Effective Date: December 31, 2019
- “Privacy Laws” refers to the applicable legislation, statutory instruments, and any other enforceable laws, codes, regulations, or guidelines regulating the collection, transfer, processing, use, and disclosure of, and/or rights to Users’ Personal Data based on their governing jurisdiction, including, in particular: (i) the California Consumer Privacy Act and its implementing regulations, as amended from time to time (the “CCPA”) and (ii) the European Union’s General Data Protection Regulation (EU) 2016/679 and any Member State implementing legislation, as amended from time to time (the “GDPR”).
Deltek uses information about Users, including Personal Data, for a variety of purposes, including:
- To enable you to use our Sites or Services;
- To monitor usage and analyze statistical information related to our Sites or Services;
- To supply information regarding your Services upon your request;
- To respond to your comments, questions, and requests;
- To carry out our obligations and enforce rights arising from our contractual relationship with you;
- To improve and maintain the security, performance, and operational efficiency of our Sites or Services;
- To provide customer support;
- To send communications regarding Services or information related thereto; and/or
- For any other purpose with your consent.
When you visit the Sites, including if you have visited the Sites in the past twelve (12) months, Deltek has collected Personal Data as listed in the Personal Data Categories Chart (Section X) below. The categories of Personal Data collected by customers through the use of the Services varies based on the specific Services provided, the engagement and scope of Services requested, and/or any configurations or customizations undertaken on your behalf in accordance with the terms of your Services Agreement. Customers should contact their Customer Care Representative for more information.
- Data Integrity
You are responsible for the accuracy of the information you provide to Deltek. Deltek will use reasonable efforts to maintain the accuracy and integrity of such information and update it, as appropriate. Deltek will not maintain data any longer than necessary for the purposes stated without your consent unless legally required.
- End-User Personal Data
As part of using the Services, you may enable access to your end-users (as governed by the terms of your Services Agreement). Deltek collects Personal Data on behalf of our customers in order to provide the Services and has no direct relationship with your end-users whose Personal Data may be processed in connection with the provision of those Services. You are solely responsible for establishing policies for and ensuring compliance with applicable Privacy Laws relating to the collection of Personal Data from your end-users. For a description of the respective standard obligations of Customers and Deltek set forth in your Services Agreement, please refer to that agreement.
- Automated Collection
Deltek collects log files, domain names, and IP addresses of Users for statistical purposes, to measure use, to improve the content or responsiveness of the Sites, or to customize the content or layout of the Site for individual Users. Deltek may also aggregate this information to identify traffic patterns for the Sites. This data helps Deltek understand how Users consume information on the Site and interact with the Services with the ultimate goal of building an experience that improves Deltek’s processes and priorities in accordance with User needs. Access to this data is restricted to those who administer Deltek’s network and Sites. Deltek may use and disclose this data to third parties only in connection with monitoring our networks for security purposes, in response to legal process or law enforcement inquiries, to control any abuses of the Sites, or to address identified violations of any contractual provision entered into between you and Deltek.
In addition, most web browsers contain cookies, but also provide controls that allow you to block or delete them. You have the ability to accept or decline cookies from the Sites at any time by modifying the settings in your web browser. Certain Site and Service features require cookies to function. Please be aware that if you choose to block cookies, you may not be able to access or use those features and preferences that are dependent on cookies.
Deltek’s legal basis for collecting and using Personal Data will depend on the Personal Data concerned and the specific context in which Deltek collects it.
However, Deltek will normally collect Personal Data with your consent, to perform a contract (for example, when providing Services), or where the processing is in Deltek’s legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, Deltek may also have a legal obligation to process Personal Data or may need to do so in order to exercise, establish, or defend legal claims.
If Deltek asks you to provide Personal Data to comply with a legal requirement or to perform a contract, Deltek will make this clear at the relevant time and advise whether the provision of Personal Data is mandatory or not (as well as the possible consequences, if any, if you do not provide that Personal Data).
Security is one of Deltek’s highest priorities. Deltek takes commercially reasonable and appropriate steps to protect Personal Data transmitted from you to the Sites and in connection with the Services and to protect such data from loss, misuse, or unauthorized access, disclosure, alteration, or destruction. You should keep in mind that no internet transmission is ever 100% secure or error-free. In particular, email may not be secure and therefore special care should be taken when deciding what information is sent to Deltek via email. Where you use passwords, ID numbers, or other special access features, it is your responsibility to safeguard them.
We make commercially reasonable efforts to reduce the risk of data breaches and have dedicated controls and procedures in place for such situations, along with the procedures to make notifications to the relevant supervisory authorities and data subjects (where applicable).
Any Personal Data provided to Deltek will be used for Deltek’s business purposes only and only disclosed on a need-to-know basis or as required by law. When Deltek provides Personal Data to third parties used to deliver or support specific Services to you, our agreements with these third parties do not permit them to use Personal Data outside the scope of fulfilling those Services nor allow them to further disclose your Personal Data. You should consult your Services Agreement for information regarding disclosures and transfers relevant to the Services.
Deltek’s business partners are independent third parties that are otherwise not affiliated with Deltek. Any relationship you elect to enter into with a partner for additional products and services is directly between you and that third party.
The CCPA permits California consumers (as defined under Cal. Code Regs. tit. 18, § 17014) to request certain information regarding Deltek’s disclosures of Personal Data and compliance with the CCPA. Depending on the circumstances of your relationship with Deltek, the disclosure may extend over the previous twelve (12) months. California consumers should submit their requests as described in Contact Us (Section IX). It is important to note that Deltek is required under the CCPA to verify your identity in order to respond. Deltek will respond to verifiable requests within a reasonable period of time after receipt.
Based on applicable Privacy Laws, Deltek may separately ask you to opt-in to receive promotional and/or marketing communications. At any time, you can manage your communication preferences via the Email Preference Center or you may unsubscribe from receiving such communications by utilizing the “unsubscribe” or opt-out feature within the communication. Requests to unsubscribe from Deltek communications may also be made by contacting Deltek via the methods indicated in Contact Us (Section IX), but you should note that requests made through these alternative methods may take up to five (5) business days from receipt to process.
- Selling of Personal Data
Deltek’s disclosures of Personal Data to its affiliates, third-party service providers, partners, or subprocessors do not qualify as “sales” within the scope and meaning of the CCPA as the disclosures are necessary to perform the business purpose under your Services Agreement or facilitate business communications and/or transactions between the parties. See Questions (Section VIII) below for more information.
As defined under Chapter 603A of Nevada Revised Statute, as amended, Deltek does not exchange “covered information” (as defined under the Nevada Statute) for monetary consideration to any person or entity for the purpose of licensing or selling the covered information.
- Personal Data Collection Based on Consent
If Deltek collects and processes Personal Data with your consent, you can withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing Deltek conducted prior to your withdrawal, nor will it affect processing of Personal Data conducted in reliance on lawful processing grounds other than your consent.
Under the GDPR, you may submit inquiries or concerns to your data protection authority or another appropriate regulator about Deltek’s collection and processing of your Personal Data. For more information, you should contact the appropriate local data protection authority. Contact details for data protection authorities in the European Economic Area are available here.
Under the CCPA, you may also submit inquiries or concerns about Deltek’s collection and processing of your Personal Data. In addition to those methods noted in Contact Us (Section IX), California consumers may contact Deltek via our US toll-free number 1-800-456-2009, option 4 to submit your request or inquiry.
- Non-Discrimination under CCPA
Deltek will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, Deltek will not:
- Deny goods or Services;
- Charge different prices or rates for goods or Services;
- Provide a different level or quality of goods or Services; or
- Suggest that you receive a different price or rate for or a different level of quality of goods or Services.
For more information on Deltek’s privacy practices or other security and compliance activities, please visit our Deltek Security and Trust Center. Deltek acknowledges that individuals may have certain rights to their Personal Data under applicable Privacy Laws. Please be aware that there may be circumstances in which additional legal requirements may prohibit or narrow Deltek’s ability to address individual requests. If you would like more information regarding Deltek’s privacy practices, please submit an inquiry.
Written requests or notifications may be sent to:
Deltek - Office of the General Counsel
2291 Wood Oak Drive
Herndon, VA 20171 USA
This chart is for informational purposes only. Deltek customers should consult their Services Agreement or contact their Customer Care Representative for information on the scope of Personal Data pertinent to their Services.
|Category of Personal Data||Specific Pieces of Personal Data|
Name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers.
B. Personal information per the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Name, signature, address, or telephone number.
C. Commercial information
Records of products or services purchased, obtained, or considered.
D. Internet or other similar network activity
Browsing history, search history, or information on User interactions with the Sites or Services.