Privacy Policy

Last Modified: August 30, 2026

Evalueserve Holdings AG, Switzerland, and its subsidiaries (Evalueserve, us, we, or our) value and appreciate the trust users place in us to protect and store their personal information carefully and in accordance with applicable laws.

This privacy policy explains how Evalueserve collects and stores information that identifies and relates to users (personal data) and how we use, disclose, and protect such information.

Evalueserve Holdings AG, Bahnhofstrasse 106300 Zug, Switzerland will act as a controller or its equivalent under privacy laws, where we decide how and why personal data is used, for example when operating this website. Given the global nature of Evalueserve’s operations, the relevant controller may be the applicable

Evalueserve regional affiliate, depending on the location from which the relevant operations, services, or activities are carried out. For the name and contact information of the Evalueserve entity responsible for other services and the related processing of personal data please see our locations.

However, where we act as a processor or its equivalent while providing services to our client, we will only use personal data in accordance with specific written instructions from our client. In such cases, the client is the data controller or its equivalent for that personal data, and we shall assist the relevant data controller in complying with the data privacy requirements.

Important Note:

Please note that we may change, modify, add to, or delete portions of this policy at any time, and the date for the most recent update will appear at the top of the policy. However, please note that it is the responsibility of the user to regularly review the policy.

By using our website and accessing and using its services, users confirm their agreement with the terms of this policy. If a user does not agree with the terms of this policy, he / she should stop using the website immediately.

Data subjects and types of personal data

We collect personal data of our employees, potential candidates, clients, suppliers, business contacts, and website users / visitors. This data may be gathered either via online mode or offline. If the data we collect is not listed in this privacy policy, we will give individuals appropriate privacy notice (as required by law) about the data collected and its planned usage.

Below are the types of personal data that we may collect from users (without limitation):

  • Personal details: All types of identifiers and contact details such as name, pronoun, email, phone numbers, fax details, physical address, gender, date of birth, age, and place of birth.
  • Commercial data: History and records of the products and services that users obtained from Evalueserve. Correspondence between users and Evalueserve when it is sent to a dedicated e-mail id or via electronic communication means (including channels supported by artificial intelligence).
  • Marketing data: Identifiers such as name, physical address, IP address, social media handle, other online identifiers (email address, etc.), or mobile number if used for direct marketing.
  • Audio-visual materials: Photographs/ images, footage recorded on CCTV or other audio or video captured as part of security or monitoring systems.
  • Recruitment and employment-related information: information submitted through the Careers page, resumes/CVs, professional history, qualifications, interview details, and related recruitment information.
  • Cookies, and network information: IP address, browser type and language, device details, pages visited, date and time of visit, referral source, cookie identifiers, and interactions with website content or communications.

Methods of collecting personal data

  • Information provided directly by user
  1. Contact us page: We collect personal data through the Contact us page and use it to get back to the user in response to his / her request.
  2. Use of the website: We collect personal data that users provide when they use the website.
  3. Careers page: When a user accesses the Careers page on our website, we collect personal data that the user voluntarily submits while applying for jobs, and we use it for recruitment-related activities and to further process the job application. We also use it to send relevant data about careers and opportunities with us and to analyze the effectiveness of our recruitment efforts and resources. More data about how we use user data during the recruitment process is provided in the Candidate Privacy Notice.
  4. Email communication: When a user sends us an email, we may collect personal data that he / she freely supplies to us. We may also collect personal data that users post publicly on our website.
  5. Information from other sources: We collect personal data when a user voluntarily uploads information, sends us emails, complete surveys, provides feedback, participates in competitions, events or applies for a job opportunity at Evalueserve.
  • Information collected indirectly
  1. Internet and network activity on website: Evalueserve use cookies to collect data on how users use our website. Our server logs automatically collect information such as the IP address, browser type and language, the pages on the website visited, and the date and time of the visit of the user. This helps us gather statistics on the website and track users’ movements on the website so that we can customize and improve the website. We may use standard internet tools such as web beacons and cookies, which collect information that tracks the usage of the website and enables us to customize our services. Users are advised to see our Cookies Policy for further information and to customize their cookie preferences on the Evalueserve website.
  2. Marketing communications: If a user receives our marketing communications, we will track when (s)he receives, opens, or shares the link received from Evalueserve. To unsubscribe from marketing communications, users can click on this link to Usage of personal information for marketing purposes.
  1. Other sources:
    • Depending upon the engagement or association with us, we may receive information about users from other sources, including but not limited to vendors, insurance providers, auditors, travel service providers, consulting firms, background check service providers, and social media.
    • Obtaining personal data from public sources such as freely or paid databases, including public content on social media websites, to make initial contact with a relevant individual at a client or other company.

Purpose of and legal basis for processing personal data

As a global organization, Evalueserve processes personal information in accordance with the data protection laws applicable in the relevant jurisdiction. Where the EU GDPR or UK GDPR applies, we rely on one or more recognized legal bases, including consent, contractual necessity, compliance with legal obligations, protection of vital interests, public interest, or legitimate interests. For individuals outside the EU/UK, we rely on equivalent lawful grounds permitted under applicable local law.

Purpose EU/UK Legal Basis Usage of Personal Information
Website Operation & Security Art. 6(1)(f) GDPR (Legitimate Interests) and, where applicable, Art. 6(1)(c) GDPR (Legal Obligation) We process personal data to operate, secure, monitor, maintain, and improve our websites, systems, applications, and services; detect, prevent, and investigate fraud, cyber threats, and security incidents; troubleshoot technical issues; protect our networks, users, and information assets; and ensure the confidentiality, integrity, and availability of our systems.
Provision of Services Art. 6(1)(b) GDPR (Contractual Necessity) and, where applicable, Art. 6 (1)(c) GDPR (Legal Obligation), Art. 6(1)(f) GDPR (Legitimate Interests) We process personal data to provide, administer, support, and manage our services; fulfil contractual obligations; respond to requests; facilitate communications; manage customer accounts; provide technical support; process transactions; and maintain our business relationship with customers, suppliers, and business partners.
Business Relationship Management Art. 6(1)(f) GDPR (Legitimate Interests) We process personal data to establish, manage, and develop relationships with customers, prospective customers, suppliers, business partners, and other stakeholders; improve service delivery; facilitate business communications; manage contractual relationships; and support our legitimate business activities and growth.
Marketing Art. 6(1)(a) GDPR (Consent) and/or Art. 6(1)(f) GDPR (Legitimate Interests), where permitted by applicable law We process personal data to communicate information about our products, services, events, webinars, publications, thought leadership, and business initiatives; conduct marketing and business development activities; manage marketing campaigns; understand customer interests; and measure the effectiveness of our communications. Individuals may opt out of marketing communications at any time. We may retain limited information necessary to record and honour marketing preferences and opt-out requests.
Business Operations & Administration Art. 6(1)(f) GDPR (Legitimate Interests) We process personal data to manage, administer, improve, and support our business operations, including business planning, reporting, data analytics, quality assurance, corporate governance, internal controls, risk management, financial management, business continuity, operational efficiency, and internal administration activities.
Recruitment Art. 6(1)(b) GDPR (Pre-Contractual Steps), Art. 6(1)(c) GDPR (Legal Obligation), Art. 6(1)(f) GDPR (Legitimate Interests) and, where applicable, Art. 6(1)(a) GDPR (Consent) We process personal data to attract, identify, assess, recruit, hire, and onboard candidates; evaluate qualifications and suitability; conduct interviews and assessments; verify eligibility to work; communicate with candidates; maintain talent pools; undertake workforce planning; and comply with employment, regulatory, and legal requirements. Further information is available in our Candidate Privacy Notice.
Compliance & Legal Claims Art. 6(1)(c) GDPR (Legal Obligation) and Art. 6(1)(f) GDPR (Legitimate Interests) We process personal data to comply with applicable legal, regulatory, tax, accounting, employment, corporate governance, and data protection requirements; respond to requests from regulators, courts, governmental authorities, and law enforcement agencies; conduct audits and investigations; maintain legally required records; and establish, exercise, or defend legal rights and claims.
Events & Webinars Art. 6(1)(a) GDPR (Consent) and/or Art. 6(1)(f) GDPR (Legitimate Interests) We process personal data in connection with the registration, administration, participation, recording, broadcasting, publication, and promotion of events, webinars, conferences, and related activities. Where recordings, photographs, or similar content are captured and published, we will rely on consent or legitimate interests as required by applicable law.
Cookies & Analytics Strictly Necessary Cookies: Art. 6(1)(f) GDPR (Legitimate Interests)

Analytics, Functional, Advertising and Similar Cookies: Art. 6(1)(a) GDPR (Consent)		 We use cookies and similar technologies to operate and secure our websites, remember user preferences, authenticate users, analyse website usage, understand visitor engagement, improve website functionality and performance, personalise user experiences, and measure the effectiveness of our communications and marketing activities. Non-essential cookies will only be deployed where required consent has been obtained. Please refer to our Cookie Policy for further details.
Visitor Management Art. 6(1)(f) GDPR (Legitimate Interests) and/or Art. 6(1)(c) GDPR (Legal Obligation) We process personal data relating to visitors to our offices and facilities to manage access controls, maintain health, safety, and security measures, protect personnel and assets, monitor premises where appropriate, maintain visitor records, and comply with applicable legal and regulatory requirements.

Restriction on sensitive personal data

Unless we specifically request for data to comply with applicable laws, we ask users to not send or disclose to us any sensitive personal data (e.g., social security numbers, passport numbers, racial or ethnic origin, political opinions, religious or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through this website or otherwise to us.

Duration of retention of personal data

We will retain personal data only for as long as necessary for the purposes for which it was collected or as required or permitted under applicable law. We maintain specific retention policies and procedures, as per which personal data is deleted after a reasonable time according to the following criteria:

  • We will retain user data till we have an ongoing relationship with the user.
  • We will only keep the data while the user’s account is active or for as long as needed to provide services to the user.
  • We will retain user data for as long as needed to comply with our applicable legal and contractual obligations.

Disclosure of personal data to third parties

  • We may disclose personal data to our marketing agency for running our marketing campaigns.
  • Our external IT supplier may have access to personal data, but access will be restricted only to the purposes of delivering their services to us.
  • We may share personal data with companies that may manage and / or administer surveys and / or competitions on our behalf, some of which may be based outside the jurisdiction of the region or country where Evalueserve operates.
  • We may share users’ personal data with our appointed third parties.
  • We may disclose personal data to companies within the Evalueserve group if they are carrying out services for us.  For details on Evalueserve’s international locations please see our locations page.
  • We may disclose any information we hold about users, if necessary, in connection with any investigation or complaint in relation to the use of the website, or to identify, contact, or bring legal action against someone who may (either intentionally or unintentionally) be causing injury to or interference with any person’s rights or property (including of users of the website).
  • We may disclose any data to comply with applicable laws, regulations, legal processes, governmental requests, or for fraud prevention or detection.
  • When you visit our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal data they or others have about you, including by association with your email or home address. Where permitted by applicable law, we (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Location of processing personal data, international data transfers

The global nature of our business means that your personal data will be stored in databases located in regions across the globe. The databases is controlled by our administrative staff located outside of the European Union or UK and can be accessed electronically.

For the EU: Where we transfer personal data within Evalueserve entities or to third parties located in other countries outside the European Union (EU) and the European Economic Area (EEA), we ensure such countries provide an adequate level of protection as determined by the appropriate authorities or use alternative safeguards including the execution of standard contractual clauses. Where personal data is transferred to a country for which the European Commission has adopted an adequacy decision, the transfer is made on the basis of that adequacy decision. An adequacy decision confirms that the relevant country provides an adequate level of protection for personal data. An adequacy decision exists, among others, for the following countries to which personal data may be transferred to: Switzerland, United Kingdom and United States (for organizations participating in the EU-US Data Privacy Framework).

Where no applicable adequacy decision exists, we safeguard the transfer by entering into the Standard Contractual Clauses adopted by the European Commission (“SCCs”) with the relevant recipient. The SCCs impose contractual obligations on the recipient designed to ensure an appropriate level of protection for the transferred personal data and to provide data subjects with enforceable rights and effective legal remedies.

We have also entered into the relevant SCCs with members of our Evalueserve group of companies where personal data is transferred within the group to recipients located outside the EU and the EEA and no applicable adequacy decision is available.

The European Commission’s SCCs for transfers of personal data to third countries are available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de. Further information regarding the safeguards applied to international transfers, including information on how to obtain a copy of the relevant safeguards, may be requested using the contact details provided in this privacy notice.

Usage of personal information for marketing purposes

  • Where permitted by applicable law, we send relevant and insightful information to users about our products and services and those of other companies in our group that may be of interest to them, based on previous interactions. Users may unsubscribe from receiving such information at any time. In other cases, we ask for your consent to send you marketing information.
  • The personal information we collect and use for marketing purposes relates to individual employees of our clients and other companies with whom we have existing business relationships.
  • We may obtain contact information from public sources such as freely or paid databases, including public content on social media websites, to make initial contact with a relevant individual at a client or other company.
  • We will not share personal information outside the Evalueserve group of companies for marketing purposes unless users have explicitly consented to the same.
  • Users have the right, at any time, to stop receiving marketing communications.
  • If a user no longer wishes to be contacted for marketing purposes, (s)he should inform us.

Please note that if a user exercises the right to discontinue marketing communications from Evalueserve by using ‘Opt-out’, we may retain the minimum personal information necessary to record that the user opted out and to avoid contacting the user again.

User’s rights regarding personal data

  • Right to be informed: Users are entitled to know whether we hold their personal data and the purpose it is processed for.
  • Right of access: Users are entitled to obtain a copy of their personal data, together with an explanation of the categories of data being processed, the purposes of such processing, and the details of third parties to whom the data may have been disclosed.
  • Right to rectification: Users are entitled to request the correction or update of their personal data available with us.
  • Right to erasure: Users are entitled to get their data erased from our records, including customer relationship management (CRM) databases.
  • Right to data portability: Users are entitled to obtain and reuse their personal data. They can either obtain the data from us and provide it to a third party or ask us to transfer their personal data directly to a third party.
  • Right to object to and / or restrict processing: Users have the right to object to and / or restrict the processing or sharing of their data in some circumstances, including where the data is inaccurate (for the period during which we are verifying the data), no longer required in light of the purpose of processing or connection with direct marketing.
  • Right to complain and obtain redressal: Users have the right to lodge a complaint with the competent supervisory authority to obtain redressal, and where appropriate, compensation for a breach of the applicable data protection regulation.
  • Right to withdraw: Users have right to withdraw their consent provided at any time by contacting us.

In the above cases, we will retain the minimum personal data to note that the user opted out from being contacted again.

To exercise any of the above-mentioned rights, please contact us at dp@evalueserve.com.

Keeping personal data accurate and up to date

  • Users can always choose not to provide personal data. However, if personal data is required (mandatory) for a certain service, feature, or content on the website, they may not be able to access it unless they provide that data.
  • Users can access, add to or update their personal data at any time, and we would ask them to ensure that this data is up to date on a regular basis. When users update the data, Evalueserve will keep a copy of the prior version, where necessary, for its records.

Automated profiling and decision-making

We may use automated profiling in limited circumstances relating to email campaigns. As part of such campaigns, we will track whenever users receive, open, click a link in, or share an email from us using any of our automated solutions. These solutions profile the data tracked to evaluate user interest in our service offerings or promotions. This enables us to identify and target potential customers or business partners and to provide users with relevant and timely content based on user interests.

Third party services and cookies

When a user visits our website, Evalueserve’s servers (which may be hosted by a third-party service provider) may collect information indirectly and automatically about his/her activities on the website. We will use this information, the cookies and other similar technologies as described in our Cookie Management Consent Tool and in our Cookies Policy. 

The data from the cookie(s) may be used by Evalueserve to track visitors’ use of the website and to compile statistical reports on website activity.

A user can set his/her browser to not accept cookies, and websites such as www.aboutcookies.org and www.allaboutcookies.org tell users how to remove cookies from their browsers. If a user chooses to disable cookies, (s)he may not be able to fully experience all the features of the website, and parts of the website may become non-functional or inaccessible.

Cookie consent management: When consent is required for the services and cookies, we ask for the user’s consent by using our cookie consent management tool Cookiebot, provided by Usercentrics A/S, Copenhagen, Denmark. Cookiebot provides detailed information about the services and cookies in use and allows you to adjust your settings at any time.

User age restriction

The website is not directed at persons under the age of 18 and, therefore, such persons are not permitted to view and / or register with the website. Users must be aged 18 years or above to register on the website and post and / or upload any material to it. Any person who registers as a user of the website represents and warrants that (s)he is 18 years of age or older. We cannot – and we are not required to – verify the age of users of the website. We hereby notify users that by posting any material on the website, they confirm that they are over the age of 18. If a person is using the website as a representative of a company or other entity, (s)he represents that (s)he has the authority to confirm acceptance of this privacy policy on behalf of such company or entity.

Security controls

Evalueserve holds an ISO 27001 certification, and this international standard defines the requirements for an Information Security Management System (ISMS). Evalueserve’s processes and security controls provide an effective framework for protecting our clients’ and our business information, including personal data.

We maintain organizational and technical measures for all the personal data we hold. We have protocols, controls, and relevant policies; procedures; and guidelines to maintain these controls, considering the risks associated with the categories of personal data and the processing we undertake.

We adopt security measures in line with industry standards to protect personal data. We have implemented security safeguards – such as HTTPS – that ensure the protection of personal data. We regularly monitor our systems to mitigate possible vulnerabilities and attacks. However, we cannot guarantee or warrant the security of any information transmitted via our websites.

Sale of Evalueserve

We reserve the right to transfer information, including personal data, to a third party in the event of the sale, merger, liquidation, receivership, or transfer of all or substantially all of our assets, provided the third party agrees to adhere to the terms of this privacy policy and only uses personal data for the purpose that users have provided it to us. Users will be notified in the event of any such transfer and will be allowed to opt-out.

Changes to the privacy policy

We take all reasonable efforts to keep this policy up to date. Please check this privacy policy page periodically to stay informed of any changes. We reserve the right to modify or supplement this privacy policy; however, the changes will always comply with the prevailing data protection laws.

Links to other sites

We provide links to other websites for user convenience and information. These sites may have their own privacy policies in place. We recommend users review these policies if they visit any linked websites. We are not responsible for the content of linked sites, any use of the sites or their privacy practices. This privacy statement applies solely to data collected by this site.

Contact us

If a user has any questions about this privacy policy or the use of personal data, (s)he can click here to contact Evalueserve.

Details of Data Protection Officer & Grievance Officer

Sandeep Kumar Dembla

Data Protection and Grievance Officer

dp@evalueserve.com

Evalueserve Compliance

Tel: + 91 124 415 1459