Qlik Privacy & Cookie Notice
Introduction
1. Scope of this Notice
This Notice describes Qlik’s privacy practices for Personal Data collected by Qlik websites (“Sites”) as well as other activities, such as if you visit our offices, attend a Qlik event or otherwise interact with Qlik and provide Personal Data, such as corresponding by email, unless such activities are covered by our other notices outlined below. The relevant Qlik data controller of your Personal Data will likely be the Qlik entity in your local country. Please read this Notice in full. By using our Sites or participating in other activities with Qlik described below, you consent to the collection, creation, sharing and use of information as described in this Notice, where consent is required by relevant law.
For privacy information relating to Qlik’s products and services, please see the Qlik Product Privacy Notice. If your organization has an agreement with Qlik governing the Personal Data processing by Qlik products and services, such as our Data Processing Addendum, then that agreement applies with regard to its subject matter. For privacy information relating to job candidates and recruitment, please see the Qlik Recruitment Privacy Notice.
Qlik also operates a public forum on Qlik Community. The purpose of this forum is to discuss our products and services. Please note that any Personal Data you choose to post in Qlik Community may be read or used by other visitors (for example, to send to you unsolicited messages). Qlik Community forum users should not upload sensitive or confidential content on this public forum.
For Qlik partners, Qlik operates our Qlik Partner Portal, which is run on technology hosted by a third party, Zift. This Notice applies to Personal Data collection and processing by Qlik through the Qlik Partner Portal, whereas partners should consult Zift’s privacy policy which applies to any data processing by Zift on behalf of Qlik partners, such as for Qlik partner marketing services. For indirect customers (through a Qlik partner), while Qlik’s collection and processing of your Personal Data is explained below in this Notice, any direct Personal Data sharing by you with a Qlik partner will be governed by that Qlik partner’s policies/your agreement with them.
As a convenience to visitors to our Sites, we may also provide links to other websites that are not governed by this Notice. These linked websites are not under the control of Qlik and we are not responsible for the content on such websites or the protection/privacy of any information which you provide while visiting such websites.
2. Personal Data we may collect
The Personal Data Qlik may collect about you will depend on your interaction/relationship with us. It may include:
if you complete a webform on our Sites (e.g., to attend a Qlik event or create a Qlik Account), attend a Qlik event (online or in-person) or office, or otherwise send this data to Qlik (e.g., by email, telephone, exchange of business cards), identifying/contact information such as your name, job title, work email, organization/employer name, work telephone, IP address (auto-populate country and city/state) and location information such as work address;
if you or your organization purchases Qlik products or services, financial or billing data, such as name, address, credit card number or bank account information (though these will typically be those of your employer organization);
if you attend a Qlik event (in-person or online) or our offices, your attendance details (e.g., entry time, identification);
if you avail of Qlik services, such as attend a training class or submit a technical support case, your activity with Qlik to interact with and take part in these services;
your image and/or voice, such as for phone/video call recordings (for training, quality assurance and administration purposes), if you attend a Qlik event (event recording) or office (e.g., CCTV), post an image/recording to a Qlik Site (e.g., add a profile photo to Qlik Community) or you otherwise send a recording/image to Qlik. Qlik events may be recorded or photographed, such as to create promotional material; if you are participating in such an event and do not wish to be recorded/photographed, please inform the host on arrival;
if you participate in a Qlik Academic program, we may collect education information (e.g., proof of enrollment);
if you take a Qlik exam, we may collect images, video, and audio recordings of you, your workstation area, and your computer screen to monitor, as well as usage information (e.g. time spent on particular pages, and/or applications and websites used during an exam) in order to ensure your compliance with our policies during the exam. We may also collect images or information from your identity documentation for identity verification;
information from otherwise engaging/interacting with you, such as your contributions to the Qlik Community forum, your feedback to us through our Sites and responses to any promotional or survey communications;
Qlik may also acquire your Personal Data in the course of mergers or acquisitions of or with another company or business.
We may also collect Personal Data about you from third parties, such as from colleagues of yours at your organization (e.g., when registering multiple participants at an organization/company for Qlik training, or where your details are provided by a colleague as a contact for your organization’s account), public sources (e.g., your organization’s website, LinkedIn), vendors (e.g., web analytics tools, data enrichment providers) and Qlik partners (e.g., where your contact details are provided to enable delivery of Qlik software, for customer success purposes and/or in relation to maintenance/support, including renewal and/or cancellation of same). We also maintain social media pages and may collect Personal Data from you when you interact with these or communicate with us through our social media pages.
3. Use of Personal Data
Depending on your relationship with Qlik, we may use your Personal Data for different purposes. Where required by applicable law in relation to the particular use, we will obtain your consent to collect and use your Personal Data. Otherwise, we will rely on another legal basis, such as in connection with a contract or for our legitimate interests, as set out below.
Perform a contract: We may process your Personal Data in connection with a contract with you or your organization, such as to process relevant payments, deliver (customer) or receive (vendor) products/services, manage our relationship with you as a Qlik partner under our Qlik partner agreement with you, and manage our relationship with you or your organization generally throughout the contract lifecycle, including managing renewals.
Operate our Sites: We may use your Personal Data to provide our Sites, content and offerings (e.g., downloads, registrations for accounts or profiles, such as a Qlik Account), including necessary functionality, content customization (e.g., based on what we think will interest you), and functionality to enhance ease of use (e.g., make the Sites easier for you to use by not making you enter information more than once, etc.). Unless such processing is in connection with a contract or our legitimate interests, it will be on the basis of your consent.
Improve our Sites: We process your interactions with our Sites, content and offerings (e.g., Qlik support) to assess and improve these and the user experience, such as by use of cookies (see section 6 below). This data is typically aggregated unless Personal Data is required for the particular processing operation. We process your Personal Data for this purpose for our legitimate interests of maintaining and improving our Sites and providing tailored content, or where required by law, on the basis of your consent.
Manage contact requests: We may use your Personal Data to reply to contact initiated by you, such as through a webform, chatbot, survey responses or Qlik support (through Qlik Community). We process your Personal Data for these purpose for our legitimate interest in replying to/fulfilling your request, collecting survey responses and to carry out our contractual obligations under the applicable terms (e.g., providing Qlik support).
Other communications: We may use your Personal Data to otherwise communicate with you to manage our relationship with you/your organization, such as to manage our offerings, for customer success purposes, to contact you regarding updates to our offerings you may be interested in, and to run surveys and contests. Such processing will be to fulfil our contractual obligations, where necessary for our legitimate interests or, where legally required, with your consent.
Call recording: We may record phone or video calls (e.g., Zoom) for training, quality assurance and/or administration purposes. We process this Personal Data on the basis of our legitimate interests however, if required under applicable law, we will obtain your consent or give you the option to object to the call being recorded.
Marketing: We may use your Personal Data to contact you for marketing purposes, such as to alert you to product upgrades, special offers, updated information/services from Qlik, and to contact you (e.g., by phone or email) regarding your interest in our offerings and/or invite you to Qlik events. Such contact will be on the basis of legitimate interest or, where legally required, on the basis of your consent. To opt-out of marketing contact, please unsubscribe here http://www.qlik.com/opt-out.
Academic Program: We may process your Personal Data to operate our Academic Programs (e.g., to validate that you are a student and eligible for our Academic Program, verify your identity, or monitor compliance with our program policies). Such processing will be on the basis of our legitimate interests or to perform a contract with you under the applicable terms of service.
Manage premises: Where you attend our offices, we may process your Personal Data to administer our premises and fulfil our legal obligations regarding health and safety, and to manage the security of our premises to ensure there is no unauthorized access. Such processing will be on the basis of our legitimate interests and/or to carry out our legal obligations.
We may also combine Personal Data we hold about you. For example, we may combine your B2B contact with your usage data relating to our offerings and our Sites for the purposes above, such as to improve our Sites and our offerings, as well as to create more tailored experiences by providing content that may be of interest to you. We may also use your Personal Data to fulfil any other purposes disclosed to you at the time of collection or as otherwise required/permitted by applicable law.
4. Sharing Personal Data
within the international group of Qlik affiliate companies, including our Talend affiliate companies, and companies that we acquire or merge with in the future after they are made part of our corporate group, to operate our business and provide our Sites, products and services;
with authorized Qlik vendors, advisors and contractors providing services on our behalf (such as a technology or professional service providers) to operate our business, Sites, products and services;
if you use or complete training provided by us, such as through the resources at
https://learning.qlik.com or Talend Academy, your training results may be shared with your organization or third-party training organizers of theirs, for example training or subscription administrators. In addition, Qlik may use third-party training providers to perform the training; if this applies to you particular training, your personal data will be shared with the relevant provider;
third-party networks/websites so that we can advertise on their platforms;
with our Talend affiliated companies if your organization may be interested in Talend’s offerings;
with Qlik partners (such as distributors and resellers of Qlik software, Qlik compatible software and/or services) in order to follow up (e.g., by email, post or phone) on your interest in Qlik’s products or Qlik-compatible products, or to provide services (e.g., consulting, technical support, training) where such services are to be carried out by Qlik partners. A list of Qlik’s partners can be found on our Find a Partner Page;
Qlik may also disclose Personal Data to comply with legal requirements, such as in relation to legal proceedings or investigations by governmental or law enforcement agencies, or to meet tax or other reporting requirements, including to (a) protect and defend the rights or property of Qlik, including the defence and management of legal claims and investigations, (b) act in urgent circumstances to protect the personal safety of users our Sites, our Qlik team members, or the public, (c) as part of a merger or change in corporate ownership or control, and/or (d) as otherwise permitted or required by applicable law.
5. Where we may transfer Personal Data
To operate our business your Personal Data may be transferred from your country (e.g., the UK/European Economic Area) to a destination which may not be considered by relevant authorities of your country to have an equivalent level of privacy protection. In such instances, in addition to the other measures outlined in this Notice, Qlik will put in place appropriate safeguards for such transfers, for example, UK/EU standard contractual clauses.
The U.S. operating affiliates of the Qlik group comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. These affiliates have certified to the U.S. Department of Commerce that they adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. These affiliates have certified to the U.S. Department of Commerce that they adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. These affiliates commit to subject to the DPF Principles all personal data received from the EU, UK, and Switzerland in reliance on the relevant DPF.
If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/. To view Qlik’s Data Privacy Framework Policy, please visit: https://www.qlik.com/us/legal/legal-policies.
6. Cookies and similar technologies
As is true of most websites, when you visit our Sites, cookies will be placed on your device (computer, mobile or tablet). A "cookie" is a small text file that is placed on your device by websites you visit. Some of the cookies we use are strictly necessary to operate our Sites. Others relate to the Site's performance, functionality and/or to advertising. Information relating to a cookie or similar technology may include identifiers such as IP address, and information like general location, browser type and language, and internet activity such as timestamps. Qlik uses the following types of cookies and similar technologies on our Sites:
A. Strictly Necessary: These cookies enable the Sites to function correctly and deliver the services and products you have requested. These cookies do not gather information about you that could be used for marketing or remembering other websites you have visited on the internet.
B. Functional: These cookies do things like remember your preferred language, understand your preferences and associate users to forms submitted to enable pre-completion of subsequent forms as well as improve and customize your experience on our Sites.
C. Performance: We use third-party analytics tools to help us analyze how our Sites and other electronic mediums are used, such as allowing us to compile reports on website activity, providing us other services relating to website activity and internet usage and whether email communications are opened or left unread.
D. Advertising: These cookies may be set on our Sites by our advertising partners. They may be used to build a profile of your interests and/or show you relevant adverts on other sites. If you wish to not have your online information used for this purpose you can also visit resources such as https://optout.networkadvertising.org and/or https://www.youronlinechoices.eu (please note these and similar resources do not prevent you from being served ads as you will continue to receive generic ads).
Cookies can be session-based (which disappear once you close your device or browser) or persistent (which remain on your device afterwards). Qlik may also rely on cookies or similar technology operating on other websites, for example to display our adverts to you. You can generally disable the use of cookies by changing your browser settings. To disable non-essential cookies for qlik.com sites (for example to turn off advertising cookies), and to view their retention periods and relevant third-party operators/recipients, you can use access our Cookie Preference Center. You may also adjust your browser settings, however if you choose to not have your browser accept cookies from the Qlik Sites, you will not be able to experience a personalized visit and it may limit your ability to use some features on our Sites. For more information about cookies, visit https://www.aboutcookies.org. We may also use pixels, web beacons and similar technologies on our Sites and in emails, for example in a marketing email that notifies us if you click on a link in the email.
7. Protection of Personal Data
Qlik takes appropriate precautions to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction. Such measures may include (i) using security controls such as, passwords, firewalls and/or encryption, (ii) restricting Personal Data to those with a legitimate purpose in receiving/accessing it, (iii) deidentifying Personal Data, or assigning codes or pseudonyms when the personal identifiers are not required for the purpose at hand, (iv) using data retention controls to ensure that Personal Data is not kept for longer than is necessary, (v) providing training and internal policies to team members to embed privacy and security across our organization, and (vi) putting in place relevant procedures (such privacy and security vetting) and contracts relating to the use and protection of Personal Data with third parties. Further information on Qlik’s privacy and security programs can be found on our Trust pages.
8. How long we retain Personal Data
Qlik will retain and process Personal Data for a period of time consistent with the purpose of collection (see section 3 above) and/or as long as necessary to fulfil our legal obligations. We determine the applicable retention period by taking into account the (i) amount, nature and sensitivity of the Personal Data, (i) relevant use, including whether we can achieve the use through other means (e.g., by instead using deidentified data); (iii) potential risk of harm from unauthorized use or disclosure of the Personal Data, and (iv) applicable legal requirements (e.g., statutes of limitation). After the applicable retention period, we will delete the Personal Data, hold it in a form that no longer identifies you or, if we are unable for technical reasons to delete/deidentify it entirely, will implement appropriate measures to prevent any further use of such Personal Data. For example, checks are made on a regular basis for any contact details that have remained inactive in our sales and marketing databases, and if they are inactive for two years, we delete them.
9. Your rights relating to your Personal Data
You may have certain rights relating to your Personal Data, subject to applicable privacy laws. For example, under the UK/EU GDPR and similar laws, you may have the right to:
request access to and/or obtain a copy of your Personal Data;
request corrections to your Personal Data if it is inaccurate;
request further information about the processing of your Personal Data by Qlik;
request deletion of your Personal Data that is no longer necessary to fulfil the purposes for which it was collected, or does not need to be retained by Qlik for other legitimate purposes;
where we process your Personal Data on the basis of consent, withdraw this consent at any time. If you withdraw your consent to Qlik to processing your Personal Data, this will not affect any processing which has already taken place;
request a restriction or raise an objection to the processing, sharing and/or further use of your Personal Data;
if applicable, that your Personal Data be transferred to another company/organization;
not be subject to a decision based solely on automated processing, including profiling, which produces legal effects ("Automated Decision-Making"). Please note that Automated Decision-Making currently does not take place on our Sites or other activities covered in this Notice;
if you feel that your request/complaint has not been dealt with satisfactorily, make a compliant to your relevant privacy/data protection authority; and
not be discriminated against for exercising the above rights.
These rights will depend on which privacy/data protection laws are applicable to your Personal Data (typically, where you are resident), the type of Personal Data involved and the reason it is processed. There may be circumstances when Qlik is unable to accommodate requests, either wholly or in part, for reasons under local law. Depending on applicable law, this may include situations where the information contains Personal Data of other individuals and it is not possible to separate out your Personal Data, if Qlik cannot validate the request, if you ask us to delete Personal Data which we are required by law or have compelling legitimate interests to keep, or where information cannot be disclosed for legal, security, or other reasons based on local law. Qlik will endeavor to advise you of any reason for denying or restricting any Personal Data request. Where legally permitted under relevant law you may designate an authorized agent to submit a privacy request on your behalf. In order to verify this agent request, you/agent will need to complete the Privacy Request form and validate the request through the email validation link sent to email address associated with the request. To make a request complete the Privacy Request form, validate the request through the email validation link and Qlik will respond to any legitimate requests in line with local laws. Further contact details are also available in section 11 below. We will contact you if we need further information, for example to verify your identity and/or place of residence to authenticate and/or process your request. Qlik does not discriminate in response to privacy rights requests.
If your request is to opt-out/unsubscribe from marketing contact from Qlik, please visit http://www.qlik.com/opt-out.
The California Consumer Privacy Act (“CCPA”) requires businesses provide Californian data subjects with disclosures relating to the sharing of, access to, and deletion of Personal Data that is collected. Please see the information in this Notice above on these topics. For the processing purposes of this Notice, we will not collect or otherwise process “sensitive” data or protected characteristics under Californian law for the purpose of inferring characteristics about an individual.
For more information regarding your privacy rights, we encourage you to you to visit the website of your local privacy/data protection authority, such as that of Brazil, California (USA), EU, Singapore and the UK.
10. Children's Privacy
The Sites and our customer offerings are intended for a general audience, and Qlik does not knowingly or intentionally collect information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA” or similar global privacy legislation) from anyone under the age of 16, and we request that anyone under the age of 16 does not submit Personal Data to us. If you become aware that a child has provided us with Personal Data, please contact us at privacy@qlik.com. If we become aware that someone under the age of 16 has submitted to us Personal Data which we control, we will delete this information from our records.
11. Contact Information
For privacy inquiries or complaints, or to otherwise contact Qlik’s Data Protection Officer, please email privacy@qlik.com. Qlik’s Data Protection Officer can also be reached at FAO Data Protection Officer, QlikTech UK Limited, 1020 Eskdale Rd, Winnersh, Wokingham RG41 5TS, UK or by telephoning +44 (0)1189 229228. For California residents, you may alternatively contact us by calling 866-I-OPT-OUT and enter the Service Code 231. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy, however if you believe that we have not been able to respond to your concern or complaint to your satisfaction, you may, where entitled under applicable law, contact your relevant data protection/privacy authority, such as those of the EU (contact details here) or the UK (contact details here).
Changes to this Notice
Qlik reserves the right to modify or update this Notice from time to time to reflect changes in technology, our practices, law and other factors impacting the collection/use of Personal Data. You are encouraged to regularly check this Notice for any updates. We may also collect, use and disclose Personal Data for other purposes otherwise disclosed to you at the time of collection/processing in a supplementary notice.
Last updated: 17th June 2024