TRACE International and TRACE Incorporated (collectively, “TRACE”) are two distinct entities with a common mission to advance commercial transparency worldwide by supporting the compliance efforts of multinational companies and their third party intermediaries. TRACE International is a non-profit business association that pools resources to provide members with anti-bribery compliance support, while TRACE Incorporated offers both members and non-members customizable risk-based due diligence, anti-bribery training and advisory services. Working alongside one another, TRACE International and TRACE Incorporated offer an end-to-end, cost-effective and innovative solution for anti-bribery and third party compliance.
This policy describes the types of personal information we may collect, the purposes for which we may use the information, the circumstances in which we may share the information and the steps we take to safeguard this information.
TRACE maintains a number of online applications, each of which collects different kinds of information. Depending upon the application, the following information may be collected:
As with the types of information collected, the use to which TRACE puts the information it collects varies from one application to another. Such uses may include:
TRACE will never sell or offer to sell your personal information.
Data security is our priority and we are committed to safeguarding your information. We do this by:
We may also use web beacons (a small graphic image placed on a webpage or in an email message to monitor user activity, such as whether the webpage or email is accessed or clicked). We use this data for administrative purposes; to assess the usage and performance of our services; to improve user experience; and as otherwise permitted by applicable law or regulation.
We will not share your personal information with third parties, except as described herein or as authorized by you. TRACE International and TRACE Incorporated may share personal and other information with one another in the course of and for the purpose of providing services such as those described above to their members and customers. We may also share your information or portions thereof with a limited number of non-affiliated companies that perform routine support services for TRACE, including: those that provide professional, legal, or accounting advice to TRACE; translation professionals; third parties who conduct or facilitate sanctions lists or PEP screenings; firms that provide hosting, software development and database management services; and law firms that are engaged to conduct routine audits of the personal information you have provided. These third parties are required to maintain the confidentiality of your personal information, and to use your personal information only in the course of providing such services to TRACE, and only for the purposes that TRACE dictates. In connection with our due-diligence services, including the TRAC system, we will share information submitted with the submitting party’s authorized users. In connection with our online training, we will share information submitted by or about students with their company and their company’s administrators. Under limited circumstances, your personal information may be disclosed to third parties to comply with applicable laws and regulations, such as in response to a subpoena or similar legal process, or to lawful requests by public authorities, including to meet national security or law enforcement requirements. Any other disclosure of your personal information will be pursuant to your express consent.
If you wish to opt out of having your personal information disclosed to a third party as described above, please contact the TRACE Privacy Officer as set forth below.
To help ensure data accuracy and quality, we provide users of our online services with access to their information stored on our systems and databases. You have an ongoing opportunity and responsibility to correct verified inaccuracies, either through the relevant online system or by contacting us directly. If a user of our systems alerts us to a potential error in his or her information, we will promptly investigate the issue, confirm (as appropriate) that any newly-submitted information meets our due diligence and verification standards, and update the information as necessary. When the review is complete, all relevant reports we have issued will also be updated, and authorized users and/or other recipients of the reports will be notified of the update. You may request deletion of your personal information at any time by contacting us directly, and we will respond to your request within 30 days. Please note that reports that have been shared with authorized users and/or other parties, as authorized by the party requesting deletion, may remain with those parties even after deletion from TRACE’s systems.
TRACE Incorporated, which is subject to the investigatory and enforcement powers of the Federal Trade Commission, participates in the EU–U.S. Privacy Shield, which provides a framework for the transfer of information from the European Union to the United States. The Privacy Shield Framework includes seven central Principles: (1) Notice; (2) Choice; (3) Accountability for Onward Transfer; (4) Security; (5) Data Integrity and Purpose Limitation; (6) Access; and (7) Recourse, Enforcement and Liability. The official Privacy Shield List can be accessed at https://www.privacyshield.gov/list.
TRACE Incorporated is committed to subjecting to the Principles all personal data received from the EU in reliance on the Privacy Shield. TRACE International also adheres to the Principles in its handling of such data, and has entered into a contract with TRACE Incorporated providing the same level of protection as is available under the Privacy Shield for any such data transferred between TRACE Incorporated and TRACE International. TRACE Incorporated retains liability in cases of onward transfers to third parties.
Using the services provided here after a notice of changes to this policy has been sent to you or published on our site shall constitute consent to the changed terms or practices.
Attention: Privacy Officer
151 West Street
Annapolis, MD 21401
+1 (410) 990-0076
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. It may be possible, under certain conditions, for individuals to invoke binding arbitration.