Converus EU-U.S. Data Privacy Framework Statement

Last Modified: October 23, 2023

Converus, Inc. (“Converus,” “we” or “us”) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Converus has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  Converus has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. To learn more about the EU-U.S. DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/s/ or https://www.dataprivacyframework.gov/s/participant-search.

Converus’ participation in the EU-U.S. Data Privacy Framework applies to all Personal Information, defined as any information or set of information in any format that identifies or could be used by or on behalf of Converus to identify an individual. Personal Information that is subject to this EU-U.S. Data Privacy Framework Statement is information received from individuals who are resident in the European Union, European Economic Area and Switzerland.

Converus will comply with the EU-U.S. Data Privacy Framework Principles with respect to such Personal Information. Converus’s accountability for Personal Information that it receives under the EU-U.S. Data Privacy Framework and subsequently transfers to a third party is described in the EU-U.S. Data Privacy Framework Principles. In particular, Converus remains responsible for the processing of personal information received under the EU-U.S. Data Privacy Framework and subsequently transferred to a third party acting as an agent on our behalf. In the event that such a third-party agent processes such personal information in a manner inconsistent with the EU-U.S. Data Privacy Framework Principles, Converus shall not be liable for any damage where it is not responsible for an event giving rise to such damage.

We encourage you to contact us should you have an EU-U.S. DPF-related (or general privacy-related) complaint regarding our handling of your data. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact JAMS, our U.S.-based third party dispute resolution provider (free of charge).

As further explained in the EU-U.S. DPF principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. Converus is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Contact Us

If you have any questions about this EU-U.S. Data Privacy Statement, you may call us at +1 801-331-8840, email us at [email protected], or write to us at:

Converus, Inc.
Attn: Privacy Matters
610 S. 850 E., Ste #4
Lehi, Utah 84043