We collect personal information as part of business process discovery.
We do not process personal information collected to produce any particular outcome or results, which that we would be interested in outside the terms of the subscription agreement governing business process discovery.
Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our UI Portal.
We automatically collect certain information when process owners access their UI portal. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of the UI Portal.
We process your information to provide access to UI Portal so that process owners can configure their business processes, whitelist them, configure security and privacy controls and access reports.
Through the Platform, we process personal, including the sensitive personal information of our customers' clients to provide B2B service and fulfill our contractual obligations with our customers to help with digital process discovery and analytical services and provide necessary actionable intelligence to respective customers for the duration of the contract/subscription agreement. Skan's primary business purpose is to fulfill contractual obligations agreed upon with the customer to help with digital process discovery of customer business processes and analytical services for the duration of the contract. So, the data collection is to provide the B2B service to the customer. The Platform is designed to capture digital processes and extract actionable intelligence which the customer is looking for, for digital transformation. Skan does not have any other secondary purposes for processing.
Customers use Skan's Platform to discover how their business processes are being executed as their staff (aka Participants) execute them through agent software, which sends discovered data to an intermediate server, which many on Customer's network or Skan's Cloud. The intermediate server aka gateway performs several tasks including security and privacy tasks such as anonymizing customer selected data fields and region/image masking. Gateway extracts meta data from anonymized data sets and transfer only meta data to Skan Cloud. To secure the data throughout the chain from the agent to the Skan Cloud, Skan employs multiple methods such as user access control, agent whitelisting, encrypted communications, user and entity identification and access controls, data at rest encryption within Skan Cloud, processing only anonymized meta data in the Cloud.
We do not process personal and sensitive personal information for any other purposes. Personal information that gets collected about participants and customers' end customers if any, are not processed for any personal information-based outcome or results.
We do not share personal information.
We may need to share your personal information in the following situations:
We use essential & performance cookies only.
We do not currently offer social media-based logins.
We may transfer, store, and process your information in countries other than your own.
Every Cloud environment that we set up for our customers is dedicated and not shared with any other customers. All the virtual resources are usually located in the geography of the customer or in the United States. When customers access their specific UI Portal, please be aware that your information may be transferred to, accessed, stored, and processed by our subsidiaries and by those third parties with whom we may share your personal information (see "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" above), located in other countries.
If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these other countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures such as EU's Standard Contractual Clauses enforced through a Data Protection Agreement along with appropriate technical and organizational safeguards to protect your personal information in accordance with this privacy notice and applicable laws.
We keep your information for as long as necessary to fulfill the contractual obligations agreed upon.
We will only keep your personal information along with business process information collected for as long as it is necessary for the purposes set out in this privacy notice and as per respective contractual agreement with the customer. No purpose in this notice will require us keeping your personal information for longer than contractual terms.
Our Services are designed and delivered only for enterprise customers for business process discovery. Process to be discovered, process owners to be provided access to UI Portal and participants whose process execution activities would be captured are all determined by the customer. It may be possible that the business processes our customers choose to study about using our product may contain personal information related to minors. However, Skan does not directly intend to or have a specific purpose for collecting and processing personal information about minors. Any information about minors collected as part of business process discovery are protected and processed in the same manner as described elsewhere in this notice. Skan also provides privacy controls to customers so that they can identify sensitive data fields that can be anonymized irreversibly.
We take appropriate security measures to protect personal information against loss, misuse, and unauthorized access, alteration, disclosure, or destruction. We also have implemented measures to maintain the ongoing confidentiality, integrity and availability of the systems and services that process personal information, and will restore the availability and access to data in a timely manner in the event of a physical or technical incident."
Skan is committed to cooperate with customers wherever and whenever necessary.
Skan may collect and process personal information incidentally as part of business process discovery. The legal basis for the collection is contractual obligations through the enterprise agreement signed up with every customer.
Should you wish to exercise your individual privacy rights, you shall approach your employer, who is our enterprise customer with whom we have a legal contract/subscription agreement to perform process discovery and analytics Services through Skan Platform.
Other than performance of contractual obligations, Skan has no other purpose to process either business process information or the personal information collected as part of process discovery.
Skan does not collect, process and store personal information outside of business process discovery. Personal information collected remains embedded within the business process information based on prior security and privacy controls such as masking and anonymization configured by process owners and labels or fields selected for discovery.
If process owners wish to make any changes to account information or security controls, they can contact email@example.com through their customer success team representative. Personal information of participants or end customers are not stored in any structured fashion on Skan Cloud as part of meta-data processed. However, participants may write to firstname.lastname@example.org through the customer success team representative.
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances.
Should you wish to exercise your individual privacy rights, you should approach your employer, who is our enterprise customer with whom we have a legal contract to perform process discovery and analytics Services through Skan Platform.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
Skan Platform's UI Portal is only accessible and used by process owners, who work for enterprise customers, with whom we have signed an enterprise agreement to provide the Services for the performance of the contract.
UI Portal does not collect and cannot be used to collect personal information of any other data subject.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request
Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.