Kyriba Data Privacy Framework Notice

Kyriba Corp., and its subsidiary RimTec, Inc. (collectively “Kyriba Corp.”), comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively “DPF Principles”).  If there is any conflict between the terms in any Kyriba privacy policy or privacy notice and the DPF Principles, the DPF Principles shall govern. 

The Federal Trade Commission has jurisdiction over Kyriba Corp.’s compliance with the DPF Principles, and, as such, Kyriba may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

As noted within our applicable privacy policies and/or notices, we may need to disclose personal information to third parties. Transfers of personal information to third parties will be done in accordance with the appropriate data transfer mechanisms including, as applicable, with the DPF Principles. We may be liable for such third-party transfers in some situations in the event such third-parties process personal information in a manner inconsistent with the DPF Principles, unless Kyriba proves that Kyriba is not responsible for the event giving rise to the damage. At this time, Kyriba relies on the EU-U.S. DPF and the UK Extension to the EU-US DPF for transfers of personal data as a mechanism for the transfer of personal information. Kyriba will rely on the Swiss-U.S. DPF once it enters into force, but Kyriba adheres to the Swiss-U.S. DPF in anticipation of their future entry into force.

If you have any inquiries or complaints about our handling of your personal information under the DPF Principles, please contact us at [email protected] and we will promptly respond to your inquiry. If you are not satisfied with our response and wish to address your unresolved claim further, you may do so by filing a claim at no cost with the International Centre for Dispute Resolution-AAA. Information on how to file a claim and about the International Centre for Dispute Resolution-AAA can be found by clicking here. Kyriba commits to cooperate and comply with our third-party dispute resolution provider to address your concerns. 

If you have applicable residual claims unresolved by the other methods listed above, you may be entitled to seek redress via the Data Privacy Framework Program’s arbitration mechanism. Information about this option can be found by clicking here.