Privacy Notice for the Vodafone Business Managed IoT Connectivity Platform

What Personal Information do you collect about me?

You have been invited to access this portal as the authorised user of a company that contracted with Vodafone for the Vodafone IoT Service (“Business Customer”). This portal enables you to manage the SIMs that your company has been provided with. In order to enable you to manage those SIMs, we will process the following information about you:

• First name;
• Last name;
• Email address;
• Company name;
• Contact phone number.

You will have been set up on the Portal by the Vodafone operations teams. When you first log-in, you will go through our two-factor authentication process which will require you to enter a

• Username and
• Password

You will then be sent a code to the mobile phone number (see above). When you enter that code, you will then be able to select whether you want the device you are registering from to be "remembered" as a trusted device or not. If you don't want the device to be "remembered", you will need to go the mobile phone one-time password process each time you log in.
Once logged in, you will be able to set up other users on the portal (if you’re authorised to do so) and allocate them specific roles or access rights. To do this, you will be asked to provide:

• First name;
• Last name;
• Email address;
• Company name;
• Contact phone number.

They will then go through the same registration and authentication process.

What do you use that Personal Information for?

We use that personal information to:

• Verify your identity when you return to the portal and want to log onto your account to make sure that you are accessing the right customer account.
• Contact you with any technical issues or outages that may occur on this portal;
• Use logs - Vodafone will create an access log of authorised users detailing the date and time that they logged on including usernames which will be used in the event that there is an allegation of unauthorised access and/or use of the platform.
• Service use - a record of activities undertaken by the authorised user may be retained for example the fact that an authorised user activated or de-activated a SIM on their account.

How do you share my personal information?

We may share information about you, but only to carry out specific activities described in this privacy policy, with companies in the Vodafone Group involved in delivering the Vodafone IoT Service.

We may also share personal information about you with the Business Customer, only where required, for example to allow the Business Customer to verify your identity, or the payment to us of the Vodafone IoT Service you use or access.

Law enforcement and disclosures related to regulatory requirements:

• We may need to release your information to comply with our legal obligation to respond to the authorities’ lawful demands, for example law enforcement agencies, government bodies, courts or other public authorities. Your personal data shall only be provided when we in good faith believe we are obliged to do so in accordance with the law and pursuant to an exhaustive evaluation of all legal requirements.
• We may also share your information with a third party or body where such disclosure is required to satisfy any applicable law, or other legal or regulatory requirement.

How do you look after my personal information?

We will store this personal information securely in our data centre in Europe, which has been certified as complying with international standards on information security management.

We cannot accept responsibility for any unauthorised access, or loss of personal information that is beyond our control.
We’ll never ask for your secure personal, or account information by an unsolicited means of communication. You’re responsible for keeping your personal and account information secure and not sharing it with others.

How long do you keep my personal information for?

We will retain this personal information for no longer than 2 years, or as long as necessary to fulfil the purposes for which the information was originally collected unless a longer retention period is required or permitted by law, for legal, tax or regulatory reasons, or other legitimate and lawful business purposes.

How to contact us

Vodafone is committed to respecting your privacy. We take privacy, security and complying with data protection and privacy laws seriously.
If you want more information on how we collect, use, share and protect your personal information when you use our products and services, or when you visit our websites or interact with us, visit here. In this link you will also find information on what Your Rights are and How to contact us.