The "data controllers" (as defined in the Data Protection Legislation) in respect of your personal information will be one of Bridgepoint Group plc with company registration number 11443992 or Bridgepoint SAS with company registration number 380223313 ("Bridgepoint" or "us").
1. USE OF YOUR PERSONAL INFORMATION
1.1. We may collect (and use for the purposes set out in this Privacy Policy) the following information about you: information that you submit when you make use of this website, for example, when you register with us or respond to online surveys; information that you provide when you contact us (either online or by any other method); and details of your visit to our website, including your IP address and choice of web browser (please see section 7 "Aggregated Data" below).
1.2. What sort of Personal Information do we collect?
1.2.1. General
When contacting us online, via telephone, in writing or otherwise you may provide Personal Information about yourself to us including your name and contact details (e.g. your address, email address and telephone number).
1.2.2. Information about job applicants
If you apply for or enquire about a job with us we may also ask you to provide details of your previous job title, your employment history, a copy of your CV and references - and we may also seek references and carry out checks with third parties if appropriate for the role you have applied for. This processing is justified by our legitimate interests to carry out effective recruitment.
1.2.3. Information about those related or otherwise connected to our staff
We sometimes ask members of our staff to provide details of their next of kin for the purpose of our emergency scenario planning or in case an incident occurs at work. We may also ask for details of their dependents, spouses and/or other people in relation to their employee benefits arrangements. We will only ever use this information for the benefit of our staff and only when justified by our legitimate interest to support our staff.
1.2.4. Information about management and employees at our portfolio companies
When we acquire a business, we will obtain some information about the employees and other staff who work in that business to carry out and improve our business in the pursuit of our legitimate interest.
1.2.5. Information about investors/potential investors/those who work for or are connected with investors
If you (or an institutional investor or investment vehicle with which you are associated) consider investing with us, you may also provide us with your financial information and various other necessary Personal Information. This processing will be justified by the performance of a contract concluded with you, or for the purpose of corresponding with you for business purposes, providing any support you may require or to process an investment application in accordance with our legitimate interests. In certain circumstance, we may also process your Personal Information for the purpose of complying with our KYC-AML obligations.
1.2.6. Information about individuals who are our suppliers or other business contacts (and individuals who are employed by our suppliers and business contacts)
If you provide services to us or have a business dealing with us (or are employed or engaged by an entity which provides services or has a business dealing with us), we may acquire your name, contact details, some employment information and we may acquire copies of ID documents or similar information, for the purpose of corresponding with you, carrying out and improving our business, analysing the use of our website and services in the pursuit of our legitimate interests. In certain situations, for example, if you are a director at a business, we are required under our legal obligations to conduct due diligence or carry out KYC-AML processes.
2. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
2.1. We will only keep your Personal Information for as long as we reasonably require and, in any event, only for as long as the Data Protection Legislation and our own internal rules and policies allow.
3. YOUR RIGHTS AND DATA ACCURACY
3.1. You have certain rights in relation to your Personal Information - for example the right to request that we erase your Personal Information (or part thereof) at any time, which request we will comply with unless we have a lawful reason to keep your information (for example, to comply with our legal obligations). Where relevant, we will also ensure that our group companies amend or erase your Personal Information (as applicable). Please contact us at the email address set out below if you wish to request any changes.
3.2. You also have the right, subject to certain exemptions, to: (a) see the Personal Information we hold about you and withdraw any consent you may have given to us; (b) to ask us to make any changes to ensure that any Personal Information we hold about you is accurate and up to date; and (c) in some cases communicate any information we hold about you to a specified third party. In certain jurisdictions, you have the right to provide instructions on the processing of personal information after your demise. If you wish to exercise any of these rights, please contact us at the email address set out below.
3.3. Please ensure that the Personal Information you provide via the website is accurate and complete and you notify us of any changes to your Personal Information as soon as possible so that we can update our records.
3.4. Whilst we will take all reasonable steps to protect your Personal Information, we cannot guarantee the security of any Personal Information you disclose online. You accept the inherent security implications of disclosing Personal Information online.
4. HOW AND WHY WE SHARE YOUR PERSONAL INFORMATION
4.1. Where it is necessary for the performance of our contract with you or for our internal business processes, we may share your Personal Information with certain third parties who reasonably need it in order to perform a function for you or provide a service to us - such as our group fund(s), the funds' administrator, and our other group companies and our advisers. By submitting your Personal Information to us, you acknowledge that such third parties may receive and process your Personal Information. We will never sell your data.
4.2. In addition, it may be necessary to disclose your Personal Information if we are under a duty to disclose your Personal Information in order to comply with any legal or regulatory obligation (such as anti-money laundering obligations), carry out an internal investigation, enforce any agreement we have with you or with a related party, or protect the rights, property, or safety of Bridgepoint, its group companies and/or our clients, directors, employees or other personnel. This includes exchanging information with other companies and organisations for the purposes of fraud protection and prevention.
4.3 We may also process and transfer your Personal Information to auditors, advisers, law enforcement bodies or to other entities for the purpose of establishing or defending our legal rights, complying with the law or carrying out an internal investigation.
4.4 In processing your Personal Information, it will sometimes be necessary for us to transfer your Personal Information outside the European Economic Area ("EEA") and/or the United Kingdom ("UK") to our staff and our third party service providers. It may also be accessed by staff operating outside the EEA/UK who work for us or for one of our suppliers or group companies. A list of the entities of the group is available on our website http://www.bridgepoint.eu/en/about-us/our-locations/. This includes people engaged in, among other things, the provision of support services to us. We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Policy and the Data Protection Legislation when it is processed in, or otherwise accessed from, a location outside the EEA/UK. This means that we will only transfer your Personal Information to our non-European offices and to third parties based outside the EEA/UK in accordance with the Data Protection Legislation. We may enter into contracts with entities based outside the EEA/UK, where this is required by the Data Protection Legislation - and a copy of such contracts will be available to you on written request to the email address below (subject to certain redactions and/or an undertaking from you to respect the confidentiality of that contract).
5. MARKETING AND INDUSTRY UPDATES
5.1. Where you have expressly consented to receive from us or we otherwise have the right to send to you marketing materials, event invitations and/or industry updates we will use your Personal Information to do this (whether in hard copy or by email).
5.2. You can opt out of receiving these sorts of communications from us at any time by: (i) contacting us at the email address below, (ii) clicking the unsubscribe/"opt-out" button which are available in some of our emails or (iii) where the materials are sent by post, sending us a cancellation request to the address included in the materials.
