Privacy Policy

Hi Humans!

Thank you for taking the time to review our Privacy Policy. If you still have questions about our use of your personal information after reviewing the information below, please contact us at workhumanprivacy@workhuman.com.

At Globoforce Inc. d/b/a Workhuman (US) and Globoforce Limited trading as Workhuman (Ireland) (“Workhuman”, “us” or “we”), we are committed to protecting your privacy and complying with our obligations under applicable law (including, with the General Data Protection Regulation 2016/679 (GDPR)). This Privacy Policy (“Policy”) describes the ways that we will treat personal information collected through the Workhuman corporate website at www.workhuman.com, www.workhumanlive.com, and any other websites, software applications and/or mobile applications that link to this Policy (the “Sites”). This Policy specifically explains how we collect your personal information on the Sites, how we protect such information and the choices you have concerning use of such information. By using the Sites and submitting information to Workhuman, you agree to the processing of your personal information by Workhuman in accordance with this Policy.

Please remember that this Policy applies only to information collected through the Sites. This Policy does not apply to information collected through the websites we operate for our customers. Our customer websites display their own privacy policies.

It is also important to note that the Sites may contain links to third-party websites. This Policy does not apply to the privacy practices of such third-party websites. We encourage you to review the terms and policies on these websites before providing any personal information to them.

Type of Information Collected

As used in this policy, personal information is information that identifies you or can be used in combination with other information to identify or contact you and may include your name, address, email address, telephone number, internet protocol address or billing information. Such information may be collected on our Sites when you:

request additional information about our services
register for a webinar
download available resources (whitepapers, case studies, etc)
register for or attend a Workhuman event or conference
subscribe to one of our blogs
comment on a blog post or in a community forum
navigate the Sites or come to our Sites from social media platforms where we place cookies (as described in the Cookie Policy)
visit our offices and register as a visitor

How we Use Your Information

Some of the ways we use your personal information are as follows:

Workhuman will use personal information you provide to respond to your inquiries. For example, if you fill out a “Contact Us” form the Site, we will use the information provided to contact you about your interest in our services.
Workhuman may use information gathered through our use of cookies to understand how our Sites are being used and to measure the effectiveness of our Sites.
Workhuman may use personal information you provide when registering for or when you attend a conference or event or when accessing our Sites related to a conference or event to:
- enable you to attend our event
- plan, coordinate and host such events
- analyze your interests in and interactions with the event
- post photos and recordings of the event online through our Sites or social media sites
- populate online attendee profiles on event mobile applications and allow you to participate in social forums on these platforms
- allow you to access Workhuman products and solutions
- provide certain sponsors a post conference attendee list
Workhuman may use personal information you provide us for marketing. For example, when you provide your information as part of your registration for an event or a webinar, we may use the information you provide to send you promotional material about Workhuman products and services or future events that we think you might be interested in.
Workhuman may ask you to participate in surveys to understand how our products might be useful to you.
Workhuman will only use credit card information you provide to collect payment from you to attend events or conferences.
Workhuman may provide discussion forums associated with blog posts on our Sites. Any personal information you choose to submit in such a forum may be read, collected, or used by other visitors of these forums. Workhuman is not responsible for the personal information you choose to submit in these forums.
If you visit our offices, you may be required to register as a visitor and provide certain personal information including your name and email address.
Workhuman may receive information about you from other sources, including from third parties (for example, from professional networking sites, or from third-party lists that we purchase, where legally permitted). We may combine this information with information provided by you which helps us to update and expand our records, identify new customers, and tailor our advertising and marketing communications.
If you are submitting information on behalf of a third party (for example, registering a fellow employee for a webinar or conference), Workhuman expects that you have received appropriate consent, according to applicable privacy laws, before transferring any personal information to Workhuman.

As a participant of the EU-U.S Data Privacy Framework (“EU-U.S. DPF"), Workhuman is responsible for onward transfers to third parties that occur under the EU-U.S DPF.

Legal Basis for Processing

We only keep and process the personal information where we have a valid legal basis to do so. The legal basis for collecting and using the personal information described above will depend on the information collected and the way in which we use it. The bases which we rely on are as follows:

With your consent: For example, we use names and email addresses for email marketing purposes with your consent, which you can revoke at any time.
To perform a contract with you. For example, when you register to attend one of our events or conferences, we use your information to plan and host the event including sending communications to you about the event in order to perform our contract with you.
Our legitimate interests: For example, when we gather information from your use of our Sites we do so based on our legitimate interest in improving our services and website.
Where we have a legal obligation: For example, we may disclose your personal information if we believe in good faith that we are required to do so to comply with an applicable law, a subpoena, a search warrant, a court or regulatory order or other valid legal process or lawful requests by public authorities.

If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.

International Data Transfers

Workhuman is a global business with headquarters in Ireland and in the US. Workhuman may transfer personal information to countries other than the country in which the data was originally collected from you and/or was provided to us. These countries may not have the same data protection laws as the country in which you initially provided the information. However, when we transfer your personal information to other countries, we will protect that information in accordance with applicable law. For example, the principal way in which we protect personal information subject to the GDPR that may be transferred to locations outside of the European Economic Area (EEA) to the United States is through Workhuman’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce and/or UK government-approved international data transfer agreements. Workhuman certifies to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Workhuman has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program and to view our certification, please visit https://www.dataprivacyframework.gov/. Please contact us using the details in the “Contact Us” section below if you require further information on our international transfers.

The Use of Cookies

We use cookies on our Sites in order to provide you with the best possible user experience. Most web browsers are automatically set to accept cookies; however, you do not have to accept cookies to use the Sites although this may impair the functionality of the Sites. Please read our Cookie Policy for more information on what cookies are, how we use them, and how you can control them.

Disclosure of Information to Third Parties

Workhuman will share personal information with third parties to the extent required to fulfill the purposes set forth herein, including to contracted service providers so that they may provide certain services on our behalf (for example, credit card processing services, or an event management portal). With your consent, Workhuman may also share personal information you provide to us as part of an event or conference registration process or with event sponsors that wish to connect with you. Where required, Workhuman requires that these third parties guarantee equivalent levels of protection as applied by Workhuman when handling personal information.

We may provide third parties information about you that does not allow you to be identified or contacted, including where such information is combined with similar information of other users of our Sites. For example, we might inform third parties regarding the number of unique users who visit our Sites, the demographic breakdown of our community users of our Sites or the activities that visitors to our Sites engage in while on our Sites. The third parties to which we may provide this information may include potential or actual advertisers, providers of advertising services (including website tracking services), commercial partners, sponsors, licensees, researchers and other similar parties.

We may also disclose your information (including personal information) if we believe in good faith that we are required to do so in order to comply with an applicable law, a subpoena, a search warrant, a court or regulatory order or other valid legal process or lawful requests by public authorities, including to meet national security or law enforcement requirements.

Except as otherwise set forth in this Policy, we do not and will not sell, trade or rent your personal information to third parties.

Rights to your Information

You may exercise the following rights in relation to the personal information that we hold about you:

Inspection and access: You can request a summary and/or a copy of any personal information we hold about you;
Correction/addition/removal: Where you believe your information is inaccurate or incomplete, you are entitled to request us to correct, amend or delete it;
Portability: You may request that we send you any personal information that you have provided to us or ask that we send this information to a third party;
Objection: You may object to us using your personal information where we use it based on our legitimate interests to do so;
Restriction: You may request that we restrict the processing of your personal information where you believe it is inaccurate, our processing is unlawful, you believe we no longer need the information or if you have objected to our use of it; and
Automated Decision Making: Where we undertake automated decision making (including profiling), which significantly affects you, you are entitled to object to such decision-making. (We do not ordinarily undertake this type of processing.)
Withdraw Consent: In circumstances where we are relying on your consent to process your personal information, you may withdraw such consent by contacting us as indicated below.

Further, every marketing email from Workhuman contains instructions on how to opt out of receiving further marketing emails from us. If you wish to unsubscribe, follow the instructions in the email. Please contact us if you have any problems using this opt out mechanism.

You can exercise any of your rights above by using the Contact Us details below. We undertake that promptly after receiving your request (subject to any statutory time periods), all personal information stored in databases we actively use and other readily searchable media will be updated, corrected, changed, deleted or confirmed to you, as appropriate, as soon as reasonably practicable and in accordance with applicable law or the EU US DPF Privacy Framework Principles (as relevant).

Notice to California Residents

California Privacy Rights: to the extent provided for by law and subject to applicable exceptions, California residents have the following privacy rights in relation to the personal information we collect:

The right to know what personal information we have collected and how we have used and disclosed that personal information;
The right to request deletion of your personal information;
The right to be free from discrimination relating to the exercise of any of your privacy rights.

Exercising Your Rights:

California residents can use the email address provided below to exercise the above privacy rights or to access this Privacy Policy in an alternative format.

Verification: in order to protect your personal information from unauthorized access or deletion, we may require you to verify your identity before you can submit a request. If we suspect fraudulent or malicious activity, we may ask you to provide additional personal information for verification. If we cannot verify your identity, we will not provide or delete your personal information.

Authorized Agents: you may submit a request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us.

Security

Workhuman is committed to taking reasonable steps to ensure the security of your information. To prevent unauthorized access, maintain data accuracy and ensure the appropriate use of information, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect from you.

We maintain strict data security systems that ensure specific information will not be made available to any unauthorized person and in order to protect information from loss, misuse and unauthorized access, disclosure, alteration or destruction. Our employees are made aware of and are accountable for compliance with our privacy policy. Any information collected by us is stored on our Web server or databases but is not publicly accessible from our Site or otherwise. When applicable, we use a multi-level, password protected security system to control access to information stored about users. We also maintain strict physical security of our properties and facilities and only provide access to authorized personnel.

Retention of Personal Information

Except as otherwise permitted or required by applicable law or regulatory requirements, Workhuman will only retain your personal information for as long as it is necessary to fulfill the purposes for which the personal information was collected. After such time, personal information will be securely destroyed or obfuscated so that it cannot be associated with or tracked back to you.

Changes to the Privacy Policy

Workhuman reserves the right to change this Policy. If we decide to make changes, we will post the updated policy on our Sites so you are always aware of what information we collect, how we use it, and the circumstances, if any, we disclose it. If at any point we decide to use personal information in a manner significantly different from that stated in this Policy, or otherwise disclosed to you at the time it was collected, we will notify you by email, and you will have a choice as to whether or not we use your personal information in the new manner.

Concerns and Comments

If you wish to exercise your data protection rights or to raise any concerns, objections or complaints in relation to this Policy, please contact us using the relevant Contact Us details below. If contacting us does not resolve your issue, EU users of our Sites may contact their local EU Data Protection Authorities, Swiss users can contact the Swiss Data Protection and Information Commissioner, and UK users can contact the UK Information Commissioner’s Office (collectively, “DPAs”). Workhuman commits to cooperate and comply with the advice of the panel established by the EU DPAs, the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal information received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. In addition, the Federal Trade Commission has jurisdiction over Workhuman’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. It is open to you, under certain conditions, to invoke binding arbitration for complaints regarding Workhuman’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF where we cannot resolve matters under any of the other mechanisms set out by the EU-U.S. DPF. For additional information, please visit:

https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2

In the case of users of our Sites within the EU, our lead DPA is the Data Protection CommissionOpens in a new tab in Ireland which acts as the “one stop shop” for complaints relating to cross-border processing issues. The services of the DPAs are provided at no cost to you. Accordingly, if the DPAs finds us to be in violation of the law, we will correct the situation and, if necessary, stop processing the data of the individual who brought the complaint.

You may email us at workhumanprivacy@workhuman.com with any further questions or concerns regarding this Policy or if you wish to exercise your data protection rights. You can contact us by regular mail addressed to:

Globoforce Inc. d/b/a Workhuman

200 Crossing Blvd., Suite 500
Framingham, Massachusetts
United States 01702

Alternatively, regular mail may also be directed to Globoforce Limited in Ireland trading as Workhuman, by addressing it to:

Globoforce Limited trading as Workhuman

19 Beckett Way
Park West Business Park
Dublin 12, Ireland

(Last modified as of September 15, 2023)