GBS Privacy Policy
Last Updated: 30th January, 2024
Your privacy is important to us. This privacy statement explains the personal data GBS processes, how GBS processes it, and for what purposes.
GBS offers IT Solutions and Services, including software used to help operate enterprises worldwide, software you use in your office, and services that helps to automate complicated business processes. References to GBS products in this statement includes Pinnacle HRMS, Microsoft Dynamics 365, Microsoft 365 Cloud Services, and Laserfiche.
This statement applies to the interactions GBS has with you and the products that display this statement.
Personal data we collect
GBS collects data from you, through our interactions with you and through our products. You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products. The data we collect depends on the context of your interactions with GBS and the choices you make, including your privacy settings and the products and features you use. We also obtain data about you from third parties.
You have choices when it comes to the technology you use and the data you share. When we ask you to provide personal data, you can decline. Many of our products require some personal data to provide you with a service. If you choose not to provide data -required to provide you with a product or feature, you cannot use that product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing product you are using, we may have to suspend or cancel it. We will notify you if this is the case at the time. Where providing the data is optional, and you choose not to share personal data, features like personalisation that use such data will not work for you.
How we use personal data
GBS uses the data we collect to provide you with rich, interactive experiences. In particular, we use data to:
- Provide our products, which includes updating, securing, and troubleshooting, as well as providing support. It also includes sharing data, when it is required to provide the service or carry out the transactions you request.
- Improve and develop our products.
- Personalise our products and make recommendations.
- Advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you with relevant offers.
We also use the data to operate our business, which includes analysing our performance, meeting our legal obligations, developing our workforce and doing research.
In carrying out these purposes, we combine data that we collect from different contexts (for example, from your use of two GBS products) or obtain from third parties to give you a more seamless, consistent and personalised experience, to make informed business decisions and for other legitimate purposes.
Our processing of personal data for these purposes includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods. For example, to build, train, and improve the accuracy of our automated methods of processing (including artificial intelligence or AI), we manually review some of the predictions and inferences produced by the automated methods against the underlying data from which the predictions and inferences were made. This manual review may be conducted by GBS employees or vendors who are working on GBS’s behalf.
Reasons we share personal data
We share your personal data with your consent or to complete any transaction or provide any product you have requested or authorised. We also share data with GBS-controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect businesses; to maintain the security of our products; and to protect the rights and property of GBS and its customers.
Please note that, as defined under certain data privacy laws, “sharing” also relates to providing personal data to third parties for personalised advertising purposes.
How to access and control your data
You can also make choices about the collection and use of your data by GBS. You can control your personal data that GBS has obtained, and exercise your data protection rights, by contacting GBS or using various tools we provide. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law. How you can access or control your personal data will also depend on which products you use. For example, you can:
- Control the use of your data for personalised advertising from GBS by visiting our unsubscribe or opt-out link.
- Choose whether you wish to receive promotional emails, SMS messages, telephone calls and postal mail from GBS.
Not all personal data processed by GBS can be accessed or controlled via the tools above. If you want to access or control personal data processed by GBS that is not available via the tools above or directly through the GBS products you use, you can always contact GBS at the address in the How to contact us section below or by using our web form.
Security of personal data
GBS is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities.
Where we store and process personal data
Personal data collected by GBS may be stored and processed in your region, in Kuwait, and in any other jurisdiction where GBS or its affiliates, subsidiaries, or service providers operate facilities. Typically, the primary storage location is in the customer’s region or in Kuwait, often with a backup to a data centre in another region. The storage location(s) are chosen in order to operate and provide our services efficiently, improve performance, and create redundancies in order to protect the data in the event of an outage or other problem. We take steps to process the data that we collect under this privacy statement according to this statement’s provisions and the requirements of applicable law.
Our retention of personal data
GBS retains personal data for as long as necessary to provide the products and fulfil the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.
Artificial Intelligence (AI)
GBS may soon leverage the power of artificial intelligence (AI) in many of our products and services, including by incorporating generative AI features. GBS’s development and use of AI is subject to GBS’s AI Requirements and AI Standard, and the collection and use of personal data in developing and deploying AI features shall become necessary.
Advertising
Advertising allows us to provide, support, and improve some of our products. GBS does not use what you say in email, human-to-human chat, video calls or voicemail, or your documents, photos or other personal files to target ads to you. We use other data, detailed below, for advertising on our GBS properties and on third-party properties. We may use information about you to serve you with personalised advertising when you use GBS services.
Changes to this privacy statement
We update this privacy statement when necessary to provide greater transparency or in response to:
- Feedback from customer, regulators, industry, or other stakeholders.
- Changes in our products.
- Changes in our data processing activities or policies.
When we post changes to this statement, we will revise the “last updated” date at the top of the statement and describe the changes on the Change history page. If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, We encourage you to periodically review this privacy statement to learn how GBS is protecting your information.
How to contact us?
If you have a privacy concern, complaint, or question for the GBS Chief Privacy Officer or the Data Protection Officer for your region, please contact us by using our web form. We will respond to questions or concerns as required by law and within a period no longer than 30 days. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.
When GBS is a controller, unless otherwise stated, GBS Technology Co. are the data controllers for personal data we collect through the products subject to this statement. Our addresses are:
GBS Technology Co.
Burj Al-Tujjar, Mirqab
Kuwait City, Kuwait
Tel: +965-22209168 | Email: info[at]gbskw[dot]com
We offer various means for you to control your personal data that GBS has obtained, and to exercise your data protection rights. You can do so by contacting GBS at our web form or the information above.
