Privacy Statement
King Stubb & Kasiva including all affiliates and subsidiaries (collectively “KSK”), is committed to complying with the applicable data privacy and security requirements in the countries in which it operates. KSK complies with internationally recognized standards of privacy protection, and with various privacy laws globally including, but not limited to, the EU General Data Protection Regulation (GDPR). This Privacy Notice applies when providing valuation advisory, corporate finance, restructuring, governance, risk, investigations, disputes, intelligence, diligence, compliance and regulatory consulting, cyber risk, or other services (the “services”) to its customers.
Who is Collecting Data?
Data will be collected by KSK (or its affiliates and subsidiaries, collectively “KSK”). This policy applies to personal data which is collected and/or used by KSK in its capacity as a data controller as that term is defined in the GDPR and similar privacy laws, for the purposes set out below under Processing of Personal Data.
When KSK provides services to clients, we sometimes process personal data as a data processor, meaning that we process the data solely on the instructions of our clients, who determine the purpose and means of processing and exercise overall control of the data (for example, the hosting of client data on our web-based due diligence portal). Therefore, if you have questions or wish to exercise your rights relating to your personal data, you may need to contact the client (and controller) on whose behalf the processing of your data is carried out. If we receive a request from you relating to data controlled by a client, we will pass the request to the appropriate client (and controller) where permitted by applicable privacy law.
Data We Collect
KSK collects the following categories of personal data:
Contact data: We may collect information about data subjects such as name and contact details (email, phone number, etc.) in order to communicate and facilitate the provision of our services with our clients or potential clients. For example, contact details of individuals who work for or on behalf of the clients, in order to carry out the client’s engagement with KSK.
Services data: Personal data may be provided to us by clients to the extent required to perform the services. KSK may also acquire personal data from a third party at the direction of our client as required to perform services.
Marketing information: We may collect information to respond to inquiries regarding our products and services or to provide you with information, reports, or updates.
Website visitor information: when you visit our website, we may collect information about your visit such as your IP address and the pages you visited and when you use our services we may collect information on how you use those services. Please see our Website Use and Cookies Policy for additional information.
Clients and other Third parties who provide personal information to KSK must do so in compliance with applicable data privacy regulations.
Processing of Personal Data
We collect personal data to offer and administer our services and products. These include valuation advisory, corporate finance, restructuring, governance, risk, investigations, disputes, intelligence, diligence, compliance and regulatory consulting, and cyber risk services.
The data you provide to us will be processed in accordance with the legal basis and purposes specified in this notice, namely:
For complying with obligations provided by laws, current regulations and legislation (e.g. tax regulations, anti-money laundering regulations)
Where the processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract (e.g. where you request certain Services as an individual client, or perform certain services as an individual service provider)
where the processing is necessary for our legitimate business interests in conducting and managing our business, including:
· To provide the products or perform the services requested by clients and individuals pursuant to a letter of engagement, statement of work, or similar
· To provide the products or perform the services requested by clients and individuals using our website or web applications
Where permitted by applicable law, to advise you through e-mail, phone call, or post, in the framework of our ordinary commercial relationship, about other products or services similar to the products or services we have provided to you and that we think will be of interest to you
For hosting of events (including webinars). We may use your data to manage your registration to a KSK event, including sharing data with event co-hosts and tracking and facilitating event attendance.
For improving KSK’s communications with you. Emails sent to you by KSK may include standard tracking, including open and click activities. KSK may collect information about your activity as you interact with our email messages and related content.
For operating and improving KSK’s website and your customer experience. For example, we may collect and analyze data on your use of our website and process it for the purpose of improving our online experience. Please see our Website Use and Cookies Policy for additional information.
For security purposes. For example, we may use your data to protect KSK and its third parties against security breaches and to prevent fraud and violation of KSK’s applicable agreements
For marketing purposes. For example, we may use your information to further discuss your interest in the Services and to send you information regarding KSK and its group companies such as information about promotions, events, products or services.
If you are located in the EU, UK, Australia, Japan, or Singapore, we will only send you marketing communications and updates about our products, services and events with your prior consent or based on our and your legitimate interests where permitted. In either case, you can withdraw your consent or opt-out or receiving such communications at any time.
If you are not located in the EU, UK, Australia, Japan, or Singapore, you may opt-out of receiving marketing communications and updates at any time.
You can manage your receipt of marketing and non-transactional communications by clicking on the «unsubscribe» link located on the bottom of KSK’s marketing emails. Additionally
With your consent. KSK also processes your data for other purposes if you have provided us consent for such specified purposes, where such other purposes will be clearly provided at the time you provide consent.
Whenever we process your personal data for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish.
How data is processed
Personal data is processed both manually and electronically in accordance with the above-mentioned purposes and in compliance with current regulations. We permit only authorized KSK employees and Third-Party processors to have access to your information. Such employees and Third-Party processors are appropriately designated and trained to process data only according to the instructions we provide them.
Storage of personal data
KSK will retain personal data for a reasonable period, taking into account legitimate business needs to capture and retain such information. Information will also be retained for a period necessary to comply with state, local, federal regulations, or country specific regulations and requirements, and in accordance with KSK’s Document Retention Schedule.