Privacy and cookie policy

Sustainalytics, the leading independent provider of ESG and Corporate Governance research and ratings, is committed to responsible data processing and ensuring adequate personal data protection.

Your privacy is one of our fundamental commitments here at Sustainalytics, including all affiliates within the group, each acting as data controller for its operations, hereinafter called “Sustainalytics”, “we”, “us”, and “our”.

Therefore, we take outmost care to process your personal data in accordance with the principles set forth in the applicable data protection legislation, including (EU) Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

Contact details for Sustainalytics` affiliates are available here.

The primary business purpose of Sustainalytics is providing the insights required for investors and companies to make more informed decisions that lead to a more just and sustainable global economy. As such, Sustainalytics uses personal data when performing its core research activity and providing information that our clients request, and when caring out its support activities such as labour and commercial contracts.

This privacy policy explains how the personal data (hereinafter called “data”) of our clients, potential clients or prospects, service providers and the representatives thereof, persons contacting and visiting us or candidates or potential employees will be processed and protected by Sustainalytics, such as to make you feel secure when in contact or in a commercial relation with us.

Personal data represents any information relating to an identified or identifiable natural person, and an identifiable person is that person that may be identified directly or indirectly, particularly by reference to an identification number or to one or more factors specific to its physical, psychological, mental, economic, cultural or social identity.

Sustainalytics collects personal data directly and indirectly, through the following channels

Any changes to our privacy policy in the future will be posted on this page and will be effective upon such publication. Sustainalytics will notify you in respect to such change through the means of a direct e-mail message or a pop-up message. Regularly reviewing this page ensures that you are always aware of the processing activities performed by Sustainalytics.

Directly from you: when entering into contracts with us, either on behalf of our clients or service providers, when visiting our website and on-line platforms and you explicitly provide your data for different purposes such as for receiving newsletters, when directly sending us your resumes for a possible collaboration with us, as well as when becoming part of our team as a board member, member of the executive team, employee or intern.

When the data is required directly from you, we kindly ask you to provide all categories of personal data we request for the relevant purposes, as otherwise we shall not be able to carry out part of our all our activity, including, among others, to provide you with our services.

Indirectly, from:

  • Our site’s technology: this includes data about our clients, prospects, visitors or candidates;
  • Conferences and events’ organizers: this includes data about our prospects and potential clients;
  • Our clients or service providers which are your employers: this includes data about the representatives, employees or other contact persons of our clients or service providers indicated by them;

If your data is being provided by an event organizer or by your employer, we will take reasonable measures to ensure you have been informed about your data being processed by Sustainalytics. In any case, Sustainalytics is committed to respect your rights and is open to answer any of your questions regarding the way it uses your data. To this end, you may contact our data protection contact point, by using contact details below.

  • Third parties acting as data suppliers for us: data collected either from publicly available sources (researchers who provide us information regarding individuals representing companies in our research universe), or data about candidates / potential employees shared with us by our recruitment agencies or temporary work agencies;
  • Public sources: data collected by us from publicly available sources (such as public websites of companies in our research universe, stock exchange websites, public media ).

While this information is publicly available, Sustainalytics is committed to respect your rights and to answer any of your questions regarding the way we use your data. To this end, you may contact our data protection contact point, by using contact details below.

Sustainalytics gathers a variety of data, from the following individuals:

  • Clients, potential clients and service providers` representatives or contact points
  • Representatives of the companies in our research universe
  • Participants to events
  • Candidates, visitors and web site users

If you are our client, potential client, a prospect or the representative, contact person or employee thereof:

  • Information that you provide when entering into a contract with Sustainalytics will be processed to enable us to execute the contract, to grant you access to our services and products, for fiscal, billing and audit purposes. Data gathered includes name, title, contact details (business e-mail and telephone number), and other relevant information depending on the contract typology.
  • If you are the representative, an employee or contact person of our clients, information that your employer provides us for the performance of our contract: name, title and contact details (e-mail and telephone number).

If you are a representative of the companies in our research universe

  • If you are a representative or hold an executive position in the corporate governance structure of a company in our research universe, we may use publicly available information regarding your name, title, remuneration, public criminal records, contact details.
  • If you are the contact person for a company in our research universe, we may use your publicly available contact details to ask for your company`s feedback on Sustainalytics` research and products.

If you are a participant to our events or to an event we are also attending

  • If you are attending an event for which the organizers are sharing contact details among the invitees, or where you have shared your business card, we may collect and keep a record of them. If we further contact you, we will provide details as to how your data is being used and ask your consent about it.

If you are our service provider or the representatives, contact persons or employee thereof

  • Information that you provide when entering into a contract with Sustainalytics. This includes name, title, contact details (e-mail and telephone number), and other relevant information depending on the contract typology.
  • If you are the representative, an employee or contact person of our service providers, information that your employer provides us: name, title and contact details (e-mail and telephone

If you are visitor or a user of our website

  • Information that you provide by filling in forms on our website: name, e-mail address, phone number, details about the company you represent.
  • If you contact us, we may keep a record of that correspondence, for audit purposes.
  • Any postings, comments or other content that you upload or post to any Sustainalytics sites (including our social media accounts, such as Linked In, Twitter, Facebook and Google Plus).
  • Our site collects information about your computer, including (where available) your IP address, operating system and browser type. This information is used for system administration, to filter site traffic, to look up user domains, and to report on site statistics.
  • Details of your visits to our site and resources you access (including but not limited to, traffic data, location data, weblogs and other communication data). Please see the Cookies section below for more information.

If you are a visitor of our physical sites

  • If you visit us at our physical locations, we (including through our security services providers) will collect and process information from your identity documents (name, surname, series of ID) and we may keep records of your image, for security purposes. Our physical locations are under video surveillance and we will keep records of video images according to the legal requirements in place.

If you are a job/internship applicant

  • The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, personal data included in CVs, education and training details, professional qualifications, as well as other personal data you may provide in your CV.

We use personal data:

  • To carry out our research activities.
  • To grant you access to our platforms and research products, for the performance of the contracts with our clients.
  • To subscribe to our services and send you white papers, articles, newsletters, further information about Sustainalytics or other content, if you requested us.
  • To register you to our events and share your contact details with other participants
  • To perform our contracts with our service providers.
  • To contact you for marketing purposes where you have consented to this.
  • To ask you to complete surveys or research questionnaires that we use for research purpose; however, you do not have to respond to them; such surveys are optional.
  • To personalize your site experience. Please see the Cookies section below for more information.
  • To analyse your IP and browser information to determine the effectiveness of our site and to help us identify ways to improve it. Please see the Cookies section below for more information.
  • To assess the applicants’ qualifications for a position within Sustainalytics, including in relation to our internship program.
  • To ensure security when visiting our offices.

We generally only share personal data with our affiliates, with our contracted service providers and advisors. However, there will be other instances when we will need to share or disclose the personal data you provide for a specific purpose, respectively:

  • We may need to disclose your personal data to third parties in the event that we sell or liquidate any part of our business or assets;
  • We will disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Use for our products and services; or to protect the rights, property, or safety of Sustainalytics and its clients.

We do not generally seek to collect sensitive personal data. In the limited cases where we do seek to collect such data, we will do this in accordance with local data privacy law requirements. This document will be updated if sensitive data will be processed by Sustainalytics so us to cover the legal requirements which may be applicable and to ensure your adequate information. The term “sensitive personal data” refers to the various categories of personal data identified by European and other data privacy laws as requiring special treatment, including in some circumstances the need to obtain explicit consent. These categories may include personal identity numbers, racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, membership of a trade union or profession or trade association, physical or mental health, biometric or genetic data, sexual life, or criminal record (including information about suspected criminal activities).

Sustainalytics takes appropriate steps to maintain the security of personal data collected through any of the mentioned channels/ means.

However, you should understand that the open nature of the Internet is such that information and personal data may flow over networks connecting you to our systems without security measures and may be accessed and used by people other than those for whom the data is intended.

Our site or other communication may, from time to time, contain links to and from the sites of our partner networks, advertisers and affiliates. If you follow a link to any of these sites, please note that these sites have their own privacy policies and that we do not accept any responsibility or liability for these policies or sites. Please check these policies before you submit any personal data to these sites.

As a global organization, the personal data we collect may be transferred internationally throughout Sustainalytics’ organization and its affiliates, respectively to Member States of the European Union and to Canada, United States of America, Australia, Japan and Singapore. We have internal policies in place to ensure an equivalent level of protection is in place across our organization. For more information regarding the transfer of your personal data, you may contact Sustainalytics at dataprotection@sustainalytics.com

To exercise any of the mentioned rights you may contact our Data Protection Contact Point us at dataprotection@sustainalytics.com or by filling in the general contact form available at Get in Touch. We will answer your within 30 days as of receipt of your request or inform you about any justified delay.

To exercise any of the mentioned rights you may contact our Data Protection Contact Point us at dataprotection@sustainalytics.com or by filling in the general contact form available at Get in Touch. We will answer your within 30 days as of receipt of your request or inform you about any justified delay.

You are entitled to know whether we hold personal data about you and, if we do, you benefit from the right of information, of access to and intervention upon your personal data, to rectification and to erasure the personal data, restriction of processing, the right not to be subject of an automatic individual decision and the right to oppose the processing of your personal data for legitimate and grounded reasons. Moreover, you also benefit of the right to address the National Supervisory Authority for Personal Data Processing and the courts of law.

As of 25 May 2018, you also have the right to require Sustainalytics to: (i) pass on the personal data you have provided to us in a structured and easily accessible electronic form, or (ii) to transmit to another data controller the personal data you provided to Sustainalytics insofar as it is technically feasible. You also have the right to request the restriction of the processing as set out by law.

You can exercise your right to prevent marketing communications being sent to you by sending an email to info@sustainalytics.com or by using the specified links to unsubscribe from our email marketing communications. You can also exercise the right to discontinue marketing communications to you at any time by contacting us by email or phone. See Get in Touch.

The processing of your personal data for the purposes listed above may be based on the following processing grounds: (i) contractual and legal obligations of Sustainalytics, resulting from the services provided; (ii) legitimate interest of Sustainalytics to promote itself; and (iii) explicit consent freely given when providing us your data, or by confirming in our initial communication you agree with Sustainalytics` processing your data collected through other means.

Your personal data are stored and processed for as long as it is necessary in order to achieve the processing purposes listed above and later, in accordance with the internal and legal requirements. We generally store your data for a period of three years from the moment of collection, explicit consent to data processing or termination of commercial contract on which processing is grounded, unless otherwise requested by the law to process the information for longer periods of time.

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a site. Cookies are then sent back to the originating site on each subsequent visit, or to another site that recognizes that cookie. Cookies are useful because they allow a site to recognize a user’s device.

When first using our site or whenever accessing it from a new device or browser, you will be asked through a pop-up message to consent or not to Sustainalytics placing cookies on your device as explained above.

If you want to remove existing cookies from your device you can do this using your browser options. If you want to block future cookies being placed on your device you can change your browser settings to do this.

Please bear in mind that deleting and blocking cookies will have an impact on your user experience and website usability as parts of the site may no longer work. Unless you have adjusted your browser settings to block cookies or explicitly refused the use of cookies through the pop-up message, our system will issue cookies as soon you visit our site, even if you have previously deleted our cookies.

Turning off cookies will also prevent any web beacons from tracking your user activity on our site. The web beacon will still account for an anonymous visit, but your unique information will not be recorded.

In case you have questions about this privacy policy or how we treat your personal information, please contact us at dataprotection@sustainalytics.com, or by filling in the relevant contact form available at Get in Touch.