Effective date: May 25, 2018
Personal Information Anaplan Processes
In the normal course of using the Platform, each Client user must provide an email address, which will serve as a username for login and authentication purposes, and a contact point for Platform related messages.
Clients will input electronic data into the Anaplan systems (“Client Data”). The use of information collected through the Platform will be limited to the purpose of providing the service for which the Client engaged Anaplan. Anaplan may access Client Data for the purposes of providing the Platform, preventing or addressing service or technical problems, responding to support issues, responding to Client’s instructions or as may be required by law, in accordance with the relevant agreement between Client and Anaplan.
Anaplan processes Client Data under the direction of its Clients, and has no direct control or ownership of the personal data it processes. Clients are responsible for complying with any regulations or laws that require providing notice, disclosure and/or obtaining consent prior to transferring the Client Data to Anaplan for processing purposes. Transfers of personal data to third parties are covered by the service agreements with our Clients.
Anaplan acknowledges that you have the right to access your personal information. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data, should direct his or her question to the applicable Client (the data controller). If the Client requests Anaplan to remove the personal data to comply with data protection regulations, Anaplan will assist Client with or perform such removal in accordance with Client’s instructions and subject to Anaplan’s ability to access data as needed to respond to the request. Anaplan will refer any request for disclosure of personal data by a law enforcement authority to the Client. Anaplan may, where it concludes that it is legally obligated to do so, disclose personal data to law enforcement or other government authorities. Anaplan will notify Client of such request unless prohibited by law.
Accessing the Platform
Clients and their authorized users may access the Platform directly by login on the Anaplan website, or may elect to use internal launch pages for single sign on or other purposes. Clients input information for processing and storage as they use the Platform. Clients may also configure the Platform to allow authorized end users to input information directly into the Platform.
Anaplan retains Client Data according to the timeframes set forth in the relevant agreement with its Clients.
As a global organization, data we collect may be transferred internationally throughout Anaplan’s worldwide organization. We will not sell individual information and will share it only as outlined in this Policy. We may share your information with service providers such as our hosting provider, or email service provider. These companies are authorized to use your personal information only as necessary to provide these services to us. Before you submit any information, we will notify you as to why we are asking for specific information and it is up to you whether or not you want to provide it.
We may disclose your personal information as required by law, such as to comply with a subpoena, or similar legal process and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request or to any third party with your consent to do so. We will have no duty to notify you of such compliance with local law where applicable.
Subject to the terms set forth in the relevant agreement with its Clients, if Anaplan is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Websites of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Anaplan will not use or share your personal information in ways unrelated to those described above without first notifying you and offering you a choice as to whether or not we may use your personal Information in a different manner.
The security of Client Data, including personal data, is very important to Anaplan. Anaplan maintains a comprehensive written information security program that contains administrative, technical, and physical safeguards designed to prevent unauthorized access to Client Data. Additional information about the security features of the Platform can be found in the relevant agreements between Anaplan and its Clients.
As is true of most websites, we gather certain information automatically. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.
When you get access to the Platform, you may also have access to community sites that allow you to subscribe using your email address and post information under your user name. As a user, you can request deletion of your community profile by sending an email to firstname.lastname@example.org.
EU-U.S. Privacy Shield
Anaplan, Inc. (and its parent/subsidiary company(ies), such as Anaplan Limited) participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. Anaplan, Inc. is committed to subjecting all personal data received from European Union (EU) member countries, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List.
Anaplan, Inc. is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Anaplan, Inc. complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Anaplan, Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Anaplan, Inc. may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Under certain conditions, more fully described on the Privacy Shield website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
If you have unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
50 Hawthorne St.
San Francisco, CA 94105 United States