Privacy Policy

GPI USA, Inc. ("Gpi USA", GPI", “we”, “us”), is committed to protecting the privacy and security of your personal information. This Privacy Policy (“Policy”) describes how we collect, use, and otherwise handle personal information about you (“User”, “you”) and is directed to our current and prospective customers, partners, and suppliers, employees, job candidates and applicants, end users of any Products (defined below), and Users of our Sites (defined below). As used in this Policy, ‘personal information’ or ‘personal data’ mean information that relates to an identified or identifiable individual.

GPI provides blood donor management software (“Products”) to blood donation centers, health care facilities, and other organizations handling blood donations or interacting with blood donors. Typically, our Products are used by our customers on their own premises and in their own environments and we generally do not have access to the information processed by the Products unless we are providing configuration services, customer support or success services, quality assurance, testing or other professional services, or for administrative purposes. When we do have access to personal data of individuals, it is typically as a service provider or supplier to our customers and partners, with limited exceptions, such as, for example when we collect information:

Through our websites https://www.gpiusa.com/, https://www.hemasoftusa.com/, related sub-sites and other websites and mobile applications that we provide (the “Sites,” which are included in the Products).
For our advertising, marketing, promotion, industry outreach and educational efforts (which are primarily in a business-to-business context versus direct to individual consumers).

In our relationships with employees, contractors, applicants and administrative and operational vendors and suppliers.

Additional terms may apply for specific Products. If such terms apply, they will control over any conflicting terms in this Policy to the extent permitted under applicable law.

Table of Contents

Types of Data Collected
Purposes of Processing
Sharing and Disclosure of Personal Information
Security of Processing
Retention Period
Employees, Contractors, and Applicants
Other Websites, Mobile Applications and Services
Capacity
Your Choices and Regional-Specific Privacy Rights
Cookie Policy
Changes
Questions

1. Types of Data Collected

We may collect the following categories and specific pieces of personal information from the following categories of sources.

Information you provide to us

In general, you can visit the Site without telling us who you are or revealing any personal information about yourself. Personal Information may be freely provided by the User or, in the case of Usage Data, collected automatically when using the Sites. Personal Information that is noted as mandatory for a particular purpose is required for the operation of the specified functionality. If the User declines to provide any such mandatory Personal Information, the requested functionality may not operate correctly. In cases where the Sites indicate Personal Information may be provided optionally, Users may decline to provide such Personal Information with no impact to Site functionality. Personal Information you provide may include name, email address, phone number, and company name. We may collect additional categories of Personal Information about you, including special or sensitive categories of Personal Information, when you apply for a job with us or an affiliate or enter into an agreement with us. See below for further information on Employees, Candidates, and Applicants for Personal Information we process in the recruiting and employment context.

Information provided by third parties or publicly available sources

We may collect or receive Personal Information about you from third parties including from our affiliates, marketing companies, job posting websites and recruiting firms. The categories of Personal Information collected from third parties include the categories indicated above and below.

Information automatically collected by the Sites

The Sites may collect information from your browser automatically that may constitute Personal Information, depending on applicable laws in your location. Personal Information automatically collected by the Sites, either independently or through third parties, may include: IP addresses or other access log information, device MAC address, and device ID information (“Usage Data”). The Site may also utilize cookies and other tracking technologies as described in the Cookie Policy referenced below.

The User assumes responsibility for any Personal Information of third parties published or shared through the Sites or otherwise provided to GPI and the User represents and warrants it has the right to publish, share, or provide such information and has provided any required notices.

Information required by applicable law

We may collect other information we are required to collect, or that is appropriate to collect, to comply with applicable laws or regulations.

2. Purposes of Processing

To the extent that you provide us with any Personal Information, through or in connection with the Sites (i.e., via telephone, email, or post), or we receive it through other means, we may use such information for the following categories of business purposes:

Provide the Products and other services you request, including the processing of your Personal Information, and maintain, distribute, install, operate, or upgrade the Products. 
To provide customer service, technical support, consulting, or professional services.
To provide training related to the Products or otherwise (whether in-person or online).

For our administration, research, development, and business operation purposes.
To keep a record of your relationship with us.
To process your inquiries about employment opportunities, conduct recruiting activities, and complete hiring or separation processes.
To conduct and manage litigation and conduct internal audits and investigations.
To operate, maintain, and secure the Sites.

Respond to requests for assistance or information, which we will receive via e-mail, telephone or chat through the application, including to verify your identity to respond to such inquiries or requests.
To fulfill legal, accounting and tax obligations.
To develop studies, research, and market statistics and send you advertising material, information, commercial information or surveys.
To make personalized commercial proposals based on the Products or Services you have purchased, or which you expressed in.
For compliance, fraud prevention, and safety.

To engage in other legitimate business purposes as required or permitted by applicable law.

3. Sharing and Disclosure of Personal Information

Your Personal Information may be shared with and processed by:

certain service providers as necessary to fulfill the purposes set out in this Privacy Policy, including professional advisors, recruitment firms, consultants, technology companies, and data hosting providers;
supplier and vendors; and
partners, distributors, and resellers.

When third parties are given access to Personal Information, we will take appropriate contractual, technical and organizational measures designed to ensure that Personal Information is processed only to the extent that such processing is necessary, consistent with this Privacy Policy, and in accordance with applicable law. We may share Personal Information with the above categories of recipients for the following categories of business purposes:

To provide the Products you have requested or ordered and to maintain, distribute, install, operate, or upgrade the Products.
To provide customer service, technical support, consulting, or professional services.
To provide training related to the Products or otherwise (whether in-person or online).

For our administration, research, development, and business operation purposes.
To keep a record of a User’s relationship with us.
To respond to User inquiries or requests including to verify Users’ identity to respond to such inquiries or requests.
To process inquiries about employment opportunities at GPI.
To manage litigation and conduct internal audits and investigations.

To market, advertise, and promote Products, including to make suggestions and recommendations to Users about goods or services that may be of interest to them, including goods or services from service providers and partners.
To operate, customize, secure, and optimize the Sites and Products.
To work with our partners (including suppliers, vendors, resellers, distributors and other third parties) pursuant to legal agreements.
When we have a User’s consent to share the information.
In connection with blogs, message boards, chat rooms or other similar forums, whether publicly shared or shared by or with customers, partners or end users interacting with login access, including related to feedback or suggestions for improvements to our Products.

As part of a joint sales promotion or joint sales process with third parties.
In response to a lawful request for information by a competent authority, if we believe disclosure is in accordance with, or is otherwise required by, any applicable law, regulation or legal process, including to meet national security or law enforcement requirements, .
With law enforcement officials, government authorities or other third parties as necessary to protect the rights, property or safety of GPI, our business partners, you or others, or as otherwise required by applicable law.
In an aggregated and de-identified or anonymized form.
In connection with, or during the negotiation of, any merger, sale of company assets, consolidation or restructuring, financing or acquisition of all or a portion of our business by or to another company, including the transfer of contact information and data of customers, partners and end users.

For other legitimate purposes required or permitted by applicable law.

4. Security of Processing

GPI safeguards the security of the Personal Information and other data provided to us with appropriate physical, administrative and technical procedures. GPI stores Personal Information in secured and controlled systems with limited access. Your information may be stored and processed in the United States or any other country where GPI, its subsidiaries or its service providers are located. When you use our Sites, you are transferring information to the United States and other locations where GPI or its service providers operate. While we strive to protect Personal Information, we cannot guarantee the security of the Personal Information provided to us, as no transmission of information through the Internet can ever be completely secure. We urge individuals to protect their Personal Information when using the Internet.

If we learn of and confirm the occurrence of a security incident leading to the misappropriation or accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, your Personal Information transmitted, stored or otherwise processed on GPI systems that compromises the confidentiality, integrity or availability of your Personal Information, we may attempt to notify you electronically by posting a notice on our Sites or by sending you an email. You may have a legal right to receive this notice in writing or in any other form required by applicable law.

GPI has affiliates, subsidiaries and operations globally and may transfer your Personal Information on a global basis to operate its business. If Personal Information is transferred Information a GPI recipient in a country that does not provide an adequate level of protection for Personal Information, GPI will take measures designed to adequately protect your Personal Information.

5. Retention period

Generally, we will retain your Personal Information as needed to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes and enforce our agreements.

6. Employees, Contractors and Applicants

We may process the following categories of Personal Information if you submit a job application, inquire about opportunities at GPI, provide us your information at a recruiting event or if we receive information about you from third parties in connection with our recruiting activities:

Name and contact information such as phone number, email address and postal address.
Employment history such as prior employers and dates of employment.
Education history such as degrees earned and institutions attended.
Resume, CV, educational transcripts and any information contained in or with such documentation.
Job qualifications and work eligibility information such as country of residence, visa and immigration status, and citizenship.

Reference information, such as name and contact details of your references.
Compensation information that you voluntarily provide and which may depend on your region and applicable laws and regulations.
Background check data, subject to applicable law.
Sensitive Personal Information that you provide voluntarily or which we request on a non-mandatory basis in order to comply with applicable law.

We may process the above information to:

Review and evaluate an application you submit.
Communicate with you regarding your application or other interest in GPI opportunities.
Process your onboarding if you are hired.
Operate, improve and maintain the security of our recruiting systems and platforms.
Comply with applicable laws and otherwise operate our business.

7. Other Websites, Mobile Applications and Services

The Sites may contain links to other websites, mobile applications, and other online services operated by third parties (“Third Party Services”). These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on Third Party Services. We do not control these Third Party Services, we are not responsible for their actions, and they may follow different rules regarding the collection, use and sharing of your Personal Information. We encourage you to read the privacy policies of Third Party Services you use. Please direct any questions regarding Third Party Services to the applicable third party.

 8. Capacity

This site is only intended for individuals who are at least 16 years of age and is not targeted at individuals under the age of 16. We do not knowingly encourage or solicit visitors to our Sites who are under the age of 16 or knowingly collect Personal Information from anyone under the age of 16 without parental consent. If we learn we have collected or received Personal Information from an individual under the age of 16, we will delete that information. If you believe we have collected Personal Information of an individual under the age of 16, please contact us as set forth below with sufficient information so that we can act accordingly. Please do not provide any sensitive or special information such as social security number or other government identifier.

9. Your Choices and Regional Specific Privacy Rights

Residents of certain countries and states, including residents of the European Union and California (USA) have specific rights in relation to their Personal Information. For more information, see the Regional Data Protection Notice.

If you do not wish to receive marketing emails from us, you may opt out by clicking the “Unsubscribe” link on any of our emails or, alternatively, send the opt-out request to privacy@gpiusa.com.

10. Cookie Policy

Our Sites use cookies. To learn more about our use of cookies, please visit our Cookie Policy.

11. Changes to the Privacy Policy

GPI may amend this Privacy Policy from time to time, and if we make changes that affect the way we use your Personal Information, we will notify you by posting a revised statement on our Sites. Where appropriate, we will notify you by additional means. If the changes concern processing under the legal basis of consent, GPI will contact you to obtain updated consent, if necessary.

12. Questions

If you have any questions about how we process your Personal Information or would like to exercise any of your privacy rights that may be available under applicable law, you can make a request by writing to privacy@gpiusa.com or GPI USA, Inc., Attn: Legal-Privacy, 2200 Post Oak Blvd, Suite 1000, Houston, TX 77056 USA. You also have the right to file a complaint with a competent data protection authority if you are a resident of an applicable jurisdiction that provides you with such rights.