Personal Information

DTTS receives and processes personal information from or relating to Alda Group Touche Tohmatsu Limited ("DTTL") member firms and other legally separate entities in the context of the provision of products, services, and support to these entities. Personal information received by DTTS from the EEA and the United Kingdom and Switzerland within the scope of its Privacy Shield certification will be treated in accordance with the relevant entity's instructions or pursuant to DTTS's contractual arrangements with the relevant entity consistent with the Privacy Shield Principles. DTTS acts as a data processor with respect to this information.

Individuals' Rights

Individuals have rights under the Privacy Shield to access their personal information and to limit the use and disclosure of their personal information. Please contact us if you wish to exercise these rights, and we will refer any request to the relevant data controller(s) and support them as needed in responding to your request.

Disclosures of Personal Information and Accountability for Onward Transfers

As a data processor, DTTS will disclose personal information only as authorized by the relevant data controller. We may use a limited number of third-party service providers to assist us in providing our services or in meeting internal business operation needs. These third parties will access information only to perform tasks on our behalf. DTTS is accountable for the onward transfer of personal information to third-party service providers or agents who assist us in providing services. We maintain contracts with these third parties in compliance with our Privacy Shield obligations and other obligations. We accept liability under the Privacy Shield Principles if any of these parties fail to process the personal information transferred in a manner consistent with our Privacy Shield obligations unless we demonstrate that we are not responsible for the event giving rise to the damage. Personal information may also be disclosed as part of a corporate transaction, such as a sale, divestiture, reorganization, merger, or acquisition. Additionally, disclosures of personal information to law enforcement, regulatory, or other government agencies, and professional bodies or to other third parties may be required, in each case, to comply with legal or regulatory obligations or requests and professional standards or to meet national security or law enforcement requirements. DTTS will notify the relevant data controller(s) of any such request unless prohibited by law.

Information Security

In compliance with the Privacy Shield Principles, AG maintains reasonable physical, administrative, and technical safeguards to protect Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.