Effective Date: May 15, 2018
For purposes of this Policy, the following definitions shall apply:
“Data Subject” means an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“GDPR” refers to the European General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).
“EU” (European Union) refers to those countries that are members of the European Union.
“EEA” (European Economic Area) refers to those countries that are members of the European Economic Area.
“Personal Data” means any information relating to a Data Subject.
“Privacy Shield Principles” mean the Privacy Shield Principles enumerated under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework.
“Third Party” means any person that is not an employee or agent of Hedge Connection.
- PRIVACY PRINCIPLES
The privacy principles expressed in this Policy are based on the Privacy Shield Principles enumerated under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework.
- COLLECTION AND USE OF PERSONAL DATA
This Policy applies to all personal data received by Hedge Connection in any format including electronic, paper or verbal. Hedge Connection collects and processes personal data from current and former employees, as well as applicants for employment, clients, and prospective clients, through its Internet website, its Intranet site, carrier portals, electronic mail, and traditional mail. All personal data collected by Hedge Connection will be used for legitimate business purposes consistent with this Policy.
- Personal Data Collected
We only collect personal data that you provide to us.
If you register for certain Services on Hedge Connection’s website (the “Website”), you will be asked to provide certain personally identifiable information as part of the registration process, such as first and last name, e-mail address, telephone number. In addition, in using the services provided by Hedge Connection (the “Services”), you may be asked to provide additional information about the hedge funds that you represent or manage (if applicable), investment parameters, personal financial and account information, information relating to services performed for or transactions entered into on behalf of a hedge fund or another registered user, and data or analyses derived from such non-public personal information.
We also may use personally identifiable information in order to develop, offer, and deliver products and services; respond to inquiries from you or your representative; or to fulfill legal and regulatory requirements.
Hedge Connection may collect non-public personal data about you from any of the following sources:
- From you or your representative on applications, registrations, or other forms (for example, your name, address, assets and income);
- From you or your representative regarding your preferences (for example, based on your activity on our Website);
- From other sources with your consent or with the consent of your representative (for example, from other institutions such as credit reporting agencies);
- From investment activity (for example, your investments in private placements);
- From information you have listed on any public area of your company’s website.
- From other interactions with Hedge Connection (for example, discussions with our customer service staff or your entry of information into our interactive tools); and
- From email correspondence from you or phone conversations with you (we may gather the information in a file specific to you).
- Non-Personal Information Collected
We also may collect certain non-personally identifiable information when you visit the Website. This information includes the type of Internet browser and operating system you are using, the domain name of your Internet service provider, the URL that you visited before you came to our Website, the URL to which you next go, and your IP (Internet Protocol) address, pages visited, and average time spent on our Website. This information may be used, for example, to alert you to software compatibility issues, or it may be analyzed to improve our Website design and functionality. When you use the contact features of the Website, you consent to the review and internal use of your communication by Hedge Connection. We also may use non-personally identifiable information in the aggregate to analyze Website usage and to gather broad demographic information.
We also receive information through cookies, clear GIFs, pixel tags, and other similar technologies. This information often does not reveal your identity directly, but in some countries, including the EEA, it is considered personal data.
By accessing or using our Website or online services, you consent to Hedge Connection using cookies. In the event that you refuse to accept cookies by adjusting your browser setting or taking any of the other kinds of actions discussed above, some or all areas of our Website or online services may not function properly or may not be accessible.
- Our Use of Personal Data
As a general rule, Hedge Connection will not share, rent, sell or otherwise disclose any of your personal information except with your permission. However, Hedge Connection may disclose personal information in the following ways:
- If you are a qualified investor, as necessary to enable managers or representatives of private investment funds to make determinations with respect to the eligibility and suitability of you as a qualified investor, and to contact you for purposes of discussing investment opportunities in private investment funds;
- If you are a manager or representative of a private investment fund, as necessary to enable qualified investors who are registered users to make determinations with respect to the eligibility and suitability of such investment fund, and to contact you for purposes of discussing such investment opportunities;
- In using certain of the services, some of your personal information will be displayed either to other persons or entities whom you designate;
- We may disclose and transfer your information as part of a merger, acquisition or other sale or disposition of our assets or business;
- Other organizations, with your consent or as directed by your representative; and
- Other organizations, as permitted or required by the laws that protect your privacy (for example, for fraud prevention).
We require each of the above parties to adhere to our privacy standards or substantially similar standards for non-disclosure and protection of personal information and to use this information only for the limited purpose for which it was shared. Individuals interact with us in a variety of ways, and under some of these variations, we may exchange information with parties in addition to those described above.
We may also share all individual investor information, under joint marketing agreements with nonaffiliated financial services business partners, in order to offer discounts or other special access to products and services. In addition, we may disclose aggregated information to advertisers and for marketing or promotional purposes. In these situations, we do not disclose to these entities any information that could be used to personally identify you.
If you are a former customer, your personal data is treated in the same manner as the personal data of current customers. If you have any questions or concerns regarding your privacy with Hedge Connection, please contact us at email@example.com.
- Our Retention of Personal Data
Hedge Connection will retain personal data while we have a justifiable business need to do so, unless a longer retention period is required or permitted by law (such as tax, legal, accounting, or other purposes). For example, if you are a customer, we will keep your personal data for the duration of the contractual relationship you or your company has with us and after the end of that relationship for as long as necessary to perform the functions set forth above or to comply with legal obligations. When we have no justifiable business need to process your personal data, we will either delete or anonymize it, or if this is not possible, we will securely store your personal data and isolate it from any further processing until deletion is possible.
Hedge Connection uses administrative, organizational, technical, and physical safeguards to protect your personal data. We will take reasonable precautions to protect personal data in our possession from loss, misuse and unauthorized access, disclosure, alteration and destruction. With respect to information given on the Internet, Hedge Connection uses a variety of proven protections to maintain the security of your online session. This may include the use of firewall barriers, encryption techniques and authentication procedures.
We require our partners to use appropriate security measures.
- USER ACCESS AND CHOICE
You are entitled to ask us for a copy of your personal data, to correct it, erase or restrict its processing, or to ask us to transfer (parts of) this data to other organizations. You also have the right to object to certain processing activities, such as the profiling we may perform for the purposes of direct marketing as discussed above in this Policy. Where we have asked for your consent to process your personal data, you have the right to withdraw this consent, for example, by using the opt-out or unsubscribe functionalities in our communications with you. These rights can be limited where we can demonstrate that we have a legal requirement or legitimate basis to process your personal data, and under such circumstances, we are able to retain your data even if you withdraw your consent.
If you wish to make use of any of these rights, please contact our Data Privacy Officer by e-mail or postal mail at the contact information provided below for the Data Privacy Officer or, as applicable, by using opt-out or unsubscribe functionalities in our communications with you. We will respond to your request within 30 days. If you are not satisfied with how we handle such requests or how we otherwise process your personal data, you can seek to have the matter addressed through the dispute resolution program administered by JAMS; for more information on how to initiate a matter with JAMS, please see https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim.
- LINKED WEBSITES AND OTHER THIRD PARTIES
- CHILDREN’S PRIVACY
The Website and its services are not directed toward children under the age of 14. Hedge Connection will not knowingly request personally identifiable information from anyone under the age of 14, and if Hedge Connection becomes aware that any such information has been collected, Hedge Connection will delete it.
- CHANGES TO THIS POLICY
- CONTACT INFORMATION
If you have any questions regarding this Policy, you can write to Hedge Connection’s Data Privacy Officer, who may be contacted by e-mail at firstname.lastname@example.org, or by postal mail at:
Attn: Data Privacy Officer
19325 Outrider Loop
Bend, OR, 97702