Privacy Policy
This Privacy Policy relates to AVEVA Group Limited and the AVEVA group of companies (“AVEVA” or “we”) globally. An up to date list of AVEVA companies can be found in AVEVA’s Annual Report.
What is this document and why should you read it?
This Policy will explain to you how we collect, use and share your personal information for the purpose of operating our websites, operating on our business and managing our relationships with our customers, partners, suppliers. It will also inform you of your rights relating to your personal information. When we use the term “personal information” we mean any information that relates to an identifiable natural person. A name, address and contact details are all examples of personal information if they identify you or another person.
If you provide us with personal information about other persons, such as family, friends or other associates, you must seek their permissions and inform them in the first instance and share a copy of this Policy with them.
If you are a job applicant who has provided your personal information to us for recruitment purposes or an employee, contractor or other individual who is working or has previously worked under a contracting arrangement with us, we would have previously provided you a copy of our relevant privacy notice or policy. If you do not have a copy, please contact us at dataprotection@AVEVA.com to obtain one.
You can read, print and save this whole Privacy Policy or click on the links below to see specific information about:
Who we are and how you can contact us
What personal information we collect about you
What we use your personal information for
AVEVA’s use of your personal information in our licence compliance technology
When we need your consent to use your personal information
Your obligation to provide your personal information
Your rights to know what personal information we hold and to control how we use it
How we use your personal information for marketing
When we will share your personal information with others
How we keep your personal information safe
When we will send your personal information to other countries
How long we keep your personal information
How you can make a complaint
How we keep this privacy policy up to date
Annex – AVEVA’s suppliers
Who we are and how you can contact us
This Privacy Policy relates to AVEVA Group Limited and the AVEVA group of companies (“AVEVA” or “we”). An up to date list of AVEVA companies can be found in AVEVA’s Annual Report, and is available on request.
AVEVA would usually act as the controller for data collected on you – this is a legal term meaning that we are responsible for deciding how we use your personal information.
To update your marketing preferences or unsubscribe from our mailing list visit our Communication Preference Centre page at https://engage.aveva.com/preference-center.html.
For data protection related queries including questions about use of your personal information, please contact us via email at dataprotection@AVEVA.com or via our postal address at AVEVA Group Limited, High Cross, Madingley Road, Cambridge, CB3 0HB.
What personal information we collect about you
We collect:
- personal information when you visit our website. There are several ways in which you may share your personal information with us via our website or otherwise. You might complete the ‘Contact Us’ Form on our website, subscribe to or comment on our blog, register for one of our events, use our helpdesk or support, request content, enrol on “AVEVA Experience” cloud based training or use the AVEVA “Speak Up” Portal to raise a concern.
- When you visit our website for the first time, you will be presented with a cookie banner which allows you to accept or decline cookies. The cookies may store or retrieve information on your browser. This information might be about you, your preferences or your device. To learn more about our use of cookies, please see our Cookie Policy.
- The personal information that you provide to us may include your name, address, e-mail address or other online identifier, physical address, internet protocol address, MAC address, employer, job role and phone number your login information (where applicable e.g. with “AVEVA Experience”), browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, as well as details of how you navigated our website, what pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), geolocation, sensory data, such as audio information for recorded technical support interactions, and any phone number or email address used to contact our customer service department.
- personal information that our customers business partners provide to us. When our customer purchase our products or services or our business partners communicate with us in the regular course of business, the personal information that representatives of our customers and business partners provide to us may include a name, organisational details affiliated with an individual including their office address, e-mail address, phone number, job-related information (such as job title and department) and well as geographic and technical data (including IP address and/or MAC address) relating to use of our software and products. This can include personal information that is utilised within our products and services i.e. populating details of project teams within an AVEVA software solution. You or your employer may also provide us with personal information about you in providing licensing and account information, or registering you for events.
- personal information that we receive from third parties. Where we work with other businesses, they may collect personal information about you which they will share with us. For example, we may have your name and contact details passed on to us by third parties that we work with, such as our prospective customers, partners, suppliers, marketing partners, industry publications or content syndication partners. We may also receive in such contexts professional or employment-related information on you, and inferences drawn from other personal information.
- personal information relating to your use of our products and when you interact with AVEVA Support Sites. AVEVA Support Sites refer to our AVEVA Connect portal, GCS Flex portal, AVEVA’s Knowledge & Support Center website, OSIsoft Customer and Partner portals, our software support sites and our other websites which require you to log in with your account details. We collect personal information in the context of your interactions with AVEVA Support Sites when you create an account and log in to your account, and the choices that you make, including your privacy settings and the products and features that you use. We will collect your details, such as your name, email address, job-related information (such as job title, department, company), username, authentication data and hostname of the computer that is used to access our products and services as well as information about usage of the products and services. In certain instances, this information is used to detect the installation or use of illegal copies of AVEVA software via a transfer of this personal information in a protected format to assist us in our licence compliance efforts. For more details, please see AVEVA’s use of your personal information in our licence compliance technology.
- personal information relating to your use of our professional services and other support services. Where you or your company contact us in the context of accessing our professional services (such as support relating to any product implementation, configuration, custom development, or training) and our support services (such as product technical support, solution support, resident on-site services, systems and software monitoring services, service continuity support, incident management support, training, and customer success management), we may collect your details, such as your name, email address, job-related information (such as job title, department, company), phone numbers and details of the services required.
- personal information in the context of goods and services that we purchase. Where you or your company provide goods and services to AVEVA, we will collect your details, such as your name, email address, job-related information (such as job title, department, company), phone numbers and all other information incidental to the goods and services provided to AVEVA. In some case, the data collected may include sensitive personal information, e.g. we may collect your health and medical data where these are required to assess your suitability for visiting our customer’s facilities.
AVEVA’s suite of product offerings include our cloud solutions which have cloud storage capabilities. While AVEVA’s cloud offerings are capable of hosting personal information, AVEVA does not collect or use the hosted data for our own purposes, and we do not determine how such personal information is processed.
What we use your personal information for
We use your personal data in the following ways:
- personal information that you provide to us when you visit our website is used to:
- provide you with the information, products and services that you request from us;
- provide you with marketing information in accordance with your marketing preferences (see How we use your personal information for marketing for further details);
- manage and administer our business;
- review and improve our products and services.
- personal information about your use of our website is used to:
- administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to make suggestions and recommendations to you or other website users about products or services that may interest you or them where you have confirmed that you would like to be contacted in this regard;
- to improve our website to ensure that content is presented in the most effective manner for you and for your computer or mobile device;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.
- personal information that our customers provide to us is used to:
- notify you about changes to the AVEVA Support Site; and
- ensure that content in the AVEVA Support Site is presented in the most effective manner for you;
- provide you with the information, products and services that you request from us;
- deliver our products and services, which includes updating, securing and troubleshooting, as well as providing support. It also includes sharing data, when it is required to provide the service or carry out the transactions you request;
- manage and administer our business;
- compliance with our legal obligations;
- review and improve our products and services.
- provide you with marketing information in accordance with your marketing preferences (see How we use your personal information for marketing for further details).
- personal information about your use of our products may be used to:
- ensure that the licensing terms for the product are being complied with;
- improve our software and services on an ongoing basis;
- for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to make suggestions and recommendations to you about products or services that may interest you or them where you have confirmed that you would like to be contacted in this regard;
- to allow you to participate in interactive features of our service, when you choose to do so;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.
- personal information that we receive from other third parties is used, or combined with the personal information that you provide to us and used, for the purposes described above, as well as to manage our relationships with third parties such as our prospective customers, partners, suppliers, or marketing partners, industry publications or content syndication partners.
- personal information that we receive in the context of AVEVA’s relationship with its suppliers is used for our contract administration, supplier relationship management and receipt of services provided to AVEVA.
- Please note:
- We do not and will not sell your personal information. We do not offer financial incentives, including price or service differences, in exchange for the collection, retention, sale or sharing of your personal information. However, we may allow any personal data to be used by third parties for their own marketing purposes if you explicitly request or provide consent for us to do so, such as at a conference when you direct us to share your personal information with the conference organiser or our business partner.
We may need to share your personal information in some circumstances. For details, please refer to the section on When we will share your personal information with others.
- However, like many companies, we use advertising services that try to tailor online ads to your interests based on information collected via cookies and similar technologies about your online activity. This is called interest-based advertising. You can opt out of the use of cookies by disabling certain cookies. You will need to set your preferences from each device and each web browser from which you wish to opt out. To learn more about our use of cookies, please see our Cookie Policy.
- We will not use your personal information to make any automated decisions affecting you or use your personal information for profiling purposes.
AVEVA’s use of your personal information in our licence compliance technology
AVEVA takes all legal steps to eliminate piracy of our software products and to protect our intellectual property rights. In this context, AVEVA’s software may utilise various technologies, such as a security mechanism that can detect the installation or use of illegal copies of the software, and collect and transmit data about those illegal copies (the “AVEVA Licence Compliance Software”).
If AVEVA’s software is illegally installed or used, data (including limited categories of personal information) of the affiliated user accounts may be collected and processed by AVEVA in the course of carrying out its compliance activities. This data is transferred in a pseudonymised format so that, wherever possible, any personal information transferred does not allow for the identification of an individual person by AVEVA personnel via the AVEVA Licence Compliance Software. Our compliance teams will use this information combined with other information we have on record to confirm the details of the corporate entity together with a rough geographic region where the infringing incident has occurred. AVEVA uses this functionality to pursue the legitimate interest of protecting its business assets and apprehending parties that violate such rights.
When we need your consent to use your personal information
Whilst we always want you to be aware of how we are using your personal information, this does not necessarily mean that we are required to ask for your explicit consent before we can use it. In the day to day running of our business we may use your personal information without asking for your explicit consent because:
- we need to use your personal information for our own legitimate purposes (such as the administration and management of our business and the improvement of our services) and our doing so will not unduly interfere with your privacy rights;
- we have legitimate purposes or valid reasons, you are aware of our reasons for collecting your personal information and you have voluntarily provided it to us;
- we need to comply with our legal obligations;
- we are entering into and carrying out our obligations under a contract with you.
If we require your consent to process your personal information or, as may be the case, in exceptional circumstances, wish to use your personal information for a different purpose than the one for which it was originally collected, we will contact you to explain how we wish to use your data and obtain your consent to use your personal information for the relevant purposes as required. You are not required to give consent just because we ask for it. If you do give consent you can change your mind and withdraw it at a later date.
Please refer to the section on How we use your personal information for marketing for further information on our marketing practices in this regard.
Your obligation to provide your personal information
You are not under a legal obligation to provide us with any of your personal information but please note that if you elect not to provide us with your personal information we may be unable to provide our products or services to you.
Your rights to know what personal information we hold and to control how we use it
Your rights in connection with your personal information vary from country to country. In some countries, you have a legal right to know what personal information we hold about you - this is called the right of subject access. You can exercise this right by sending us a written request at any time. Please mark your letter “Subject Access Request” and send it to us by post using the following contact details:
FAO: Data Protection Officer
Subject Access Request
AVEVA Group Limited
High Cross, Madingley Road,
Cambridge, CB3 0HB
or email us at dataprotection@aveva.com.with the subject heading “Subject Access Request”
Subject to certain exceptions, you also have rights to:
- object to your personal information being used for marketing purposes (see How we use your personal information for marketing for further details);
- object to decisions being made about you by automated means or to your personal information being used for profiling purposes;
- object to our using your personal information in ways that may cause you damage or distress;
- have inaccurate personal information corrected, blocked or erased;
- restrict our use of your personal information;
- require that we delete your personal information;
- require that we provide you, or anyone that you nominate, with a copy of any personal information you have given us in a structured electronic form, such as a CSV file.
AVEVA will not discriminate against you for exercising any of these rights, in accordance with your rights under the CCPA. To exercise your rights, contact us by emailing dataprotection@aveva.com To opt out of the use of cookies on our sites for interest-based advertising purposes, follow the instructions above.
We will acknowledge receipt of your request within 10 business days, and provide a substantive response within 45 calendar days, or inform you of the reason and extension period (up to 90 days) in writing.
How we use your personal information for marketing
We may use personal information your provide to us to send you communications about our products or services that we feel you may be interested in and will add your details to our marketing database if:
- you make an enquiry about our products or services;
- you attend an industry related event;
- you buy our products or services;
- you have told a third party that you would like them to pass us your contact details so that we can send you updates about our products or services;
- you have registered an account on our AVEVA Support Sites.
- you have consented to receiving marketing communications on our website via https://www.aveva.com/en/contact/
This may include marketing relating to products or services offered by other companies within AVEVA that we think you may be interested in. We may send you marketing communications by email or post.
You can ask us to only send you marketing communications by particular methods (for example, you may be happy to receive emails from us but not post), about specific subjects (for example about specific portfolio areas or industry specific information) or you may ask us not to send you any marketing communications at all.
You can check and update your current marketing preferences at any time by logging into your account, by accessing your specified profile link provided in our marketing communications or by using the “Contact Us” form at https://www.aveva.com/en/Contact/.
We do not share personal information with third parties for the third parties’ direct marketing purposes except if you explicitly request or provide consent for us to do so, such as at a conference when you direct us to share your personal information with the conference organiser or our business partner.
If you confirm that you would like to be contacted with further information regarding our products and services we will add your details to our marketing database and a profile regarding your interaction with our website and content will be created.
Once you are added to our marketing database we will update your profile with information regarding your interaction with our website, online portals (including social media) and regarding the products or services in which you have shown a particular interest. Further interactions with our website will then be linked to this account so we can better tailor our correspondences with the interest that you have shown in AVEVA and our products and services and provide further information on products and services that are likely to be of interest to you.
This information is used to assess your profile objectively to consider whether you might be interested in purchasing new or further AVEVA products and/or services. If we think this is likely, a member of the AVEVA team will contact you to take things forward in this regard.
How we keep your personal information safe
We take every care to ensure that your personal information is kept secure. The security measures we take include:
- only storing your personal information on our secure servers, or in other secure locations, including Cloud storage;
- ensuring that our staff receive regular data security awareness training
- keeping paper records to a minimum and ensuring that those which we do have, are stored in locked filing cabinets on our office premises;
- maintaining up to date system security features to minimise the risk of unauthorised access to our systems;
- Requiring third parties to respect the security of your data and to treat it in accordance with the law.
Please remember that you are responsible for keeping your passwords secure. If we have given you (or you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. Please do not to share your passwords with anyone.
Sending information via the internet is not always secure. While we do our best to protect your personal information, we cannot always guarantee the security of data sent to our website. In this regard, please note that you send us personal information at your own risk. We will nonetheless use strict procedures and security features (some of which are described above) to try to prevent unauthorised access.
Storage of your personal information
We may store your personal information using AVEVA’s own secure servers or other internally hosted technology. Your personal information may also be stored by third parties we work with, via cloud services or other technology, to support AVEVA’s business operations.
These third parties do not use or have access to your personal information other than for Cloud storage and retrieval, and AVEVA requires such parties to employ at least the same level of security that we use to protect your personal information.
When we will send your personal information to other countries
As AVEVA is a global company operating in more than 30 countries, personal information collected in one country may be processed in another country, except where prohibited by law. Your personal information may be transferred to, and stored at a jurisdiction other than your own. For example, our marketing database and associated systems are accessible by authorised AVEVA personnel globally. Where we, or our sub-contractors, use IT systems or software provided by companies based in countries other than the one in which the data was collected, your personal information may be stored on the servers of such companies.
AVEVA seeks to ensure appropriate safeguards are in place in relation to international transfers of personal information to provide adequate levels of protection for your personal information and to comply with local laws and regulatory requirements. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. Transfers within AVEVA are addressed by an agreement entered into by all AVEVA companies (an intra-group agreement) which contractually obliges each AVEVA company to ensure that your personal information receives an adequate and consistent level of protection wherever it is transferred within AVEVA.
How long we keep your personal information
We only keep your personal information for as long as we actually need it. This may take into account our need to communicate with you for our business purposes (including for marketing purposes), whether you are likely to still be interested in receiving information from us about our products and services, any laws, regulatory or compliance requirements which may necessitate the retention of your data, and whether we are or could potentially in the future be in dispute with each other or a third party. For marketing purposes, this generally means that if you have not replied to our marketing emails or purchased any of our products or services for a period of one year we will remove you from our database.
For further details please contact us at dataprotection@AVEVA.com.
Please note that we may anonymise your personal information or use it for statistical purposes. We keep anonymised and statistical data indefinitely but we take care to ensure that such data can no longer identify or be connected to any individual.
How you can make a complaint
If you are unhappy with the way we have used your personal information please contact us to discuss this using dataprotection@aveva.com.
Depending on the jurisdiction in which you live, or in which your data is processed, you are also entitled to make a complaint to a competent authority with responsibility for matters relating to data protection, such as, in the UK, the Information Commissioner’s Office, which you can do by visiting www.ico.org.uk. Whilst you are not required to do so, we encourage you to contact us directly to discuss any concerns that you may have and to allow us an opportunity to address these before you contact such an authority.
You may also use the use the AVEVA “Speak Up” Portal to raise concerns, such as any concern relating to a potential breach of law.
How we keep this privacy policy up to date
We will review and update this Privacy Policy from time to time. This may be to reflect a change in the products or services we offer, or to our internal procedures or in the law.
The easiest way to check for updates is by looking for the latest version of this Privacy Policy on our website or you can contact us (see Who we are and how to contact us) to ask us to send you the latest version of this Privacy Policy.
Each time we update our Privacy Policy we will update the date on which that version came into force. This is version came into effect on 25 August 2023.
ANNEX – AVEVA’s suppliers
AVEVA may engage non-AVEVA suppliers for certain services. Where these services involve the processing of AVEVA’s personal information on AVEVA’s behalf as controllers, AVEVA imposes obligations on the suppliers to implement appropriate technical and organizational measures ensuring that the processing of personal information is protected to the standards required by applicable data protection laws.
AVEVA Connect
In order to provide performance, availability and access to AVEVA services and solutions, AVEVA Connect partners with Microsoft Azure and Amazon AWS, which are two of the world’s leading public cloud service providers. AVEVA Connect delegates authentication to a 3rd Party ID Provider (Auth0) to issue OpenID Connect (OIDC), ID and access tokens to provide access to APIs and applications integrated with the Connect IdP.
AVEVA Connect includes Microsoft Defender SmartScreen and collects and sends the end user’s information to Microsoft as disclosed in https://aka.ms/privacy and the Microsoft Edge Privacy Whitepaper at https://learn.microsoft.com/en-us/microsoft-edge/privacy-whitepaper#smartscreen
Further details on AVEVA Connect, the types of personal information we process on AVEVA Connect and where the information is processed, see our AVEVA Connect Service Description.
AVEVA Support Sites
Key suppliers which may interact with AVEVA Support Sites:
Supplier |
Services |
Supplier’s website link, where available |
Gainsight |
Customer success and product experience software |
www.gainsight.com |
Cloud CDN (Content Delivery Network) |
cloud.google.com/cdn/ |
|
Pendo |
Product experience and digital adoption solutions |
www.pendo.io |
Salesforce |
customer relationship management software |
https://www.salesforce.com/ |
Twilio (Sendgrid) |
Customer communication platform for transactional and marketing email |
sendgrid.com |