Privacy Policy

Information about the controller

This statement ("Privacy Statement") provides you with information about our collection and use of your personal data. Your employer (on behalf of itself, its parent company or an affiliate, each referred to as "Employer") is responsible for this initiative. Lumofy Digital Solutions ("Lumofy") is a third-party service provider acting on your Employer's behalf. Your Employer controls the personal data shared with Lumofy and how such personal data is collected and used as part of the Lumofy survey project. Lumofy does not sell your data.

Collection and Use of the Personal Information

Lumofy is a service aimed at assessing certain workforce competencies and supporting behavior change within your Employer's workforce. To begin the Lumofy service, your Employer shares with Lumofy certain information such as your name, email address, and details about your position at your Employer from its internal HR database.

Responding to Lumofy surveys is entirely voluntary. If you choose to provide responses, Lumofy shall process your information and survey responses for the following purposes: asking you to participate in surveys about your thoughts about aspects of your workplace, including your workplace culture or line manager's development; creating insight reports based on aggregated answers; monitoring your interactions with the Lumofy service; creating a manager profile which is accessed by that manager through a development dashboard; creating dashboard tools for managers and human resources personnel; and evaluating behavior changes through the Lumofy service.

Participation in the Lumofy service is completely optional. You can withdraw your consent at any later time by contacting ask@lumofy.com. Your Employer should not be able to associate a particular response with the individual who provided it except where you are explicitly told otherwise prior to providing your response.

Recipients of the Personal Information

Access to your data processed in Lumofy is restricted to: authorized users at your Employer who have accountability and/or responsibility for managing the data internally; and authorized staff of Lumofy who may have access to your personal information when carrying out data analysis or technical maintenance on the service.

A small number of service providers may perform some tasks as part of providing our service, including cloud hosting, email delivery services, support ticket routing, and log analysis. Except where you are explicitly told otherwise, your survey answers are anonymized and your line manager, as well as other Employer personnel, will not have access to those individual responses. Only aggregated data will be presented to your Employer.

Your Employer and Lumofy also reserve the right to disclose your personal information as required by law, or when disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or request from a regulator. In the event that your Employer or Lumofy is subject to a takeover, divestment or acquisition, they may disclose employees' personal information to the new owner of the business.

Transfer of the Personal Information outside of your country or region

Lumofy's services are available globally and our servers may be located outside of your region. Lumofy is based in Kingdom of Bahrain. Your personal data shall remain at all times protected by your Employer's corporate rules and policies which provide an adequate level of data protection. Your Employer has ensured that such transfer is subject to appropriate safeguards by, for example, putting in place standard data protection clauses adopted by the European Commission.

Retention Period

Your Lumofy responses, as well as any associated personal information held by the Lumofy service, will be deleted or aggregated so that it no longer identifies you after a period no longer than twelve (12) months after the termination of your Employer's contract with Lumofy, unless you request for it to be removed at an earlier stage.

Rights of Access, Rectification and Erasure

In accordance with our internal policies you may ask us to provide you with access to any personal data Lumofy processes about you. You are also entitled to request that any incomplete or inaccurate personal data which relates to you be corrected, or to have your data completely deleted from the Lumofy service. Lumofy will respond to such requests after consultation with your Employer.

If you wish to exercise any of the above rights relating to your personal information, please contact ask@lumofy.com. If you are in a country with a national or regional data protection authority, you also have the right to lodge a complaint with your data protection supervisory authority.

We review this privacy statement regularly and may modify it from time to time. This privacy statement was last updated in January 2020.

Data Protection Officer

Lumofy's Data Protection Officer is responsible for correct implementation of this privacy policy. You can send questions or concerns about our privacy practices to ask@lumofy.com.