Qlik Privacy & Cookie Notice

Introduction

At Qlik®, we are committed to protecting personal information. In this Privacy & Cookie Notice (“Notice”), QlikTech International AB and its affiliated entities (“Qlik,” “we,” or “us”) set out how we may collect, create, share and use personal information relating to identifiable individuals (“Personal Data”) and provide you with information regarding your Personal Data rights and choices.

1. Scope of this Notice

2. Personal Data we may collect

3. Use of Personal Data

4. Sharing Personal Data

5. Where we may transfer Personal Data

6. Cookies & similar technologies

7. Protection of Personal Data

8. How long we retain Personal Data

9. Your rights relating to your Personal Data

10. Children’s privacy

11. Contact information

1. Scope of this Notice

This Notice describes Qlik’s privacy practices for Personal Data collected by Qlik websites (“Sites”) as well as other activities, such as if you visit our offices, attend a Qlik event or otherwise interact with Qlik and provide Personal Data, such as corresponding by email, unless such activities are covered by our other notices outlined below. The relevant Qlik data controller of your Personal Data will likely be the Qlik entity in your local country. Please read this Notice in full. By using our Sites or participating in other activities with Qlik described below, you consent to the collection, creation, sharing and use of information as described in this Notice, where consent is required by relevant law.

For privacy information relating to Qlik’s products and services, please see the Qlik Product Privacy Notice. If your organization has an agreement with Qlik governing the Personal Data processing by Qlik products and services, such as our Data Processing Addendum, then that agreement applies with regard to its subject matter. For privacy information relating to job candidates and recruitment, please see the Qlik Recruitment Privacy Notice.

Qlik also operates a public forum on Qlik Community. The purpose of this forum is to discuss our products and services. Please note that any Personal Data you choose to post in Qlik Community may be read or used by other visitors (for example, to send to you unsolicited messages). Qlik Community forum users should not upload sensitive or confidential content on this public forum.

For Qlik partners, Qlik operates our Qlik Partner Portal, which is run on technology hosted by a third party, Zift. This Notice applies to Personal Data collection and processing by Qlik through the Qlik Partner Portal, whereas partners should consult Zift’s privacy policy which applies to any data processing by Zift on behalf of Qlik partners, such as for Qlik partner marketing services. For indirect customers (through a Qlik partner), while Qlik’s collection and processing of your Personal Data is explained below in this Notice, any direct Personal Data sharing by you with a Qlik partner will be governed by that Qlik partner’s policies/your agreement with them.

As a convenience to visitors to our Sites, we may also provide links to other websites that are not governed by this Notice. These linked websites are not under the control of Qlik and we are not responsible for the content on such websites or the protection/privacy of any information which you provide while visiting such websites.

2. Personal Data we may collect

The Personal Data Qlik may collect about you will depend on your interaction/relationship with us. It may include:

• if you browse our Sites, information systems data relating to your interaction with our Sites, such as location (e.g., IP address), cookie related information (see section 6 below), usage (e.g., mouse clicks, page visits, feature usage, view time, downloads) and other information, such as preferences;

• if you complete a webform on our Sites (e.g., to attend a Qlik event or create a Qlik Account), attend a Qlik event (online or in-person) or office, or otherwise send this data to Qlik (e.g., by email, telephone, exchange of business cards), identifying/contact information such as your name, job title, work email, organization/employer name, work telephone, IP address (auto-populate country and city/state) and location information such as work address;

• if you or your organization purchases Qlik products or services, financial or billing data, such as name, address, credit card number or bank account information (though these will typically be those of your employer organization);

• if you attend a Qlik event (in-person or online) or our offices, your attendance details (e.g., entry time, identification);

• if you avail of Qlik services, such as attend a training class or submit a technical support case, your activity with Qlik to interact with and take part in these services;

• your image and/or voice, such as for phone/video call recordings (for training, quality assurance and administration purposes), if you attend a Qlik event (event recording) or office (e.g., CCTV), post an image/recording to a Qlik Site (e.g., add a profile photo to Qlik Community) or you otherwise send a recording/image to Qlik. Qlik events may be recorded or photographed, such as to create promotional material; if you are participating in such an event and do not wish to be recorded/photographed, please inform the host on arrival;

• if you participate in a Qlik Academic program, we may collect education information (e.g., proof of enrollment);

• if you take a Qlik exam, we may collect images, video, and audio recordings of you, your workstation area, and your computer screen to monitor, as well as usage information (e.g. time spent on particular pages, and/or applications and websites used during an exam) in order to ensure your compliance with our policies during the exam. We may also collect images or information from your identity documentation for identity verification;

• information from otherwise engaging/interacting with you, such as your contributions to the Qlik Community forum, your feedback to us through our Sites and responses to any promotional or survey communications;

• information considered sensitive under local law, namely health information, if you visit our offices or attend an in-person Qlik event and, if due to local COVID-19 or similar related requirements, you are required to provide information regarding your health, vaccination status and recent travel history; and/or if in the course of visiting our offices or attending a Qlik event, if you choose to disclose to us disability-related health information for the purpose of us making an accommodation/adjustment. Qlik will only ever process sensitive information in connection with the purpose for which it was collected, for example to comply with local health & safety laws; and/or

• Qlik may also acquire your Personal Data in the course of mergers or acquisitions of or with another company or business.

We may also collect Personal Data about you from third parties, such as from colleagues of yours at your organization (e.g., when registering multiple participants at an organization/company for Qlik training, or where your details are provided by a colleague as a contact for your organization’s account), public sources (e.g., your organization’s website, LinkedIn), vendors (e.g., web analytics tools, data enrichment providers) and Qlik partners (e.g., where your contact details are provided to enable delivery of Qlik software, for customer success purposes and/or in relation to maintenance/support, including renewal and/or cancellation of same). We also maintain social media pages and may collect Personal Data from you when you interact with these or communicate with us through our social media pages.

3. Use of Personal Data

Depending on your relationship with Qlik, we may use your Personal Data for different purposes. Where required by applicable law in relation to the particular use, we will obtain your consent to collect and use your Personal Data. Otherwise, we will rely on another legal basis, such as in connection with a contract or for our legitimate interests, as set out below.

• Perform a contract: We may process your Personal Data in connection with a contract with you or your organization, such as to process relevant payments, deliver (customer) or receive (vendor) products/services, manage our relationship with you as a Qlik partner under our Qlik partner agreement with you, and manage our relationship with you or your organization generally throughout the contract lifecycle, including managing renewals.

• Operate our Sites: We may use your Personal Data to provide our Sites, content and offerings (e.g., downloads, registrations for accounts or profiles, such as a Qlik Account), including necessary functionality, content customization (e.g., based on what we think will interest you), and functionality to enhance ease of use (e.g., make the Sites easier for you to use by not making you enter information more than once, etc.). Unless such processing is in connection with a contract or our legitimate interests, it will be on the basis of your consent.

• Improve our Sites: We process your interactions with our Sites, content and offerings (e.g., Qlik support) to assess and improve these and the user experience, such as by use of cookies (see section 6 below). This data is typically aggregated unless Personal Data is required for the particular processing operation. We process your Personal Data for this purpose for our legitimate interests of maintaining and improving our Sites and providing tailored content, or where required by law, on the basis of your consent.

• Manage contact requests: We may use your Personal Data to reply to contact initiated by you, such as through a webform, chatbot, survey responses or Qlik support (through Qlik Community). We process your Personal Data for these purpose for our legitimate interest in replying to/fulfilling your request, collecting survey responses and to carry out our contractual obligations under the applicable terms (e.g., providing Qlik support).

• Other communications: We may use your Personal Data to otherwise communicate with you to manage our relationship with you/your organization, such as to manage our offerings, for customer success purposes, to contact you regarding updates to our offerings you may be interested in, and to run surveys and contests. Such processing will be to fulfil our contractual obligations, where necessary for our legitimate interests or, where legally required, with your consent.

• Call recording: We may record phone or video calls (e.g., Zoom) for training, quality assurance and/or administration purposes. We process this Personal Data on the basis of our legitimate interests however, if required under applicable law, we will obtain your consent or give you the option to object to the call being recorded.

• Marketing: We may use your Personal Data to contact you for marketing purposes, such as to alert you to product upgrades, special offers, updated information/services from Qlik, and to contact you (e.g., by phone or email) regarding your interest in our offerings and/or invite you to Qlik events. Such contact will be on the basis of legitimate interest or, where legally required, on the basis of your consent. To opt-out of marketing contact, please unsubscribe here http://www.qlik.com/opt-out.

• Academic Program: We may process your Personal Data to operate our Academic Programs (e.g., to validate that you are a student and eligible for our Academic Program, verify your identity, or monitor compliance with our program policies). Such processing will be on the basis of our legitimate interests or to perform a contract with you under the applicable terms of service.

• Events: We may process your Personal Data to operate Qlik events, including training/education related activities, in-person and online, that you have selected to attend, including to facilitate travel and lodging (if relevant). Such processing will be on the basis of our legitimate interests or to perform a contract with you under the applicable terms of service.

• Manage premises: Where you attend our offices, we may process your Personal Data to administer our premises and fulfil our legal obligations regarding health and safety, and to manage the security of our premises to ensure there is no unauthorized access. Such processing will be on the basis of our legitimate interests and/or to carry out our legal obligations.

• Compliance and Security: We process your Personal Data to comply with our legal obligations and to ensure compliant use/security, such as to ensure the use of our Sites, content and offerings in compliance with our terms and/or to ensure their security, to cooperate with courts, regulators or other government authorities to the extent processing/disclosure of Personal Data is required under applicable law, where it is necessary to protect our legal rights or those of others, or for other compliance purposes such as auditing, investigations and responding to legal processes or lawful requests. Where we process health related data for Covid-19 related or similar reasons or to accommodate a reasonable adjustment for a disability, we will only do so to carry out our legal obligations relating to health and safety, under applicable law.

We may also combine Personal Data we hold about you. For example, we may combine your B2B contact with your usage data relating to our offerings and our Sites for the purposes above, such as to improve our Sites and our offerings, as well as to create more tailored experiences by providing content that may be of interest to you. We may also use your Personal Data to fulfil any other purposes disclosed to you at the time of collection or as otherwise required/permitted by applicable law.

4. Sharing Personal Data

Qlik may share Personal Data for various purposes, such as:

• within the international group of Qlik affiliate companies, including our Talend affiliate companies, and companies that we acquire or merge with in the future after they are made part of our corporate group, to operate our business and provide our Sites, products and services;

• with authorized Qlik vendors, advisors and contractors providing services on our behalf (such as a technology or professional service providers) to operate our business, Sites, products and services;

• if you register for or attend a Qlik event, Qlik may share participant information (e.g., your name, organization, work email) with other participants, organizers or hosts of the same event in order to facilitate the event and the subsequent exchange of ideas. Qlik may also share your contact details with event sponsors where you have consented, e.g., through registration, to these sponsors contacting you regarding their own offerings. Your contact details may also be used by other hosts of the same event, such as to send marketing material, according to their privacy notices provided to you;

• if you use or complete training provided by us, such as through the resources at https://learning.qlik.com or Talend Academy, your training results may be shared with your organization or third-party training organizers of theirs, for example training or subscription administrators. In addition, Qlik may use third-party training providers to perform the training; if this applies to you particular training, your personal data will be shared with the relevant provider;

• third-party networks/websites so that we can advertise on their platforms;

• if you use Qlik products and services, we may share with your organization/colleagues certain data, such as your download and usage data of Qlik products and/or your use of Qlik support. For further information, please see the Qlik Product Privacy Notice;

• with our Talend affiliated companies if your organization may be interested in Talend’s offerings;

• if you share Personal Data on our public Sites, such as information in your community profiles or content you submit on public boards (including questions, comments, likes);

• with Qlik partners (such as distributors and resellers of Qlik software, Qlik compatible software and/or services) in order to follow up (e.g., by email, post or phone) on your interest in Qlik’s products or Qlik-compatible products, or to provide services (e.g., consulting, technical support, training) where such services are to be carried out by Qlik partners. A list of Qlik’s partners can be found on our Find a Partner Page;

• if you are a Qlik partner or potential Qlik partner, Qlik may share your contact data with other Qlik partners with whom we do business so that they may contact you regarding their opportunities; and/or

• where you provide your consent to otherwise share Personal Data.

Qlik will only share Personal Data to the extent needed to perform the relevant use and will take such steps as are necessary to safeguard Personal Data. For example, our vendors, advisors and contractors are required to keep such Personal Data confidential and not to use it other than for the purposes intended. Qlik partners are obliged to comply with the privacy rules set out in their agreement with Qlik. Qlik does not sell or rent Personal Data to third parties.

Qlik may also disclose Personal Data to comply with legal requirements, such as in relation to legal proceedings or investigations by governmental or law enforcement agencies, or to meet tax or other reporting requirements, including to (a) protect and defend the rights or property of Qlik, including the defence and management of legal claims and investigations, (b) act in urgent circumstances to protect the personal safety of users our Sites, our Qlik team members, or the public, (c) as part of a merger or change in corporate ownership or control, and/or (d) as otherwise permitted or required by applicable law.

5. Where we may transfer Personal Data

To operate our business your Personal Data may be transferred from your country (e.g., the UK/European Economic Area) to a destination which may not be considered by relevant authorities of your country to have an equivalent level of privacy protection. In such instances, in addition to the other measures outlined in this Notice, Qlik will put in place appropriate safeguards for such transfers, for example, UK/EU standard contractual clauses.

The U.S. operating affiliates of the Qlik group comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. These affiliates have certified to the U.S. Department of Commerce that they adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. These affiliates have certified to the U.S. Department of Commerce that they adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. These affiliates commit to subject to the DPF Principles all personal data received from the EU, UK, and Switzerland in reliance on the relevant DPF.

If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/. To view Qlik’s Data Privacy Framework Policy, please visit: https://www.qlik.com/us/legal/legal-policies.

6. Cookies and similar technologies

As is true of most websites, when you visit our Sites, cookies will be placed on your device (computer, mobile or tablet). A "cookie" is a small text file that is placed on your device by websites you visit. Some of the cookies we use are strictly necessary to operate our Sites. Others relate to the Site's performance, functionality and/or to advertising. Information relating to a cookie or similar technology may include identifiers such as IP address, and information like general location, browser type and language, and internet activity such as timestamps. Qlik uses the following types of cookies and similar technologies on our Sites:

A. Strictly Necessary: These cookies enable the Sites to function correctly and deliver the services and products you have requested. These cookies do not gather information about you that could be used for marketing or remembering other websites you have visited on the internet.

B. Functional: These cookies do things like remember your preferred language, understand your preferences and associate users to forms submitted to enable pre-completion of subsequent forms as well as improve and customize your experience on our Sites.

C. Performance: We use third-party analytics tools to help us analyze how our Sites and other electronic mediums are used, such as allowing us to compile reports on website activity, providing us other services relating to website activity and internet usage and whether email communications are opened or left unread.

D. Advertising: These cookies may be set on our Sites by our advertising partners. They may be used to build a profile of your interests and/or show you relevant adverts on other sites. If you wish to not have your online information used for this purpose you can also visit resources such as https://optout.networkadvertising.org and/or https://www.youronlinechoices.eu (please note these and similar resources do not prevent you from being served ads as you will continue to receive generic ads).

Cookies can be session-based (which disappear once you close your device or browser) or persistent (which remain on your device afterwards). Qlik may also rely on cookies or similar technology operating on other websites, for example to display our adverts to you. You can generally disable the use of cookies by changing your browser settings. To disable non-essential cookies for qlik.com sites (for example to turn off advertising cookies), and to view their retention periods and relevant third-party operators/recipients, you can use access our Cookie Preference Center. You may also adjust your browser settings, however if you choose to not have your browser accept cookies from the Qlik Sites, you will not be able to experience a personalized visit and it may limit your ability to use some features on our Sites. For more information about cookies, visit https://www.aboutcookies.org. We may also use pixels, web beacons and similar technologies on our Sites and in emails, for example in a marketing email that notifies us if you click on a link in the email.

7. Protection of Personal Data

Qlik takes appropriate precautions to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction. Such measures may include (i) using security controls such as, passwords, firewalls and/or encryption, (ii) restricting Personal Data to those with a legitimate purpose in receiving/accessing it, (iii) deidentifying Personal Data, or assigning codes or pseudonyms when the personal identifiers are not required for the purpose at hand, (iv) using data retention controls to ensure that Personal Data is not kept for longer than is necessary, (v) providing training and internal policies to team members to embed privacy and security across our organization, and (vi) putting in place relevant procedures (such privacy and security vetting) and contracts relating to the use and protection of Personal Data with third parties. Further information on Qlik’s privacy and security programs can be found on our Trust pages.

8. How long we retain Personal Data

Qlik will retain and process Personal Data for a period of time consistent with the purpose of collection (see section 3 above) and/or as long as necessary to fulfil our legal obligations. We determine the applicable retention period by taking into account the (i) amount, nature and sensitivity of the Personal Data, (i) relevant use, including whether we can achieve the use through other means (e.g., by instead using deidentified data); (iii) potential risk of harm from unauthorized use or disclosure of the Personal Data, and (iv) applicable legal requirements (e.g., statutes of limitation). After the applicable retention period, we will delete the Personal Data, hold it in a form that no longer identifies you or, if we are unable for technical reasons to delete/deidentify it entirely, will implement appropriate measures to prevent any further use of such Personal Data. For example, checks are made on a regular basis for any contact details that have remained inactive in our sales and marketing databases, and if they are inactive for two years, we delete them.

9. Your rights relating to your Personal Data

You may have certain rights relating to your Personal Data, subject to applicable privacy laws. For example, under the UK/EU GDPR and similar laws, you may have the right to:

• request access to and/or obtain a copy of your Personal Data;

• request corrections to your Personal Data if it is inaccurate;

• request further information about the processing of your Personal Data by Qlik;

• request deletion of your Personal Data that is no longer necessary to fulfil the purposes for which it was collected, or does not need to be retained by Qlik for other legitimate purposes;

• where we process your Personal Data on the basis of consent, withdraw this consent at any time. If you withdraw your consent to Qlik to processing your Personal Data, this will not affect any processing which has already taken place;

• request a restriction or raise an objection to the processing, sharing and/or further use of your Personal Data;

• if applicable, that your Personal Data be transferred to another company/organization;

• not be subject to a decision based solely on automated processing, including profiling, which produces legal effects ("Automated Decision-Making"). Please note that Automated Decision-Making currently does not take place on our Sites or other activities covered in this Notice;

• if you feel that your request/complaint has not been dealt with satisfactorily, make a compliant to your relevant privacy/data protection authority; and

• not be discriminated against for exercising the above rights.

These rights will depend on which privacy/data protection laws are applicable to your Personal Data (typically, where you are resident), the type of Personal Data involved and the reason it is processed. There may be circumstances when Qlik is unable to accommodate requests, either wholly or in part, for reasons under local law. Depending on applicable law, this may include situations where the information contains Personal Data of other individuals and it is not possible to separate out your Personal Data, if Qlik cannot validate the request, if you ask us to delete Personal Data which we are required by law or have compelling legitimate interests to keep, or where information cannot be disclosed for legal, security, or other reasons based on local law. Qlik will endeavor to advise you of any reason for denying or restricting any Personal Data request. Where legally permitted under relevant law you may designate an authorized agent to submit a privacy request on your behalf. In order to verify this agent request, you/agent will need to complete the Privacy Request form and validate the request through the email validation link sent to email address associated with the request. To make a request complete the Privacy Request form, validate the request through the email validation link and Qlik will respond to any legitimate requests in line with local laws. Further contact details are also available in section 11 below. We will contact you if we need further information, for example to verify your identity and/or place of residence to authenticate and/or process your request. Qlik does not discriminate in response to privacy rights requests.

If your request is to opt-out/unsubscribe from marketing contact from Qlik, please visit http://www.qlik.com/opt-out.

The California Consumer Privacy Act (“CCPA”) requires businesses provide Californian data subjects with disclosures relating to the sharing of, access to, and deletion of Personal Data that is collected. Please see the information in this Notice above on these topics. For the processing purposes of this Notice, we will not collect or otherwise process “sensitive” data or protected characteristics under Californian law for the purpose of inferring characteristics about an individual.

For more information regarding your privacy rights, we encourage you to you to visit the website of your local privacy/data protection authority, such as that of Brazil, California (USA), EU, Singapore and the UK.

10. Children's Privacy

The Sites and our customer offerings are intended for a general audience, and Qlik does not knowingly or intentionally collect information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA” or similar global privacy legislation) from anyone under the age of 16, and we request that anyone under the age of 16 does not submit Personal Data to us. If you become aware that a child has provided us with Personal Data, please contact us at [email protected]. If we become aware that someone under the age of 16 has submitted to us Personal Data which we control, we will delete this information from our records.