INVATI – Privacy Shield statement
This statement outlines our general policy and practices for implementing the Privacy Shield Program, including the types of personal data that Invati, Inc. (Invati) gathers, how we use it and the choices that affected individuals have regarding our use of, and their ability to correct, the personal data relating to them.
Invati complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Invati has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/
This statement applies to personal data that we handle. For purposes of this statement, “personal data” means information that:
- Is transferred from the European Economic Area (EEA) and/or the United Kingdom to the United States, in reliance on the Privacy Shield Framework
- Is about, or pertains to, a specific individual
- Can be linked, either directly or indirectly, to that individual
Principles protecting individuals’ privacy notice and choice:
- We notify individuals about the personal data that we collect from them, how we use it and how to contact us with privacy concerns.
- We provide such notice through this statement, and direct communication with individuals from whom we collect personal data.
- We collect and process personal data about Invati personnel for the purpose of human resources administration and recruitment following the Privacy Shield Program.
- We collect and process personal data about our prospective and current clients, clients’ customers and/or clients’ personnel for the purpose of rendering professional services to our clients.
- We collect personal data from individuals only as permitted by the Privacy Shield Program.
- Consent for personal data to be collected, used and/or disclosed in certain ways (including opt-in consent for sensitive data) may be required for an individual to obtain or use our services. Such consent is provided through our engagement letters, employment agreements and other similar documents.
Disclosures and transfers:
We do not disclose an individual’s personal data to third parties, except when one or more of the following conditions is true:
- We have the individual’s permission to make the disclosure.
- The disclosure is required by lawful request by public authorities, including to meet national security or law enforcement requirements.
- The disclosure is required by law or mandatory professional standards.
- The disclosure is reasonably related to the sale or other disposition of all or part of our business.
- The information in question is publicly available.
- The disclosure is reasonably necessary for the establishment of legal claims.
- The disclosure is to another Invati entity or to persons or entities providing services on our or the individual’s behalf (each a transferee), consistent with the purpose for which the information was obtained, if the transferee, with respect to the information in question:
- Is subject to law providing an adequate level of privacy protection or
- Has agreed to provide an adequate level of privacy protection
We may transfer personal data from one jurisdiction to another. Privacy laws vary by jurisdiction, and some may provide less or different legal protection from others. However, Invati will protect personal data in accordance with the Privacy Shield Program regardless of the jurisdiction in which the data resides.
Invati is responsible for the third-party acts within its control that result in the processing of personal data inconsistent with the Privacy Shield Program.
Data, security, integrity, and access:
We employ various physical, electronic, and managerial measures, including education and training of our personnel, that are designed to reasonably protect personal data from loss, misuse or unauthorized access, disclosure, alteration, or destruction. Personal data collected or displayed through a website is protected in transit by standard encryption processes. However, we cannot guarantee the security of information on, or transmitted via, the internet.
We process personal data for only the limited and specific purpose for which it was originally collected or authorized by the individual. To the extent necessary for such purposes, we take reasonable steps so that personal data is accurate, complete, current, and otherwise reliable with regard to its intended use.
An individual has the right to access personal data that Invati holds about them as specified by the Privacy Shield Program. An individual may contact us using the information below to correct, amend or delete information where it is inaccurate or has been processed in violation of the principles. The individual will need to provide sufficient identifying information, such as name, address, and birthdate. We may request additional identifying information as a security precaution, such as a national identifier (e.g., a Social Security number). In addition, we may limit, or deny, access to personal data where providing such access would be unreasonably burdensome or expensive in the circumstances, or where the rights of persons other than the individual would be violated. In some circumstances, we may charge a reasonable fee for access to personal data.
Accountability and enforcement:
We have established a program to monitor our adherence to the Privacy Shield Program and to address questions and concerns regarding our adherence. This program will include a statement, at least once a year, signed by an authorized representative of Invati, verifying that this statement is accurate, comprehensive for the information that is intended to be covered, prominently displayed, completely implemented and accessible. We encourage interested persons to raise any concerns with us using the contact information below.
Individuals may file a complaint with Invati in connection with the company’s processing of their personal data under the Privacy Shield Program. With respect to any dispute relating to this statement that cannot be resolved through our internal processes:
- If the dispute involves data collected in the context of an employment relationship, we will cooperate with competent EU data protection authorities and comply with the advice of such authorities. If we or such authorities determine that we did not comply with this statement, we will take appropriate steps to address any adverse effects and to promote future compliance.
- If the dispute involves other types of data, individuals may file a claim with Judicial Arbitration and Mediation Services (JAMS).
- Personnel who violate our privacy policies will be subject to disciplinary process.
- An individual may, under certain conditions, invoke binding arbitration. Please see the Privacy Shield’s website for more information on conditions giving rise to binding arbitration.
In compliance with the Privacy Shield Principles, Invati commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Invati at: support@invati.ai.
If a privacy complaint or dispute relating to Personal Data received by Invati, Inc. in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/
For more information on privacy policy frequently asked questions, you can go to Privacy Policy FAQs. Invati is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
Amendment:
We may amend this statement from time to time by posting a revised statement on this website, or a similar website that replaces this website. If we amend the statement, the new statement will apply to personal data previously collected only insofar as the rights of the individual affected are not reduced. So long as we adhere to the Privacy Shield Program, we will not amend our statement in a manner inconsistent with the Privacy Shield Program.
Information subject to other policies:
We are committed to following the principles for all personal data within the scope of the Privacy Shield Program. However, certain information is subject to policies of Invati that may differ in some respects from the general policies set forth in this statement.
Information relating to present or former Invati personnel is subject to our policies concerning personnel data privacy, which are available to current Invati personnel on the Invati intranet site and to former Invati personnel upon request.
Information obtained from, or relating to, clients or former clients is further subject to the terms of any privacy notice to the client, any engagement letter, or other similar letters or agreements with the client, and applicable laws and professional standards.
Contact information:
For further information or to file a complaint, please contact us: