Privacy Policy
NAVA Software Solutions and its direct and indirect subsidiaries, as well as international branch offices (collectively, "NAVA"), are dedicated to complying with all applicable legal and regulatory data protection and privacy standards where it conducts business. This Privacy Policy ("Policy") establishes the basic standards for NAVA's collection, processing, and other uses of personal data, including sensitive personal data ("Personal Data"), about individuals such as NAVA associates, business contacts, customers, or vendors ("Individuals").
Other firm entities under NAVA's management will be required to follow the principles outlined in this Policy.
Privacy Principles
Personal Data will be handled by NAVA in compliance with the following principles. Through suitable contractual arrangements, NAVA will guarantee that its business partners and vendors adhere to the principles of this Policy as well as applicable legal and regulatory compliance standards.
1. Legality of Processing
NAVA will collect, store, process, use, transfer, analyze, or otherwise handle ("Process" or "Processing") Personal Data in accordance with applicable legal requirements for legitimate business or compliance purposes, or if individuals have provided consent to the Processing. NAVA will limit the Processing of Personal Data in terms of scope and duration, as is necessary for the intended purpose.
2. Transparency
Individuals will receive information from NAVA that describes the scope and purpose of processing, as well as who to contact if they have questions about privacy or data protection, in compliance with any legal requirements.
3. Confidentiality and Security
NAVA intends to ensure the security and confidentiality of personal data by implementing physical, technological, and organizational safeguards against accidental, unlawful, or unauthorized destruction, loss, modification, disclosure, or access. NAVA will take measures proportionate to the risks posed by the Processing it performs and the nature of the Personal Data it collects.
4. Designing for Privacy
NAVA applies the Privacy by Design principles to all of its personal data procedures, whether they are carried out through digital systems, technologies, or manually. Privacy constraints are built into every standard, protocol, and procedure used by NAVA by default.
5. Disclosure
When necessary or required, NAVA discloses personal data to third parties solely for the purposes specified in the privacy notice, with the individual's consent, or as required for authorized purposes. Public authorities, law enforcement agencies, and other such authorities are referred to as third parties.
Subject Rights to Data
NAVA will provide individuals with the opportunity to exercise data subject rights that are available to them in the context of their engagement with NAVA, in accordance with applicable legal requirements. These rights may include the ability to request access to their Personal Data, the ability to correct inaccurate or incomplete Personal Data, and the ability to object to the Processing of their Personal Data. Each Data Subject Request is verified and tracked to completion. Other rights, such as the right to be forgotten, the right to withdraw consent, and the right to data portability, may also be accessible depending on the applicable law and the data subject's relationship with NAVA. NAVA shall ensure compliance and take all necessary steps to assist data subjects in exercising their rights.
Transfers of Data Internationally
NAVA operates on a global scale, and it may be necessary to transfer Personal Data between countries from time to time. NAVA understands the importance of treating personal data with care, especially when it is transferred to countries where data protection legislation may be lacking. If NAVA transfers Personal Data to such countries, the data will be protected as described in this Policy and in compliance with relevant legislation.
Retention of Data
NAVA follows retention rules and processes to ensure that Personal Data is deleted once a reasonable period has passed and the purposes have been fulfilled. If it is necessary to preserve the Personal Data for longer, or if a law requires it to be maintained for a specific period, an exception applies. When NAVA no longer requires Personal Data for the reasons it was collected, it will delete it as soon as reasonably possible.
Requirements and Implementation for Jurisdiction-specific Needs
Additional obligations for the Processing of Personal Data may be imposed on NAVA by national data protection and privacy legislation. NAVA shall develop procedures and guidelines to support the concepts of this Policy as needed, as well as cooperate with relevant regulatory or supervisory authorities.
Contact and Privacy Organization
NAVA has established a global Privacy Function responsible for reviewing and implementing privacy and data protection regulations. Individual countries or regions may have their own data protection or privacy functions incorporated. The privacy function is also in charge of implementing privacy training and awareness programs, as well as integrating privacy principles into NAVA's operations and processes.
If you have questions about this Policy, please contact us via the Contact Us form available at www.navasoftware.com
Reporting Data Breaches
All incidents affecting Personal Data, whether known or suspected, must be reported as soon as they are discovered. Any NAVA associate, client, third-party service provider, or other business partner may report an event to NAVA. NAVA will educate and raise awareness among its employees on how to report a suspected or verified incident. Each incident is examined and followed through to completion.
Implementation
NAVA has internal procedures in place to ensure this Policy is followed, to allow individuals to exercise their rights as outlined in this Policy and under applicable law, and to address any concerns regarding potential non-compliance with this Policy or the law.
Policy Changes
NAVA reserves the right to modify this Policy at any time without prior notice to reflect changes in the law or privacy practices. Please use the Contact Us form on www.navasoftware.com if you have any questions or concerns regarding this Policy.