Date Posted and Effective Date: December 31, 2019
Last Modified: December 29, 2022
I. Collection of Personal Information
A. Active Collection and Use:
We collect personal information that you voluntarily provide when you use the Sites. For example, in order to access the Sites, including services and the information available on the Sites, you may be required to register with the Sites and/or provide some personal information, such as your name, email address, phone number, company name, job title, country and/or state information, or other contact information.
B. Aggregate Information and Passive Information Collection:
From time to time, we may collect general, statistical information about the use of the Sites, such as how many visitors visit a specific page on the Sites, how long they stay on that page, and which hyperlinks, if any, they “click” on. We collect this information through the use of “cookies” and similar technologies, which are discussed in greater detail below. Our system may also automatically collect operational information about the technology you use, such as your browser, type of computer, operating systems, internet service providers and the domain name of the websites from which you linked to our Sites. We collect this information in order to determine which areas of the Sites are most popular and to enhance the Sites for visitors. We may also use this information for security purposes, to detect and to block security breaches and to provide you with a safe online environment.
IP Addresses: An IP address is an identifier that is automatically assigned to your computer when you use the Internet. Workiva collects IP addresses for purposes of system administration, to report aggregate information to third parties and to track the use of the Sites. When visitors use our Sites, our servers log the visitors' IP addresses and may derive geographic location information (e.g., country, region) using the IP addresses.
The Sites may also contain electronic images known as web beacons (also referred to as single-pixel gifs) that permit Workiva to count users who have visited those pages and compile other related Site statistics (e.g., recording the popularity of certain Site content and verifying system and server integrity). Web beacons are used to compile aggregated statistics concerning the use of the Sites. Web beacons collect only a limited set of information, including a cookie number, the time and date of a page view, and a description of the page on which the web beacon resides. Web beacons/pixels may also be used by advertising partners to infer the presence of a common user across multiple devices or browsers to provide personalized advertising on devices inferred from browsing patterns.
For a listing of some of the types of cookies utilized for our Sites, please click here or by clicking “Cookie Preferences” at the bottom of our webpages. Your browser may have setting that allows you to indicate a “Do Not Track” preference. Please note that our Sites do not respond to “Do Not Track” signals or other similar mechanisms.
II. Information We Receive from Third Parties
We may receive information about you from other sources, including publicly-available databases or social media sites, and we may combine this information with information we have collected about you from other sources. This helps us to update, expand and analyze our records, assess and identify new customers and potential customer opportunities, and provide products and services that may be of interest to you.
Examples of the types of personal information that may be obtained from public sources or purchased from third parties and combined with information we already have about you (for the purpose of creating more tailored advertising and products), may include:
Purchased marketing data about our customers from third parties
Data and other information available publicly on social media sites
III. Use of Personal Information
We may use information collected via these Sites to:
Improve the content of our Sites and to improve our products and services;
Customize the Sites and the products and services we provide to your preferences;
Communicate with you about our products and services, webinars, events, certifications, promotions, and sweepstakes;
Authenticate your identity for secure handling of Workiva's clients' accounts;
Conduct marketing and perform marketing research and other internal analytics;
Ensure you are no longer contacted in the event you unsubscribe from marketing campaigns;
Market future available products and services, including our software offerings, that may be of interest to you;
Measure your interest in our products and services;
Assess and identify new customers and potential customer opportunities;
Conduct user experience research and administer experience surveys;
Provide webinars, events, certifications, promotions, and sweepstakes, including the management of your registration and participation in such events;
Provide you access to the Workiva Community, including the registration and authentication of your identity to the Workiva Community;
Maintain the security of the Sites and our product and services;
Manage our general business administration, including Site management, accounting, recordkeeping, and legal functions; and
Enforce our policies and comply with applicable law.
We may also use information that does not personally identify you for any purpose, except where we are required to do otherwise under applicable law. We may combine, aggregate, or de-identify any of the information we collect from you with information we may collect from or about you from any other online or offline source and use it for any purpose, including product and service development and improvement activities, except where we are required to do otherwise under applicable law.
We do not use personal information for purposes of automated decision-making that produces legal effects concerning or similarly significantly affects you.
IV. Disclosure of Personal Information
Service Providers. We may disclose your personal information to service providers who provide us with services for our Sites, as well as other products and services, such as general administration, cloud providers, web hosting, data analysis, customer service, infrastructure provision, technology services, email and mail delivery services, legal services, and other similar services. We grant our service providers access to personal information only to the extent needed for them to perform their functions, and we require them to protect the confidentiality and security of such information.
Commercial and Collaboration Partners. We may disclose your personal information to our partners that provide similar products or services so they may promote such products and services for sale in conjunction with Workiva’s products and services. Depending on the choices you have made and the nature of the joint activity, these third parties may contact you regarding Workiva-related products, programs, services, and promotions that may be of interest to you.
At your direction. We may disclose your personal information to other parties with your consent or at your direction.
Other Third Parties. We may disclose certain information collected by third parties to such third parties, such as information collected via cookies, pixels, web server data, and other similar technologies.
Legal and Regulatory. We reserve the right to disclose your personal information as required by law, when we believe disclosure is necessary or appropriate to comply with a regulatory requirement, judicial proceeding, court order, government request, or legal process served on us, or to protect the safety, rights, or property of our customers, the public, Workiva, or others. We have no obligation to notify you of such disclosures, except as required by applicable law.
Aggregate Information. We may disclose information that does not personally identify you for any purpose, except where we are required to do otherwise under applicable law.
V. Links to Other Websites
Protecting the security of your personal information is very important to us. When you transmit personal information from your computer to our servers, your information is protected by both a “firewall” (a combination of computer hardware and software that helps keep unauthorized visitors from accessing information within our computer network) and industry standard encryption. Once we receive your transmission, we will take reasonable precautions to ensure its security on our systems. While we utilize all of our security and data protection preventative measures, the internet is inherently insecure. As a result, while Workiva strives to protect your personal information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online.
Users are required to sign-in to specific secured areas of Workiva Sites, such as the Workiva Community, using a user ID and password. These authenticate the user and are designed to safeguard against unauthorized access and use of a user's account. The user ID and password are used on a secure web page and encrypted when transmitted over the internet.
The safety and security of your information also depends on you. If you have access to password-protected features, never share your password with anyone else, notify us promptly if you believe your password security has been breached, and remember to log off of this site before you leave your computer. Similarly, any personally identifiable information or personally sensitive data that you disclose through online forums hosted on the Sites may be collected and used by others. We recommend caution when giving out personal information to others in these public online forums.
If at any point you suspect or become aware that your password has been stolen or you receive suspicious communication from someone holding themselves out to be a Workiva employee or from a fake website claiming to be affiliated with Workiva, please forward the communication to us or report the incident by email to email@example.com, or in writing to Workiva at Workiva Inc., Attn: Legal, 2900 University Blvd., Ames, Iowa 50010, as soon as possible.
We do not knowingly collect information from children under the age of 16 on the Sites. If you are under the age of 16, please do not provide any personal information to us. If we become aware that we have collected personal information from a child under the age of 16, we will promptly take commercially reasonable efforts to delete such information from our database.
VIII. Data Retention:
We retain your personal information for only as long as is necessary for the purpose for which it was collected. In certain circumstances, we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.
IX. Changes to These Terms:
X. Additional Information for Residents of the European Economic Area (“EEA”), the United Kingdom, and Switzerland
A. Legal Basis for Collection of Personal Information
We process your information for the specific purposes listed above pursuant to a legal basis, including the following:
Compliance with applicable laws or performance of a contract: In specific circumstances, we may need to process your information to comply with a relevant law/regulation or to fulfill our obligations under a contract with you. Where we process your information to meet our legal obligations, you will likely not be permitted to object to this processing activity, but you will usually have the right to access or review this information unless it would impede our legal obligations. Where we process your information to fulfill a contractual obligation to you, you might not be able to object to this processing, or if you do choose to opt-out or object to our processing, it may impact our ability to perform a contractual obligation that you are owed.
Our legitimate interest: We may process your information based on our legitimate interests in communicating with you and managing our interactions with you regarding our products, services, and education opportunities. In addition to the other rights you may have, described below, you have the right to object to such processing of your information. You can register your objection by contacting us at firstname.lastname@example.org.
Your consent: In some cases, at the point at which you provide information, we may ask you for your consent to collect and process your information. If you choose to provide us with your consent, you may later withdraw your consent (or opt-out) by contacting us at email@example.com. Please note that if you withdraw your consent, it will not affect any processing of your information that has already occurred. Where we process your information based on consent, we will provide more detailed information to you at the time when we obtain your consent.
B. Cross-Border Transfers of Personal Information
Workiva is a global business. Personal information may be stored and processed in any country where Workiva has operations or where Workiva engages service providers. In particular, Workiva collects and transfers to the United States personal information pursuant to the legitimate bases detailed above.
Workiva may transfer, access, or store personal information about you outside of the European Economic Area (“EEA”), United Kingdom, Switzerland, or another country that requires legal protections for international data transfers. Those countries, including the United States, may have data protection laws and regulations that are different from those of your country of residence and may not have received a finding of “adequacy” from the European Union under Article 41 of the GDPR. To facilitate transfers of personal information to such countries, Workiva will ensure that an adequate level of protection is provided for the information by using one or more of the following approaches:
Adequacy Decisions: Workiva may transfer personal information to countries that have privacy laws that have been recognized by the country from which the data are transferred as providing similar protections for the data.
Standard Contractual Clauses: Workiva may enter into written agreements with recipients, such as standard contractual clauses approved by the European Commission or other applicable supervisory authority, that require the recipients to provide the same level of protection for the data.
Other Transfer Mechanisms: Workiva may rely on other transfer mechanisms approved by authorities in the country from which the data are transferred.
C. Data Subject Rights
You have the right to the following information regarding our processing of your personal information:
the purposes of the processing;
the categories of personal information concerned;
the recipients or categories of recipients to whom the personal information have been or will be disclosed; and
where possible, the envisaged period for which the personal information will be stored, or, if not possible, the criteria used to determine that period.
This notice is intended to provide all of this information. Any questions about these details may be directed to firstname.lastname@example.org.
You also have the following rights with respect to your personal information:
the right to request access to the personal information that we maintain about you, as well as the right to request rectification of any information that is inaccurate or incomplete;
the right to request a copy of your personal information in electronic format, so that you can transmit the information to third parties, or to request that we directly transfer your personal information to one or more third parties;
the right to object to the processing of your personal information for marketing and other purposes;
the right to erasure of your personal information when it is no longer needed for the purposes for which you provided it, as well as the right to restrict processing of your personal information to certain limited purposes where erasure is not possible; and
the right to lodge a complaint with the supervisory authority where you believe that your rights have been violated.
To exercise any of these rights, please click here or contact us at email@example.com. We will respond to your request within a reasonable timeframe in accordance with applicable law.
D. EU-U.S. and Swiss-U.S. Privacy Shield
Workiva participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal data received from European Union (EU) member countries and Switzerland, respectively, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce’s Privacy Shield List. https://www.privacyshield.gov/list.
Workiva is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Workiva complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Workiva is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Workiva may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) by clicking here.
Under certain conditions, more fully described on the Privacy Shield website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
E. EU Representative
Workiva Netherlands B.V. is Workiva’s EU data protection representative. The privacy representative of Workiva Netherlands B.V. can be reached at the following address: Workiva Netherlands B.V., Attn: Legal, Achtergracht 14, 1017 WP Amsterdam, Netherlands.
XI. Your Privacy Choices & Rights:
You may contact us here to update or correct your personal information and your preferences provided to us through the Site, or opt out of receiving mailings or other communications in which you previously chose to participate. Different programs and services may offer different phone numbers, links, or preference managers that allow you to inform us of your updates and choices, including opting out of particular communications. You may also contact our Privacy team for assistance at firstname.lastname@example.org if you have difficulty finding these tools or otherwise updating your data or preferences. We may need to retain certain personal information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. We will endeavor to comply with your request as soon as reasonably practicable and in accordance with applicable law.
If you no longer wish to receive promotional emails from us on a going-forward basis, you may opt out of receiving such emails by following the “unsubscribe” directions on the emails or by changing your preference settings in the Email Preference Center.
© 2019-2022 Workiva All rights reserved.