Personal Data means any information about an identifiable living individual. This may include a singular identifier or a collection of information which may identify an individual that we interact with. It does not include any information which has been anonymised whereby the individual can no longer be identified. Hexagon Autonomy and Positioning may collect, use, store or transfer the following types of Personal Data about you, as illustrated below:
Sensitive Personal Data and Children
Hexagon Autonomy and Positioning employs special security measures to protect sensitive Personal Data commensurate with the information collected. Hexagon Autonomy and Positioning does not actively collect any special categories of Personal Data about you (i.e. race, ethnicity, religion, political beliefs, sex life, sexual orientation, trade union membership and genetic and biometric data) and we discourage you from sharing any such information with Hexagon Autonomy and Positioning.
Hexagon Autonomy and Positioning products and services are not offered for sale to minors. As such, Hexagon Autonomy and Positioning does not collect Personal Data about children. Any such information collected in error or by other means will be deleted as soon as we are made aware of it.
If You Fail to Provide Personal Data
Where we need to collect Personal Data to the extent required by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
You may provide us with your Personal Data directly when:
Automated Collection of Personal Data
Third Party or Publicly Available Resources
We may receive Personal Data about you from various third parties and public resources to such extent permitted by law:
Processing and transferring of your Personal Data
We will only use your Personal Data when applicable law allows us to and where:
Below we have set out a range of activities where we may use, share or disclose your Personal Data. This information includes the types of Personal Data used and the justification for such processing activity:
We provide you with choices regarding certain use of Personal Data, particularly around marketing and advertising. We may send you marketing communications if you engage with us in activities such as participation at trade booths and trade shows or engagement on our social media sites about the goods and services we offer and the requesting of information from us. We will provide you with a mechanism to unsubscribe from receiving marketing communications.
We will ask for your express opt-in consent to undertake certain marketing activities including if sharing your Personal Data with third parties for marketing purposes. We will also provide a mechanism for you to withdraw that consent at any time.
Aggregated Data and Anonymised Data
We also collect, use and share aggregated data such as scientific, statistical or demographic data for business or regulatory purposes. Aggregated data may be derived from your Personal Data but is not considered personal data under applicable law as this data does not directly or indirectly reveal your identity.
When you access our website, we may automatically collect Technical Data that is anonymised and not personally identifiable such as type of internet browser and computer operating system used; domain name of the website from which you came, number of visits, average time spent, pages viewed, search terms used, and search analytics. We may use this information to measure the use of our website and improve its content.
Personal Data shall be kept as accurate, complete and current as necessary for the purposes for which it is to be used. We take several technical, organisation and administrative precautions to ensure appropriate security of your Personal Data, to guard against unauthorised and unlawful processing, and against accidental loss, destruction or damage. We will notify any relevant supervisory body for data privacy in the event of a data security breach in accordance with applicable laws.
As a global organisation, Hexagon Autonomy and Positioning has an international network of offices. We may transfer Personal Data of individuals within European Economic Area (EEA) to a company outside of the EEA that is affiliated with us or one of our service providers. Whenever we transfer your Personal Data outside the EEA, we will ensure that an appropriate safeguard is in place.
Personal Data transferred from the EEA to countries subject to an adequacy decision of the European Commission, such as Canada (limited to commercial organisations) and Switzerland, will be based on such adequacy decision.
Where your Personal Data is transferred to a country outside of the EEA which is not subject to an adequacy decision of the European Commission, such as Australia, Brazil, Chile, China, Colombia, Hong Kong, India, Indonesia, Japan, Malaysia, Mexico, Peru, Philippines, Russia, Singapore, South Africa, South Korea, Taiwan, Thailand, UAE, the US, and Venezuela, then we will use standard contractual clauses approved by the European Commission (“EU Standard Contractual Clauses”) or other approved measure to ensure a sufficient level of protection for your Personal Data. These EU Standard Contractual Clauses can be found via the following link: http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm
We will keep your Personal Data for only as long as necessary to fulfil the purposes for which it was collected. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you all in accordance with our data retention policy.
Our data retention policy has been determined by considering the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and considering the applicable legal, regulatory, tax, accounting or other requirements and whether we need to keep it to protect you or us.
You may have certain rights under applicable law relating to your Personal Data. Where applicable: you are entitled to know and have access to the Personal Data we are processing about you and to receive copies of Personal Data or have it transferred to third parties; you are entitled to have incorrect Personal Data about you corrected; and in some cases, you may request that we delete or refrain from certain processing of your Personal Data. However, deletion or limitation of your Personal Data may result in Hexagon Autonomy and Positioning not being able to fulfil its commitments to you or your employer.
You have the right to object to any processing of Personal Data which includes profiling and for direct marketing purposes that we may carry out on grounds relating to your individual situation unless we can demonstrate compelling legitimate grounds for us not doing so.
Any requests to exercise the above rights must be made in writing to the address below or by email to the Privacy Mailbox. Upon receipt of your request, you will be required to verify your identity. Any such documentation provided shall be used for verification purposes only. Hexagon Autonomy and Positioning will respond to an individual’s rights to Personal Data within thirty (30) days of receipt of the request but may be permitted to an extension of that time under applicable privacy legislation. Where permitted by law, a fee for reasonable costs incurred may be charged when responding to more complex requests. You will be informed of any applicable fee prior to processing such request. Hexagon Autonomy and Positioning will be as specific as possible when describing to which third parties and to whom it has disclosed Personal Data. Hexagon Autonomy and Positioning may not always be obliged to comply with a request received from you for deletion, restriction, objection, transferral or portability for specific legal reasons which will be notified to you at the time, where applicable.
As used in this section: “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household; “consumer” means a natural person who is a Californian resident; ‘processing’ means any operation or set of operations that are performed on personal data or on sets of personal data, whether or not by automated means; and, “sell’ means selling, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating orally, in writing or by electronic or other means, a consumer’s personal data by the business to another business or a third party for monetary or other valuable consideration
While processing personal data that you, a consumer, supply or is collected by us in connection with you, we agree to comply with all applicable data protection laws, including the California Consumer Privacy Act of 2018 (“CCPA”).
To the extent that we receive from you any personal data for processing on your behalf, we shall:
a. not sell your personal data;
b. retain, use and disclose the ‘personal data’ only as permitted by the CCPA;
c. not retain, use or disclose the ‘personal data’ for any purpose other than specified; and
d. promptly, and, in any case within ten (10) days of receipt, comply with any written instructions in connection with responding to requests of consumer’s exercising their rights under the CCPA.
This website may contain links to other third-party websites which may include, with limitation, our registered agents, dealers, and distributors. Whilst we endeavour to only link to websites that share our high standards and respect for privacy, please understand that we do not control these third-party websites and we are not responsible for the content of their privacy notices. When you click on links for third-party websites, we encourage you to read the privacy notice of each third-party website.
If you would prefer to contact us in writing, please direct your mail to the Privacy Officer at the address below:
Hexagon Autonomy and Positioning
1B Farburn Terrace
Should you not be satisfied with the response you receive, you may have recourse to additional remedies under applicable privacy legislation. For further information, please contact your local supervisory body for data privacy. If you would like help determining your applicable supervisory body for data privacy, please email us at our Privacy Mailbox.
1The Hexagon Autonomy and Positioning division consist of NovAtel Inc., NovAtel America Inc, Antcom Corporation, Autonomous Stuff LLC, , Veripos Limited, Veripos (Singapore) Pte Ltd, Veripos (Australia) Pty Ltd, Veripos (US) Inc., Veripos Brasil Ltda, Veripos (Mexico) S.R. de R.L. de C.V. and TerraStar Limited, that serve as controller, joint controller or controller in common or processor as the case dictates. Hexagon Autonomy and Positioning has put in place safeguards through technical and organisational measures, and intercompany agreements to manage the flow of information within its division.