KASEWARE PRIVACY POLICY

Data Privacy Framework Program

Kaseware complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (collectively, the “DPF Program”). Kaseware has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal information received from the EU in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Kaseware has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles may be collectively referred to as “Principles.” If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles (including the UK Extension) and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/ for broad program information and https://www.dataprivacyframework.gov/s/participant-search to view the complete list of participating organizations.

Kaseware has committed itself to the Principles of the DPF program as reflected in this Privacy Notice, and you can find information relevant to the DPF Program throughout this Privacy Notice, including, but not limited to: (i) the types of personal information collected by Kaseware; (ii) the purpose of processing personal information; (iii) the rights you may have with regard to your personal information based on the jurisdiction in which you live; (iv) a method of contacting Kaseware and exercising those rights; (v) the third parties to which your personal information may be disclosed; and (vi) your choices with regard to your personal information and how you can exercise those choices with Kaseware. Pursuant to the DPF Program, Kaseware remains liable for transfers of certain personal information to third party’s processing personal information on our behalf.

Under the DPF Program, Kaseware is subject to the investigatory and enforcement power of the Federal Trade Commission (“FTC”). In addition, if you have a complaint or concern that arises under the DPF Program that Kaseware cannot resolve to your satisfaction, Kaseware has committed to working with the panel established by the EU Data Protection Authorities for independent dispute resolution. As described in the DPF Program, individuals may invoke binding arbitration, and you should visit the DPF Program website linked above for the most up-to-date information regarding that binding arbitration. In addition to the purposes described in “How We Share Your Personal Data,” be aware that in certain, limited circumstances, public authorities in the U.S., including but not limited to, the U.S. Federal Government, may make lawful requests of Kaseware to obtain certain personal information which Kaseware must comply with.

If you have any concerns or complaints regarding our processing of your personal data, please contact us as described in the “How to Contact Us” section below and we will do our best to answer any question and resolve any complaint to your satisfaction.