Privacy Policy

HRSoft respects individual privacy and values the confidence of its customers, our employees, our customer’s employees, our business partners and others. We collect, use and disclose personal information in a manner consistent with the laws of the countries in which we do business.

Our Privacy Shield Policy (the “Policy”) sets forth the privacy principles we follow with respect to transfers of personal information from the European Economic Area (EEA) (which includes the twenty-seven member states of the European Union (EU) plus Iceland, Liechtenstein and Norway) and from the United Kingdom and Switzerland to the United States.

HRSoft complies with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  HRSoft has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  HRSoft has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Consistent with our commitment to protect personal privacy, we adhere to the principles set forth in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF and Swiss-US Data Privacy Framework (the “DPF Principles”).

SCOPE

This Privacy Shield Policy (the “Policy”) applies to all personal information received by us in the United States from the EEA and from the United Kingdom and Switzerland, in any format, including electronic, paper or verbal

THE INFORMATION WE COLLECT

Certain information is collected automatically when you visit our website (https://hrsoft.com) (the “Website”), for the purpose of tracking site usage. This information includes your Internet Protocol (IP) address, access times, duration of visit, referring URL, browser type, device type, and domain name.

In addition, certain personal information is collected for the purpose of contacting site visitors inquiring about our services. This personal information includes your name, company name, email address, and phone number.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

PRIVACY PRINCIPLES

The privacy principles in this Policy have been developed based on the DPF Principles.

NOTICE: Where we collect personal information directly from individuals in the EEA or the United Kingdom or Switzerland, we will inform them about the purposes for which we collect and use personal information about them, the types of non–agent third parties to which we disclose that information, the choices and means we offer individuals for limiting the use and disclosure of personal information about them, and how to contact us. Notice will be provided in clear and conspicuous language when individuals are first asked to provide personal information to us, or as soon as practicable thereafter, and in any event before we use or disclose the information for a purpose other than that for which it was originally collected.

Where we receive personal information from subsidiaries, affiliates or other entities in the EEA or the United Kingdom or Switzerland, we will use and disclose such information in accordance with the notices provided by such entities and the choices made by the individuals to whom such personal information relates.

CHOICE:  Where we collect personal information directly from individuals in the EEA or the United Kingdom or Switzerland, we will offer individuals the opportunity to choose (opt-out) whether their personal information is (a) to be disclosed to a non-agent third party, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual.

For sensitive personal information, we will give individuals the opportunity to affirmatively and explicitly (opt-in) consent to the disclosure of the information to a non-agent third party or the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual.   We will provide individuals with reasonable mechanisms to exercise their choices.

DATA INTEGRITY AND PURPOSE LIMITATION: We use personal information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. We will take reasonable steps to ensure that personal information is relevant to its intended use, accurate, complete, and current. We may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

ACCOUNTABILITY FOR ONWARD TRANSFERS: We generally do not transfer personal information to our agents, such as banks, credit card processors, business partners, etc.  If we do, we will obtain assurances from our agents that they will safeguard personal information consistent with this Policy. Assurance may be provided by agents in the form of a contract obligating the agent to provide at least the same level of protection as is required by the relevant DPF Principles. Where we have knowledge that an agent is using or disclosing personal information in a manner contrary to this Policy, we will take reasonable steps to prevent or stop the use or disclosure. In cases of onward transfer to third parties of data of EU or Swiss individuals received pursuant to the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, HRSoft is potentially liable

We do not transfer data to non-agent third parties, if this policy changes in the future we will provide individuals with opt-out choice.

Please note that we may be required to disclose personal information in response to a legal request by law enforcement authorities including to meet national security and law enforcement requirements.

ACCESS AND RESOURCE: We acknowledge the individual’s right to access their personal data. Upon request, we will grant individuals reasonable access to personal information about them. In addition, we will take reasonable steps to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete. An individual wishing to limit the use or sharing of their data should contact the organization via the means provided in the Contact Information section below.

SECURITY: We will take reasonable precautions to protect personal information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.

ENFORCEMENT AND LIABILITY: From time to time we will conduct compliance audits of its relevant privacy practices to verify adherence to this Policy. Any employee that we determine is in violation of this policy will be subject to disciplinary action up to and including termination of employment. HRSoft is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

In compliance with the EU-US Data Privacy Framework Principles, HRSoft commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles.  European Union, Swiss and United Kingdom individuals with DPF inquiries or complaints should first contact: HRSoft; 3513 Brighton Blvd, Suite 220; Denver, CO 80216; Attn: Chief Executive Officer

HRSoft has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers  for more information and to file a complaint. This service is provided free of charge to you.

If your  DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms.  See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2

Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel.

HUMAN RESOURCES DATA WITHIN THE WORKING RELATIONSHIP

EU and Swiss individuals whose HR data we receive within the context of the working relationship can address questions or comments regarding the handling of that information directly to us at (see Contact Information below).  We resolve to deal with all questions regarding this data and potential grievances arising from it in a timely manner.

In the event HRSoft is unable to accommodate the individual’s request regarding HR data received by us within the context of the work relationship, we further commit to working with the Data Protection Authorities (DPA’s) who cover the jurisdiction the data originated from.  For information on how to contact your jurisdiction’s DPA, visit http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

INTERNET PRIVACY

We use the Internet, and other technologies, as tools to communicate and interact with consumers, employees, customers, business partners, and others. We recognize the importance of maintaining the privacy of information collected online and have created a specific Internet Privacy Policy governing the treatment of personal information collected through web sites that we operate. With respect to personal information that is transferred from the European Economic Area or the United Kingdom or Switzerland to the U.S., our Internet Privacy Policy is subordinate to this Policy.

DO NOT TRACK

HRSoft does not track its customers over time and across third-party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals.

CONTACT INFORMATION

Questions or comments regarding this Policy should be submitted to us by mail to:

HRSoft

CHANGES TO THIS PRIVACY SHIELD PRIVACY POLICY