Introduction

Appropriately managing and safeguarding personal data is fundamental to the Evident Corporation and its family of companies’ (“We” or “Evident”).

This Privacy Notice applies from 9 January 2025.

This Privacy Notice explains how we collect, use and share information, including your personal data, when it’s collected through this website and/or mobile application, applications, services, websites, sub-sites, widgets, interactive features, forms, mobile site(s) and social media pages offered, owned, or operated by Evident (the “Site(s)”).

If we make changes to this Privacy Notice, we will notify you by revising the Effective Date and, in some cases, we may provide you with more prominent notice (such as sending you a notification or providing you with other disclosures within or in connection with the provision of the Sites). Your access to and use of the Site(s) means you agree to the terms in this Privacy Notice. We encourage you to refer to this Privacy Notice periodically so that you understand our current privacy practices.

This Privacy Notice Explains:

1. Who You Should Contact

In individual cases, the respective affiliate may be solely or jointly responsible with Evident Corporation, our global headquarter. If you have questions relating to a specific jurisdiction we kindly ask you to mention the jurisdiction you are referring to. The entities responsible for managing your personal data are the specific Evident firms listed here.

Contact us within Europe

Attn: Data Protection Officer

Controller: EVIDENT Europe GmbH

Caffamacherreihe 8-10

20355 Hamburg

Germany

Global-privacy@evidentscientific.com

Contact us in Japan

Japan-privacy@evidentscientific.com

Contact us in Mexico, Canada or the United States

Americas-privacy@evidentscientific.com

Contact us in Singapore, Korea, Australia or India

Apac-privacy@evidentscientific.com

2. Types Of Information We Collect And Use

Evident collects certain information, including personal data, from and about you.

The term “personal data” means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to a natural person (you). Evident’ goal is to limit the information we collect to the information needed to support our business.

Summary of the categories of personal data we may collect, where we get it, why we collect it, and with whom we may share it:

Basic Personal Identification: such as salutation, first/last name, address, telephone number, email address, fax number, title, and company name, department and/or title.

User Account Information, such as usernames and passwords used to access your account, event/seminar registrations, downloads, subscriptions

Financial Information, such as credit card number, bank account number and/or billing address depending on circumstances

Device Information, such as the type of device you use to access the site(s), your device identification number, IP address or mobile operating system, browser, geo location data (e.g. GPS coordinates – depending on whether switched on), GUID

Browsing Information: Browsing Time, cookie Information, website history, preferences, browser or app information, such as what site you came from and what site you visit when you leave the site(s) or how often you use it

Business Contact Information, supplier master data, order information (order history, invoice information), billing address, postal address and frequency of contact

Marketing Data: marketing campaign data, newsletter data (Click rates, opening rates etc.), preferences

Compliance Case Handling: personal data depends on circumstances of the incident reported.

3. Why We Collect And Use Information

Below are examples of ways we use your information collected:

4. Additional Ways We May Collect And Share Your Information

In addition to the methods enumerated above, Evident may collect and share information, including your personal data, through the following methods:

(a) Information from other sources

• We engage with current and prospective customers through multiple internet marketing channels and social media services (e.g., Facebook, Instagram, X.com, LinkedIN). If you contact us on one of our internet marketing channels, request customer service via social media or otherwise direct us to communicate with you via social media, we may contact you via direct message or use other internal or social media tools to interact with you. In these instances, your interactions with us are governed by this Privacy Notice as well as the privacy notice of the social media platform you use. By accessing or logging into our Sites or internet marketing channels via a social media service, any information you provide to us may also become accessible to that service, subject to that service’s privacy notice. For additional information and more details on how you can manage the information provided to us by these social media services, please review the privacy settings applicable to your account with the applicable social media service. Please consult the privacy notice of such services for additional information.

(b) Business Transfers

• Unless otherwise prohibited by law, if Evident merges with, acquires or is acquired by another business entity, it may share your information with any successors to all or part of its business. This may include an asset sale, corporate reorganization or other change of control. If Evident or any of its subsidiaries is sold to or are otherwise acquired by a third party, all Evident’ data assets will become the property of the acquiring party. Such a party will be subject to the consent(s), opt-outs or other customer conditions on data. A change in data ownership may or may not include a notice on the Site(s).

(c) Third Party Marketing

• Unless prohibited by law, including the European Privacy laws, we may share your information with third parties that provide products or services we believe may interest you. These third parties may use your information for their own marketing purposes or the marketing purposes of others. This may include the delivery of internet-based advertising.

5. Recipient Of Your Personal Data

We share certain data between our Evident Group companies. The specific Evident firms are listed here.

We may also share personal data with third parties such as: IT Service Provider, Consultancy Firm, Document destruction, Public Institutions, Supplier and Others such as third-party marketers; our business partners (including third parties that provide products and services related to our business, such as contract-based distributors of Evident products); and any other person at your consent or direction.

If your data is transferred to countries outside the European Economic Area “EEA” which may have different data protection standards than your country of residence, please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavor to take reasonable measures to keep up an adequate level of data protection also when sharing your personal data with such countries.

6. How Long We Will Keep Your Personal Data

We will retain your Personal Data only as long as necessary to provide you with the products, services and programs you request, our essential business purposes, such as maintaining the performance of the services and programs, making data-driven business decisions about new features and offerings, complying with our legal obligations and resolving disputes. When we have no justifiable business need to process your Personal Data, we will either delete or anonymize it.

The criteria, used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide services or programs to you (for example, for as long as you have a profile/account with us or keep using the services/programs, or have a contract with us);
• Whether there is a legal obligation to which we are subject; or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statues of limitations, litigation or regulatory investigations).

7. Our Use Of Information Technology

This section describes the various types of technologies we may use when you interact with our Site(s), and your choices regarding those technologies:

(a) Cookies, Pixel Tags, and Flash Cookies

• We collect certain information, including personal data, by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs. Cookies are small text files that websites send to your computer or other connected device to uniquely identify your browser or to store information or settings in your browser. Cookies allow us to recognize when you return to the Site(s). They also help us provide a customized experience and enable us to detect certain kinds of fraud. The types of technology used by Evident may change over time as technology evolves. Some of these technologies are essential for the provision of the Site(s), such as account access/authentication. To learn more about the cookies we use, Cookie Notice.

(b) Interest-Based or Online Behavioral Advertising

• Evident uses third-party advertising companies to serve interest-based advertisements. These companies compile information from various online sources to match user profiles with ads we believe will be most relevant, interesting and timely based on that users profile.

(c) Social Network & New Tech Advertising Programs

• Evident has relationships with several social networks. These companies have specific interest-based ads programs that match people that have shown an interest in Evident through our Site(s) or other services within their profiles (such as on Facebook and LinkedIN). This matching allows us to deliver relevant, interest-based ads on those companies’ networks.

8. Security

Evident is committed to maintaining appropriate organizational, technical, and physical controls to protect the personal data entrusted to us. These controls protect personal data from anticipated threats and hazards as well as unauthorized access and use. Evident will strive to provide security that is proportional to the sensitivity of the personal data being protected, with the greatest effort being focused on protecting sensitive personal data, like financial or medical data, that could result in substantial harm or inconvenience if it got into the wrong hands.

9. Promotional Emails

If we send you any promotional emails, and you no longer would like to receive such emails, please follow the “unsubscribe” instructions on those emails, if available. Your email address will be removed from our marketing list. Please allow us a reasonable period of time in order to satisfy your request.

We make our newsletter as relevant as possible. Every email from our Marketing Automation Platform “MAP” includes tracking pixels that help us see if you've opened the email and if you've clicked any links inside it. These actions are recorded in our MAP platforms, like Optimizely and Pardot. While we can't tell if you've "read" the email, we can see if it was opened. We use this data to build a profile of your interests and tailor the newsletter accordingly.

10. Information Applicable To Residents Of the United States

f you are in United States, you have various rights in relation to the processing of your Personal Data. Depending on the jurisdiction in which you are a resident, you may have the following rights subject to the exceptions allowed by law in your respective state:

• Right to Know / Data Portability: the right to know or be provided with the categories and specific pieces of Personal Data Evident has collected about you, the categories of sources from which the Personal Data is collected, the business purpose for collecting the Personal Data, and the categories of third parties to whom Evident has disclosed that Personal Data.
• Correction: the right to correct inaccurate or obsolete Personal Data that Evident may maintain about you.
• Deletion: the right to delete the Personal Data Evident maintains about you under certain circumstances.
• Non-discrimination:  the right not to be discriminated against  on the basis of you exercising any of these rights.
• Limitation regarding the use and disclosure of Sensitive Personal Data: the right to limit the use and disclosure of Sensitive Personal Data. Evident does not use your Sensitive Personal Data in any matter that requires the right to limit because Evident does not use or disclose Sensitive Personal Data for purposes of inferring characteristics about you, or in any way that would require us to provide a right to limit under applicable law.
• Right to Opt-Out of Selling or Sharing of your Personal Data: the right to opt out of the sale or sharing of your Personal Data. Evident does not “sell” or “share” your Personal Data. However, we may collect Personal Data through cookies managed by third parties for the purposes of engagement analytics, target marketing, and maintaining and improving our website as described in more detail in our Cookie Notice. . You may turn off such cookies via the cookies preference center (Manage Cookies) and can learn more about our use of cookies by visiting our Cookie Notice.

If you are a California resident and are interested in exercising any of the above-listed rights, you can do so by:

• emailing us at Americas-privacy@evidentscientific.com  with the subject line “California Privacy Rights Request;” or
• calling us at 800 461 9330 (toll free) and asking to exercise your California privacy rights.

Evident may require proof of California residence before responding to any request made under this section. You may authorize another person (your “agent”) to submit a request on your behalf by emailing Americas-privacy@evidentscientific.com. Shortly after you (or your agent) submit a request, we will contact you (via email at the email address provided during submission of your request) with instructions on how to verify the request before we fulfill it. We will verify your identity by asking you to log in to your account if you have one with us. Or if you do not, we may ask for your email address, the order number of a recent order you placed with us or the last four digits of a credit or debit card used on our Site(s). We will aim to complete your requests as soon as reasonably practicable and consistent with any applicable laws.

If you have an account with us, you may also see certain Personal Data (such as certain profile and transaction information) directly through your account profile page after logging in to a Site. Please note that changes you make on your account profile page through one of our Sites may not always be reflected on other Sites operated by us.

Disclosure for Colorado, Connecticut, Oregon, Texas, Utah, and Virginia Consumers

Evident does not sell or share Personal Data to third parties for their own use or for value; however, we may share or process Personal Data with our affiliates and trusted partners for purposes of targeted advertising or to  perform services or functions on our behalf. In these arrangements with third parties, use of the information we share is limited by policies, contracts, or similar restrictions

(b) Shine the Light Law - Direct Marketing

You have the right to request information from Evident once per calendar year regarding the manner in which Evident shares certain categories of your Personal Data with third parties, for the third parties' direct marketing purposes. California Civil Code § 1798.83 provides you with the right to submit a request to Evident at its designated address and receive the following information:

• The categories of Personal Data Evident’ disclosed to third parties for the third parties' direct marketing purposes during the preceding calendar year;
• The names and addresses of third parties that received such information; and
• If the nature of a third party's business cannot be reasonably determined from the third party's name, examples of the products or services marketed.

You are entitled to receive a copy of this information in a standardized format and the information will not be specific to you individually. Evident’ designated email address for such a request is  Global-privacy@evidentscientific.com.

To learn more about managing your privacy and to know your choices concerning interest-based ads, you may visit the Network Advertising Initiative's opt-out page at  http://www.networkadvertising.org/managing/opt_out.asp  or  www.aboutads.info/choices.

11. Personal Data Subject To European Privacy Laws

If you are located in the European Union, the United Kingdom, Switzerland and/or your personal data is otherwise subject to the General Data Protection Regulation or comparable European Data Protection Legislation (collectively referred to as “European Privacy Laws”), this section provides additional information about your rights and how Evident processes your personal data.

Controller and Data Protection Officer

Attn: Data Protection Officer

Controller: EVIDENT Europe GmbH “Evident”

Caffamacherreihe 8-10

20355 Hamburg

Germany

Global-privacy@evidentscientific.com

For written inquiries to the Evident Data Protection Officer, the above address with the addition of "c/o Data Protection EMEA" and the following e-mail address shall apply:  Global-privacy@evidentscientific.com

Evident is the controller of personal data submitted by you or otherwise collected when you use the Site(s). We process such information within the Site(s) solely in the processor’s role and, depending on the scope of your activity, you may be the data controller.

(a) Rights to Control Your Personal Data

• You may have certain rights with regard to your personal data under European Privacy Laws. If you would like to request a copy of your personal data being held by us, request that your personal data is deleted, request to update and/or correct your personal data, or request that we provide a copy of your personal data to another data controller, please contact us. We will aim to respond to your request within one calendar month of receipt of your request. Where we are unable to do so within the calendar month, we will notify you of the soonest practicable time within which we can respond to your request (and within three months from the date of your request). There are certain exemptions and restrictions of these rights under the European Privacy Laws that enable personal data to be retained, processed or withheld from access and we will inform you of these restrictions if they apply. We use your Personal Data as described in the chart above.

(b) Sharing your personal data

• We share your personal data with third parties to help us use your personal data, as described in the Privacy Notice.

(c) Contact us

• You may access, download, change, or modify your personal data by contacting us. You may also exercise your right to prevent us from sharing your personal data at any time by contacting us as described above in the “Who You Should Contact” section.

(d) Submit a Complaint to a Supervisory Authority

• You have the right at all times to submit a complaint to a data protection supervisory authority, in case you feel that the processing of your personal data, as described in this Notice, infringes with the law. You may find a list of the supervisory data protection authorities in Europe here:  https://edpb.europa.eu/about-edpb/board/members_en.

(e) Legal Basis

Evident has the following legal basis for processing your Personal Data:

(f) Marketing emails

We will also send you marketing emails if we have received your email in connection with the sale of products or the provision of a service. In this case, you can also object to receiving marketing messages at any time, for example, by telling us when you receive your contact details, or by clicking on the relevant link in a marketing email. The legal basis in this case is art. 6 (1) (f) GDPR and Sec. 7 (3) of the German Act against Unfair Competition (UWG), as we have a legitimate interest in sending you direct advertising for our products and services that is not outweighed by your interests.

12. Personal Data subject to Japanese Privacy Laws

Please refer to the “Supplementary Information on the Handling of Personal Data subject to the Act on the Protection of Personal Data of Japan Handling of Personal Data” of Evident Group linked below, to the extent not covered in this Privacy Notice, regarding the matters related to our handling of your Personal Data (including procedures related to requests for disclosure, correction, deletion, etc. of Personal Data based on the Act on the Protection of Personal Data of Japan).

Handling of Personal Data: Privacy | Evident (evidentscientific.com)

The Personal Data handling business operators in Japan are as follows:

13. Personal Data Subject to Personal Information Protection Act of Republic of Korea

If you are a citizen of the Republic of Korea and/or your personal data is otherwise subject to Personal Data Protection Act, Credit Information Use and Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection or other comparable Korean Data Protection Legislation (collectively referred to as “PIPA Laws”), this section provides additional information about your rights and how to processes your personal data.

(a) Rights to Control Your Personal Data

You may have the following rights in relation to the processing of his or her own Personal Data.

• 1.The right to be informed of the processing of such Personal Data;
• 2.The right to determine whether or not to consent and the scope of consent regarding the processing of such Personal Data;
• 3.The right to confirm whether or not Personal Data is being processed and to request access (including the provision of copies; hereinafter the same applies) to such Personal Data;
• 4.The right to suspend the processing of, and to request correction, deletion, and destruction of such Personal Data;
• 5.The right to appropriate redress for any damage arising out of the processing of such Personal Data through a prompt and fair procedure. If you would like to request a copy of your personal data being held by us, request that your personal data is deleted, request to update and/or correct your personal data, or request that we provide a copy of your personal data to another data controller, please contact us. We will respond to your request within ten business days upon the receipt of your request. We are entitled to limit or deny your request when your request is prohibited or limited by PIPA Laws; or when your request may cause damage to the life or body of a third party, or unjustified infringement of property and other interests of any other person. We will notify you the causes within ten business days.

(b) Sharing Your Personal Data

We do not share your personal data unless you give us a prior consent for marketing and/or promotional purposes.

(c) Destruction of Data

Evident destroys your personal data without delay after the purpose of collecting and using Personal Data is achieved or after the retention period expires. However, in the case of Personal Data that needs to be preserved in accordance with relevant laws and internal regulations, it is moved to a separate storage space after the purpose of collection and use is achieved, and it is stored and destroyed according to each retention basis and period. Your personal data shall not be used for any purpose other than the purpose corresponding to each retention basis. When destroying Personal Data, hard copies containing any personal data shall be shredded, and Personal Data stored in electronic file form shall be completely deleted using technical methods to prevent any recovery and reproduction.

(d) Contact Us

You may access, download, change, or modify your personal data by contacting us. Please email us at: global-privacy@evidentscientific.com

14. Personal Data Subject To Singapore Law

You may contact our data protection officer for executing your rights in line with Part 5 of the Personal Data Protection Act 2012 at: apac-privacy@evidentscientific.com.

15. Personal Data Subject To Mexican Law

You can contact our data protection officer responsible for Mexico under Americas-privacy@evidentscientifc.com – please mention that your request relates to Mexico.

16. PERSONAL DATA SUJECT TO QUEBEC LAW

You can contact our data protection officer responsible for Quebec under Americas-privacy@evidentscientifc.com – please mention that your request relates to Quebec Law 25.

17. Personal Data Subject to Australian Law

For the Privacy Statement for Australia, please click here.

18. Privacy Statement for social media

For the Privacy Statement for Social media, please click here.