DATA PROTECTION & PRIVACY NOTICE

This Notice describes how Navex, on behalf of Informatica, and its affiliates and subsidiaries, collects, uses, stores, shares, and disposes of your personal information in conjunction with your submission of a report through Informatica’s Hotline. If you do not wish your personal data to be processed as described in this Notice, please submit your report via another avenue, such as reporting it directly to your supervisor or manager or to a representative of the Human Resources, Legal, or Corporate Compliance Departments.

  • 1. General
  • This service is a web and phone-based intake system provided by Informatica to its employees, vendors, suppliers and business partners and those of its affiliates and subsidiaries for reporting suspected violations of laws or regulations, our Code of Business Conduct or company policies.

    In certain countries, this service may also be used to report suspected violations of other matters. This service and the database in which the personal data and information that you may report is stored, are operated by NAVEX.

  • 2. Use of this service
  • Use of this service is entirely voluntary. You are encouraged to report possible violations directly to your supervisor or manager, or to a representative of the Human Resources, Legal, or Corporate Compliance Departments, depending on the nature of the possible violation. If you feel that you are unable to do so, you may use this service to make your report.

    The purpose of this service is to provide a confidential online and phone-based reporting system that allows you to report suspected violations of law or company policies, as well as other concerns you may have, to Informatica. In certain countries, Informatica may only accept reports through this service on limited topics, generally restricted to financial, accounting, auditing, bribery, competition law, discrimination and harassment and environment, health, hygiene, and safety matters. If your concern pertains to a matter that, under local law, may not be accepted by Informatica through this service, you will need to contact your supervisor or local management or a representative of the Human Resources, Legal or Corporate Compliance Departments to report the matter.

    Please note that we are only able to receive and process reports through this service if you confirm that you have read and understand this Notice and expressly acknowledge or consent to the processing of the reports and your personal information as described below by clicking the button below. If you do not wish for you’re the personal data included in your report to be processed as described in this Notice, please use another available avenue to report the matter, such as contacting directly your supervisor or local management or a representative of the Human Resources, Legal or Corporate Compliance Departments.

    Please be aware that the information you supply about yourself, your colleagues, or any aspect of the company’s operations may result in decisions that affect others. Therefore, we ask that you only provide information that you believe is true. You will not be subject to retaliation from Informatica for any report of a suspected violation that is made in good faith, even if it later turns out to be factually incorrect. Please be aware, however, that knowingly providing false or misleading information will not be tolerated. The information you submit will be treated confidentially except in cases where this is not possible because of legal requirements or in order to conduct an investigation, in which case the information will be handled sensitively. We encourage you to identify yourself in order for us to follow up with questions we may have; however, that is not required to submit your report. Note that some country laws may not allow anonymous reporting; however, your personal information will be treated confidentially and will only be disclosed as set out below.

  • 3. What personal data and information is collected and processed?
  • This service captures the following personal data and information that you provide when you make a report: (i) your name and contact details (unless you report anonymously) and whether you are employed by Informatica; (ii) the name and other personal data of the persons you name in your report if you provide such information (i.e., description of functions and contact details); and (iii) a description of the alleged misconduct as well as a description of the circumstances of the incident.

  • 4. How will the personal data and information be processed?
  • Any personal data you submit in connection with a report will be processed for the purpose of pursuing Informatica’s legitimate interest in investigating and addressing appropriately alleged violations of law or Informatica policies. The personal data and information you provide will be stored in a database which is located on servers hosted and operated by NAVEX in the United States. NAVEX has entered into contractual commitments with Informatica requiring Navex to process reports only as instructed by Informatica and to secure the information you provide in accordance with applicable law. Personal data and information provided in a report may be transferred outside of the United Kingdom, the European Union, and/or the European Economic Area for the purpose of providing interpretations or administration of this service. NAVEX is committed to maintaining compliance with applicable data protection requirements and adheres to stringent privacy and security practices. For the purpose of processing and investigating your report and subject to the provisions of local law, the personal data and information you provide may be accessed, processed and used by the relevant personnel of Informatica, including Human Resources, Finance, Internal Audit, Legal, Corporate Compliance, management, external advisors (e.g. legal advisors), or, in limited circumstances, by technical staff at NAVEX. Those individuals may be located in the United States or elsewhere.

    The personal data you provide will be kept as long as necessary to process your report, or, if applicable, as long as necessary to initiate sanctions or to meet our legal or financial needs.

  • 5. To whom may personal data be disclosed?
  • Informatica will disclose personal data submitted as part of your report only to meet its obligations to report or disclose potential violations of law to governmental authorities or as otherwise required by law.

  • 6. Accessing information concerning the report
  • Informatica will promptly notify any person who is the subject of a report to this service, except where notice needs to be delayed to ensure the integrity of the investigation and preservation of relevant information. Further, you have the right to request access, correction, or erasure of personal data or to object to the processing or receive a copy of the personal data held through this service. Any such request should be directed to Informatica. You also have the right to lodge a complaint with the relevant supervisory authority.

    In some cases, the subject of the report may access information concerning the report, including the source from which the report originates, (with the exception of the identity of the reporter), and request correction of personal data that is inaccurate or incomplete in accordance with applicable law. To make any such corrections, please contact the General Counsel or the Corporate Compliance Officer.

  • 7. Special country regulations
  • Throughout much of the European Union and surrounding areas, reports can only be made relating to limited topics, typically accounting, auditing, bribery, competition law, discrimination and harassment and environment, health, hygiene, and safety matters. Further, some countries restrict reports such that only employees in key or management functions may be the subject of a report.

    Any issues or concerns relating to topics not permitted by law to be reported via this service should be reported directly to your Manager or Supervisor or a representative of the Human Resources, Legal or Corporate Compliance Departments as appropriate for the subject matter of the possible violation. In some countries, anonymous reports may not be permitted under the law except under extremely restrictive circumstances.

  • 8. EU Data Subjects’ Rights
  • Personal data regarding EU data subjects submitted as part of a report and transferred by Navex to the U.S. is protected by the U.S.-EU Privacy Shield. If you are a resident of the European Economic Area, you have the right to request from Informatica access to and rectification or erasure of the personal data about you that you submit to Informatica or that is otherwise processed by Informatica in conjunction with a report. If you have a concern regarding the processing of personal data submitted as part of a report, you also have the right to lodge a complaint with a supervisory authority.

  • 9. Contact Information
  • If you have questions regarding the processing of personal data you provide in connection with a report, please contact:

    Informatica LLC
    Attn: General Counsel
    2100 Seaport Blvd
    Redwood City, CA 94063 U.S.A.
    Fax: 650-385-5500
    privacy@informatica.com

    Or, if you are a resident of the EEA:

    Informatica Ireland EMEA UC
    (Fifth Floor)
    1 Windmill Lane
    SOBO District
    Dublin 2, Ireland
    privacy@informatica.com