Privacy Statement

Personal data relating to business contacts may be visible to and used by PwC users to learn more about an account, client or opportunity they have an interest in, and may be used for the following purposes:

• Developing our businesses and services
• Providing information to you about us and our range of services
• Making personal data available to PwC employees for performing services and for offering new services
• Identifying clients with similar needs

Performing analytics such as on market trends, relationships maps or sales opportunities.

In addition, the PwC CRM uses an algorithm to evaluate the strength of interactions between a PwC user and a contact.  This ranking is primarily based on interaction frequency, duration, recency and response time.   

We will process our business contacts’ personal data based on our legitimate business interests or the consent, if the data subject has been requested to express one. We have an interest in marketing our services or providing communications which we think will be of interest to recipients.

Personal data will be retained on the PwC CRM for as long as it is necessary for the purposes set out above (e.g. for as long as we have, or need to keep a record of, a relationship with a business contact).

We use personal data for the following purposes:

• Providing professional services
  We provide a diverse range of professional services.  Some of our services require us to process personal data in order to provide advice and deliverables.  For example, we will review payroll data as part of an audit and we often need to use personal data to provide global mobility and pensions services.
  
  
• Administering, managing and developing our businesses and services
  We process personal data in order to run our business, including:
  • managing our relationship with clients;
  • developing our businesses and services (such as identifying client needs and improvements in service delivery);
  • maintaining and using IT systems;
  • hosting or facilitating the hosting of events;
  • administering and managing our website and systems and applications.
    
    
• Security, quality and risk management activities
  We have security measures in place to protect our and our clients’ information (including personal data), which involve detecting, investigating and resolving security threats.  Personal data may be processed as part of the security monitoring that we undertake; for example, automated scans to identify harmful emails.  We monitor the services provided to clients for quality purposes, which may involve processing personal data stored on the relevant client file.  We have policies and procedures in place to monitor the quality of our services and manage risks in relation to client engagements.  We collect and hold personal data as part of our client engagement and acceptance procedures.
  
  
• Complying with any requirement of law, regulation or a professional body of which we are a member
  As with any provider of professional services, we are subject to legal, regulatory and professional obligations.  We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal data.

In case we are subject to a legal obligation, by which processing of personal data is required, such as the fulfillment of tax obligations or evidencing or documenting professional services provided, the processing of personal data of the individuals associated with our corporate clients is based on the legal obligation (lawful basis).

We may also process the personal data of individuals associated with our corporate clients based on our legitimate business interests (such as providing services to data subject’s employer )  or the consent, if the data subject has been requested to express one.

We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).   

In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other documentary evidence created in the provision of services does not exceed 10  years.

We use personal data for the following purposes:

●      Providing professional services
We provide a diverse range of professional services.  Some of our services require us to process personal data in order to provide advice and deliverables.  For example, we need to use personal data to provide an individual with tax, social security advice or immigration services.

• Administering, managing and developing our businesses and services
  We process personal data in order to run our business, including:
  • managing our relationship with clients;
  • developing our businesses and services (such as identifying client needs and improvements in service delivery);
  • maintaining and using IT systems;
  • hosting or facilitating the hosting of events; and
  • administering and managing our website and systems and applications.
     
• Security, quality and risk management activities
  We have security measures in place to protect our and our clients’ information (including personal data), which involve detecting, investigating and resolving security threats.  Personal data may be processed as part of the security monitoring that we undertake; for example, automated scans to identify harmful emails.  We monitor the services provided to clients for quality purposes, which may involve processing personal data stored on the relevant client file.  We have policies and procedures in place to monitor the quality of our services and manage risks in relation to client engagements.  We collect and hold personal data as part of our client engagement and acceptance procedures.  
  
  
• Providing our clients with information about us and our range of services
  In accordance with applicable law, we use client contact details to provide information that we think will be of interest about us and our services.  For example, industry updates and insights, other services that may be relevant and invites to events. 
   
• Complying with any requirement of law, regulation or a professional body of which we  are a member
  As with any provider of professional services, we are subject to legal, regulatory and professional obligations.  We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal data.

If the processing of personal data referred to in this section is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of service, the processing is based on contractual lawful basis. If the processing of data is necessary for complying with a legal obligation such as complying with tax law obligations or necessity to evidence and document professional services provided, the processing will be based on the legal obligation.. If personal data are processed for the other purposes specified above we will rely on the legitimate interest basis or the consent, if we asked the data subject for the consent.

We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).   

In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other documentary evidence created in the provision of services does not exceed 10 years.

• Providing professional services We provide a diverse range of professional services (click here for information on our services[1] ).  Some of our services require us to process personal data in order to provide advice and deliverables.  For example, we will review payroll data as part of an audit and we often need to use personal data to provide global mobility and pensions services. 
• Administering, managing and developing our businesses and services We process personal data in order to run our business, including: 
• managing our relationship with clients; 
• developing our businesses and services (such as identifying client needs and improvements in service delivery); 
• maintaining and using IT systems; 
• hosting or facilitating the hosting of events; 
• administering and managing our website and systems and applications. 
• Security, quality and risk management activities We have security measures in place to protect our and our clients’ information (including personal data), which involve detecting, investigating and resolving security threats.  Personal data may be processed as part of the security monitoring that we undertake; for example, automated scans to identify harmful emails.  We monitor the services provided to clients for quality purposes, which may involve processing personal data stored on the relevant client file.  We have policies and procedures in place to monitor the quality of our services and manage risks in relation to client engagements. 
• Complying with any requirement of law, regulation or a professional body of which we  are a member As with any provider of professional services, we are subject to legal, regulatory and professional obligations.  We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal data.
  

If the processing of data, which we obtain in connection with providing services to our clients, is necessary for complying with a legal obligation, such as tax law regulations or necessity to document and evidence professional services provided, the processing will be based on the legal obligation. If the aforementioned personal data is processed for the other purposes specified in this section we will rely on the legitimate interest basis (e.g. providing our services)  or the consent, if we asked the data subject for the consent.

We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).   

In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other documentary evidence created in the provision of services does not exceed 10 years.

• We retain the personal data referred to in this section for as long as is considered necessary for the purpose for which it was collected.

• We use personal data for the following purposes:
• Receiving services
  We process personal data in relation to our suppliers and their staff as necessary to receive the services. For example, where a supplier is providing us with facilities management or other outsourced services, we will process personal data about those individuals that are providing services to us.
  
  
• Providing professional services to clients
  Where a supplier is helping us to deliver professional services to our clients, we process personal data about the individuals involved in providing the services in order to administer and manage our relationship with the supplier and the relevant individuals and to provide such services to our clients (for example, where our supplier is providing people to work with us as part of a PwC team providing professional services to our clients).
  
  
• Administering, managing and developing our businesses and services
• We process personal data in order to run our business, including:
  • managing our relationship with suppliers;
  • developing our businesses and services (such as identifying client needs and improvements in service delivery);
  • maintaining and using IT systems;
  • hosting or facilitating the hosting of events;
  • administering and managing our website and systems and applications.
     
• Security, quality and risk management activities
  We have security measures in place to protect our and our clients’ information (including personal data), which involve detecting, investigating and resolving security threats.  Personal data may be processed as part of the security monitoring that we undertake; for example, automated scans to identify harmful emails.  We have policies and procedures in place to monitor the quality of our services and manage risks in relation to our suppliers.  We collect and hold personal data as part of our supplier contracting procedures.  We monitor the services provided for quality purposes, which may involve processing personal data.
•  
• Providing information about us and our range of services
  Unless we are asked not to, we use business contact details to provide information that we think will be of interest about us and our services.  For example, industry updates and insights, other services that may be relevant and invites to events.
•  
• Complying with any requirement of law, regulation or a professional body of which we  are a member
  As with any provider of professional services, we are subject to legal, regulatory and professional obligations.  We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal data.

If the processing of personal data referred to in this section is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary to be recipient of the service, the processing is based on contractual lawful basis. If the processing of data is necessary for complying with a legal obligation such as complying with tax law obligations or necessity to evidence and document professional services received, the processing will be based on the lawful basis. If personal data are processed for the other purposes specified above we will rely on the legitimate interest basis (such as receiving services, providing services, administration, managing and developing our business, security, quality and risk management activities)  or the consent, if we asked the data subject for the consent.

We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation).   

Personal data may be held for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend our legal rights.

• We use small text files called ‘cookies’ which are placed on your hard drives to assist in personalising and enriching your browsing experience by displaying content that is more likely to be relevant and of interest to you.   The use of cookies is now standard operating procedure for most websites.  However if you are uncomfortable with the use of cookies, most browsers now permit users to opt-out of receiving them.  You need to accept cookies in order register on our website.  You may find other functionality in the website impaired if you disable cookies. After termination of the visit to our site, you can always delete the cookie from your system if you wish.
• You can find out more details regarding our use of cookies on our Cookies page.

the collection).  Typically, personal data is collected to:

• register for certain areas of the site;
• subscribe to updates;  
• enquire for further information;
• distribute requested reference materials;
• submit curriculum vitae;
• monitor and enforce compliance with our terms and conditions for use of our website;
• administer and manage our website, including confirming and authenticating identity and preventing unauthorised access to restricted areas, premium content or other services limited to registered users;
• aggregate data for website analytics and improvements.

Unless we are asked not to, we may also use your data to contact you with information about PwC’s business, services and events, and other information which may be of interest to you.  Should visitors subsequently choose to unsubscribe from mailing lists or any registrations, we will provide instructions on the appropriate webpage, in our communication to the individual, or the individual may contact us by email sk-privacy@sk.pwc.com

Our websites do not collect or compile personal data for the dissemination or sale to outside parties for consumer marketing purposes or host mailings on behalf of third parties.  If there is an instance where such information may be shared with a party that is not a PwC member firm, the visitor will be asked for their consent beforehand.

We will process personal data of visitors to our website based on our legitimate business interests or the consent, if the data subject has been requested to express one. For example, we have an interest in making sure our marketing is relevant for specified individuals, so we may process personal data to send our marketing that is tailored to the interests of a data subject.

Personal data collected via our websites will be retained by us for as long as it is necessary (e.g. for as long as we have a relationship with the relevant individual).