Would you like to test drive our new eLearning system? Click here!

GDPR

IQMS General Data Protection Regulation (GDPR) Compliance Statement

Effective Date: May 25, 2018 

Contact Information

IQMS
Attn: Chris Smallwood, VP of IT
2231 Wisteria Lane
Paso Robles, California 93401
gdpr@iqms.com

The Types of Personal Data That We Collect

IQMS collects personal data from data subjects who visit our public and customer-facing web and mobile sites (“EEA Website Visitors”), and individual representatives of our corporate customers, suppliers and business partners (“EEA Business Contacts”).

From EEA Website Visitors and EEA Event Attendees, IQMS may collect the following types of personal data:

  • Personal information provided when a registration account is created, which may include first and last name, email address, username and password.
  • Personal information related to purchases using a credit card.
  • Location information when a Visitor visits our Site or affiliated sites, including location information either provided by a mobile device or associated with the IP address.
  • Usage, viewing and technical data, including the device identifier or IP address, when a Visitor visits our Site or affiliated sites, or open emails we send; internet service provider; pages visited; country of origin; and files downloaded.

From EEA Business Contacts, IQMS may collect the following types of personal data:

  • Phone number, email address, and ship to/bill to addresses
  • Financial and billing information;
  • Company information;
  • Activities, interactions, preferences, transactional information, and other computer and connection information (such as IP address) relating to use of our websites and our services;
  • Log files, information collected by cookies and similar technologies about the pages viewed, links clicked and other actions taken when accessing our websites;
  • Security authorization and authentication information;
  • Usage data; and
  • Other personal data provided by the EEA Business Contact.

Purposes for the Processing of Personal Data; Legal Basis

IQMS processes the personal data of EU data subjects for the purposes of:

  • Completing registration for industry events;
  • Preventing fraud;
  • Complying with requests from regulatory and law enforcement authorities;
  • Providing information about our organization;
  • Personalizing visitors’ experience on our websites
  • Communicating with corporate business partners about business matters;
  • Conducting related tasks for legitimate business purposes;
  • Aggregating data;
  • Administration of information and network security;
  • HR administration and internal IQMS communications;
  • Meeting legal or regulatory requirements and IQMS’s internal policies;
  • Management of travel, lodging, and related expenses; and
  • Other purposes disclosed at the time of collection.

The contract between IQMS and the attendee of an industry event forms the basis for the processing of personal data.  For all other Visitors to the IQMS website, the basis is consent.  For all other data subjects, such processing has been determined to be in the legitimate interest of IQMS and the respective data subject in order to promote a charitable, employment or business relationship, as applicable.

Recipients of Personal Data

IQMS may share personal data we collect from EU data subjects with the following types of third parties and for the following purposes:

  • Third parties with whom IQMS is organizing and/or co-sponsoring industry events;
  • Payment card processors. All credit card transactions are managed by an external service with its own secure site and privacy statement, which is accessible from the service’s online donation page; and
  • Third party service providers contracted to provide services on our behalf.

Transfer of Personal Data to a Third Country

Personal data collected by IQMS may be stored or processed in the United States or in any other country where IQMS or its affiliates, subsidiaries, or third-party service providers maintain facilities.  EU data subjects who provide personal data to IQMS consent to the processing and transfer of that data to the United States and around the world.

IQMS may also execute agreements with third parties for the transfer of personal data outside of the EU using European Commission-approved Standard Contract Clauses.

Retention Period

Personal data is retained by IQMS no longer than necessary to execute its obligations under applicable contracts with event attendees or business partners.

Access to, Modification and Deletion of Personal Information

For questions about the collection personal data by IQMS, or to exercise the right to access, correct, update, or delete such data or object, for legitimate purposes, to the processing of personal data, as provided under applicable law, please contact IQMS:

IQMS
Attn: Chris Smallwood, VP of IT
2231 Wisteria Lane
Paso Robles, California 93401
gdpr@iqms.com

Please help us to keep your data accurate by informing us of any personal information change promptly.

There may be cases where restrictions on the amount of information that can be disclosed to data subjects under applicable law (for example, if that would necessarily involve disclosing information about another person).  IQMS is permitted to withhold some types of personal data in certain circumstances, subject to applicable local law requirements.  If there is a dispute, please contact the IQMS privacy officer at the above address.  In addition, data subjects have the right to lodge a complaint with a supervisory authority.

Right to Withdraw Consent

Data subjects whose processing is based upon consent may withdraw that consent at any time; however, IQMS will not be able to provide or continue to provide services or marketing communications to the data subject.  Data subjects who are IQMS event attendees provide personal data as part of the contractual relationship; failure to provide such data will result in IQMS not being able to provide or continue to provide communications about the event or the attendee account, materials from past industry events, or marketing communications. 

Changes to This Statement

We may update this Compliance Statement to reflect changes to our information practices. If we make any changes to this Compliance Statement, we will notify data subjects by means of a notice on this Site as well as the applicable date.  We encourage Website Visitors, Business Contacts, and others to periodically review this page for the latest information on our privacy practices.