Privacy Policy

1. Privacy Policy

Prometheus Group recognizes the importance of privacy and sensitivity of personal information. As handlers of data, we have a professional obligation to keep all classified information we receive from data subjects confidential.

Prometheus Group is committed to protecting any personal information/data that is collected, held, processed, or used by Prometheus Group during provision of our services or product. The Prometheus Group Privacy Policy outlines how we manage personal information of employees, stake holders (both internal & external), and all personnel directly or indirectly involved and safeguard their privacy.

Prometheus Group is responsible for the personal information we handle. To ensure our accountability, we have developed this Policy and trained our employees, contractors, agents and all third parties about our policies and practices. We reserve the right to modify this
Policy from time to time.

This privacy policy sets out how Prometheus Group uses and protects any information that you give when you use our website, as well. Should we ask you to provide certain information by which you can be identified then you can be assured that it will only be used in accordance
with this privacy statement.

If we make any material changes, we will notify you by updating the Policy on our website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

2. Applicability

This privacy policy is applicable for all customers, candidates seeking employment at Prometheus Group, employees, contractors, and suppliers whose personally identifiable information (PII) are collected, maintained and/or processed by Prometheus Group.

Statues and regulations applied are General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA).

3. Definitions

Data Subject is an identified or identifiable natural person(s). Data subjects are human beings from whom or about whom you collect information in connection with our business and its operations.

Personal Data means any information relating to an identified or identifiable natural person (“data subject”,”you”,”your”,”their”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Consent of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her. Silence, pre-ticked boxes, or inactivity should not therefore constitute consent. When the processing has multiple purposes, consent should be given for all of them.

Data Processor means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller.

Data Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data; where the purposes and means of such processing are determined by Union or Member State law.

4. Gathering Personal Information

Prometheus Group may collect, maintain, and use your personal data that may have been provided to the various departments including but not limited to Human Resources, Talent Acquisition, Finance, Marketing, Sales, and Travel.

4.1 What we collect

Prometheus Group collects Personal Information that you provide to us through our website or applications, and in connection with business transactions, business partner relationships, relationships of engagement, and sales channel interactions.

Normally, Prometheus Group will ask for consent in writing, but in some circumstances, we may accept oral consent as in introductory meetings. Sometimes, consent may be implied through your conduct with us. For instance, voluntary submission of a resume with
Prometheus Group is implied consent.

In general, you can visit our website without telling us who you are or revealing any personal information about yourself. However, some portions of our website require additional information in order to make payments. When you make a payment online, we must collect
information about you in order to facilitate the processing of your payment transaction. Since certain information is required if you choose to register or make a payment transaction using this site you agree to provide accurate and complete information when providing personal
information. The types of personal information we collect may include the following information collected from you and from your transactions with us:

Name, mailing address, city, state, zip, phone number and email address.
Your bill payment (including payment amount and designated payee), your credit or debit card numbers, expiration date and cardholder name.
Demographic information such as job title

Note: If you choose not to provide your Personal Information which is mandatory to process your request, we may not be able to provide the corresponding service.

4.1.1 Personal Information we receive from third party sources

Some third parties such as our business partners and service providers provide us with Personal Information about you, such as the following:

If you interact with a third-party service to visit our sites (e.g., Facebook Connect, Google Sign-In, or Twitter etc.), or if you share content from our website through a third-party social media service, the third-party service may send us information about you. The information we receive will depend on the policies and your account settings with the third-party service.

4.1.2 Personal Information from advertising partners

We receive information about you from some of our service providers who assist us with marketing or promotional services related to how you interact with our websites, applications, products, services, advertisements, events, or communications.

4.1.3 Personal Information from our website

Our website may contain links to other websites of interest that are not governed by this Policy. We may provide aggregated information to third parties, but these statistics do not include any identifiable personal information.

However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites as such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

We do not share information about your use of our site with any advertising partners or third-party companies. Your privacy and security are important to us, so we ask that you consent to the use of cookies if you continue to use our website.

Whenever you visit or interact with our sites, we may collect or store information about your interaction with our sites (“Usage Information”). This Usage Information may include:

IP address or any other unique identifier assigned to the device that you use to access our sites;
The functionality and characteristics of your device, including type of browser,
operating system and hardware, mobile network information, and in some cases location information;
The URL that referred you to our sites, if any;
Keywords searched which led you to our website
Your activities on our sites, such as which web pages you visit, what terms you
searched within our sites, and which links within our sites that you click on; and the
time of day that you visited our sites and how long your visit lasted.

5. Use of Personal Information

In addition, we use your personal information for the following:
We use the information we collect about you for everyday internal business purposes in order to provide our services, process your transactions, maintain your account(s), and provide customer service. We provide access to personal information about our customers
only to those employees who require it as part of their job in order to provide our services, process customer payments and provide customer service. We collect, store, and process your personal information on servers. We require this information to understand your needs
and provide you with a better service, and in particular for the following reasons:

Internal record keeping
We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email or phone. We may use the information to customize the website according to your interests. External Prometheus Group shares certain personal information of customers to run our everyday business. Prometheus Group does not sell or rent any of your personal information. Prometheus Group will not share any of your personally identifiable information with third parties except in the circumstances described below or with your permission.
We share personal information with certain third parties such as banks, processors, card networks, and other suppliers and vendors in order to provide the services and to help us process the transactions you request. Prometheus Group does not share your Personal Information with third parties for marketing purposes without seeking your prior permission. For example, we do not provide our customer mailing lists to anybody else. We use your data to authorize access to our services. Our services allow you to stay informed about press releases, news, blogs, and webinars.
We disclose personally identifiable information with third parties that we in good faith believe is appropriate to cooperate in investigations of suspected fraud or other illegal activity, situations involving potential threats to the physical safety of any person, or to conduct investigations of violations of Prometheus Group’s Terms of Use, or as otherwise required by law.
Certain federal, state, and local laws or government regulations may require us to disclose non-public personal information about you to respond to court orders or legal investigations. In these circumstances, we will use reasonable efforts to disclose only the information required by law, subpoena, legal process, or court order to be disclosed.
We disclose information to your agent or legal representative (such as the holder of a power of attorney that you grant, or a guardian appointed for you).
We share aggregated statistical or demographic data with our business partners or for public relations and marketing purposes. For example, we may disclose the percentage of our customers who make payments with a credit card versus a checking account. However, this aggregated information is not tied to any personally identifiable information that can identify you.
to contact you and respond to your questions or requests.
to engage as employee, contractor or vendor and extend necessary services.
to provide access to desirable content based on your requirements.

5.1 Securing Personal Information

We are committed to ensuring that your information is secure and takes all reasonable precautions to ensure that personal information is kept safe from loss, unauthorized access, modification, or disclosure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information. We take commercially reasonable precautions to protect the personal information submitted to us. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security.

In the event that your sensitive personal information is accessed by an unauthorized individual and the misuse of your information is reasonably possible, we will notify you of the unauthorized access unless a law enforcement agency believes that such notification may
interfere with a criminal investigation. Notification of such an event may be given to you by e-mail, writing, or phone at our sole discretion.
Prometheus Group enters into all necessary agreements which includes Data Protection with relevant service providers to safeguard the personal data. Will review agreements to meet compliance requirements.

We employ many different security techniques to protect such data from unauthorized access by users inside and outside the company. However, "perfect security" does not exist on the Internet. If you have any questions about security on our website or If you are
concerned that your privacy may have been breached, please e-mail us marketing@prometheusgroup.com.

5.2 How we use cookies

We use cookies to personalize content and to analyze our traffic. A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added, and the cookie helps analyze web traffic or lets you know when you visit a particular site.
Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You
can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

5.3 Rights to Access and Control Your Personal Data

For Personal Data that we have about you:

Delete Data: You can ask us to erase or delete all or some of your Personal Data (e.g., if it is no longer necessary to provide Services to you). Opt-out of future data collection: You have the option to opt-out of future data collection and communications. Your information will no longer be collected or stored until you should choose to opt-in unambiguously. Once Prometheus Group receive and confirm your verifiable consumer request, Prometheus Group will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
Change or Correct Data: You can edit some of your Personal Data through your account. You can also ask us to change, update or fix your data in certain cases, particularly if it is inaccurate.
Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your Personal Data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your Personal Data is inaccurate or unlawfully held).
Right to know what personal information is collected, used, and shared both as to the categories and specific pieces of personal information.
Right to Access and/or Take Your Data: You can ask us for a copy of your Personal Data and can ask for a copy of Personal Data you provided in machine readable form.

5.4 Rights of Data Subjects

A resident of the European Union and California residents is entitled to the following Data Protection rights:

Can ask us to access, correct, update or request deletion of Personal Information/Data at any time by contacting us as provided below.
We will not process your user information without a lawful basis to do so, as such bases are defined in Article 6 of the GDPR, Object to processing of Personal Information and ask us to restrict processing of Personal Information or request portability of Personal Information. Again, one can exercise these rights by contacting us as provided below.
Where Prometheus Group derives the custody or control of the Personal Information through its customers, the customer will be the Data Controller and all requests for access to Personal Information should be forwarded through such Data Controller to Prometheus Group; such data will be processed under controlled conditions as part of project delivery. These are considered as customer property.
One has the right to opt-out of marketing communications, Prometheus Group sends many times. One can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us as provided below.
Prometheus Group will not sell the personal information of consumers of any age.
Similarly, if Prometheus Group has collected and processed Personal Information with consent, then the consent may be withdrawn at any time. Withdrawal of consent will not affect the lawfulness of any processing Prometheus Group has conducted prior to withdrawal, nor will it affect processing of Personal Information conducted in reliance on lawful processing grounds other than consent.
One has the right to complain to a Data Protection Authority about our collection and use of Personal Information. However, please notify Prometheus Group at least 36 hours before going to the Authorities, the reason of complaint as such complaint can be avoided if Prometheus Group able to mitigate the concern. Please contact Prometheus Group using the contact details below. For more information, please contact European local Data Protection Authority. (Contact details for data protection authorities in the European economic area, Switzerland, and certain non-European countries (including the US and Canada) are available here).
This Policy is intended to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”) and California Consumer Privacy Act of 2018 (“CCPA”). Provide appropriate protection and care with respect to the treatment of your user information in accordance with the GDPR and CCPA. Prometheus Group responds to all requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

5.5 Exceptions to disclosure of Personal Information

Under certain circumstances, Prometheus Group will disclose personal information:

when required or authorized by law to do so, for example if a court issues a subpoena;
when you have consented to the disclosure;
when the services we are providing to you, requires us share your information to third parties, their consent will be implied, unless they tell us otherwise; if we engage a third party to provide administrative services to us and the third party is bound by our Policy;
if the information is already publicly known;
Whenever it is legal and practicable, we may offer the opportunity to deal with general inquiries without providing your name.

Non-Discrimination

Prometheus Group will not discriminate against the personal for exercising any of GDPR and CCPA rights.

5.6 In the Event of Sale or Bankruptcy:

The ownership of the Company may change at some point in the future. Should that occur, we want this Company to be able to maintain a relationship with you. In the event of a sale, merger, public offering, bankruptcy, your information may be shared with the person or business that owns or controls. Opting out of receiving information from third parties will not affect our right to transfer your information to a new owner, but your choices will continue to be respected regarding the use of your information.

6. Credit Bureaus

To help us make credit decisions about customers, prevent fraud, check the identity of new customers, and prevent money-laundering, we may on occasion, request information about them from the files of consumer reporting agencies.
The law of the countries we are operating require us to confirm the identity of all customers. It may also require us to disclose information in relation to cash transactions as part of tax returns.

6.1 Revisions to Privacy Policy

We reserve the right to change or supplement this Privacy Policy at any time. If we make any substantial changes in this privacy policy (including with respect to how we use customer identifiable information) we will notify you by posting a prominent announcement on our website thirty (30) days prior to implementing the change (to the extent commercially possible).

6.2 User Acceptance of Privacy Policy

By using our website and sharing your personal information, you accept the terms and conditions of this Privacy Policy, and you agree to review this Privacy Policy from time to time to stay informed of changes that may occur. If you do not agree to this policy, please do not use our sites, and do not share your personal information with us. Prometheus Group encourages you to periodically review the Privacy Policy for changes. Your continued use of the Prometheus Group websites following the posting of changes to these terms will mean that you accept those changes.

7. Contact Us

If you have any questions regarding our privacy policy by using website, contact our customer service department.

E-mail: legal@prometheusgroup.com

Telephone: +1-919-378-2211

If you have any questions or complaints related to privacy, please contact.

Name: Ryan Nealy

Title: Data Protection Officer

Email ID: dpo@prometheusgroup.com

Phone Number: +1 (919) 378-2220