GDPR Privacy Notice


1. 소개

1.1 Spirent Communications plc 및 octoScope Inc.를 포함하되 이에 국한되지 않는 그 계열사(이하 당사)는 귀하의 개인 정보를 보호하고 존중하기 위해 최선을 다합니다.

1.2 이 개인정보처리방침은 여기에 언급된 다른 모든 문서와 함께 당사가 귀하로부터 또는 귀하에 대해 수집하거나 귀하가 당사에 제공한 개인 데이터를 당사에서 처리하는 근거를 제시합니다. 귀하의 개인 데이터에 대한 당사의 견해와 관행 및 당사가 이를 취급하는 방법을 이해하려면 다음 내용을 주의 깊게 읽어 주십시오.

1.3 일반 데이터 보호 규정의 목적에 따라 데이터 처리자는 Spirent Communications plc(회사 번호 470893)이며 등록된 사무실 주소는 Spirent Communications plc, Origin One, 108 High Street, Crawley, West Sussex RH10 1BD, United Kingdom입니다.

1.4 당사는 이 개인정보처리방침을 수시로 업데이트할 수 있습니다. 향후 변경 사항은 여기 웹사이트에 게시됩니다. 이 정책의 업데이트 또는 변경 사항을 살펴보려면 정기적으로 확인해 주십시오.

2. 데이터 보호 책임자

2.1 데이터 보호 책임자의 연락처 정보::

  • 2.1.1 이메일: DataProtection@Spirent.com

  • 2.1.2 전화: +44 (0) 1293 767676

  • 2.1.3 우편: Data Protection Lead, Spirent Communications plc, Origin One, 108 High Street, Crawley, West Sussex RH10 1BD, United Kingdom

2.2 데이터 보호법을 준수하고 해당 법률의 준수를 모니터링하며 데이터 보호 영향 평가에 대해 조언하고 직원 교육 및 내부 감사를 수행하며 감독 기관 및 처리 중인 개인 데이터의 당사자를 위한 최초의 연락 창구가 되어야 할 의무에 대해 당사 조직과 직원에게 알리고 조언하는 것은 데이터 보호 책임자의 책임입니다.

2.3 개인 데이터와 개인 정보 문제 또는 이 개인정보처리방침에 대한 질문이나 우려 사항이 있는 경우 데이터 보호 책임자에게 문의하시면 됩니다. 이메일 제목 또는 우편물 상단에 DATA PRIVACY REQUEST라는 단어를 포함해 주십시오.

3. 처리 관련 세부 사항

3.1 당사는 Spirent 이해관계자(전/현직 직원 및 계약업체, 고객 및 잠재적인 고객, 주주, Spirent와 접촉하는 기타 모든 자를 의미함)에 대한 개인 데이터를 다양한 방식, 다양한 목적으로 처리합니다.

3.2 당사가 개인 데이터를 처리하는 자의 다른 범주는 본 개인정보처리방침의 표에 명시된 처리 관련 세부 사항에 자세히 설명되어 있습니다. 구체적인 표는 다음과 같습니다.

  • 3.2.1 고객 연락처 및 판매 전망

  • 3.2.2 주주

  • 3.2.3 공급업체 및

  • 3.2.4 당사가 제3자로부터 받는 데이터의 당사자

3.3 귀하가 한 가지 이상의 자격으로 당사와 접촉하는 경우가 발생할 수 있습니다. 따라서 당사가 귀하의 개인 데이터를 처리하는 방법에 대해 자세히 알고 싶다면 귀하에게 적용될 수 있는 모든 표를 확인하십시오.

4. 데이터 주체로서 귀하의 권리

4.1 이 섹션 4에서는 일반 데이터 보호 규정에 따라 귀하가 데이터 주체로서 갖는 권리를 설명합니다.

4.2 귀하는 다음과 같은 권리가 있습니다.

  • 4.2.1 당사가 귀하에 대해 보유한 개인 데이터에 액세스를 요청할 권리

  • 4.2.2 당사가 귀하에 대해 보유한 개인 데이터의 수정을 요청할 권리

  • 4.2.3 당사가 귀하에 대해 보유한 개인 데이터의 삭제를 요청할 권리

  • 4.2.4 귀하에 대한 처리의 제한을 요청할 권리

  • 4.2.5 처리에 반대할 권리 및

  • 4.2.6 데이터를 이동할 권리


    상기 권리에 대한 자세한 정보는 ICO 웹사이트 https://ico.org.uk/에서 확인할 수 있습니다. 상기 권리를 행사하려면 섹션 2에 기재된 연락처 정보를 사용하여 데이터 보호 책임자에게 알려주십시오. 이메일 제목 또는 우편물 상단에 DATA PRIVACY REQUEST라는 단어를 포함해 주십시오.

4.3 당사의 개인 데이터 처리가 귀하의 동의를 기반으로 하는 경우 귀하는 데이터 주체로서 언제든지 해당 동의를 철회할 권리가 있습니다. 이 권리를 행사하려면 섹션 2에 기재된 연락처 정보를 사용하여 데이터 보호 책임자에게 알려주십시오. 이메일 제목 또는 우편물 상단에 DATA PRIVACY REQUEST라는 단어를 포함해 주십시오. 4.4 귀하는 감독 기관에 불만을 제기할 권리가 있습니다. 영국에서 감독 기관은 정보위원회(ICO)로, 전체 연락처 정보는 https://ico.org.uk/global/contact-us/에서 확인할 수 있습니다.

SCHEDULES

Schedule 1

Data subject category: personal data relating to customer contacts and sales prospects

Category of data subjectCustomer contacts and sales prospects
Categories of personal data that we processName, Company name, Job function, Email address, Phone number, Country
Source of informationThe personal data is collected either (a) directly from the data subject via an online form or (b) provided through a third party such as a trade show organiser or online media owner who has the consent of the data subject or other authority to share the relevant personal data with us.
Purposes of the processingThe personal data is collected for marketing purposes, and for communicating with actual or prospective customers for Spirent solutions, products and services.
Lawful basis of processingThe lawful basis of processing is that at least one of the following applies: (a) the data subject has given consent to the processing of his or her personal data for the purposes of receiving marketing communications from Spirent; (b) the processing is necessary for the purposes of the legitimate interests pursued by Spirent, including the conduct of direct marketing activities; and/or (c) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Recipients of the personal dataWe do not share personal data with other data controllers outside the Spirent group. However, we do engage third parties such as Marketo and Salesforce to process personal data for Spirent in connection with our marketing activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law.
Overseas transfersPersonal data that is processed by Marketo and Salesforce may be stored in Cloud services where the data centres are located outside the EEA. This will only be done where we are satisfied that our contractual arrangements include sufficient safeguards for the rights and freedoms of data subjects.
Duration of processingWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements.
Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data?No. The personal data relating to customer staff will be needed for the purposes of the effective management of relationships with the customer as a business: it is not a pre-requisite of forming a contract with the data subject.
Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject?Spirent undertakes a limited amount of automated decision-making, in order to target our mailing activities according to the data subject’s answers to technology and solution questions, job role, company and regional information. None of this automated decision-making will result in decision-making that has legal or similarly significant effects on the data subject.
Plans for further processingNone other than for the reason the data was collected.

Schedule 2

Data subject category: shareholders

Category of data subjectShareholders
Categories of personal data that we processName, Address, Email address, Phone number, Country. Bank details are also required in order that dividend payments can be made directly to the shareholder’s account.
Source of informationThe personal data is collected directly from the data subject or via their broker or share dealing service when they purchase shares in Spirent.
Purposes of the processingThe personal data is collected in order that Spirent can include the data subject on its share register, and send them information about their shareholdings, dividends, shareholder meetings and voting.
Lawful basis of processingThe lawful basis of processing is that at least one of the following applies: (d) the data subject has given consent to the processing of his or her personal data for the purposes of receiving shareholder communications from Spirent; (e) the processing is necessary for the purposes of the legitimate interests pursued by Spirent; and/or (f) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Recipients of the personal dataWe do not share personal data with other data controllers outside the Spirent group. However, we do engage share registrars to process personal data for Spirent in connection with its shareholders, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law.
Overseas transfersPersonal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects.
Duration of processingWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements.
Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data?Yes. If we do not receive the required shareholder data, we will be unable to record the individual as a shareholder and consequently unable to perform our other obligations as a company to the relevant shareholder.
Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject?No.
Plans for further processingNone other than for the reason the data was collected.

Schedule 3

Data subject category: personal data relating to Suppliers

Category of data subjectSupplier staff, meaning the permanent, temporary or contract staff of organisations that provide goods or services to Spirent (including companies, partnerships, sole traders, independent contractors and freelance workers) (each a “Supplier”)
Categories of personal data that we processContact details for Supplier staff including: Name, Company name, Job function, Email address, Phone number, Country. Bank details may also be required in order that Spirent can pay Suppliers for any goods and services they provide. However, this is not generally regarded as personal data (except in the case of sole traders using personal bank accounts).
Source of informationThe personal data is collected either (a) directly from the data subject during the course of our business dealings with the relevant Supplier or (b) from another contact within the relevant Supplier. If the relevant individual has accessed the Spirent website or clicked on a link in an email from Spirent, their personal data may also be collected automatically by means of website cookies. For more information about our use of cookies, please refer to our Cookie Policy which can be found on the Spirent.com website.
Purposes of the processingThe personal data about Supplier staff is collected and used for the purposes of doing business with the relevant Supplier, to enable Spirent to communicate with them.
Lawful basis of processingThe lawful basis of processing is that at least one of the following applies: (g) the data subject has given consent to the processing of his or her personal data for the purposes of communicating with Spirent on behalf of the Supplier; (h) the processing is necessary for the purposes of the legitimate interests pursued by Spirent, including the procurement of and payment for goods and services from Suppliers; and/or (i) in the case of sole traders and partnerships, the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Recipients of the personal dataWe do not share personal data with other data controllers outside the Spirent group. However, we may engage third parties to process personal data for Spirent in connection with our procurement activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law.
Overseas transfersPersonal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects.
Duration of processingWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements.
Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data?No.
Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject?No.
Plans for further processingNone other than for the reason the data was collected.

Schedule 4

Data subject category: people whose data we receive from third parties

Category of data subjectIndividuals who are not themselves stakeholders in Spirent (such as current and former staff, customers, suppliers or shareholders of Spirent), but whose details we have been given for specific purposes such as being an emergency contact or providing employment references.
Categories of personal data that we processBasic contact details including: Name and address, Company name (if relevant), Job function (if relevant), Email address, Phone number, Country
Source of informationThe personal data is collected only where a member of Spirent staff or a job applicant has provided the relevant details.
Purposes of the processingWhere personal data relates to emergency contacts, it will be used only for the purpose of contacting the data subject in the event of an accident or emergency affecting the individual concerned. Where personal data relates to referees, it will be used only to verify the employment history and experience, and the referee’s impressions of the individual concerned.
Lawful basis of processingThe lawful basis of processing is that at least one of the following applies: (j) the processing is necessary for the purposes of the legitimate interests pursued by Spirent; (k) the processing is necessary for the performance of a contract with the data subject, or in order to take steps at the request of the data subject prior to entering into a contract; and/or (l) to help us to comply with legal obligations such as (in the case of emergency contacts) ensuring the safety of our staff.
Recipients of the personal dataWe do not share personal data with other data controllers outside the Spirent group. However, we may engage third parties to process personal data for Spirent in connection with our business activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law.
Overseas transfersPersonal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects.
Duration of processingIn the case of emergency contacts, the personal data will remain on file until it is updated by the relevant Spirent staff member. (Spirent staff are asked periodically to validate their emergency contact details.) In all other cases, we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements.
Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data?No.
Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject?No.
Plans for further processingNone other than for the reason the data was collected.

Questions for Spirent experts? Submit a request for information