Data privacy notice

Our privacy notice is also available in French, German , Italian, Polish, Portuguese and Slovak.

This Data Privacy Notice explains how Capco uses your personal data and which rights and options you have in this respect. It applies to personal data that you provide to Capco or which is derived from such data as part of our business relationship with you or when you visit our website.

For those interested in a career with Capco, we have developed a specific Job Candidate Privacy Notice which should be read in addition to this notice and can also be found when you create or access you on-line account in connection with a job application.

How we use information that is gathered by cookies or other web-tracking or analytics technologies is explained in our Cookie Notice.

This notice applies in all countries throughout our global operation.

Capco’s website is not directed at nor targeted at children. No one who has not reached the age of thirteen may use the website unless supervised by an adult. By accessing this website you represent and warrant that you are 13 years of age or older. If you believe that a child under 13 may have provided us their personal data, please contact us at: ask.capco.dpo@capco.com

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

The Capco entity operating in the country you engage us in will typically be the responsible data controller for any personal data you provide to us in connection with our business relationship. A full list of Capco Group companies across the globe can be found here.

You can engage with us through social media websites or through features on this website that integrate with social media sites. When you engage with us through social media sites, you may allow us to have access to certain information from your social media profile based upon your privacy preference settings on such platform.

If you are dissatisfied with any aspect of our Data Privacy Notice, you may have legal rights and, where relevant, we have described these in the ‘Your Data Protection Rights’ section below.

WHICH CATEGORIES OF PERSONAL DATA DO WE COLLECT?

We may collect and process the following categories of personal data:

Job candidate data. See Capco’s Job Candidate Privacy Notice;
Business contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address, mobile device unique identifier and the IP address of your computer if you use our website;
Cookies and other website user tracking. Full details can be found in Capco.com’s Cookie Notice;
Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;
Further business information necessarily processed in a business or other contractual relationship with Capco or voluntarily provided by you, such as orders placed, purchases, services and other business activities, product feedback, survey responses and any other information you may provide to us;
Your image, actions and attendance information when you visit one of our offices or attend one of our corporate events;
Your name, email address, role, video, audio, text data, personal opinions, actions taken or contributions made (e.g. attendee participation and chat logs) when attending a digitally recorded/transcribed on-line corporate event, training or business presentation or meeting.
Information about your interests and preferences and other information obtained by the analytics described above, in particular your activities when you use our websites and any products, downloadable content (e.g. registration for a software download, eBooks, whitepapers) or other services we offer to you online. This includes which content you download, click or view for how often and how long;
Information collected from publicly available resources, integrity databases and credit reference agencies;
f legally required for compliance purposes, information about relevant and significant litigation or other legal proceedings against you or a third party related to you and interaction with you which may be relevant for antitrust purposes;
Special categories of personal data or Sensitive Personal Information - In connection with the registration for and provision of access to an event or seminar, we may ask for information about your health for the purpose of identifying and being considerate of any disabilities or special dietary requirements you may have. Any use of such information is based on your consent. If you do not provide any such information about disabilities or special dietary requirements, we will not be able to take any respective precautions.

FOR WHICH PURPOSES DO WE USE YOUR PERSONAL DATA?

We will process your personal data for the following purposes ("Permitted Purposes"):

Planning, performing, managing and administering your (or a third party to whom you are related) contractual business relationship with Capco, e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services or providing you with other services or things you may have requested. For the avoidance of doubt all such relationships are considered to occur on a business-to-business (“B2B”) basis;
Administration and video/audio/transcription recording of corporate events, training and business presentations and meetings to enable event participants/non attendees to access the recording and, where Microsoft 365 Copilot AI is used, to help organize scheduling, note-taking, summarizing discussions and recording action items;
Maintaining and protecting the security of our products, solutions, services and websites or other systems (and those of our clients), preventing and detecting security threats, fraud or other criminal or malicious activities;
Ensuring compliance with legal obligations (such as record keeping obligations), compliance screening or recording obligations (e.g. under antitrust laws, export laws, trade sanction and embargo laws or to prevent white-collar or money laundering crimes), which may include automated checks of your contact data or other information you provide about your identity against applicable sanctioned-party lists and contacting you to confirm your identity in case of a potential match or recording interaction with you which may be relevant for antitrust purposes;
Informing you, where permitted in accordance with local laws, within an existing business relationship about Capco's products or services which are similar or relate to such products and services which have already been purchased or used within that business relationship;
Solving disputes, enforcing our contractual agreements and to establish, exercise or defend legal claims, or;
Ensuring compliance with legal obligations, e.g. to keep sales records for tax purposes or to send notices and other disclosures as required by law.

Where you have expressly given us your consent, we may also process your personal data for the following purposes:

Communicating with you through the channels you have approved to keep you up to date on the latest announcements, events and other information about Capco’s products, technologies and services (including marketing-related newsletters) as well as events and projects of Capco;
Processing applications for job positions at Capco: See Capco’s Job Candidate Privacy Notice;
Administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests or other promotional activities or events, or;
Profiling and automated processing: Collecting information about your preferences based on your activities when you use our websites and any products, downloadable content (e.g. registration for a software download, eBooks, whitepapers) or other services we offer to you online. Based on this information (e.g. which content is downloaded, clicked or viewed for how often and how long), we create a user profile to personalize and foster the quality of our communication and interaction with you (for example, by way of newsletter tracking or website analytics). The logic behind our profiling activities is to identify areas which may be useful or otherwise of interest for you and to inform you about such areas in a more effective and targeted way. The algorithms used apply this logic and automatically deliver the targeted content or information to you.

With regard to marketing-related types of communication (i.e. emails and phone calls), we will, where legally required, only provide you with such information after you have opted in and provide you the opportunity to opt out if you do not want to receive further marketing-related types of communication from us.

We will not use your personal data for taking any automated decisions affecting you or creating profiles other than described above or as explained in our Job Candidate Privacy Notice.

The legal basis for processing your personal data may differ depending on applicable local laws, but generally we consider that our legitimate interests justify the processing; we find such interests to be justified considering that the data is limited to browsing activities related to what is considered business or professional related (our website does not offer any content directed to individual consumers, nor any content which might be used for any inferences about your private life habits or interests). The information that we may receive directly from you is completely voluntary and at your option. Where consent is required specifically, we will obtain consent before processing.

HOW DO WE COLLECT AND USE PERSONAL DATA?

We will typically collect your personal data directly from you when you interact with us, e.g. when you visit our website, join our on-line events presentations, meetings, communicate with us in relation to our products and services, submit an order, register to receive our newsletter or participate in our customer surveys. We do not obtain personal data from third parties except where you have utilised the services of a recruitment agency, where applicable. In such cases, you will be informed about this in accordance with applicable law.

WHERE DO WE PROCESS PERSONAL DATA?

Capco is a globally active enterprise. In the course of our business activities, we may transfer your personal data to recipients in other countries, including countries where we operate outside of the European Economic Area (“third countries”), in which applicable laws may not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data. Typically, this will be by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by data controllers in the European Economic Area to data controllers and processors in jurisdictions without adequate data protection laws. You may contact us anytime using the contact details below if you would like further information on such safeguards.

Capco may transfer your personal data to the following countries:

Any EU member state
Any country where Capco trade – see: www.capco.com/imprint

HOW DO WE PROTECT YOUR PERSONAL DATA?

We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data from unauthorized access or intrusion. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will strictly comply with applicable laws and regulations regarding the confidentiality and security of personal data.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may share your personal data as follows:

With our parent company Wipro Limited, affiliates within Capco Group worldwide, if and to the extent required for the Permitted Purposes and legally permitted. In such cases, these entities will then use the personal data for the same purposes and under the same conditions as outlined in this Data Privacy Notice;
We may also instruct service providers (so called data processors) within or outside of Capco Group, domestically or abroad, e.g. shared service centres, to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. Capco will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers;
With courts, law enforcement authorities, regulators or attorneys if legally permitted and necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims;
With credit reference agencies and other companies for use in credit decisions;
We may also share your personal data with third parties if we sell or buy any business, in which case we may disclose personal data to the prospective seller or buyer of such business, along with its professional advisers. If Capco is acquired by a third party, personal data held by us about customers and other contacts will be one of the transferred assets.
Otherwise, we will only disclose your personal data when you direct or give us permission (including when you agree to participate in social/corporate responsibility) or when we are required by applicable law or regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.

HOW LONG DO WE STORE PERSONAL DATA?

We will hold your personal data for as long as necessary to provide the services, products or information you have requested, to administer your business relationship with us and to comply with our legal obligations, resolving disputes and enforcing our policies.

Where your data is processed in accordance with a data processing agreement between us, we will comply with all specified data deletion requirements.
If you have asked us not to communicate with you, we will keep a note of this as long necessary to comply with your request.

YOUR DATA PROTECTION RIGHTS

Your rights may differ depending on applicable data protection local laws. We respect your right to be informed, access, correct, request deletion or request restriction, portability, objection, and rights in relation to automated decision making and profiling, in our usage of your personal information as may be required under applicable law. We also take steps to ensure that the personal information we collect is accurate and up to date. Subject to such laws, you may have the following rights:

To know what personal information we maintain about you
To obtain a copy of your personal information in a structured, commonly used and machine-readable format on request
If your personal information is incorrect or incomplete, to ask us to update it
To object to our processing of your personal information
To ask us to delete or restrict how we use your personal information, but this right is determined by applicable law and may impact your access to some of our services
To access your personal information
To object to processing of your personal information where it is so conducted by automated means and involves any kind of decision-making
To file a complaint for suspected or actual violations of your data protection rights with the relevant supervisory authority.

Right to opt out

Capco respects your privacy considerations and hence provides an option to you, to not provide the data or information sought to be collected.

Further, you can also withdraw your consent which was earlier given to Capco (which shall not affect the lawfulness of processing based on consent before its withdrawal). Please note you can always unsubscribe to marketing communication through clicking unsubscribe available in the marketing communication(s) you receive.

If you are a resident of the US State of California, more information about applicable rights can be accessed here.

CHANGES TO THIS NOTICE

This Data Privacy Notice was last updated on 26 September 2024 and specifically complies with the transparency/notification requirements of the GDPR, those of the CCPA and all applicable data privacy laws. From time to time, we may make change or amend it as required to reflect any changes to the way in which we use your personal data or changing legal requirements. So, you may wish to check back from time to time.

DATA PROTECTION CONTACTS

If you have any questions, comments, complaints, grievances or suggestions in relation to this notice, require an alternative format copy, or any other concerns about the way in which we process information about you, please contact our Data Protection Officer, Steve Martin, at: ask.capco.dpo@capco.com.

You may also have a right to make a complaint to your local data protection supervisory authority:

Capco’s global management is based in the UK, where the supervisory authority is the Information Commissioner’s Office who can be contacted in the following ways:

Post:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, United Kingdom
SK9 5AF

Phone:

0303 123 1113 from the UK or +44 1625 545700 from elsewhere

Website:

www.ico.org.uk

___________________

Capco’s main establishment in the European Union is in Frankfurt, Germany, where the supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information who can be contacted in the following ways:

Post:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden

Phone:

06 11 14 080 from Germany or +49 611 14 080 from elsewhere

Email:

poststelle@datenschutz.hessen.de

Where appropriate, you can also raise a complaint with an EU supervisory authority which is based in the country where:

you are living,
you work, or
the alleged infringement took place.

The current list of EU data protection supervisory authorities can be accessed from here.

___________________

Details of how to raise a privacy complaint relating to our personal data processing in Canada can be found here.
___________________

Details of how to raise a privacy complaint relating to our personal data processing in Brazil can be found here.
___________________

For complaints relating to our personal data processing in Hong Kong, you can contact the Privacy Commissioner for Personal Data in the following ways:

Post:

Privacy Commissioner for Personal Data
Room 1303
13/F, Sunlight Tower
248 Queen’s Road East
Wanchai
Hong Kong

Email:

complaints@pcd.org.hk

Website:

www.pcpd.org.hk

___________________

For complaints relating to our personal data processing in Singapore, you can contact the Singapore Personal Data Protection Commission in the following ways:

Post:

Personal Data Protection Commission
10 Pasir Panjang Road
#03-01 Mapletree Business City
Singapore 117438
Attn: Officer-in-charge, Enforcement

Website: