Vodafone Procurement Company S.à r.l (“VPC”) are the controller of your personal information
Our office is located at RCS Luxembourg B 97.920, 15 Rue Edward Steichen, 2540 Luxembourg.
In this privacy statement:
“we/us” means Vodafone Group Services Limited;
“third party” means someone who is not you or us or a part of Vodafone Group; and
“Vodafone” or “Vodafone Group” means Vodafone Group Plc and any company or other organisation in which Vodafone Group Plc owns 50% or above of the share capital.
1.1 Personal information we collect about you
1.1.1 Vodafone will process your personal information based on
Vodafone’s legitimate business interests, for example to streamline the procurement process and facilitate onboarding of employees and vendors to the Vodafone Future of Procurement platform hosted on Pega Cloud. Whenever we rely on this lawful basis to process your data, we assess our business interests to make sure they do not override your rights
1.1.2 The types of personal information we may collect about you are, for example:
We collect and process your name and contact details for user authentication purposes when you log in to the platform, as well as sending notifications and assigning workflows.
1.2 How we use information about you
We may process the personal information that we collect about you for the following purposes:
- User authentication
- Sending notifications
- Assigning workflows
1.3 Who we share information about you with
Pega Cloud is the third-party processor that provides the underlying infrastructure for the procurement platform as a service. The personal data and information you provide will be stored in a database which is located on servers hosted and operated by Pega Cloud in the European Union. Vodafone and Pega Cloud are committed to maintaining stringent privacy and security practices including those related to notice, choice, onward transfer, security, data integrity, and access.
1.4 Where we process information about you
In doing the above, we may need to transfer personal information about you to other companies in the Vodafone Group or third parties located (or whose servers may be located) in countries outside of the European Economic Area (EEA). If we send personal information about you to a country that is not in the EEA, we will make sure that there is a legal basis for such transfer and that your personal information is adequately protected as required by applicable law, for example, by using standard agreements approved by relevant authorities and by requiring the use of other appropriate technical and organizational measures to protect your personal information.
1.5 How long we keep information about you
Pega Cloud will process the personal data for the duration of the contract. Your personal data will be fully and securely destroyed or erased when and as soon as they are no longer needed.
Vodafone will support you in exercise of any rights you may have as a data subject under applicable law, i.e., your:
- right of access to your data;
- right to rectification of incorrect data;
- right to erasure of data (“right to be forgotten”);
- right to ask for restriction of contested data;
- right to have third parties who received incorrect, incomplete or contested data informed of any rectifications or blocking of your data;
- right to data portability;
- right to object to processing;
- right not to be subject to automated decision-making including profiling (in fact we will not use your data or any information in your report for such decision-making).
To exercise your rights you can contact your local Privacy Officer by emailing click here
If we don’t take action based on any of the above requests, we will inform you of the reasons why.
If you are still unhappy about how we are processing your personal information, you can contact The Information Commissioner’s Office at click here .
This privacy statement might be updated from time to time, so we’d encourage you to check it regularly.