Accruent Privacy Notice

Who Are We?

We are Accruent, LLC (“Accruent,” “we,” “us,” “our”). We provide software solutions for managing physical resources - real estate, facilities, and assets. As permitted by applicable law, we may use your Personal Information jointly with our affiliated operating companies worldwide and Fortive Corporation, our parent company.

This Notice applies to Accruent, LLC and to its affiliated operating companies, including RedEye Apps Pty Ltd (ACN 160 928 898), a company incorporated in Queensland, Australia. Where a specific Accruent entity is the controller of your Personal Information, that entity is responsible for its processing and this Notice applies to it.

Accruent’s address:
Accruent LLC
Domain 3
11501 Domain Drive, Suite 160
Austin, TX 78758, USA

Email: legal@accruent.com
Phone: 512.861.0726

Fortive Corporation’s address:
6920 Seaway Boulevard
Everett, Washington, 98203
USA

What Does This Privacy Notice Cover?

We take your privacy seriously. This notice explains the types of Personal Information that we collect about you; where we collect Personal Information about you from; how and why we collect and use your Personal Information; when, why, and with who we will share your Personal Information; the different rights and choices you have when it comes to your Personal Information; and how you can contact us.

What Personal Information Do We Collect About You?

It is routine for us to collect, process, and store Personal Information about you over the course of your relationship with us.

As used in this Notice and its Addendums, “Personal Information” (or “Personal Data”) means information or an opinion that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or reasonably identifiable individual, and, where applicable law so provides, a household. It does not include deidentified or aggregated information, or public information lawfully available from governmental records.

The following chart describes the categories of Personal Information we may have collected about you in the past 12 months:

* “Sold” and “shared” have the meanings given to them under applicable US state privacy laws. “Shared” includes disclosure for cross-context behavioural advertising.

Additional collected information may include (1) any Personal Data entered into free text fields within our Service or when submitting customer service requests to us, and (2) if you are a customer of ours, any other Personal Data that you collect from employees, agents, contractors, and other applicable individuals and provide to Accruent for the purpose of providing Services. In exceptional cases we may also collect and process sensitive Personal Data about you, but only where we inform you in advance and you have given us your explicit consent.

Location Data Collected By Our Mobile Applications

Certain Accruent mobile applications collect location data from your device in order to deliver location-dependent features such as field service dispatch, asset location and site check-in. Collection depends on the permissions you grant on your device and on the configuration selected by the client that administers your account. You can withdraw location permissions at any time through your device settings, although some features of the Services may not function as intended if you do.

What Categories of Personal Information Will You Collect in The Next 12 Months And Why?

We will continue to collect the same categories of Personal Information listed in the chart above, for the same purposes. If this should change, we will issue an updated Privacy Notice.

How Long Do We Keep Your Personal Information?

How long we keep your Personal Information will depend on the purpose for which we use it.

We only keep your Personal Information for as long as is reasonably necessary for the purposes set out in this Notice and applicable Addendums and to fulfill our legal obligations. We maintain an internal retention schedule. In determining the appropriate retention period we consider the nature, sensitivity and volume of the Personal Information; the purposes for which we process it and whether those purposes can be achieved by other means; any ongoing business need for the information; applicable statutory and regulatory retention requirements, including those relating to tax, employment, and health and safety; and the limitation periods for potential or actual disputes, investigations and regulatory proceedings.

Where we hold Personal Information on behalf of a client as a processor or service provider, retention and deletion are governed by our agreement with that client and by the Accruent Data Protection Addendum, rather than by this Notice.

Where Do We Collect Personal Data About You From?

We may collect Personal Data about you from the following sources: directly from you (this is information you provide to us); from an agent or third party acting on your behalf, e.g., from one of our recruitment agencies; through publicly available sources, such as LinkedIn or even by word of mouth; using CCTV cameras (where we have cameras on our premises, your image and movements will be recorded);from your device, where you use one of our mobile applications. See “Location Data Collected By Our Mobile Applications” above; and automatically, through cookies and similar technologies when you use our websites and Services

Additional Facts About How We Share Your Personal Information

The third parties with whom we share your Personal Information are bound to comply with similar and equally stringent undertakings of privacy and confidentiality.

We also share your Personal Information with third parties in the following circumstances: to comply with legal obligations; when we believe in good faith that an applicable law requires it; at the request of governmental authorities or other third parties conducting an investigation; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; to otherwise protect the rights, property, safety, or security of third parties, visitors to our websites, our businesses, or the public.

We do not grant access to your Personal Information to any other third parties unless we say so in this Privacy Notice or unless required by law.

We Do Not Knowingly Collect Personal Information of Minors

Our Services are not directed toward minors under the age of 18 and we do not knowingly collect or sell the Personal Information of minors.

How Do We Keep Your Personal Information Secure?

We ensure the security of your Personal Information by implementing a specific set of technical and organisational security measures that are based on controls published by the Center for Internet Security. These controls call for the use of encryption, firewalls, and other measures that ensure we provide a level of security appropriate to the risk presented by a particular situation. We implement and maintain reasonable security appropriate to the nature of the Personal Information that we collect, use, retain, transfer, or otherwise process. Our reasonable security program is implemented and maintained in accordance with applicable law.

While we are committed to developing, implementing, maintaining, monitoring, and updating a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to vulnerabilities, criminal exploits, or other factors that cannot reasonably be prevented. Accordingly, while our security program is designed to manage data security risks and help prevent data security incidents and breaches, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

What Happens If There Is a Data Breach?

We maintain a data breach response plan. Where a data breach involving your Personal Information is likely to result in a risk or harm to you of the kind that applicable law requires us to notify, we will notify you and the relevant supervisory authority within the timeframes that law prescribes. Where we hold Personal Information on behalf of a client, we will notify that client without undue delay and provide the information reasonably required for the client to meet its own notification obligations.

Who Do We Share Your Personal Information With?

We may share your Personal Information with third parties who provide services on our behalf to help with our business activities. Examples of third party service providers include email service providers to send out emails on our behalf, an employment management provider, or a credit card processing provider to process payments for certain transactions. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality.

We may disclose your Personal Information (a) as required by law to comply with a subpoena, or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate or protect against fraud or any technical or security vulnerabilities, respond to an emergency or a government request, or otherwise to protect the rights, property, safety, or security of third parties, visitors to our website, our business, or the general public, and (b) to any other third party with your prior consent to do so.

We share your Personal Information with our other Fortive Group companies for internal reasons, primarily for business and operational purposes.

As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your Personal Information will be disclosed to such entity.

If any bankruptcy or reorganization proceeding is brought by or against us, all such Personal Information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties.

No third parties have access to your Personal Information unless we specifically say so in this Notice or applicable Addendums, or if the law requires such access.

What About Marketing?

Accruent would like to contact you from time to time about our Services and promotional offers by email, text message, telephone, and mail. Where we have already collected valid marketing permissions from you, you can always unsubscribe or opt out at any time by clicking the “Unsubscribe” link in any of our communication or by contacting us using the details at the end of this Privacy Notice.

We endeavor in good faith to adhere to self-regulatory advertising principles, such as the Digital Advertising Alliance’s Principles. If you are interested in learning more about and/or opting out of online behavioral advertising, sometimes called interest-based advertising, we encourage you to visit one of the advertising industry-developed opt-out pages, such as youradchoices.com or aboutads.info. Please note that while we provide these links for your convenience, we do not have access to, or control over, these third parties’ use of cookies or other tracking technologies.

Do We Respond To “Do Not Track” Signals?

How Do You Access or Request Deletion of Your Personal Information?

What Rights Do You Have In Relation To The Personal Information We Hold On You?

Residents of certain jurisdictions may have the following additional privacy rights.

Your Right To Request Disclosure of Information We Collect and Share About You. We are committed to ensuring that you know what information we collect about you. You can submit a request to us for the following information: the categories of Personal Information we’ve collected about you; the categories of sources from which we collected the Personal Information; the business or commercial purposes for which we collected or sold the Personal Information; the third parties with whom we shared the information; and the specific pieces of information we collected. We are also committed to ensuring that you know what information we share about you. You can submit a request to us for the following further information: the categories of Personal Information (if any) about you that we have sold, the third parties to whom we sold that Information, and the categories of Personal Information sold to each third party; and the categories of Personal Information that we have shared with Service Providers who provide services to us.

Your Right To Request The Deletion Of Personal Information We Have Collected FromYou. Upon your request, we will delete the Personal Information we have collected about you, except for situations where specific information is necessary for us to: provide you with a good or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law. The law also permits us to retain specific Personal Information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.

Your Right To Correct Inaccurate Personal Information. You have the right to ask us to correct Personal Information we hold about you that is inaccurate, taking into account the nature of the information and the purposes for which we process it.

Your Right To Limit The Use And Disclosure Of Sensitive Personal Information. Where we collect sensitive Personal Information, you have the right to ask us to limit its use and disclosure to those purposes permitted by applicable law. We do not use or disclose sensitive Personal Information for purposes beyond those permitted without your consent.

Your Right To Ask Us Not To Sell Your Personal Information. We do not sell Personal Information to third parties, but we may share information with our parent company or any affiliated companies. Where applicable law treats disclosure for cross-context behaviouraladvertising as “sharing,” you may opt out using the cookie preference controls on our websites or by contacting us using the details below.

We Are Committed To Honoring Your Rights. We are committed to providing consumer control over their Personal Information. If you exercise any of the rights explained in this Privacy Notice, we will continue to treat you fairly.

How Can You Make A Request To Exercise Your Rights or Contact Us?

How Will We Handle A Request To Exercise Your Rights?

We’ll respond as soon as we can, and in any event within the period applicable law allows. That period is one month for requests under the EU or UK GDPR, 45 days for requests under US state privacy laws, and 30 days for requests under the Australian Privacy Principles and the LGPD. Where applicable law permits an extension and your request is complex or we have received a number of requests from you, we may take longer.We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations.

In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.

How Will We Verify Your Identity When You Submit An Access or Deletion Request?

We will take reasonable steps to verify your identity before acting on a request, proportionate to the sensitivity of the information requested. Where we have reasonable doubts about your identity, we may ask for additional information. The verification steps described in this section apply to requests made under US state privacy laws.

Requests For Specific Pieces of Personal Information. We will ask you for at least three pieces of Personal Information and endeavor to match those to information we maintain about you. Additionally, we require that you provide a declaration attesting to your identity, signed under penalty of perjury. This declaration requirement does not apply to requests made under the EU or UK GDPR, the LGPD, or the Australian Privacy Principles. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial. Additionally, we will treat the request as one seeking disclosure of the categories of Personal Information we have collected about you and endeavor to verify your identity using the less-stringent standards applicable to such requests.

Requests For Categories of Personal Information Collected About You. We will ask you for at least two pieces of Personal Information and endeavor to match those to information we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.

Requests For Deletion of Personal Information We Have Collected From You. We will ask you for at least two pieces of Personal Information and endeavor to match those to information we maintain about you. If we are unable to verify your identity with the degree of certainty required before providing you with the information requested, we will notify you to explain the basis of our denial.

What About Household Personal Information?

Do We Make Automated Decisions Concerning You?

Do We Use Cookies To Collect Personal Data On You?

Do We Use Artificial Intelligence?

Some of our Services include artificial intelligence features, including Crue, our AI assistant. These features are powered by machine-learning models hosted by our service providers, currently Microsoft (through Microsoft Foundry and Microsoft Copilot Studio), which are identified on our subprocessor list. When you use an AI feature, the content you submit and the outputs generated are processed to provide the feature, to maintain the security of the Services, and to comply with law.

We do not use your Personal Information, including content submitted to or generated by AI features, for training of any foundation model or other general-purpose AI model, and we do not permit our service providers to do so. We do not sell Personal Information for AI training.

Where an AI feature processes Personal Information on behalf of one of our business customers, that processing is governed by our agreement with the customer, including the Accruent Data Protection Addendum, and the customer controls that data. If you use our Services through your employer or another organization, please direct privacy questions about that use to them.

Where you interact directly with an AI system, such as a chatbot, we will make that clear to you at or before the start of the interaction. AI-generated outputs may contain inaccuracies and should be reviewed before you rely on them.

What About Changes To This Privacy Notice?

What Does the GDPR Addendum Cover?

In addition to the obligations set forth in the Accruent Privacy Notice, this Addendum explains how long we keep your Personal Data for; sets out the legal basis we have for using your Personal Data; explains the effect of refusing to provide the Personal Data requested; and explains where we store your Personal Data and whether we transfer your data outside of the European Economic Area.

What Personal Data Do We Collect About You?

We will collect certain Personal Data about you in the course of your relationship with us, which may include the categories of Personal Information set forth in the table on the Accruent Privacy Notice.

What Legal Basis Do We Have For Using Your Personal Data?

We process your information: to be able to provide you with Services in line with our Terms & Conditions via our website; as is necessary for the performance of the contract with you or to take steps at your request prior to entering into a contract; to comply with our legal obligations; to protect your vital interests and the vital interests of others; as is necessary for us to carry out our functions as a global business, including profiling related to your Personal Data. While there are some risks with this type of activity, on balance, we consider the risk to your rights of data protection is outweighed by the significant benefits in providing Services to a relevant and interested marketplace. You have the right to object, on grounds relating to your situation, at any time to the processing of your Personal Data based on legitimate interests. If you notify us of any health or disability requirements, then this may involve the processing of more detailed Personal Data, including sensitive data such as health information that you or others provide about you. In that case we always ask for your consent before undertaking such processing and you have the right to withdraw your consent at any time. We also process your Personal Data on the basis ofyour consent for us to process your Personal Data for a particular purpose.

What Happens If You Do Not Provide Us With The Information We Request Or Ask That We Stop Processing Your Information?

We have statutory and contractual obligations that require us to process your Personal Data. If you don’t provide the Personal Data requested, we may not be able to fulfill our contract with you or perform our obligations to you or related others.

Where Do We Store Your Personal Data? Do We Transfer Your Personal Data Outside The EEA?

We store your personal data safely at our premises, in contracted storage facilities, with our service providers, or on our servers within the country where we are based and otherwise within the European Economic Area (EEA). We strive to process your Personal Data within the country where we collected it or within the EEA. If we or our service providers transfer Personal Data, where relevant, outside of the EEA, we will always require that appropriate safeguards are in place to protect the Personal Data that is transferred. For example, a portion of our centralisedCompliance, Marketing, and Finance functions are performed outside of the EEA, in the USA, so we have put in place safeguards to protect Personal Data exported from the EEA that is processed in or accessed from the USA. You can obtain a copy of the safeguards in place for such transfers by contacting us using the details at the end of this Privacy Notice.

What Rights Do You Have In Relation To The Personal Data We Hold On You?

By law, you have a number of rights when it comes to your Personal Data. Further information and advice about your rights can be obtained from the data protection regulator in your country. These rights include: (1) the right to be informed; (2) the right of access; (3) the right to rectification; (4) the right to erasure; (5) the right to block processing; (6) the right to data portability; (7) the right to oppose to processing; (8) the right to lodge a complaint; (9) the right to withdraw consent; (10) the right to request anonymization; and (11) the right to request information of third-party public and private entities with whom we have shared data, each as described on this page.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except where such a decision is permitted by Article 22 of the GDPR. Where any such decision is made, you have the right to obtain human intervention, to express your point of view, and to contest the decision. As stated above, we do not make decisions of this kind.

How Can You Make A Request To Exercise Your Rights or Contact Us?

If you have questions on the processing of your Personal Information, would like to exercise any of your rights, or are unhappy with how we’ve handled your Personal Information, please contact us here: Attention: Accruent Legal Department, Domain 3, 11501 Domain Drive, Suite 160, Austin, TX 78758 USA. Or at legal@accruent.com with subject line: “Attention: Legal - GDPR Request.” We are committed to ensuring that our communications are accessible to people with disabilities. If you’re not satisfied with our response to any complaint or believe our processing of your information does not comply with applicable data protection laws, you can make a complaint to the data protection regulator in your country.

What Does the CCPA Addendum Cover?

In addition to the obligations set forth in the Accruent Privacy Notice, this Addendum explains how we keep your Personal Information secure and sets out your rights under specific California laws.

What Personal Information Do We Collect About You?

We will collect certain Personal Information about you in the course of your relationship with us, which may include the categories of Personal Information set forth in the table on the Accruent Privacy Notice.

How Do We Keep Your Personal Information Secure?

Our reasonable security program is implemented and maintained in accordance with applicable law and relevant standards as outlined in the report issued by the California Attorney General in February 2016. Specifically, among other safeguards, our reasonable security program implements and maintains all 20 of the Center for Internet Security’s Critical Security Controls for Effective Cyber Defense identified in Appendix A of the California Attorney General Report. As noted in that report, “there is no perfect security,” and reasonable security is a process that involves risk management rather than risk elimination. While we are committed to developing, implementing, maintaining, monitoring and updating a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to vulnerabilities, criminal exploits or other factors that cannot reasonably be prevented. Accordingly, while our reasonable security program is designed to manage data security risks and thus help prevent data security incidents and breaches, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

Automated Decisionmaking Technology

We do not use automated decisionmaking technology to make significant decisions concerning consumers, as those terms are defined in the CCPA regulations. If we begin to do so, we will first provide the pre-use notice required by the CCPA regulations and honor the access, opt-out, and appeal rights that apply.

California Shine The Light

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to annually request, free of charge, information about the Personal Information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year. No information is shared with third parties for their own marketing purposes.

How Can You Make A Request To Exercise Your Rights or Contact Us?

If you have questions on the processing of your Personal Information, would like to exercise any of your rights, or are unhappy with how we’ve handled your Personal Information, please contact us here: Attention: Accruent Legal Department, Domain 3, 11501 Domain Drive, Suite 160, Austin, TX 78758 USA. Or at legal@accruent.com with subject line: “Attention: Legal - CCPA Request.” We are committed to ensuring that our communications are accessible to people with disabilities.

Authorized Agents – Additional Verification Required

What Does the LGPD Addendum Cover?

In addition to the obligations set forth in the Accruent Privacy Notice, this Addendum sets out the legal basis we have for using your Personal Data; explains the effect of refusing to provide the Personal Data requested; and explains where we store your Personal Data and whether we transfer your data outside of Brazil.

What Personal Data Do We Collect About You?

We will collect certain Personal Data about you in the course of your relationship with us, which may include the categories of Personal Information set forth in the table on the Accruent Privacy Notice.

What Legal Basis Do We Have For Using Your Personal Data?

We process your information: to be able to provide you with Services in line with our Terms & Conditions via our website; as is necessary for the performance of the contract with you or to take steps at your request prior to entering into a contract; to comply with our legal obligations; to protect your life and physical safety and/or the life and physical safety of others; as is necessary for us to exercise our rights in a judicial, administrative, or arbitral procedure; as is necessary for us to carry out our functions as a global business, including profiling related to your Personal Data. While there are some risks with this type of activity, on balance, we consider the risk to your rights of data protection is outweighed by the significant benefits in providing Services to a relevant and interested marketplace. You have the right to oppose to processing on grounds that processing was not established in accordance with the LGPD. If you notify us of any health or disability requirements, then this may involve the processing of more detailed Personal Data, including sensitive data such as health information that you or others provide about you. In that case we always ask for your consent before undertaking such processing and you have the right to withdraw your consent at any time.

What Happens If You Do Not Provide Us with the Information We Request or Ask That We Stop Processing Your Information?

We have statutory and contractual obligations that require us to process your Personal Data. If you don’t provide the Personal Data requested, we may not be able to fulfill our contract with you or perform our obligations to you or related others.

Where Do We Store Your Personal Data? Do We Transfer Your Personal Data Outside of Brazil?

We store your Personal Data safely at our premises, in contracted storage facilities, with our service providers, or on our servers within the country where we are based. If we or our service providers transfer Personal Data, where relevant, outside of Brazil, we will always require that appropriate safeguards are in place to protect the information that is transferred. For example, a portion of our centralized Compliance, Marketing, and Finance functions are performed in the United States, so we have put in place safeguards to protect Personal Data exported from Brazil that is processed in or accessed from the USA. You can obtain a copy of the safeguards in place for such transfers by contacting us using the details at the end of this Privacy Notice.

What Rights Do You Have In Relation To Your Personal Data That We Hold?

By law, you have a number of rights when it comes to your Personal Data. Further information and advice about your rights can be obtained from the National Authority of Data Protection (ANPD). These rights include: (1) the right to be informed; (2) the right of access; (3) the right to rectification; (4) the right to erasure; (5) the right to block processing; (6) the right to data portability; (7) the right to oppose to processing; (8) the right to lodge a complaint; (9) the right to withdraw consent; (10) the right to request anonymization; and (11) the right to request information of third-party public and private entities with whom we have shared data, each as described on this page.

You also have the right to request the review of decisions taken solely on the basis of automated processing of your Personal Data that affect your interests, including decisions intended to define your personal, professional, consumer, or credit profile, under Article 20 of the LGPD. As stated above, we do not make decisions of this kind.

How Can You Contact Us?

If you have questions on the processing of your Personal Information, would like to exercise any of your rights, or are unhappy with how we’ve handled your information, please contact us here: Attention: Accruent Legal Department, Domain 3, 11501 Domain Drive, Suite 160, Austin, TX 78758. Or at legal@accruent.com with subject line: “Attention: Legal - LGPD Request.” We are committed to ensuring that our communications are accessible to people with disabilities. If you’re not satisfied with our response to any complaint or believe our processing of your information does not comply with applicable data protection laws, you can make a complaint to the National Authority of Data Protection (ANPD).

What Does the Australia Addendum Cover?

In addition to the obligations set forth in the Accruent Privacy Notice, this Addendum:

Who Are We and Why Does the Privacy Act Apply to Us?

This Australia Addendum applies to RedEye Apps Pty Ltd (ACN 160 928 898, ABN 57 160 928 898), a company incorporated in Queensland, Australia, and to Accruent, LLC and its affiliated operating companies to the extent they carry on business in Australia. Each is an “APP entity” for the purposes of the Privacy Act and is bound by the APPs. We do not rely on the small business operator exemption.

How This Addendum Interacts With the Privacy Notice

What Kinds of Personal Information Do We Collect and Hold?

The kinds of Personal Information we collect and hold are set out in the categories table in the Accruent Privacy Notice, and include contact and business information, account and authentication information, professional information such as operator, licence or certification numbers, online and device information, usage and log data, location data collected by certain mobile applications, CCTV images, and any Personal Information contained in support requests, free-text fields and documents that a client chooses to submit to the Services.

Our Services are not designed as a repository for Personal Information. What is submitted to the Services is determined by our clients in their sole discretion, and documents submitted to the Services may contain Personal Information such as the names, signatures and contact details of individuals.

How Do We Collect and Hold Personal Information?

We collect Personal Information directly from you when you contact us, register for an account, use the Services, attend an event, or subscribe to our communications. We also collect it from an agent or third party acting on your behalf, from publicly available sources such as professional networking sites, from CCTV cameras at our premises, and automatically through cookies and similar technologies when you use our websites. Where it is lawful and practicable to do so, we collect Personal Information directly from the individual concerned.

We hold Personal Information in electronic form in accordance with applicable data protection laws in a manner consistent with the technical and organisational measures described in the Accruent Privacy Notice and the Accruent Security Addendum.

Why Do We Collect, Hold, Use and Disclose Personal Information?

Can You Deal With Us Anonymously or Using a Pseudonym?

Do We Collect Sensitive Information?

Do We Disclose Personal Information Overseas?

Yes. We are likely to disclose Personal Information to recipients located outside Australia, including to other Accruent and Fortive group companies and to service providers who host, support and secure the Services.

Before disclosing Personal Information to an overseas recipient we take steps that are reasonable in the circumstances to ensure the recipient does not breach the APPs in relation to that information, including by entering into written agreements that impose data protection obligations materially consistent with those we are subject to.

How Can You Access and Correct Your Personal Information?

You may request access to the Personal Information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. You can make a request using the contact details below. We will respond within a reasonable period and, in ordinary circumstances, within 30 days. We may need to verify your identity before acting on a request. If we refuse your request in whole or in part, we will give you written reasons and tell you how you can complain about our decision, except where it would be unreasonable to do so.

Where a client has submitted your Personal Information to the Services, that client determines how it is used and we will refer your request to them and assist as reasonably required.

What About Direct Marketing?

How Can You Make a Privacy Complaint?

If you believe we have breached the APPs, you can make a complaint by contacting our Legal Department using the details below. Please include enough detail for us to understand and investigate your complaint.

We will acknowledge your complaint within 5 business days and aim to provide a substantive response within 30 days. If we need longer, we will tell you why and give you a revised timeframe. We will investigate your complaint, tell you the outcome and, where we have got something wrong, tell you what we are doing to put it right.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC), online at oaic.gov.au, by telephone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.

What Happens If There Is a Data Breach?

Do We Make Automated Decisions About You?

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing of your Personal Information.

How Can You Contact Us?

If you have questions about the processing of your Personal Information, would like to exercise any of your rights, or wish to make a privacy complaint, please contact us here:

Attention: Accruent Legal Department

Domain 3, 11501 Domain Drive, Suite 160, Austin, TX 78758 USA

Email: legal@accruent.com, with subject line “Attention: Legal — Australia Privacy Request”

Changes to This Australia Addendum