Privacy Policy

DIGITAL DISCOVERY

PRIVACY SHIELD POLICY

 


Digital Discovery respects individual privacy and values the confidence of its clients, business partners and others who may use our services. Not only do we strive to collect, use and disclose personal information in a manner consistent with the laws of the countries in which we do business, but we also aim to uphold the highest ethical standards in our business practices. This Privacy Policy sets forth the privacy principles that Digital Discovery follows with respect to the protection and transfers of personal information, whether it is in electronic, paper or verbal format, between the member states of the European Union, Iceland, Liechtenstein and Norway (the European Economic Area) and the United States. This statement applies to all personal information we handle (except as noted below), including on-line, off-line, and manually processed data.

 

Digital Discovery complies with the EU-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries. Digital Discovery has certified that it adheres to each of the seven Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity, and Purpose Limitation, Access, and Recourse, and Enforcement and Liability.

 

If there is any conflict between the policies in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/.

 

SCOPE
This Policy applies to the processing of Customer Personal Data that Digital Discovery receives in the United States concerning Customers who reside in the European Union.  Digital Discovery provides computer forensics, electronic discovery services, and consulting to law firms, business organizations, and individuals who are parties to various types of legal and commercial proceedings.

 

This Policy does not cover data from which individual persons cannot be identified or situations in which pseudonyms are used. (The use of pseudonyms involves the replacement of names or other identifiers with substitutes so that identification of individual persons is not possible.)

 

MANAGEMENT

Digital Discovery has designated the Legal Department to manage compliance with the EU Privacy Shield program. Any inquiries or complaints regarding this Policy may be directed to Digital Discovery at:

 

Attn: Legal Department

8131 LBJ Freeway

Suite 325

Dallas, TX 75251

www.digitaldiscoveryesi.com

Effective date: September 30, 2016


IN HOUSE VERIFICATION

Digital Discovery will annually renew its certifications for EU Privacy Shield. An in-house verification will be conducted to substantiate the attestations and assertions in place are consistently complied with in regard to treatment of Personal Data. The verification will ensure that the privacy policy and the publicly posted website private policy conforms to the Privacy Shield Principles and continues to comply with the Privacy Shield principles; informs Customers of Digital Discovery’s participation in the Privacy Shield program and where to obtain a copy of this Policy; inform individuals of in-house mechanisms for handling complaints, and review processes for training employees about Digital Discovery’ participation in the Privacy Shield program and proper handling of Personal Data.

 

COLLECTION OF PERSONAL DATA
Under most circumstances, Digital Discovery does not collect personal data for processing directly from the party in possession, but receives the data for processing from counsel under an agreement to hold such data under strict rules of confidentiality and privacy. Therefore, when Digital Discovery receives personal data from the EU for processing purposes and does not control the collection of the personal data, Digital Discovery does not, typically, provide notification to the individuals to which such personal data relates (but, again, is mandated by the client to hold the data in the strictest confidence). In such event, Digital Discovery reserves the right to process personal data in the course of providing services to its clients without the knowledge of the individuals involved.

 

USE OF PERSONAL DATA
Digital Discovery never uses data for a purpose other than the purpose for which it was provided to Digital Discovery. Neither does Digital Discovery share information with third parties other than when lawfully directed by the client law firm or originating organization (that is, the owner of the data.) When specifically authorized by counsel or client to do so, Digital Discovery will inform effected individuals about the purposes for which it collects and uses personal information about them, how to contact the organization with any inquires or complaints, the types of third parties to which it may disclose the information and any choices and means that Digital Discovery may offer individuals for limiting the data’s use and disclosure.

 

Much of the data processed and hosted by Digital Discovery does not constitute “personal data”. However, personal data will, on occasion, enter into the possession of Digital Discovery. All Digital Discovery employees who handle Personal Data from Europe are required to comply with the Principles stated in this Policy.

Personal data that we collect may vary according to the engagement with our Clients. Digital Discovery collects the following types of Personal Data from its’ Clients: contact information, including name, address, and email address, telephone number, title, and company name, as well as payment information (which might include credit card/and or back account information).

 

The information that is collected from our clients is used in the capacity of providing services, managing the Client’s account (invoicing, reporting) and related activities for business purposes (complying with its contractual obligations, operations in providing services, storing and processing data).

 

CHOICE
Since Digital Discovery does not share personal information with third parties, unless required by law or lawfully directed by the client to do so, nor does it ever use the data for a purpose incompatible with the purpose for which it was originally collected, there is no need to offer individuals the opportunity to opt out from having data disclosed. However, should the need ever arise, Digital Discovery will provide individuals with reasonable notice and mechanisms to exercise their choice to opt-out from having personal data so disclose. Individuals may contact Digital Discovery at www.digitaldiscoveryesi.com.

 

ACCOUNTABILITY OF ONWARD TRANSFERS
Digital Discovery will not disclose an individual's personal information to third parties, except when one or more of the following conditions is true:

 

·  We have the individual's permission to make the disclosure;

·  The disclosure is required by law or professional standards;

·  The disclosure is reasonably related to the sale or disposition of all or part of our business;

·  The information in question is publicly available;

·  The disclosure is reasonably necessary for the establishment or defense of legal claims; or

·  The disclosure is to another Digital Discovery entity or to persons or entities providing services on our or the individual's behalf (each a "transferee"), consistent with the purpose for which the information was

obtained, if the transferee, with respect to the information in question;

·  Agree to provide an adequate level of privacy protections for the Personal Data that are no less protective than those set out in this Policy.

 

Digital Discovery may provide Personal Data to Third Parties that act as agents, consultants, and contractors, pursuant to a contract, to perform tasks on behalf of and under our instructions. Third Parties must agree to use such Personal Data only for the purposes for which they have been engaged by Digital Discovery.

 

All data collected in the course of Digital Discovery activities are kept under strict privacy and confidentiality protocols since much of this information may constitute evidence in litigation and other sensitive proceedings. Indeed, it is the practice of Digital Discovery (and the customary business practice in the industry in which Digital Discovery conducts business) to enter into, with each client, a comprehensive confidentiality agreement that meets or exceeds Privacy Shield standards as to data received in every engagement undertaken.

 

We may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

 

In cases of onward transfer to third parties of data of EU individuals received pursuant to the EU-US Privacy Shield, Digital Discovery is potentially liable.

 

SECURITY
To prevent unauthorized access or disclosure, maintain data accuracy, and ensure the appropriate use and confidentiality of information, either for its own purposes or on behalf of our clients, Digital Discovery has put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we possess. However, we cannot guarantee the security of information on or transmitted via the Internet or on line Review tool.

 

DATA INTEGRITY AND PURPOSE LIMITATION
Digital Discovery processes personal information only in ways compatible with the purpose for which it was collected or subsequently authorized by the individual. To the extent necessary for such purposes, we take reasonable steps to make sure that personal information is accurate, complete, current, and otherwise reliable with regard to its intended use.

 

NOTIFICATION
Digital Discovery notifies individual Customers about is adherence to the EU-US Privacy Shield principles through its publicly posted website privacy policy at http://www.digitaldiscoveryesi.com/privacy_shield.

 

ACCESS
EU Customers have the right to access their Personal Data that we hold about them and to ensure that the Personal Data is accurate and relevant for the purpose for which collected. Upon reasonable request and as required by the Privacy Shield principles, Digital Discovery will take reasonable steps to permit individuals to correct, erase, or block data that is demonstrated to be inaccurate, as permitted by applicable law. Individual Customers may edit their Personal Data by phone or by using the contact information below. Digital Discovery will endeavor to respond in a timely manner to all reasonable written requests to view, modify or inactivate Personal Data. The individual will need to provide sufficient identifying information, such as name, address, and birth date. We may request additional identifying information as a security precaution. In addition, we may limit or deny access to personal information where providing such access would be unreasonably burdensome or expensive in the circumstances, or as otherwise permitted by the Privacy Shield Agreement. A discounted rate will apply to grant access to personal information.

 

RECOURSE, ENFORCEMENT AND LIABILITY
In compliance with the EU-US Privacy Shield Principles, Digital Discovery commits to resolve complaints about your privacy and our collection or use of your personal information. Digital Discovery has designated the Legal Department to oversee compliance with the EU Privacy Shield program. European Union individuals with inquiries or complaints regarding this privacy policy should first contact Digital Discovery at:


8131 LBJ Freeway

Suite 325

Dallas, TX 75251

www.digitaldiscoveryesi.com
Effective date: September 30, 2016

 

Digital Discovery has further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.

 

Digital Discovery is subject to the investigatory and enforcement powers of the Federal Trade Commission (the “FTC”) that will effectively ensure compliance with the Privacy Shield Principles. Under certain limited conditions, individuals may invoke “last resort” binding arbitration before the Privacy Shield Panel.