Our privacy notice is also available in German, Slovak and Portuguese.
This Data Privacy Notice explains how Capco uses your personal data and which rights and options you have in this respect. It applies to personal data that you provide to Capco or which is derived from such data as part of our business relationship with you or when you visit our website.
For those interested in a career with Capco, we have developed a specific Job Candidate Privacy Notice which should be read in addition to this notice and can also be found when you create or access you on-line account in connection with a job application.
How we use information that is gathered by cookies or other web-tracking or analytics technologies is explained in our Cookie Notice.
This notice applies in all countries throughout our global operation.
Capco’s website is not directed at nor targeted at children. No one who has not reached the age of thirteen may use the website unless supervised by an adult. By accessing this website you represent and warrant that you are 13 years of age or older. If you believe that a child under 13 may have provided us their personal data, please contact us at: email@example.com
The Capco entity operating in the country you engage us in will typically be the responsible data controller for any personal data you provide to us in connection with our business relationship. A full list of Capco Group companies across the globe can be found here.
You can engage with us through social media websites or through features on this website that integrate with social media sites. When you engage with us through social media sites, you may allow us to have access to certain information from your social media profile based upon your privacy preference settings on such platform.
If you are dissatisfied with any aspect of our Data Privacy Notice, you may have legal rights and, where relevant, we have described these in the ‘Your Data Protection Rights’ section below.
We may collect and process the following categories of personal data:
We will process your personal data for the following purposes ("Permitted Purposes"):
Where you have expressly given us your consent, we may also process your personal data for the following purposes:
With regard to marketing-related types of communication (i.e. emails and phone calls), we will, where legally required, only provide you with such information after you have opted in and provide you the opportunity to opt out if you do not want to receive further marketing-related types of communication from us.
We will not use your personal data for taking any automated decisions affecting you or creating profiles other than described above or as explained in our Job Candidate Privacy Notice.
The legal basis for processing your personal data may differ depending on applicable local laws, but generally we consider that our legitimate interests justify the processing; we find such interests to be justified considering that the data is limited to browsing activities related to what is considered business or professional related (our website does not offer any content directed to individual consumers, nor any content which might be used for any inferences about your private life habits or interests). The information that we may receive directly from you is completely voluntary and at your option. Where consent is required specifically, we will obtain consent before processing.
We will typically collect your personal data directly from you when you interact with us, e.g. when you visit our website, join our on-line events and presentations, communicate with us in relation to our products and services, submit an order, register to receive our newsletter or participate in our customer surveys. We do not obtain personal data from third parties except where you have utilised the services of a recruitment agency, where applicable. In such cases, you will be informed about this in accordance with applicable law.
Capco is a globally active enterprise. In the course of our business activities, we may transfer your personal data to recipients in other countries, including countries where we operate outside of the European Economic Area (“third countries”), in which applicable laws may not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data. Typically, this will be by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by data controllers in the European Economic Area to data controllers and processors in jurisdictions without adequate data protection laws. You may contact us anytime using the contact details below if you would like further information on such safeguards.
We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data from unauthorized access or intrusion. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will strictly comply with applicable laws and regulations regarding the confidentiality and security of personal data.
We may share your personal data as follows:
We will hold your personal data for as long as necessary to provide the services, products or information you have requested, to administer your business relationship with us and to comply with our legal obligations, resolving disputes and enforcing our policies.
Where your data is processed in accordance with a data processing agreement between us, we will comply with all specified data deletion requirements.
If you have asked us not to communicate with you, we will keep a note of this as long necessary to comply with your request.
Your rights may differ depending on applicable data protection local laws. We respect your right to be informed, access, correct, request deletion or request restriction, portability, objection, and rights in relation to automated decision making and profiling, in our usage of your personal information as may be required under applicable law. We also take steps to ensure that the personal information we collect is accurate and up to date. Subject to such laws, you may have the following rights:
Right to opt out
Capco respects your privacy considerations and hence provides an option to you, to not provide the data or information sought to be collected.
Further, you can also withdraw your consent which was earlier given to Capco (which shall not affect the lawfulness of processing based on consent before its withdrawal). Please note you can always unsubscribe to marketing communication through clicking unsubscribe available in the marketing communication(s) you receive.
If you are a resident of the US State of California, more information about applicable rights can be accessed here.
This Data Privacy Notice was last updated on 2 March 2023 and specifically complies with the transparency/notification requirements of the GDPR, those of the CCPA and all applicable data privacy laws. From time to time, we may make change or amend it as required to reflect any changes to the way in which we use your personal data or changing legal requirements. So, you may wish to check back from time to time.
If you have any questions, comments, complaints or suggestions in relation to this notice, require an alternative format copy, or any other concerns about the way in which we process information about you, please contact our Data Protection Officer at: firstname.lastname@example.org.
You may also have a right to make a complaint to your local data protection supervisory authority:
Capco’s global management is based in the UK, where the supervisory authority is the Information Commissioner’s Office who can be contacted in the following ways:
Information Commissioner’s Office
Cheshire, United Kingdom
0303 123 1113 from the UK or +44 1625 545700 from elsewhere
Capco’s main establishment in the European Union is in Frankfurt, Germany, where the supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information who can be contacted in the following ways:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
06 11 14 080 from Germany or +49 611 14 080 from elsewhere
Where appropriate, you can also raise a complaint with an EU supervisory authority which is based in the country where:
The current list of EU data protection supervisory authorities can be accessed from here.
Details of how to raise a privacy complaint relating to our personal data processing in Canada can be found here.
Details of how to raise a privacy complaint relating to our personal data processing in Brazil can be found here.
For complaints relating to our personal data processing in Hong Kong, you can contact the Privacy Commissioner for Personal Data in the following ways:
Privacy Commissioner for Personal Data
13/F, Sunlight Tower
248 Queen’s Road East
For complaints relating to our personal data processing in Singapore, you can contact the Singapore Personal Data Protection Commission in the following ways:
Personal Data Protection Commission
10 Pasir Panjang Road
#03-01 Mapletree Business City
Attn: Officer-in-charge, Enforcement