WGI PRIVACY POLICY
This privacy statement is effective as of May 2, 2022. Please note that this privacy statement will be regularly
updated to reflect any changes in the way we process your personal data or any possible changes to applicable law.
This page and all of its subsections tell you everything you need to know about how WGI and/or its affiliates and recently
acquired companies (“WGI”; “we”) protect data. personal data that we process and control about you (“your personal data”;
“your data”), as well as the rights you may have with regard to their processing.
Any WGI entity based outside the European Union will be represented by WGI for the purposes of complying with data privacy
legislation.
We provide a general description of how WGI protects your personal data, with the understanding that WGI complies with local
laws relating to the protection of personal data. You will then find specific information on the following areas:
» How do we use your personal data when you visit the WGI website?
» How do we use cookies (and other tracking technologies)?
» How do we use your personal data when you visit our offices?
» How do we use your personal data for our marketing activities?
HOW DOES THE WGI GROUP PROTECT YOUR PERSONAL DATA?
WGI attaches great importance to respecting your privacy and protecting your personal data.
It is important to us that you have no fear that when dealing with WGI your personal data is secure.
WGI protects your personal data in accordance with applicable laws and its information privacy policies.
WGI also applies appropriate technical and organizational measures to ensure the protection of your personal
data against unauthorized or unlawful processing and/or against accidental loss, modification, disclosure
or access, or accidental or unlawful destruction or damage.
You will find detailed information on how WGI processes your personal data in the following sections:
What categories of personal data do we collect and how do we process them?
For what purposes and on what legal basis do we use your personal data?
Will your personal data be shared with third parties?
What about sensitive personal data?
What about data security?
Where will your personal data be processed?
How long will we keep your personal data?
What are your rights regarding the processing of your personal data?
What categories of personal data do we collect and how do we process them?
We collect personal data about the following: employees, candidates, customers, suppliers, business contacts,
shareholders, website users. If the data we collect is not listed in this privacy statement, we will duly notify
the affected individuals of the data collected
More specifically, the personal data we collect includes the categories of personal data described in the sections
“How we use your personal data when you visit the WGI website”, “How we use cookies (and other technologies of followed)?”,
“How do we use your personal data when you visit our offices?” and “How do we use your personal data in our marketing
activities?”, as well as any other categories of personal data mentioned in this privacy statement or in other statements
you have received.
a wide range of additional data, including your postal address, current occupation, industry, education and personal and
professional interests.
Correspondence between you and us in relation to the Alumni site.
Data that you publish on the Alumni site, for example on discussion pages.
Online survey responses we use for research and quality control purposes.
Details on remuneration and (former) salaries.
Details about your (former) position.
Year of birth when necessary for specific purposes
Personal information we already have in our WGI systems, such as (former) company ID, (former) office location,
phone number, home address, and education or training - this is to verify your identity when registering on our
Alumni site.
We will process your personal data (mentioned above) based on your prior consent, to the extent that such consent is
required by applicable law.
To the extent that you are asked to click/check “I accept”, “I agree” or similar buttons/checkboxes/features as part of
a privacy statement, clicking or checking so will be considered consent to the processing of your personal data only
in countries where such consent is required by mandatory law. In all other countries, such action will be considered
mere acknowledgment and the legal basis for processing your personal data will not be your consent, but any other
applicable legal basis.
We will not use your personal data for purposes that are incompatible with the purposes of which you have been informed,
unless this is required or permitted by law, or it is in your vital interests (for example in the event of medical emergency).
Will your personal data be shared with third parties?
We may transfer your personal data to service providers, professional advisors, public authorities and administrations or
to third parties in the context of a (potential) commercial or business-to-business transaction. These third parties may
be located in other countries. Before proceeding, we will take necessary steps to ensure that your personal data will
receive adequate protection in accordance with applicable data privacy laws and WGI's internal policies.
WGI may also transfer your personal data to one of its affiliates/partners worldwide in anticipation of any visit to
our WGI sites.
For example, we may disclose personal information to third parties for the following purposes:
We share your information with third party service providers who provide services to us, including billing, payment processing, customer service, email deployment, advertising and marketing, security, and performance tracking , maintaining or servicing accounts, processing or fulfilling orders and transactions, verifying customer information, research, data hosting, audits and data processing;
To protect and defend the legal rights, safety and security of WGI, our affiliates, our users or the public, including to protect against fraud and malicious activity; And
For the business purposes described in this privacy statement or any other purpose disclosed to you at the time we collect the information or pursuant to your consent.
We may also share your information in connection with a significant corporate transaction, such as the sale of a website, merger, consolidation, asset sale, initial public offering, or in the unlikely event of bankruptcy.
Unless otherwise notified, any transfer of personal data within the European Economic Area (EEA) to third parties based outside the EEA will be based on an adequacy decision or governed by the standard contractual clauses of the EEA.
EU (a copy of which can be obtained from WGI's Data Protection Officer).
Any other transfer of your personal data involving a country not based in the EEA will be in accordance with appropriate
international data transfer mechanisms and safeguards.
What about sensitive personal data?
Generally speaking, we do not seek to collect sensitive data (also called “special categories”).
Through this site or by other means. In cases where we seek to collect such data, we will do so in accordance with the
requirements of applicable privacy laws and/or seek your consent.
The term “sensitive data” refers to the different categories of personal data identified by data privacy laws as
requiring special processing, including those which, in certain circumstances, require obtaining explicit consent from you.
These categories include, but are not limited to, racial or ethnic origin, political, religious, philosophical or similar
opinions, trade union membership, physical or mental health, biometric or genetic data, sexual identity or orientation,
or criminal records (including information relating to suspicion of criminal activity).
What about data security?
We apply organizational, physical and technical security provisions for all personal data held by us.
We have put in place protocols and control measures as well as appropriate policies, procedures and guidelines
to ensure the proper application of these provisions, taking into account the risks associated with the different
categories of personal data and their processing.
We adopt industry-leading security measures to protect your personal data. These include (but are not limited to):
We hold ISO27001 certification, which means WGI meets the strictest and most demanding IT security standards.
This security standard, awarded by the British Standards Institution (BSI), serves as an international certification
to which WGI rigorously adheres. This certification is the only auditable international standard to define the
requirements for an information security management system (ISMS). It confirms that WGI's security controls
and processes provide an effective framework for ensuring the protection of its clients' and its own information.
We have implemented a global Client Data Protection program (CDP), which governs the management of information and systems entrusted to WGI by its clients.
We regularly carry out penetration tests conducted by a third-party service provider, which continue to demonstrate
the robustness of our technical protection measures.
Where will your personal data be processed?
Because WGI is a global organization with offices and operations around the world, your personal data may be transferred
or accessed internationally across its global businesses, as well as between its entities and affiliated companies.
These transfers within the context of WGI's global business are conducted in accordance with applicable data privacy laws,
as well as our Binding Corporate Rules (“BCR”).
Our BCRs reflect the standards set by European data protection laws (including the General Data Protection Regulation).
The BCRs require any signatory entity of the WGI group to comply with the same internal rules. This also means that your
rights (see section “What are your rights with regard to the processing of your personal data?”) remain the same regardless
of where your data is processed by WGI.
From what sources do we obtain your personal information?
Where we do not obtain your personal information directly from you, we may obtain it from the following sources:
publicly available sources (registries or the Internet), WGI employees, contractors, (potential) board members
administration, shareholders, WGI affiliates, subsidiaries and newly acquired companies, employers of our contractors,
public authorities, public websites and social media, previous employers, educational institutions, suppliers and vendors
(including suppliers of third-party data).
Section 5 provides additional information about the sources of your personal information for marketing purposes.
How long will we keep your personal data?
We will only keep your personal data for as long as is strictly necessary. We apply specific policies and procedures
regarding the management and retention of records, such that personal data will be deleted after a reasonable period of
time based on the following retention criteria:
We will retain your data for as long as we have an ongoing relationship with you (in particular, if you hold an
account with us).
We will only retain your data for as long as your account is active or as long as necessary to provide services to you.
We will retain your data for as long as necessary to comply with all of our legal and contractual obligations
around the world.
What are your rights regarding the processing of your personal data?
You have the right (under the circumstances, conditions, and subject to exceptions, provided by applicable law) to:
Request access to the personal data that we process about you: this right allows you to know whether we hold your personal data and, if so, to obtain information and a copy of said personal data.
Request rectification of your personal data: this right authorizes you to have your personal data corrected if it is inaccurate or incomplete.
Object to processing of your personal data: This right allows you to request that WGI stops processing your personal data.
Request deletion of your personal data: this right allows you to ask WGI to delete your personal data, including when said personal data is no longer necessary to achieve the objectives pursued.
Request restriction of processing of your personal data: This right allows you to request that WGI only processes your personal data in limited circumstances, including with your consent.
Request portability of your personal data: this right allows you to receive a copy (in a structured, commonly used and machine-readable format) of the personal data that you have transmitted to WGI, or to
request that WGI transmit this personal data to another data controller.
If, despite our commitment and efforts to protect your personal data, you believe that your data privacy
rights have been violated, we encourage you to contact WGI in the first instance to seek resolution of your complaint.
You have the right, at any time, to submit a complaint directly to the competent supervisory authority or to file a
complaint against WGI in a court of competent jurisdiction (in the country where you live, where you work or in the
country where you work). where you believe there has been a breach of data privacy legislation).
Contact us you wish to exercise your rights.