Privacy Policy
Privacy Notice for Columbia
Privacy Notice for Mexico
This website is operated by AVEVA Group PLC and the AVEVA group of companies (“AVEVA” or “we”). While AVEVA is headquartered in the United Kingdom, AVEVA companies are located in over 30 countries worldwide, both within and outside the European Economic Area, and operate in many more countries. An up to date list of AVEVA companies can be found in AVEVA’s Annual Report, and is available on request.
What is this document and why should you read it?
This Privacy Notice describes how we use your personal data when you use our websites or when we otherwise collect information from you other than in the course of a customer relationship (which is the subject of a separate Customer Privacy Notice). When we use the term “personal data” we mean any information that relates to an identifiable natural person. A name, address and contact details are all examples of personal data if they identify you or another person.
We have provided this Privacy Notice to ensure that individuals who use our websites or otherwise provide personal data to us understand what personal data we may collect and hold about them, what we may use it for and how we keep it safe. You have legal rights to access the personal data that we hold about you and to control how we use it which are also explained in this Privacy Notice. AVEVA and its associated companies will use the information we collect from you in accordance with this Privacy Notice.
You can read, print and save this whole Privacy Notice or click on the links below to see specific information about:
Who we are and how you can contact us
What personal data we collect about you
What we use your personal data for
When we need your consent to use your personal data
Personal data you are legally obliged to provide
Your rights to know what personal data we hold and to control how we use it
Automated decision making and profiling
When we will share your personal data with others
How we keep your personal data safe
How we use your personal data for marketing
When we will send your personal data to other countries
How long we keep your personal data
How you can make a complaint
How we keep this policy up to date
Who we are and how you can contact us
AVEVA Group PLC is a public limited company. Our registered company number is 02937296 and our registered address is at High Cross, Madingley Road, Cambridge, CB3 0HB. AVEVA Group PLC is the data controller for data collected on you through this website or otherwise – this is a legal term meaning the person or company that takes decisions about how and why personal data is used or otherwise processed (which includes any activity relating to personal data including collection, storage, use and transmission), and is responsible for making sure those things are done in accordance with applicable data protection laws.
For general queries about our website please use the “Contact Us” form at https://www.aveva.com/en/Contact/.
To update your marketing preferences or unsubscribe from our mailing list please email contact@aveva.com.
For data protection related queries including questions about use of your personal data, please contact our Data Protection Officer William Cummins. You can contact them via email at dataprotection@aveva.com or via our postal address at AVEVA Group PLC,High Cross, Madingley Road, Cambridge, CB3 0HB.
Please refer to the sections on Your rights to know what personal data we hold and to control how we use it and How to make a complaint for further contact information.
What personal data we collect about you
We collect:
- personal data that you provide to us. There are several ways in which you may share your personal data with us via our website or otherwise. You might complete the ‘Contact Us’ Form on our website, subscribe to or comment on our blog, register for one of our events, use our helpdesk or support, request content, enroll on “AVEVA Experience” cloud based training or use the AVEVA “Speak Up” Portal to raise a concern. The personal data that you provide to us may include your name, address, e-mail address or other online identifier, physical address, internet protocol address, MAC address, employer, job role and phone number.
- personal data that we receive from third parties. Where we work with other businesses, they may collect personal data about you which they will share with us. For example, we may have your name and contact details passed on to us by third parties that we work with, such as your employer, or marketing partners, industry publications or content syndication partners, that refer you to us so that we can provide you with information on our products or services that may be of interest to you. We may also receive in such contexts professional or employment-related information on you, and inferences drawn from other personal data. Your employer may also provide us with personal data about you in providing licensing and account information, or registering you for events.
- personal data about your use of our website. This is technical information and includes details such as your IP address, your login information (where applicable e.g. with “AVEVA Experience”), browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, as well as details of how you navigated our website, what pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), geolocation, sensory data, such as audio information for recorded technical support interactions, and any phone number or email address used to contact our customer service department.
To learn more about our use of cookies, please see our Cookie Policy
What we use your personal data for
We use your personal data in the following ways:
- personal data that you provide to us is used to:
- provide you with the information, products and services that you request from us;
- provide you with marketing information in accordance with your marketing preferences (see How we use your personal data for marketing for further details);
- manage and administer our business;
- review and improve our products and services.
- personal data that we receive from third parties is used, or combined with the personal data that you provide to us and used, for the purposes described above.
- personal data about your use of our website is used to:
- administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- make suggestions and recommendations to you or other website users about products or services that may interest you or them where you have confirmed that you would like to be contacted in this regard;
- to improve our website to ensure that content is presented in the most effective manner for you and for your computer or mobile device;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.
When we need your consent to use your personal data
Whilst we always want you to be aware of how we are using your personal data, this does not necessarily mean that we are required to ask for your consent before we can use it. In the day to day running of our business we may use your personal data without asking for your consent because:
- we are entering into and carrying out our obligations under a contract with you;
- we need to use your personal data for our own legitimate purposes (such as the administration and management of our business and the improvement of our services) and our doing so will not unduly interfere with your privacy rights.
If we require your consent to process your personal data and, as may be the case, in exceptional circumstances, wish to use your personal data for a different purpose than the one for which it was originally collected we will contact you to explain how we wish to use your data and obtain your consent to use your personal data for the relevant purposes as required. You are not required to give consent just because we ask for it. If you do give consent you can change your mind and withdraw it at a later date.
Please refer to the section on How we use your personal data for marketing for further information on our marketing practices in this regard.
Personal data you are legally obliged to provide
You are not under a legal obligation to provide us with any of your personal data but please note that if you elect not to provide us with your personal data we may be unable to provide our products or services to you.
Your rights to know what personal data we hold and to control how we use it
Your rights in connection with your personal data vary from country to country. In some countries including the United Kingdom, Brazil, Singapore and countries in the European Economic Area ("EEA"), you have a legal right to know what personal data we hold about you - this is called the right of subject access. You can exercise this right by sending us a written request at any time. Please mark your letter “Subject Access Request” and send it to us by post using the following contact details:
FAO: Data Protection Officer
Subject Access Request
AVEVA Group PLC
High Cross, Madingley Road,
Cambridge, CB3 0HB
or email us at dataprotection@aveva.com.with the subject heading “Subject Access Request”
You also have rights to:
- object to your personal data being used for marketing purposes (see How we use your personal data for marketing for further details);
- object to decisions being made about you by automated means or to your personal data being used for profiling purposes;
- object to our using your personal data in ways that may cause you damage or distress;
- have inaccurate personal data corrected, blocked or erased;
- ·restrict our use of your personal data;
- require that we delete your personal data;
- require that we provide you, or anyone that you nominate, with a copy of any personal data you have given us in a structured electronic form, such as a CSV file.
You can find full details of your personal data rights in the United Kingdom on the Information Commissioner’s Office website at www.ico.org.uk.
As noted above, your data rights vary from country to country. For example, in California, the California Consumer Protection Act (the “CCPA”) provides various rights to California residents with respect to the collection and use of their personal data that we have collected.
In particular, California residents may have a right to:
- access the categories and specific pieces of personal data AVEVA companies have collected, the categories of sources from which the personal data is collected, the business purpose(s) for collecting the personal data, and the categories of third parties with whom AVEVA has shared personal data;
- Delete personal data under certain circumstances; and
- Opt out of the “sale” of personal data. We do not sell your personal data in the conventional sense. However, like many companies, we use advertising services that try to tailor online ads to your interests based on information collected via cookies and similar technologies about your online activity. This is called interest-based advertising. The CCPA’s statutory definition of the term “sale” is broad and may include interest-based advertising. You can get more information and opt out of the use of cookies by clicking here to relaunch our cookie banner and disable cookies as part of a do-not-sell request. You will need to set your preferences from each device and each web browser from which you wish to opt out. This feature uses a cookie to remember your preference, so if you clear all cookies from your browser, you will need to reset your settings.
AVEVA will not discriminate against you for exercising any of these rights, in accordance with your rights under the CCPA. To exercise your rights, contact us by emailing dataprotection@aveva.com To opt out of the use of cookies on our sites for interest-based advertising purposes, follow the instructions above.
We will acknowledge receipt of your request within 10 business days, and provide a substantive response within 45 calendar days, or inform you of the reason and extension period (up to 90 days) in writing.
Under the CCPA, only you or an authorized agent may make a request related to your personal data. Note that to respond to your requests to access or delete personal data under the CCPA, we must verify your identity. We may do so by requiring you to log into any relevant account with us, provide information relating to your account (which will be compared to information we have, such as profile information), give a declaration as to your identity under penalty of perjury, and/or provide additional information. You may designate an authorized agent to submit your verified consumer request by providing written permission and verifying your identity, or through proof of power of attorney.
In addition, California Civil Code Section 1798.83, also known as “Shine The Light” law, permits California residents to annually request information regarding the disclosure of your Personal Information (if any) to third parties for the third parties’ direct marketing purposes in the preceding calendar year. We do not share Personal Information with third parties for such third parties’ direct marketing purposes.
How we use your personal data for marketing
We may use your personal information to send you communications about our products or services that we feel you may be interested in and will add your details to our marketing database if:
- you make an enquiry about our products or services;
- you attend an industry related event;
- you buy our products or services;
- you have told a third party that you would like them to pass us your contact details so that we can send you updates about our products or services;
- you have consented to receiving marketing communications on our website via https://www.aveva.com/en/contact/
This may include marketing relating to products or services offered by other companies within AVEVA that we think you may be interested in. We may send you marketing communications by email, telephone or post.
You can ask us to only send you marketing communications by particular methods (for example, you may be happy to receive emails from us but not telephone calls), about specific subjects (for example about specific portfolio areas or industry specific information) or you may ask us not to send you any marketing communications at all.
We may ask you to indicate your marketing preferences when you first access our website. You can check and update your current marketing preferences at any time by accessing your specified profile link provided in our marketing communications or emailing us at dataprotection@aveva.com.
We may share your personal data with third parties for marketing purposes.
Automated decision making and profiling
If you confirm that you would like to be contacted with further information regarding our products and services we will add your details to our marketing database and a profile regarding your interaction with our website and content will be created.
Once you are added to our marketing database we will update your profile with information regarding your interaction with our website, online portals (including social media) and regarding the products or services in which you have shown a particular interest. Further interactions with our website will then be linked to this account so we can better tailor our correspondences with the interest that you have shown in AVEVA and our products and services and provide further information on products and services that are likely to be of interest to you.
This information is used to assess your profile objectively to consider whether you might be interested in purchasing new or further AVEVA products and/or services. If we think this is likely, a member of the AVEVA team will contact you to take things forward in this regard.
You are entitled to ask that we do not make automated decisions about you or use your personal data for profiling purposes. Please refer to the section on Your rights to know what personal data we hold and to control how we use it for further details in this regard.
How we keep your personal data safe
We take every care to ensure that your personal data is kept secure. The security measures we take include:
- only storing your personal data on our secure servers, or in other secure locations, including Cloud storage;
- ensuring that our staff receive regular data security awareness training
- keeping paper records to a minimum and ensuring that those which we do have, are stored in locked filing cabinets on our office premises;
- maintaining up to date system security features to minimise the risk of unauthorised access to our systems;
- requiring third parties to respect the security of your data and to treat it in accordance with the law.
Please remember that you are responsible for keeping your passwords secure. If we have given you (or you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. Please do not to share your passwords with anyone.
Sending information via the internet is not always secure. While we do our best to protect your personal data, we cannot always guarantee the security of data sent to our website. In this regard, please note that you send us personal data at your own risk. We will nonetheless use strict procedures and security features (some of which are described above) to try to prevent unauthorised access.
Storage of your personal data
We may store your personal data using AVEVA’s own secure servers or other internally hosted technology. Your personal data may also be stored by third parties we work with, via cloud services or other technology, to support AVEVA’s business operations.
These third parties do not use or have access to your personal data other than for Cloud storage and retrieval, and AVEVA requires such parties to employ at least the same level of security that we use to protect your personal data.
When we will send your personal data to other countries
As AVEVA is a global company with global systems, personal data collected in one country may be processed in another country, except where prohibited by law. Your personal data may be transferred to, and stored at a jurisdiction other than your own. For example, our marketing database and associated systems are accessible by authorised AVEVA personnel globally. Where we, or our sub-contractors, use IT systems or software provided by companies based in countries other than the one in which the data was collected, your personal data may be stored on the servers of such companies.
AVEVA seeks to ensure appropriate safeguards are in place in relation to international transfers of personal data to provide adequate levels of protection for your personal data. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. Transfers within AVEVA are addressed by an agreement entered into by all AVEVA companies (an intra-group agreement) which contractually obliges each AVEVA company to ensure that your personal data receives an adequate and consistent level of protection wherever it is transferred within AVEVA.
Where we transfer of your personal data from within the UK or the EEA to a third party outside of the UK or EEA we utilise standard contractual clauses:
If any of our data processing activities require your personal data to be transferred from inside the UK or the EEA to outside the UK or the EEA, we will only make that transfer if:
- the country to which the personal data is to be transferred ensures an adequate level of protection for personal data (as determined by the European Commission and/or the UK Information Commissioner’s Office); or
- we have put in place appropriate safeguards to protect your personal data, such as an appropriate contract with the recipient; and
- the transfer is necessary for one of the reasons specified in applicable data protection legislation, such as the performance of a contract between us and you; or
- you clearly consent to the transfer.
How long we keep your personal data
We only keep your personal data for as long as we actually need it. This may take into account whether you are likely to still be interested in receiving information from us about our products and services, any laws or regulatory requirement which may necessitate the retention of your data, and whether we are or could potentially in the future be in dispute with each other or a third party. Generally, this means that if you have not replied to our marketing emails or purchased any of our products or services for a period of one year we will remove you from our database.
For further details please contact us at dataprotection@aveva.com.
Please note that we may anonymise your personal data or use it for statistical purposes. We keep anonymised and statistical data indefinitely but we take care to ensure that such data can no longer identify or be connected to any individual.
How you can make a complaint
If you are unhappy with the way we have used your personal data please contact us to discuss this using dataprotection@aveva.com.
Depending on the jurisdiction in which you live, or in which your data is processed, you are also entitled to make a complaint to a competent authority with responsibility for matters relating to data protection, such as, in the UK, the Information Commissioner’s Office, which you can do by visiting www.ico.org.uk. Whilst you are not required to do so, we encourage you to contact us directly to discuss any concerns that you may have and to allow us an opportunity to address these before you contact such an authority.
You may also use the use the AVEVA “Speak Up” Portal to raise concerns, such as any concern relating to a potential breach of law.
How we keep this policy up to date
We will review and update this Privacy Notice from time to time. This may be to reflect a change in the products or services we offer, or to our internal procedures or in the law.
The easiest way to check for updates is by looking for the latest version of this Privacy Notice on our website or you can contact us (see Who we are and how to contact us) to ask us to send you the latest version of this Privacy Notice.
Each time we update our Privacy Notice we will update the version number and the date on which that version came into force. This is version 4 which came into effect on 28 July 2022.