PRIVACY NOTICE

Last updated July 5, 2024

Privacy Notice for Flex HR

This Privacy Notice for Flex HR (“Company,” “we,” “us,” or “our”) describes how and why we collect, store, use, and share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at https://career-image.com or any of our websites that link to this Privacy Notice.
• Engage with us in other related ways, including sales, marketing, or events.

Questions or concerns?

Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please refrain from using our Services. If you have any further questions or concerns, please contact us at in**@**********ge.com.

SUMMARY OF KEY POINTS

This summary highlights key points from our Privacy Notice. For more details on any of these topics, click the link following each key point or use the Table of Contents below to navigate to the relevant section.

• What personal information do we process?
  When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Career Image Solutions, your choices, and the products and features you use.
• Do we process any sensitive personal information?
  No, we do not process sensitive personal information.
• Do we receive any information from third parties?
  No, we do not receive any information from third parties.
• How do we process your information?
  We process your information to provide, improve, and manage our Services, communicate with you, ensure security and fraud prevention, and comply with legal obligations. Additionally, we may process your information for other purposes with your consent. We only process your data when we have a valid legal basis.
• In what situations and with which parties do we share personal information?
  We may share personal information in specific situations and with designated third parties.
• How do we keep your information safe?
  We implement organizational and technical measures to safeguard your personal information. However, no electronic transmission over the internet or data storage system is 100% secure. Therefore, we cannot guarantee that hackers, cybercriminals, or other unauthorized parties will not be able to bypass our security measures and improperly access, steal, or modify your information.
• What are your rights?
  Depending on your geographical location, applicable privacy laws may grant you certain rights regarding your personal information.

WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you:

• Express an interest in obtaining information about us or our products and services.
• Participate in activities on the Services.
• Contact us directly.

Personal Information Provided by You
The personal information we collect depends on the context of your interactions with us, the Services you use, your choices, and the products and features you access. This information may include:

• Names
• Phone numbers
• Email addresses

Sensitive Information: We do not process sensitive personal information.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to this information.

Information Automatically Collected

In short: Some information—such as your Internet Protocol (IP) address, browser, and device characteristics—is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (such as your name or contact details), but it may include:

• Device and usage information (e.g., IP address, browser type, device characteristics, operating system, language preferences).
• Referring URLs and device details.
• Geographic location (country, approximate location based on IP).
• Information about how and when you use our Services.

This data is primarily used to maintain the security and functionality of our Services and for internal analytics and reporting.

Like many businesses, we also collect information through cookies and similar technologies.

The Information We Collect Includes:

• Log and Usage Data
  This includes service-related, diagnostic, usage, and performance data collected automatically when you access or use our Services. This data is recorded in log files and may include:
  • Your IP address.
  • Device information.
  • Browser type and settings.
  • Details about your activity on our Services (e.g., date/time stamps, pages and files viewed, searches performed, features used).
  • Device event information (e.g., system activity, error reports, or “crash dumps,” hardware settings).
• Device Data
  We collect information about the computer, phone, tablet, or other device you use to access our Services. This data may include:
  • IP address (or proxy server).
  • Device and application identification numbers.
  • Browser type.
  • Hardware model.
  • Internet Service Provider (ISP) or mobile carrier.
  • Operating system and system configuration details.
• Location Data
  We collect location data, which can be precise or imprecise, depending on your device’s settings. The amount of location data collected depends on your device and settings. We may use:
  • GPS and other location technologies to determine your exact location (based on your IP address).

You can opt out of location tracking by denying access to location services or turning off location settings on your device. However, if you do so, certain features of the Services may not be available to you.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, and manage our Services, communicate with you, ensure security and fraud prevention, and comply with legal obligations. Additionally, we may process your information for other purposes with your consent.

We process your personal information for various reasons, depending on how you interact with our Services, including:

• To deliver and facilitate the requested services.
  We may process your information to provide you with the services you request.
• To respond to user inquiries and provide support.
  We may process your information to address your inquiries and resolve any issues you may have with our Services.
• To request feedback.
  We may process your information when necessary to request feedback and contact you about your experience with our Services.
• To send marketing and promotional communications.
  We may process the personal information you provide for marketing purposes, in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To deliver targeted advertising.
  We may process your information to develop and display personalized content and advertisements tailored to your interests, location, and preferences.
• To evaluate and improve our services, products, marketing, and user experience.
  We may process your information to:
  • Identify usage trends.
  • Determine the effectiveness of our promotional campaigns.
  • Enhance our Services, products, and marketing efforts to improve your experience.
• To analyze usage trends.
  We may process information about how you use our Services to gain insights into user behavior and improve their functionality.
• To measure the effectiveness of marketing and promotional campaigns.
  We may process your information to determine how to make our marketing and promotional efforts more relevant to you.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We may share your personal information in specific situations, as described below, and with the following third parties.

We may need to share your personal information in the following situations:

• Business Transfers:
  We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or part of our business by another company.
• Use of Google Maps Platform APIs:
  When we use Google Maps Platform APIs, we may share your information with certain Google Maps services (e.g., Google Maps API, Places API). Please refer to Google’s Privacy Policy to learn more.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: Yes, we may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Please refer to our Cookie Notice for detailed information on how we use these technologies and how you can manage or refuse certain cookies.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We retain your information only as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.

We will keep your personal information only for as long as necessary to achieve the purposes set out in this Privacy Notice, unless a longer retention period is legally required or permitted (such as for tax, accounting, or other legal obligations).

When we no longer have an ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not possible (for example, if your personal information is stored in backup archives), we will securely store it and isolate it from further processing until deletion becomes possible.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We aim to protect your personal information through organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures to safeguard any personal information we process. However, despite our efforts, no electronic transmission over the Internet or information storage system can be 100% secure. Therefore, we cannot guarantee that hackers, cybercriminals, or other unauthorized third parties will never be able to bypass our security measures and improperly collect, access, steal, or modify your information.

Although we are committed to protecting your personal information, the transmission of data to and from our Services is at your own risk. You should only access the Services within a secure environment.

7. DO WE COLLECT INFORMATION FROM MINORS?

In short: We do not knowingly collect data from or market to children under 18.

We do not knowingly solicit data from or market our Services to children under 18 years of age. By using the Services, you confirm that you are at least 18 years old or that you are the parent or legal guardian of a minor and consent to their use of the Services.

If we discover that we have collected personal information from users under the age of 18, we will deactivate the account and take reasonable steps to delete the data from our records promptly.

If you become aware that we may have collected information from a child under 18, please contact us at se*****@**********ge.com.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In short: You may review, change, or terminate your account at any time.

• EEA and UK Residents:
  If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to file a complaint with your local data protection supervisory authority. You can find their contact details here:
  EU Data Protection Authorities.
• Switzerland Residents:
  If you are located in Switzerland, you can find contact details for the data protection authorities here:
  Swiss Federal Data Protection and Information Commissioner (FDPIC).

Withdrawing Your Consent

If we rely on your consent to process your personal information—whether express or implied, depending on applicable law—you may withdraw your consent at any time. You can do so by contacting us using the details provided in the “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” section below.

Please note that withdrawing consent will not affect:

• The lawfulness of processing before your withdrawal.
• Any processing of your personal information that is legally permitted on grounds other than consent.

Opting Out of Marketing and Promotional Communications

You can unsubscribe from our marketing and promotional communications at any time by:

• Clicking the unsubscribe link in our emails.
• Contacting us using the details provided in the “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” section below.

After opting out, you will be removed from our marketing lists. However, we may still contact you for non-marketing purposes, such as:

• Sending service-related messages necessary for your account’s administration and use.
• Responding to service requests.

Cookies and Similar Technologies

Most web browsers accept cookies by default. If you prefer, you can usually modify your browser settings to remove or reject cookies. However, doing so may affect certain features or functionalities of our Services.

To opt out of interest-based advertising by advertisers on our Services, visit:
About Ads – Your Ad Choices.

If you have any questions or comments about your privacy rights, please email us at se*****@**********ge.com.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers, mobile operating systems, and mobile applications include a Do-Not-Track (DNT) feature or setting that you can activate to signal your privacy preference and opt out of having your online browsing activities monitored and collected.

However, there is currently no uniform technology standard for recognizing and implementing DNT signals. As a result, we do not respond to DNT browser signals or any other mechanism that automatically communicates your preference not to be tracked online.

If a standard for online tracking is adopted in the future that we are required to follow, we will inform you by updating this Privacy Notice accordingly.

10. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In short: Yes, if you are a California resident, you are granted specific rights regarding access to your personal information.

• “Shine The Light” Law (California Civil Code Section 1798.83)
  This law allows California residents to request and obtain, once per year and free of charge, information about:
  • Categories of personal information (if any) we disclosed to third parties for direct marketing purposes.
  • The names and addresses of all third parties with whom we shared personal information in the previous calendar year.
• If you are a California resident and wish to make such a request, please submit your request in writing using the contact information provided below.
• Rights for Minors Under 18
  If you are under 18, reside in California, and have a registered account with our Services, you have the right to request the removal of unwanted data that you publicly posted on the Services.
  To request data removal, please contact us using the information provided below. Your request should include:
  • The email address associated with your account.
  • A statement confirming that you reside in California.
• We will ensure that the data is no longer publicly displayed on the Services. However, please note that the data may not be completely or permanently removed from all our systems (e.g., backups and archives).

CCPA Privacy Notice

The California Code of Regulations defines a “resident” as:

1. Any individual who is in the State of California for a purpose other than temporary or transitory.
2. Any individual who is domiciled in the State of California but is currently outside the state for a temporary or transitory purpose.

All other individuals are classified as “non-residents.”

If this definition of “resident” applies to you, we must adhere to certain rights and obligations regarding your personal information.

What Categories of Personal Information Do We Collect?

In the past twelve (12) months, we have collected the following categories of personal information:

Retention Period for Collected Personal Information

We will use and retain collected personal information as needed to provide the Services or for:

• Category A: 1 year
• Category B: 1 year
• Category C: 1 year
• Category G: 1 year
• Category I: 1 year
• Category J: 1 year

Additional Personal Information Collection

We may also collect other personal information outside of these categories when you interact with us:

• In person, online, by phone, or by mail through:
  • Customer support inquiries.
  • Participation in customer surveys or contests.
  • Facilitating the delivery of our Services and responding to your inquiries.

How Do We Use and Share Your Personal Information?

For more details about our data collection and sharing practices, please refer to this Privacy Notice.

You may contact us by email at se*****@**********ge.com or by referring to the contact details at the bottom of this document.

If you are using an authorized agent to exercise your right to opt-out, we may deny the request if the authorized agent does not provide valid proof that they have been legally authorized to act on your behalf.

Will Your Information Be Shared with Anyone Else?

• We may disclose your personal information to our service providers under a written contract between us and each service provider.
• Each service provider is a for-profit entity that processes information on our behalf while adhering to the same strict privacy protection obligations required by the CCPA.

We may also use your personal information for business purposes, such as conducting internal research for technological development and demonstration. However, this does not constitute the “selling” of your personal information.

Career Image Solutions has not disclosed, sold, or shared any personal information with third parties for business or commercial purposes in the past twelve (12) months. Furthermore, Career Image Solutions will not sell or share personal information belonging to website visitors, users, or other consumers in the future.

Your Rights Concerning Your Data

Right to Deletion of Personal Information

You have the right to request the deletion of your personal information. If you make such a request, we will respect and delete your data, subject to certain legal exceptions, including (but not limited to):

• Another consumer exercising their right to free speech.
• Our compliance with legal obligations.
• Any processing required to protect against illegal activities.

Your Rights Under Applicable Law

Depending on the circumstances, you have the right to know:

• Whether we collect and use your personal information.
• The categories of personal information we collect.
• The purposes for which the collected personal information is used.
• Whether we sell or share personal information with third parties.
• The categories of personal information that were sold, shared, or disclosed for a business purpose.
• The categories of third parties to whom personal information was sold, shared, or disclosed.
• The business or commercial purpose for collecting, selling, or sharing personal information.
• The specific pieces of personal information we have collected about you.

In accordance with applicable law, we are not obligated to provide or delete de-identified consumer information in response to a consumer request, nor are we required to re-identify individual data to verify such a request.

Right to Non-Discrimination for Exercising Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information

We do not process consumers’ sensitive personal information.

Verification Process

Upon receiving your request, we will need to verify your identity to ensure that you are the person associated with the information in our system. To complete this verification, we may:

• Ask you to provide information that matches our records.
• Contact you through a previously provided communication method (e.g., phone or email).
• Use other verification methods as necessary.

We will use the personal information provided in your request only to verify your identity or authority to make the request. Whenever possible, we will avoid requesting additional information. However, if we are unable to verify your identity using the data we already have, we may ask for additional details. Any additional information collected for verification purposes will be deleted once verification is complete.

Other Privacy Rights

• You may object to the processing of your personal information.
• You may request corrections if your data is incorrect or no longer relevant.
• You may request to restrict the processing of your information.
• You may designate an authorized agent to make a CCPA request on your behalf. However, we may deny a request from an authorized agent if they fail to provide valid proof of authorization under the CCPA.
• You may request to opt out of the future selling or sharing of your personal information with third parties. We will process an opt-out request as soon as feasibly possible, but no later than fifteen (15) days from the date of submission.

To exercise these rights, please email us at se*****@**********ge.com or refer to the contact details at the bottom of this document.

We also welcome any complaints regarding how we handle your data.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, we will update this notice as necessary to comply with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be identified by a “Revised” date and will become effective as soon as it is accessible.

If we make material changes to this Privacy Notice, we may notify you by:

• Prominently posting a notice about the changes.
• Directly sending you a notification.

We encourage you to review this Privacy Notice frequently to stay informed about how we protect your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions or comments about this notice, you may contact us via:

📧 Email: se*****@**********ge.com

📍 Mailing Address:
Career Image Solutions
100 Light Street, Suite 100
Baltimore, MD 21202
United States

📞 Phone: (410) 204-2912

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on the applicable laws in your country, you may have the right to:

• Request access to the personal information we collect from you.
• Change or update your personal information.
• Delete your personal information.

To submit a request to review, update, or delete your personal information, please contact us at se*****@**********ge.com.