FactSet Privacy Notice
FactSet Research Systems (“FactSet,” “we” or “us”) is a provider of integrated financial information and analytical applications to the global investment community. We are committed to protecting your data privacy rights, and are providing this Privacy Notice to our clients, suppliers, employees, employment applicants, and other relevant parties so that you know how we collect Personal Data, what types of Personal Data we collect, and how we use and share your Personal Data. If information is associated with an identified or identifiable natural person and is protected as Personal Data under applicable data protection law, it is referred to in this Privacy Notice as “Personal Data.” By visiting this Website (the “Site”), or providing your information to us, you are accepting the practices described in this Privacy Notice.
Applicability of this Privacy Notice
This Privacy Notice applies to Personal Data we collect from various sources, including the following:
- on our public website;
- through our client and supplier-facing applications and tools;
- from communications or applications you send us;
- when you interact with our advertising or applications on third-party websites and service platforms, if they include links to this notice;
- through your contractual relationship with us, as applicable;
- Personal Data we collect from job portals and obtain by working together with headhunters and recruitment agencies; and
- Personal Data you provide to us during the recruitment process; and
- Personal Data we collect from publicly available sources (e.g. websites, online documentation, official reports) and other third-party suppliers of such publicly available Personal Data.
FactSet’s role as a data processor or data controller
Depending on the circumstances, FactSet may process your Personal Data as data controller or as data processor. When FactSet is a processor on another controller’s behalf, FactSet’s processing is governed by terms outlined in a specific data processing agreement with the responsible data controller.
The categories of Personal Data FactSet collects
The Personal Data we process is primarily business contact information, such as username, name and business contact information, from our clients and suppliers and information that our clients, suppliers and other users provide when using our products, accessing our websites, and other applications.
In some cases and subject to a written approval by FactSet, a FactSet client may upload and store its own or another entity or individual’s Personal Data on a FactSet platform or service. For FactSet products where this is possible and was allowed, or for any other scenario where FactSet may act as a processor, the collection of and categories of Personal Data will be governed by a specific data processing agreement between FactSet and the client.
We also collect and collate information (including Personal Data) from third-party suppliers and public sources.
If you navigate through and interact with our Site and some of our products, we may use automatic data collection technologies to collect certain usage information about your equipment, browsing actions, and patterns. Automatic data collection is carried out using cookies and related technologies. For more information, please see our Cookie Policy, which can be accessed here.
When you apply for a position at FactSet we collect all relevant information to assess your job application during the recruiting process. The Personal Data we collect from you includes your name, contact details, work and education background. We may also request references from your former employers and require criminal background checks which might be carried out by third-party background check providers.
FactSet does not market to or knowingly collect personal data of individuals under the age of 18.
How FactSet uses your Personal Data
We process Personal Data primarily to provide our services to our clients, to manage business relationships with third parties, to fulfill our contractual obligations, to manage our recruitment process and to provide and improve our products and offerings.
Specifically, FactSet uses Personal Data to:
- provide client services, such as our SaaS data, analytics, and technology solutions, evaluate and process requests regarding implementation and projects; to process invoices and payments, technical support, or other similar purposes; and to establish and maintain client accounts
- address your inquiries associated with the information you provide to us;
- provide training and after-sales-support on our products and answer to and perform change requests;
- To enable users to access and use web applications hosted by us for and behalf of our clients;
- To allow users of our provided CRM services to upload Personal Data;
- In some cases, to allow client’s end users of our provided CRM services to upload Personal Data;
- communicate with clients and suppliers, including responding to requests for assistance and to update them about the status of their orders by postal mail, email, telephone, or text message;
- investigate, prevent, or act regarding unauthorized use of our services, illegal activities, suspected fraud, or situations involving potential threats;
- provide you with underlying tools and applications helping to implement projects and resolve incidents;
- provide our (content) services to our clients and to report and administer clients’ usage of third-party information products (e.g., real-time data from stock exchanges or licensed data from other data vendors we redistribute etc.);
- to enhance the experience for our users, we use notes relating to support provided to specific employees, advisors, or agents of clients in relation to our products and services for their future use of our services;
- to the extent it is lawful to do so, market and promote our products including through email or equivalent electronic means, to send news and newsletters, special offers and promotions, or to otherwise contact our clients about (new or enhanced) products, services, or information;
- process, evaluate and complete certain transactions involving the Site, and more generally transactions involving FactSet's products and services
- operate, evaluate, maintain, improve, and develop the Site (including by monitoring and analyzing trends, tracking user behavior, access to, and, where lawful to do so, use of the Site for advertising and marketing);
- manage and facilitate the hiring of new employees subject to our job application process. If you accept employment with FactSet, your Personal Data will be processed for the reasons and legal bases set out in our separate Global Employee Privacy Notice, which will be shared with you after you are hired;
- provide users with documentation or communications which they have requested, or which is part of a product;
- correspond with users to resolve their queries or complaints;
- protect the security of the Site, FactSet confidential and proprietary information (which may include Personal Data), and FactSet employees;
- manage, protect against and investigate fraud, risk exposure, claims and other liabilities, including but not limited to violation of our contract terms or laws or regulations;
- share your Personal Data with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case Personal Data held by us about our users may be one of the transferred assets.
Our Legal Basis for processing Personal Data
FactSet relies on different legitimate reasons for processing of Personal Data depending on the business purpose:
- the processing is necessary to perform a contract with you or to take steps to enter into a contract at your request;
- the processing is required to allow you to access and use our services, products, or specific applications;
- the processing is necessary for us to comply with relevant legal obligations;
- the processing is in our legitimate interests, which are not overridden by the interests and rights of the relevant individual whose Personal Data is collected; and
- you have consented to the processing, e.g. for marketing purposes.
Where we rely on our legitimate interests to process Personal Data, those interests are:
- to use supplier, client, and website user Personal Data to conduct and develop our business activities and improve our services to grow our business and profitability; and
- to use supplier Personal Data and publicly available content (which in some instances includes Personal Data) to provide our content services to clients for their business purposes.
Where FactSet stores and processes your Personal Data
We store most information about you in computer systems and databases that either we or our external service providers operate. FactSet maintains offices in many countries around the world, and your Personal Data may be stored and processed outside your home country and transferred to locations where our central operations and servers are operated. We have networks, databases, servers, systems, support, and help desks located at many of our offices.
We use third parties and their tools and applications for cloud storage, technical support and managing our sales activities. We take appropriate steps to ensure that Personal Data is processed, secured, and transferred according to applicable law When we transfer Personal Data overseas, we follow the requirements under applicable data protection laws, such as the legal requirements under the GDPR for transfers from the European Economic Area to other countries in which applicable laws do not offer the same level of data privacy protection.
Retention of Personal Data
We keep Personal Data only for as long as required to fulfill the purposes for which it was collected. In general, we retain Personal Data for a period corresponding to statutes of limitation, for example to maintain an accurate record of client and supplier dealings. In some circumstances we may retain Personal Data for other periods of time, for instance where we are required to in accordance with legal, tax or accounting requirements, or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required in accordance with our document retention policy.
How does FactSet internally transfer and disclose Personal Data?
FactSet is a global company with employees around the world that work to develop, maintain, and provide our services for our clients and users across the world. Transferring Personal Data to central operation and support hubs within FactSet and its affiliates is required to provide our services and offerings. FactSet and all its affiliates have signed an Intra-Group Data Transfer Agreement containing all relevant local legal requirements to ensure your Personal Data receives an adequate level of protection wherever it is transferred or processed within the FactSet group.
FactSet’s Third Party Service Providers and Partners
We may disclose Personal Data to third parties that we have engaged to assist us in providing you with our products and services, consistent with the legal bases outlined above and in compliance with applicable laws. This includes the following service providers:
- billing services;
- payroll providers;
- transaction managers;
- credit verification services;
- market researchers;
- CRM applications;
- oftware and application vendors;
- data center providers and cloud services providers;
- marketing companies;
- IT and infrastructure providers; and
- other third-party service providers
To the extent that third party service providers and partners process Personal Data on behalf of FactSet, we enter into appropriate data processing agreements with them to regulate the processing and ensure the security of Personal Data.
We do not sell or rent Personal Data to third parties for their own use but may provide certain usage information to advertisers to help provide you with relevant advertising where we are allowed to do so. Usage information, as used in this Notice, is anonymized and aggregated data, which does not identify you in the way Personal Data would.
Use of Aggregated or De-identified Data for statistical purposes
We may disclose or use aggregated or de-identified information for statistical purposes or analyses in a way that will no longer refer to an individual and that the results of which are not used for decisions affecting a particular person or groups of persons.
Security
FactSet takes reasonable precautions to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Such precautions include, but are not limited to: implementing access controls, maintaining internal information security and data protection policies, providing periodic training to data handlers, and continuously reviewing our policies and practices against industry best practices. Unfortunately, while we work hard to ensure the security of your Personal Data while it is on our systems, no security measures are perfect, and data transmitted over the Internet is not guaranteed to be 100% secure. We cannot and do not ensure or warrant the security of any Personal Data you transmit, and you do so at your own risk. .
Changes to this Privacy Notice
This Privacy Notice may be amended from time to time. Please review it periodically. Changes will be identified by the date at the top of this page.
Your rights
If you are based in certain geographical locations - such as parts of the U.S., the European Economic Area (EEA), Singapore, India, or the Philippines, and others - you have specific legal rights when it comes to your Personal Data.
You may be able to request, see, update, correct, or delete your information. You can also ask us to limit how we use your information, or object to its use altogether. If FactSet previously relied on your consent to process your Personal Data, you may be able to withdraw that consent and stop us from processing your data. If you wish to exercise these rights, please use the contact information below in the following section.
Please note that we will not discriminate against you in any way if you choose to exercise any of the above rights.
We may need additional information from you to respond to your request for exercise of any of the above rights. We will respond to your verifiable request and act within reasonable time without undue delay, subject to your applicable legislation. If we require additional time, or are unable to act on your request, to disclose and or delete your Personal Data as provided under applicable law, we will inform you without undue delay.
Contacting FactSet
Please also feel free to contact FactSet if you have any questions about this Privacy Notice or FactSet’s privacy practices, or if you are seeking to exercise any of your statutory rights. You may contact us at dataprivacy@factset.com, or at our mailing address below:
FactSet Research Systems Inc.
90 Park Avenue, 10th Floor
New York, NY 10016
USA
Toll-Free Number: +1 800-461-9330
Complaints
If you have a complaint about the way we handle any privacy issue, you may contact us through the details above.
We will consider your complaint and determine whether it requires further investigation or corrective action. If appropriate, we will provide you with information on any actions we have taken.
Data Protection Authority (DPA)
Subject to applicable law, you also have the right to lodge a complaint with your local Data Protection Authority depending on where you reside. If you live in the European Economic Area, you may direct questions or complaints to our lead European Supervisory Authority at:
Hessen Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
+49 (0) 611 1408-0
http://www.datenschutz.hessen.de/
For details on our U.S. Data Privacy Notice Supplement: Your Consumer Privacy Rights. Please click here