Ivanti Privacy Policy and Notice

This Ivanti Privacy Policy and Notice (the “Notice”) is designed to provide transparency into Ivanti’s privacy practices and principles in a format you can navigate, read, and understand. 

This Notice applies to all the personal data that you provide and Ivanti collects through its products, apps, services, websites, events, and other communications. References to Ivanti products in this statement include Ivanti software, apps, services, events, and websites.

This Notice describes how Ivanti collects, uses, shares, and secures personal data. It also describes your choices regarding use, access, and correction of your personal data. For additional information, please visit Ivanti’s Privacy & Legal web page.

Ivanti may provide you with additional privacy documentation when you use a specific site, product, or service from Ivanti.  In that case, the documentation you received should be read in conjunction with this Notice. 

Where granted by applicable law, you may have the following rights with respect to your personal data:

• of access,
• to rectification,
• to erasure,
• to restriction of processing,
• to data portability,
• to object to certain types of processing,
• to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, and
• to lodge a complaint with a supervisory authority.

Upon request Ivanti will provide you with information about whether Ivanti holds any of your personal data. You can access, correct, update, or request deletion of your accounts or personal data by managing your account settings or by emailing Ivanti at: [email protected] or by visiting the Ivanti Privacy Center.

Ivanti will respond to requests in accordance with the requirements of applicable data protection law. Please note that in order to fulfill your request, Ivanti may need you to provide certain information to verify your identity.

When Ivanti receives a request to exercise a privacy right, Ivanti will review information Ivanti has collected about you (if any) with identifying information you may have provided Ivanti (such as a login, email address, mailing address, zip code, or transaction or order number) to authenticate your identity. If you use an authorized agent to submit a request, Ivanti may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. Ivanti may also require you to directly confirm with Ivanti that you provided the authorized agent permission to submit the request. There may be situations where Ivanti cannot grant your request. In such a situation, Ivanti will explain Ivanti’s reasoning to you and will honor your right to appeal when applicable.

If you are a product end user of an Ivanti business customer, you will need to contact the business contact directly to exercise your rights.

If you feel that Ivanti has not been able to assist with your complaint or concern, and you are located in the EEA or the UK, you have the right to lodge a complaint with the competent supervisory authority.

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), Ivanti commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ivanti commits to resolve DPF Principles-related complaints about our collection and use of your personal information.  EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact us by emailing [email protected] or via mail to: Attn: Data Protection Officer, Ivanti, Inc, 10377 South Jordan Gateway, Suite 110, South Jordan, Utah 84095, USA.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ivanti commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to International Centre for Dispute Resolution-American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://go.adr.org/dpf_irm.html for more information or to file a complaint.  The services of ICDR-AAA  are provided at no cost to you.

You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other mechanisms set out in this Notice. For more information, please see Annex 1 of the DPF Principles, available here.

If you have previously signed up to receive emailed information about our products or special offers, and no longer wish to receive these communications, you may opt-out through the “Unsubscribe” link included in each email. You may also submit a request through the Ivanti Privacy Center.

If you register for an account on the Ivanti Community site, you may be listed in Ivanti’s publicly accessible member directory. You can control this by customizing your profile visibility in your profile settings. If you need assistance with your profile settings, or wish to have your account closed, please contact Ivanti Support through the Ivanti Community.

If a third party has provided your personal data to Ivanti as part of a database, you should direct your requests to that third party.

You can also see a description of your privacy rights in the section titled, “Your Privacy Rights” above. 

No Obligation to Provide Personal Data

In general: the provision of your personal data is voluntary. You are neither legally nor contractually obliged to do so. Ivanti does not contractually oblige you to provide Ivanti with personal data.

Many Ivanti products require some personal data to provide you with a service. If you choose not to provide the personal data necessary for Ivanti to provide you with a product or feature, you cannot use that product or feature and Ivanti may need to suspend or cancel it. Likewise, where Ivanti needs personal data to enter or carry out a contract with you, and you do not provide the personal data, Ivanti will not be able to enter, or perform under, the contract. Where providing personal data is optional, and you choose not to share personal data, features like personalization that use such personal data will not work.

Ivanti automatically collects statistical data that may include personal data when you use Ivanti products. Ivanti also collects personal data when you ask for or consent to receive products or marketing materials from Ivanti. Ivanti may associate that data with personal data Ivanti collects in other ways or receive from third parties. The data Ivanti collects depends on the context of your interactions with Ivanti and the choices you make, including your privacy settings, email subscription settings, and the products and features you use. Ivanti processes personal data in a manner that is compatible with the initial purpose of the personal data collection.

When you use Ivanti products, you provide Ivanti with personal data that may include the following:

Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.

Credentials. Passwords, password hints, and similar security information used for authentication and account access.

Demographic data. Data about you such as your age, gender, country, and preferred language.

Payment data. Data to process payments, such as your payment instrument number (e.g., a credit card number), and the security code associated with your payment instrument.

Subscription and licensing data. Data about your subscriptions, licenses, and other entitlements to our products.

Interactions. Data about your use of Ivanti products. In some cases, this is data you provide to use the products. In other cases, such as error reports, this is data Ivanti generates. Other examples of interactions data include:

Device and usage data. Data about your device and the product and features you use, including information about your hardware and software, how Ivanti products perform, as well as your settings. For example, device, connectivity, and configuration data; error reports and performance data; troubleshooting and help data.

Location data. Data about your device’s location, which can be either precise or imprecise. For example, Ivanti collects location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and wi-fi hotspots. Location can also be inferred from a device’s IP address or data in your account profile that indicates where it is located with less precision, such as at a city or postal code level.

Other input. Other inputs provided when you use Ivanti products.

Content. Content of your files and communications you input, upload, receive, create, and control. Please be aware that any data you provide in public areas, including Ivanti websites, may be read, collected, and used by others who access them.

Feedback and ratings. Data you provide to Ivanti and the content of messages you send to Ivanti, such as feedback, survey data, and product reviews you write.

Mobile Apps. When using an app on a mobile device, Ivanti may automatically collect data about the device running the app, such as the type of device, the version of the operating system, the device identifier (“UDID”) and mobile network information. Ivanti may also record information such as how often the app is used, the events that occur within the app, aggregated usage, performance data, any exceptions that occur within the app, and the source from which the app was downloaded.

Metadata and other information. Ivanti may collect metadata and other information to analyze and benchmark your use of Ivanti products. Ivanti may use that information to generate reports, analyze product usage, administer, and improve the products, both for your individual use and Ivanti’s user base. Ivanti may also use the information to improve or create new products and to make recommendations to you and other Ivanti customers about how to better use Ivanti products and services.

Data collected when you visit Ivanti websites. Ivanti’s websites gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, browser language, device identifier, Internet service provider (ISP), referring/exit pages, duration of visit, pages viewed, operating system, date/time stamp, clickstream data, crashes, system activity, hardware settings, the date and time of requests and other usage data.

Data that Ivanti collects and processes when being contacted otherwise. If you contact Ivanti over the telephone or via facsimile, Ivanti may also log information such as your phone number, forwarding calls, SMS routing information, and types of calls.

Data We Process on Behalf of our Business Customers. Data Ivanti collects through Ivanti products under the direction of its business customers shall be limited to such data necessary for the purpose of providing the product and for purposes identified in the contract between Ivanti’s business customer and Ivanti. Ivanti has no direct relationship with the business customer’s end users whose personal data Ivanti processes. Ivanti may transfer personal data to companies that help us provide Ivanti’s products. Transfers to subsequent third parties are covered by the underlying agreements with Ivanti’s business customers.

Database information. As a business customer, if you receive technical support for an Ivanti product, you may also provide Ivanti with database information that contains personal data of third parties such as your employees, clients, and end users. Ivanti has no control over what you provide to Ivanti, nor what steps you have taken to ensure that the data is reliable for its intended use, non-infringing, accurate, complete, and current. If you provide any personal information about any third parties to Ivanti, you must have an appropriate legal basis for processing as required by applicable law. You must also provide instructions on how Ivanti is to use that information.

Ivanti obtains personal data from third parties. Ivanti protects personal data obtained from third parties according to the practices described in this Notice, plus any additional restrictions imposed by the source of the personal data. Third party data that Ivanti obtains may include, but are not limited to, the following:

• Data brokers from which Ivanti purchases demographic data to supplement the data Ivanti collects.
• Service providers that help Ivanti determine your device’s location.
• Partners with whom Ivanti offer co-branded services or engage in joint marketing activities.
• Publicly available sources, such as open government databases.

If not otherwise described in this Notice, Ivanti may process personal data collected from or about you for any of the following purposes:

• To inform you about Ivanti products, services, and events by means of the Ivanti newsletter; sending you surveys about Ivanti products and your use of Ivanti products; or other information. Sending you such information is based on your consent.
• To respond to and record your requests, whether it be a product purchase, a downloaded whitepaper, or product demonstrations and evaluations.
• To provide Ivanti’s products and communicate with you to fulfill any contractual obligations Ivanti may have with you, including providing product testing, post-purchase technical support, implementation services, and updates for the products.
• Processing of payments.
• To provide online forums such as user groups and bulletin boards.
• To deliver live or online events such as training seminars or conferences, including third party events Ivanti sponsors.
• To manage and verify your account and the identity of users of the products.
• To allow you unhindered and trouble-free access to Ivanti websites and to improve the security of Ivanti systems.
• To provide videos on the Ivanti websites.
• To respond to other support requests; requests for product-related information; and to feedback, survey data, and product reviews, including for product improvement purposes.
• To analyze your use of Ivanti products to operate, maintain, improve, and create new products.
• To process your data to comply with statutory reporting requirements, court summonses, court decisions or other court orders.
• To protect against, investigate and prevent fraudulent, unauthorized, or unlawful acts against us, you, and third parties.
• For any other legal, business, or marketing purposes that are not inconsistent with the terms of this Notice.

Ivanti relies on a variety of legal reasons and permissions to process personal data. These legal reasons and permissions include when you have given your consent, as part of the performance of a contract, to comply with legal obligations, and for other legitimate interests.

Additional legitimate interests consist of:

• Optimizing and increasing the visibility of Ivanti’s website.
• Increasing the attractiveness and usability of Ivanti’s services.
• Enabling and promoting the use and sale of Ivanti’s products.
• Conducting direct marketing activities and to inform you about our products and services. In doing so, Ivanti will also send you information that is appropriate to your interests, which Ivanti determines from the data available to Ivanti, e.g. from products you have used, events or other campaigns for which you have registered, as well as product interests indicated at registration.

Ivanti shares your personal data as necessary, to complete any transaction or provide any product you have requested or authorized or otherwise fulfill your request, with Ivanti-controlled affiliates and subsidiaries. Ivanti may share your personal data with Ivanti’s business partners, resellers, and subcontractors who use your personal data to fulfill product orders, process payments, develop and improve products, contact you about product orders or in connection with the performance, operation, and support of the products, perform marketing or consulting services, respond to your requests, or as otherwise appropriate in order for Ivanti to provide you with the products.

As defined by certain state laws, Ivanti does not believe Ivanti has sold (for monetary or other valuable consideration) or shared (for cross-context behavioral advertising purposes) your personal data in the last 12 months.

Ivanti may furthermore disclose your personal data to:

• Service providers who host or facilitate the delivery of online training, seminars, and webinars.
• Third parties who conduct data analytics.
• An acquiring company in the event of a merger, acquisition, or other sale of all or a portion of our assets.

Subject to applicable law or as otherwise agreed to by you, the use and disclosure of all personal data transferred to a third party will be subject to this Notice.

Ivanti may disclose your personal data in the following cases:

• When required by law, regulation, legal process, or other legal requirement.
• When Ivanti believes that disclosure is necessary or appropriate to respond to an emergency.
• To protect Ivanti’s rights, your safety, or the safety of others.
• To investigate fraud.
• To enforce Ivanti’s agreements, policies, and terms of use.
• To comply with a judicial proceeding, subpoena, court order, law enforcement or government request, or national security requirements.
• When you consent to such disclosure.

Ivanti implements reasonable and appropriate technical and organizational measures to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into due account the risks involved in the processing and the nature of the personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. If you have any questions about our security, you can contact our Security Team at [email protected].

Ivanti products are not intended for children. Ivanti does not knowingly collect data from children. Do not use our products or provide us any data unless you are capable of consent in your territory or country.

Ivanti and our partners use technologies such as “cookies” and “web beacons” to collect data from you when you use our products. Ivanti uses cookies and similar technologies to analyze trends, administer and track the use of our products, gather demographic information about our user base, remember user settings, improve the functionality of our products, and understand product and Internet usage.

Ivanti may use cookies and similar technologies to personalize your experience at our websites (e.g., to recognize you by name when you return to our site or to prefill a form to download a whitepaper). Ivanti may also use cookies to help us offer you information about products, programs, or services that may be of interest to you. In some cases, Ivanti also use cookies to enable relevant advertising on websites owned by third parties.

You can prevent cookies from being stored on your computer or device by configuring your browser to not accept cookies or to notify you when a cookie is being placed on your hard drive. You can learn more about how to manage and remove cookies in your browser or device's online help. You can also visit http://www.aboutcookies.org for more information on how to manage and remove cookies across a number of different internet browsers.

If you choose not to accept cookies at all, you can still use Ivanti products. However, not all features of Ivanti products will function as intended if you reject cookies.

Ivanti websites also gather certain data automatically and store it in log files. This data may include internet protocol (IP) addresses, browser type, browser language, device identifier, Internet service provider (ISP), referring/exit pages, length of visit, pages viewed, operating system, date/time stamp, clickstream data, crashes, system activity, hardware settings, the date and time of requests and other usage data.

Your Internet browser and mobile device may allow you to adjust your browser settings so that “do not track” requests are sent to the websites you visit. Ivanti respects your wishes and will not track user activity once “do not track” signals have been activated. However, Ivanti’s third-party service providers may not respond to “do not track” signals.

Ivanti products may include social media features, such as the Facebook “Like” button. These features may collect your IP address and which page you are visiting on Ivanti’s website and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on Ivanti’s websites. Your interactions with these features are governed by the privacy policy of the company providing them. Ivanti encourages you to read each company’s privacy policy.

Ivanti may also partner with a third party to display advertising on Ivanti’s website or to manage Ivanti’s advertising on other sites. Ivanti’s third-party partner may use cookies or similar technologies in order to provide you advertising based upon your browsing activities and interests. You may utilize the DIGITAL ADVERTISING ALLIANCE (DAA) SELF-REGULATORY PROGRAM to manage your level of desired advertising and opt out at any time of interest-based advertising in the U.S. or the European Interactive Digital Advertising Alliance in European Union and United Kingdom, depending upon your location. Please note you will continue to receive generic ads.

You can manage your settings at any time by visiting the “Cookie Settings” link in the footer of Ivanti’s website.

Google Analytics

Ivanti uses Google Analytics, an analyzing service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA (“Google”). Google Analytics uses “cookies.” The data generated by the cookie on your use of Ivanti’s website will generally be transmitted to and stored by Google on servers in the USA.

IP-anonymization is activated on Ivanti’s website, i.e. your IP address will be shortened within the area of Member States of the European Union or European Economic Area. Only in exceptional cases will the whole IP address be first transferred to a Google server in the USA and shortened there.

Google will use this data on behalf of Ivanti for the purpose of evaluating your use of Ivanti’s website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage. Pseudonymous user profiles of the users can be created from the processed data. The IP-address that your browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current web browser: https://tools.google.com/dlpage/gaoptout?hl=en.  

Further information on the use of personal data for advertising purposes by Google, setting and objection options can be found on the Google websites, for example under:

• https://www.google.com/intl/en/policies/privacy/partners/ (“How “Google uses information from sites or apps that use our services”)

• https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”)

• https://www.google.com/settings/u/0/ads/authenticated?hl=en (“Determine what advertising Google shows you”)

Vimeo

On Ivanti websites you can watch videos uploaded to Vimeo (Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA) and integrated on our website via an iFrame. The iFrames are set to connect first when you click the “Play” button.

If you are logged in to your Vimeo account at the same time as pressing “Play”, Vimeo can associate your surfing behavior with your user profile. You can prevent this data processing by logging out of your account before visiting Ivanti websites.

As this is a third-party service, Ivanti has no control over the processing of this data by Vimeo. The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights and settings to protect your privacy can be found at: https://vimeo.com/privacy.

YouTube

On Ivanti websites, you can watch videos uploaded to YouTube. The entity providing the Service is Google LLC, a company operating under the laws of Delaware, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043. These videos are uploaded to YouTube and integrated on our website via an iFrame. The iFrames are set to connect first when you click the “Play” button.

If you are logged in to your YouTube account at the same time as pressing “Play”, YouTube can associate your surfing behavior with your user profile. You can prevent this data processing by logging out of your account before visiting Ivanti websites.

As this is a third-party service, Ivanti has no control over the processing of this data by YouTube. The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as your rights and settings to protect your privacy can be found at: https://safety.google/privacy/data/.

Global Privacy Control

If you would like to control the use of cookies and similar internet technologies on your computer, you can use web browsers listed with the Global Privacy Control tool built into them.  These browsers limit cookie technologies and how they work while you browse the internet.  You can find a list of browsers with the Global Privacy Control tool built into it here: https://globalprivacycontrol.org/#download.

The use of website and web browsers located at the site above is at your own risk, subject to the agreements from those web browsers’ developers, and subject to their privacy policies.  Ivanti does not accept any liability associated with your use of the website above or the content you may download from that website. 

Your personal data may be transferred to other countries including countries outside the EU and the EEA (the latter also referred to as "third countries"). These countries may apply privacy standards that are different from those of your place of residence. Please note that data processed in another country may be subject to different laws and may be accessible to the authorities, courts, law enforcement agencies and supervisory authorities of those countries.

A transfer to third countries will only take place if an adequate level of protection or appropriate safeguards for a secure level of protection are in place, e.g. in the form of standard contractual clauses or other data transfer mechanism.

Data Privacy Framework

Ivanti, Inc., and its US affiliates, complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Ivanti has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  Ivanti has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

The Federal Trade Commission has jurisdiction over Ivanti’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Regarding onward transfers, Ivanti shall remain liable under the DPF Principles if a third party, acting as an agent on behalf of Ivanti, processes such personal information in a manner inconsistent with the DPF Principles, unless Ivanti proves that it is not responsible for the event giving rise to the damage.

Ivanti, Inc.
10377 South Jordan Gateway
Suite 110
South Jordan, Utah 84095, USA
Phone: +1-888-253-6201
Email: [email protected]

Data Protection Officer

The data protection officer of the controller and other entities of Ivanti group can be contacted by email to [email protected] and by a postal mail to:

Ivanti
Group Data Protection Officer
Attn: Privacy​
10377 South Jordan Gateway
Suite 110
South Jordan, Utah 84095, USA

Contacting is possible in the respective local language.

Recruit/Applicant/Candidate

Business Customers and their Product End Users

Contractor/Vendor

Web User