPF).
Regarding onward transfers, Ivanti shall remain liable under the DPF Principles if a third party,
acting as an agent on behalf of Ivanti, processes such personal information in a mannerinconsistent with the DPF Principles, unless Ivanti proves that it is not responsible for the event
giving rise to the damage.

How to Contact Us
Ivanti, Inc.
10377 South Jordan Gateway
Suite 110
South Jordan, Utah 84095, USA
Phone: +1-888-253-6201
Email: privacy@ivanti.com
Data Protection Officer
The data protection officer of the controller and other entities of Ivanti group can be contacted byemail to privacy@ivanti.com and by a postal mail to:
IvantiGroup Data Protection Officer
Attn: Privacy
10377 South Jordan Gateway
Suite 110
South Jordan, Utah 84095, USA
Contacting is possible in the respective local language.

Relationship-Specific Details
Recruit/Applicant/Candidate
Description
Ivanti Role

This section will generally explain the personal data gathered through therecruitment process; however, this section should be read in conjunction with otherprivacy documentation that may be provided to you.
Controller
Personal identifiers such as name, title, and email address
Contact data such as your address and telephone number(s), emergency contact
information
Special Categories of personal data such as race, ethnicity, religious orphilosophical beliefs, sexual orientation, trade union membership, and data about
your health (e.g., assessments of working capacity tests, health insurance health orsocial care treatment and sickness record) may also be gathered as required and/or
legally permitted.

Categories of
Data

History such as your work experience, prior employment, education, and data
provided by your resume, cover letter, or job application, and information related toprevious applicants to or employment with Ivanti if applicable.
Professional references (received from you), and (where applicable) reference
information received from your named references during reference checkprocesses.
Internet data such as cookies if you allow cookies on your device.
Optional survey data to understand your recruiting experience.
As legally permitted, Ivanti may ask you to provide data pursuant to a backgroundcheck.

Category of Data
Ivanti gathers this data primarily directly from you.
Subjects
Ivanti will conduct reference checks and background checks as permitted by local
Data Provided bylaw and will gather additional data through these processes from your listed
Third Parties
reference and background check services.
Ivanti processes this data to evaluate whether to form an employment relationshipwith recruits, prospects, and candidates; and to take steps necessary to enter into
an employment contract with you.
Purpose ofProcessing
In addition to using your personal data for the position for which you have applied,
Ivanti may retain and use your personal data to inform you and consider you forother positions that may be appropriate for you with your consent.
Legal Basis for
The legal basis of processing is pursuant Art. 6(1)(c): for performance of a contract
Processing
or to take steps at the request of a data subject prior to entering into a contract.

Does this product/service/process use automated processing:Yes☒
Automated
Processing or
ProfilingNo☐
If yes, the general methods and logic used are: Automated processing is used tomake sure applications are provided to Ivanti’s HR department. Ivanti does not use
automated processing or profiling to make HR decisions such as whether to hire.
Does the automated processing affect the rights of data subjects? No.

Data Sharing

Categories ofRecipients

Description of Commercial orBusiness Purpose

Cloud infrastructure

Ivanti’s business purpose forproviding this data to third parties is:

Recruitment Services
Office management
software
IT/Security services

Sensitive
Personal Data

Is this Information
Sold or Shared

Performing services on behalf of the ☐ Soldbusiness or service provider,including verifying data, processing☒ Shared
payments, providing analytic
services, or providing similar
services on behalf of the business orservice provider.

Category of Sensitive Personal Data Collected

Retention Period

Ivanti only collects sensitive personal information, as
defined in the applicable privacy laws, with your explicit
consent and do not use sensitive personal information for
inferring characteristics about you.
Ivanti may gather sensitive personal data (such as race)
as required by law for anti-discrimination and diversity
purposes.

Data is retained as
required or permitted bylaw.

Ivanti may gather data from you to address
accommodations you may request during the recruitment
process.
Personal Data
TransferredInternationallyIvanti uses global data management systems to process this data. This data will betransferred to the United States and other countries that have privacy laws thatdiffer from the EU.

Retention Period

Personal Data is retained throughout the duration of the applicant process with
Ivanti. After that period, personal data is retained as required and/or permitted bycontractual requirements, local laws and regulations.

Business Customers and their Product End Users
Provision of IT software licensing, support services and implementation, whether
on-premises or as a hosted SaaS solution, regarding the administration andfacilitation of essential business processes in the field(s) of unified endpoint
management, IT service management, IT asset management, security, reporting
and analytics, and supply chain.
Description

Ivanti Role

Categories of Data

Category of Data
Subjects
Purpose ofProcessing
Legal Basis for
Processing

Automated
Processing or
Profiling

IT services include the use of software as an on-premise installation or a SaaS
solution including installation of modules (including without limitation, incident,change, asset, configuration and release management modules); self-service andservice catalogues; support and maintenance including, without limitation, remote
access; and patches, app control, endpoint/mobile security and privilege
management.
Processor
Identifying data such as name, employee ID, employee email address, andemployee phone number.
Device Data such as IP address, log information, and performance data.
Data provided by Ivanti’s customers to Ivanti.
This data is provided by business customers, business customer’s end users,
software, and hardware.
Ivanti processes this data pursuant to the agreements with its business customers.
The legal basis of processing is pursuant Art. 6(1)include: for performance of acontract or to take steps at the request of a customer prior to entering into acontract.
Does this product/service/process use automated processing:Yes☒No☐
If yes, the general methods and logic used are: Automated processing is used
to run the applications purchased by the customer. Ivanti does not process thisinformation to profile its customers.
Does the automated processing affect the rights of data subjects? No.

Data Sharing

Categories ofRecipients

Description of Commercial orBusiness Purpose

Cloud infrastructure

Ivanti’s business purpose for providing
this data to third parties is:

Office management
software☐ SoldPerforming services on behalf of thebusiness or service provider, including☒ Shared
maintaining or servicing accounts,
providing customer service, processing
or fulfilling orders and transactions,

IT/Security services

Is this Information
Sold or Shared

Sensitive
Personal Data
Personal Data
TransferredInternationally
Retention Periodverifying customer data, processing
payments, providing financing,
providing advertising or marketing
services, providing analytic services, orproviding similar services on behalf ofthe business or service provider.
Category of Sensitive Personal Data Collected
Retention Period
N/A
N/A
Ivanti uses global data management systems to process data from its services.
This data will be transferred to the United States and other countries that haveprivacy laws that differ from the EU.
This data is retained as allowed by law and pursuant to the retention periods inagreements with its business customers.

Contractor/Vendor
Description
Ivanti Role

Ivanti uses contractors and vendors for a variety of services. The specific details
can be found in the agreements between Ivanti and its contractors/vendors.
Controller
Specific details about data processing can be found in the agreements between
Ivanti and its contractors/vendors.
Generally, the data may concern the following categories:-

Categories of Data

Category of Data
Subjects
Purpose ofProcessing
Legal Basis for
Processing
Automated
Processing or
Profiling-

Identification data and employee master data (which may include title,
name, address, telephone number, fax number, company address, email
address);
Authentication data;
Contact information;
Internet protocol (IP) address and other computer identifiers;
User-provided content;
Pseudonymous identifiers;
Photos, videos, and audio; andDevice identifiers.

This data is provided by the contractor’s/vendor’s employees.
Ivanti processes this data pursuant to an agreement with the contractor/vendor.
The legal basis of processing is pursuant Art. 6(1)(c): for performance of a contract
or to take steps to enter into a contract.
Does this product/service/process use automated processing:
Yes☒
No☐

If yes, the general methods and logic used are: Automated processing is used
to manage and execute the services provided by contractors/vendors. Ivanti does
not incorporate profiling into these processes with contractors/vendors.
Does the automated processing affect the rights of data subjects? No.

Categories ofRecipients

Description of Commercial orBusiness Purpose

Is this Information
Sold or Shared

Ivanti’s business purpose for providing
this data to third parties is:
Performing services on behalf of thebusiness or service provider, including
Office management maintaining or servicing accounts,☐ Soldproviding customer service,softwareprocessing or fulfilling orders andtransactions, verifying customer data, ☒ Shared
IT/Security services
processing payments, providing
financing, providing advertising or
marketing services, providing analytic
services, or providing similar services
on behalf of the business or service
provider.
Category of Sensitive Personal Data Collected
Retention Period
N/A
N/A
Ivanti uses global data management systems to process data from its services.
This data will be transferred to the United States and other countries that haveprivacy laws that differ from the EU.
This data is retained as allowed by law and pursuant to the retention periods inagreements with vendors and contractors.
Cloud infrastructure
Data Sharing

Sensitive
Personal Data
Personal Data
TransferredInternationally
Retention Period

Web User
Description
Ivanti Role

Categories ofInformation

Operation and management of Ivanti’s websites.
Controller
Identifying data such as name, title, company name, employee email address,
employee phone number, zip code, and country where your office is located.
Device Data such as IP address
Data identified in the relevant Information Collected from You section above.

Category of Data
Subjects
Purpose ofProcessing

This data is provided by web users.
Ivanti processes this data to run its website, ensure that the website provides
relevant information to web users, and respond to requests from web users.

The legal basis of processing is pursuant Art. 6(1)(f): the legitimate interests
pursued by Ivanti.
Legal Basis for
Processing

For cookies and similar technologies, Ivanti gathers consent through the use of aconsent tool when a web user visits Ivanti’s websites.
For sales and marketing, Ivanti gathers consent from the web user before Ivanticontacts the web user.
Does this product/service/process use automated processing:Yes☒

Automated
Processing or
ProfilingNo☐
If yes, the general methods and logic used are: Automated processing is used
to run the website. Information about cookies can be found in the “cookie settings”
tab in the cookie popup.
Does the automated processing affect the rights of data subjects? No.
Categories ofRecipients
Cloud infrastructure

Data Sharing

Description of Commercial or Business Purpose
Ivanti’s business purpose for providing this data to third
parties is:

Performing services on behalf of the business or service
provider, including maintaining or servicing accounts,
providing customer service, processing or fulfilling orders
IT/Security services
and transactions, verifying customer data, processing
payments, providing financing, providing advertising or
marketing services, providing analytic services, or providing
similar services on behalf of the business or service provider
Category of Sensitive Personal Data Collected
Retention Period
N/A
N/A
CRM applications

Sensitive
Personal Data
Whether Personal
Ivanti uses global data management systems to process data from its services.
Information isThis data will be transferred to the United States and other countries that haveTransferredprivacy laws that differ from the EU.
Internationally
Retention Period

This data is retained as allowed by local law.

Version Control
Ivanti may modify this notice at any time without formal notice. This notice was revised in
December 2023.