Imprivata End User Privacy Notice

Last updated: October 3, 2024

What Does This Privacy Notice Cover?

If you use any software, hosted software-as-a-service, hardware, or other technology, services, or solutions provided by or on behalf of Imprivata, Inc. (“Product”), which includes Products previously provided by Ground Control, Inc., FairWarning, LLC, SecureLink, Inc., or any other affiliates or subsidiaries of Imprivata, Inc. (“Imprivata”) with an account provided by an organization you are affiliated with (“Organization”), this Imprivata End User Privacy Policy (“Privacy Policy”) describes Imprivata's practices regarding the use and disclosure of personal data that may be collected through the Products or otherwise received by Imprivata in connection with Products. Imprivata respects your privacy and is committed to protecting your information and complying with all applicable privacy laws in the conduct of its business. Privacy laws in the United States, European Economic Area (EEA), and other locations may govern the proper use, processing, disclosure, storage, and protection of personal data.

This notice and our Privacy Policy explains:

What information Imprivata collects or receives as part of the Products and why Imprivata collects or receives it.
How Imprivata uses that information.
How and why Imprivata may disclose that information.
International transfers of data
The ways in which you can exercise your data subject rights.

Organizations’ Use of Products and Exercising Your Rights

Organizations may use your data as follows:

To control and administer your Imprivata Product and Product account, including controlling privacy-related settings of the Product or Product account.
To access and process your data, including personal data, interaction data, diagnostic data, and the contents of your communications and files associated with your Imprivata Product and Product accounts.
If you lose access to your Organizational account (in event of change of employment, for example), you may lose access to Products and the content associated with those Products, including those you acquired on your own behalf, if you used your Organizational account to access or use such Products.

If your Organization provides you with access to Imprivata Products, your use of the Imprivata Products is subject to your Organization's policies, if any, and the Organization’s agreement(s) with Imprivata, described in more detail below. You should direct any privacy inquiries, including any requests to exercise your data protection rights (if applicable to you or to your jurisdiction), to your Organization’s administrator. Imprivata is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this Privacy Policy.

When you use an Imprivata Product provided by your Organization, Imprivata’s processing of your personal data in connection with that Product is governed by a contract between Imprivata and your Organization. Imprivata processes your personal data to provide the Product to your Organization and you, and in some cases for Imprivata’s business operations related to providing the Product as described in the Use of Personal Data by Imprivata section below.

As mentioned above, if you have questions about Imprivata’s processing of your personal data in connection with providing Products to your Organization, please contact your Organization. If you have questions about Imprivata’s business operations in connection with providing Products to your Organization, please contact Imprivata as described in the Contact Us section.

Use of Personal Data by Imprivata In Connection with Products

When an Organization trials, purchases, uses, or subscribes to an Imprivata Product, or obtains support for or professional services with such Products, Imprivata receives data from you and collects and generates data to provide the Product (including improving, securing, and updating the Product), conduct our business operations, and communicate with the customer. For example:

When you gain access to a Product through your Organization, the data we collect or receive on behalf of your Organization varies depending on the nature of the Product and how your Organization has configured its use of the Product. For example, we may process your name, contact information (such as email address), device and usage data regarding your use of the Product, and biometric information.
When an Organization engages with a Imprivata sales representative, we collect the name and contact data of the Organization’s representative, along with information about the Organization itself, to support that engagement.
When an Organization interacts with a Imprivata support professional, we collect device and usage data or error reports to diagnose and resolve problems.
When an Organization pays for Products, we collect contact and payment data to process the payment.
When Imprivata sends communications to an Organization, we use data to personalize the content of the communication.
When an Organization engages with Imprivata for Products that include professional services, we collect the name and contact data of the Organization’s designated point of contact and use information provided by the Organization to perform the professional services that the Organization has requested.

Additional Privacy Disclosures

Please review our Privacy Policy for more information regarding Imprivata’s privacy practices including:

How and why Imprivata may disclose that information
How Imprivata protects and secures your information
International transfers of data
The ways in which you can exercise your data subject rights.

Contact Us

If you have any questions, concerns, or would like to submit a Data Subject Request or complaint regarding data privacy, please email privacycommittee@imprivata.com.

Individuals and the data protection supervisory authorities in the EU may also contact its EU representative according to Art. 27 GDPR:

Imprivata OGiTiX GmbH, Hans-Böckler-Str. 12, 40764 Langenfeld, Germany
eurepresentative@imprivata.com