EU – US and Swiss-US Privacy Shield Notice

Pegasystems (“Pega”, “we”, “our”, or “us”) continues to comply with the EU-U.S. and the Swiss – U.S. Privacy Shield Frameworks (Privacy Shield) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom, and/or Switzerland, as applicable, to the United States in reliance on Privacy Shield. We have certified to the Department of Commerce that we adhere to the Privacy Shield Principles with respect to such information. If there is any conflict between the terms in our Privacy Notice available here: https://www.pega.com/privacy, in this Privacy Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern.

In compliance with the Privacy Shield Principles, we commit to resolve complaints about our collection or use of your personal information. Individuals in the European Union, the United Kingdom and Switzerland, as applicable, with inquiries or complaints regarding our Privacy Shield policy should first contact [email protected]. We will respond to your inquiry promptly. We have further committed to cooperate with EU, UK and Swiss data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning data transferred from the European Union, the United Kingdom and/or Switzerland, as applicable. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact the EU, the UK, or the Swiss DPAs for more information or to file a complaint. The services of EU, UK, and Swiss DPAs are provided at no cost to you.

If we transfer personal information received under the Privacy Shield to a third party, the third party’s access, use, and disclosure of the personal data must also be in compliance with our Privacy Shield obligations, and we will remain liable under the Privacy Shield for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage. Our organization is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Under certain conditions, an individual can invoke binding arbitration. We will disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/welcome.