- Why Abacus?
As set forth in Abacus’ Global Code of Conduct: "We respect the confidentiality and privacy of our clients, our people and others with whom we do business."
Abacus Information Technology, LLC d/b/a Abacus Group, LLC (“Abacus”) complies with the requirements of the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce (the “Principles”). Abacus has certified that it adheres to the Principles with respect to personal information (as described below) that is transferred from the European Union and its Member States, and the European Economic Area and Switzerland (“EU”) to the United States. If there is any conflict between the terms in this Privacy Shield Policy and the Principles, the Principles shall govern. Abacus U.S. is subject to investigatory and enforcement powers of the U.S. Federal Trade Commission.
To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/.
This Privacy Shield Policy applies to personal information within the scope of Abacus’ Privacy Shield certification, which covers the following categories of information:
We collect and process personal information from certain individuals and for the purposes described in this Privacy Shield Policy. Personal information covered by this Privacy Shield Policy is collected and processed only as permitted by the Principles.
Notice to individuals regarding the personal information collected from them and how that information is used may be provided through this Privacy Shield Policy, other Abacus website notices, or other direct forms of communication with appropriate parties, such as contracts or agreements. Where necessary and appropriate, consent for personal information to be collected, used, and/or transferred may also be obtained through these same means of communication (including opt-in consent for sensitive personal information).
Consistent with the Principles, Abacus may transfer personal information to third parties, including transfers from one country to another. We will only disclose an individual’s non-public personal information to third parties under one or more of the following conditions:
Individuals whose personal information is covered by this Privacy Shield Policy have the right to access the personal information that Abacus maintains about them as specified in the Principles. Individuals may contact us to correct, amend or delete such personal information if it is inaccurate or has been processed in violation of the Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the individual’s privacy, or where the rights of persons other than the individual would be violated). Requests for access, correction, amendment or deletion should be sent to: firstname.lastname@example.org.
Abacus takes appropriate measures to protect personal information in its possession to ensure a level of security appropriate to the risk of loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures take into account the nature of the personal information and the risks involved in its processing, as well as best practices in the industry for security and data protection.
Abacus collects and processes personal information only to the extent that it is compatible with the purposes for which it was collected or subsequently authorized by the data subject. Abacus does not retain personal information after it no longer serves the purposes for which it was collected or subsequently authorized. Abacus takes reasonable steps to ensure that personal information is accurate, complete, current, and reliable for its intended use.
In compliance with the Principles, Abacus commits to resolve complaints about our collection or use of your personal information. Individuals with inquiries or complaints regarding our Privacy Shield Policy should first contact Abacus at: email@example.com. Abacus has a policy of responding to individuals within forty-five (45) days of an inquiry or complaint. If an individual has an unresolved complaint or concern that is not addressed satisfactorily or timely, that individual may contact our U.S. based third party dispute resolution provider (free of charge), the International Centre for Dispute Resolution/American Arbitration Association ("ICDR/AAA"). Please contact or visit ICDR/AAA for more information or to file a complaint (http://go.adr.org/privacyshield.html).
You may have the option to select binding arbitration under the Privacy Shield Panel for the resolution of your complaint under certain circumstances. For further information, please see the Privacy Shield website (https://www.privacyshield.gov).
Abacus will renew its EU-U.S. Privacy Shield and Swiss-US Privacy Shield certifications annually, unless it subsequently determines that it no longer needs such certification or if it employs a different adequacy mechanism.
Prior to the re-certification, Abacus will conduct an in-house verification to ensure that its attestations and assertions about its treatment of Individual Customer and Personnel Personal Data are accurate and that the company has appropriately implemented these practices.
Specifically, as part of the verification process, Abacus will undertake the following:
Abacus will prepare an internal verification statement on an annual basis.
Abacus may update this Policy at any time by publishing an updated version here. We will not update this Privacy Shield Policy in contravention to the Principles so long as we remain certified to the Privacy Shield.
View a PDF of our Privacy Shield Statement HERE.