We are Perk. Our mission is to unlock the potential of people and their companies by powering real work.
Your trust is fundamental to what we do. We have created this Privacy Notice to give you a clear, straightforward explanation of how we process your personal information in different contexts. Below, we will walk you through exactly what information we process and why.
If you have any questions, our team is always here to help at privacy@perk.com.
When does this Notice apply (and does not apply)
This Notice applies if you are:
an authorised representative of a prospective customer of Perk,
an authorised representative of an existing customer of Perk,
a Perk website visitor,
a Perk user,
a Perk tester,
an attendee of a Perk event,
a Perk office visitor,
a Perk job candidate.
This Notice does not apply:
to your use of Perk's services. For example, if your employer is a Perk customer, we will process your personal information on their behalf. Where this is the case, please refer to your employer’s privacy notice for details of how your personal information will be processed,
– in this case, if your employer is a Perk customer, we will process your personal information on their behalf. Where this is the case, please refer to your employer’s privacy notice for details of how your personal information will be processed.
What personal information do we process and why?
We process your personal information for different reasons depending on the context and your relationship with Perk:
Marketing
Purpose – Why we process your information
Contacting you with marketing about our services (or about new services).
Running and administering promotions and offers.
Measuring your interactions with our marketing communications and the effectiveness of our campaigns.
Keeping a record of individuals who have opted out of receiving marketing communications.
Data subjects – Who is the personal information about
An authorised representative of a prospective customer.
An authorised representative of an existing customer.
Personal information – What personal information we process
Information you provide to us, we collect automatically, or we receive from third parties:
name
business contact information (e.g. e-mail address)
professional details (e.g. title or role)
information about your interactions with our marketing communications or websites, platforms and apps (e.g., whether you opened e-mails from us or clicked on any links), including online and device identifiers and time stamps.
Retention – How long we process your personal information
Unless otherwise required by law:
2 years from the marketing campaign or from our last contact
6 months from browsing history, in relation to the insights about web or platform visitors used for targeted advertising purposes
indefinitely with respect to our record of individuals who have opted out of receiving marketing communications. This is to ensure you do not hear from us again.
Legal bases – Specific legal reasons that permit us to use your personal information
Consent, if required by applicable laws.
Legitimate interests: marketing our services to you and respecting your opt-out.
Controller – Which Perk entity is responsible for your personal information
Perk Platform SLU in relation to Perk.
Perk UK Ltd in relation to Click Travel powered by Perk.
American Travel Solutions LLC in relation to AmTrav powered by Perk.
Managing our prospective contractual relationship
Purpose – Why we process your information
Including:
engaging with your company about our services
managing RFPs and submitting pitches or tenders
carrying out mandatory KYB, AML and identity checks.
Data subjects – Who is the personal information about
Authorised representative of a prospective customer.
Personal information – What personal information we process
Information you provide to us, we collect automatically, or we receive from third parties:
name
business contact information (e.g., e-mail address)
professional details (e.g. title or role)
government issued identification, including driving licence or passport number (for AML and identity checks)
our communications with you
other relevant information about you, as your company’s authorised representative, provided by our KYB check partners.
Retention – How long we process your personal information
Unless otherwise required by law:
6 years from the expiry of our contract with your company
2 years from last contact if you do not procure our services.
Legal bases – Specific legal reasons that permit us to use your personal information
Compliance with our legal obligations: with respect to any AML and identity checks we may be required to carry out.
Legitimate interests: taking steps to enter into business relations with your company, including entering into a contract.
Controller – Which Perk entity is responsible for your personal information
In relation to Perk:
Perk USA Inc. in the USA and Canada
Perk UK Ltd in the UK and Ireland
Perk Platform SLU in other countries
Perk UK Ltd in relation to Click Travel powered by Perk
American Travel Solutions LLC in relation to AmTrav powered by Perk.
Managing our contractual relationship with your company
Purpose – Why we process your information
Including:
carrying out mandatory AML and identity checks
communicating with you about our services and contract
notifying you of any changes to or issues with our services (so called service messages)
logging your completion of training on our services
monitoring your use of our services to ensure compliance with our contract
providing you with our services
issuing invoices for our services and collecting payment.
Data subjects – Who is the personal information about
An authorised representative of an existing customer.
Personal information – What personal information we process
Information you provide voluntarily:
name
business contact information (e.g., e-mail address)
professional details (e.g. title or role)
government issued identification, including driving licence or passport number (for AML and identity checks)
our correspondence with you
other relevant information about you, as your company’s authorised representative, provided by our KYC and AML check partners.
Retention – How long we process your personal information
Unless otherwise required by law:
6 years from the expiry of our contract with your company.
Legal bases – Specific legal reasons that permit us to use your personal information
Compliance with our legal obligations: with respect to any AML and identity checks we may be required to carry out.
Legitimate interest: with respect to entering into a contract and our monitoring your compliance with our contract.
Controller – Which Perk entity is responsible for your personal information
Perk entity that your company has an active contract with.
Ensuring the security and operation of, and improving, our website and apps
Purpose – Why we process your information
Including:
monitoring your use of our website and apps to ensure its security, correct operation, measure its effectiveness and improve them
monitoring your use of our website and apps to ensure compliance with our policies and law (e.g., protect against fraud)
monitoring your website and apps communications with Perk for quality and training
product improvement.
Data subjects – Who is the personal information about
For security:
authorised representative of an existing customer
a Perk tester
a Perk website visitor
a Perk user
For product improvement:
a Perk user.
Personal information – What personal information we process
For security – information you provide to us or we collect automatically:
name
business contact information (e.g., e-mail address)
professional details (e.g., title or role)
our correspondence with you
your interactions with our website, including:
IP address
login information
device related information and browser details (e.g., type and version)
time zone settings
browser plugs-ins
geolocation
operating system
technical feedback
clickstream data
time stamps
For product improvement:
analysing data from your trips, expenses, and invoices to fix bugs, provide support, and enhance features
only a limited, aggregated, and fully anonymised set of data derived from trips, expenses, and invoices. This data cannot be linked back to you, is never shared with third parties, and is kept safe at all times. This helps us build smart features that save you time.
Retention – How long we process your personal information
Unless otherwise required by law:
6 years in relation to any fraudulent or unlawful behaviour
2 years for product improvement and security purposes.
Legal bases – Specific legal reasons that permit us to use your personal information
Legitimate interests: ensuring the integrity, security and improvement of our website and protecting our business against unlawful behaviour like cyberattacks.
Compliance with our legal obligations: with respect to any obligations with respect to unlawful behaviour.
Controller – Which Perk entity is responsible for your personal information
Perk Platform SLU in relation to Perk
Perk UK Ltd in relation to Click Travel powered by Perk
American Travel Solutions LLC in relation to AmTrav powered by Perk.
Complying with legal obligations
Purpose – Why we process your information
Including:
fulfilling our obligations to report to tax authorities
fulfilling valid requests to information from authorities and law enforcement
complying with applicable regulation on terrorism prevention and other legal requirements.
Data subjects – Who is the personal information about
An authorised representative of an existing customer.
Personal information – What personal information we process
Information you provide to us or we collect automatically:
name
business contact information (e.g., e-mail address)
professional details (e.g. title or role)
our correspondence with you
your interactions with our website and appss (e.g., device related information, technical feedback, clickstream data and time stamps)
any other information in scope of a request.
Retention – How long we process your personal information
Unless otherwise required by law:
6-10 years (depending on territory) from the end of applicable tax year with respect to tax related reports
6 years from the request.
Legal bases – Specific legal reasons that permit us to use your personal information
Compliance with our legal obligations: with respect to any tax filings, terrorism prevention or law enforcement requests.
Controller – Which Perk entity is responsible for your personal information
Perk entity your company has an active contract with.
Testing and providing feedback
Purpose – Why we process your information
Including:
inviting you to participate in market research, surveys, and testing
collecting your feedback via online feedback forms, questionnaires, and interactions with our test environments (e.g., A/B testing)
using your feedback to test and improve our products.
Data subjects – Who is the personal information about
A Perk user
A Perk tester.
Personal information – What personal information we process
Information you provide to us or we collect automatically:
name
business contact details (e.g., e-mail address)
professional details (e.g., title or role)
your responses to our market research questions, surveys, and questionnaires
our correspondence with you
your interactions with our apps and test environments (e.g., device related information, technical feedback, clickstream data and time stamps).
Retention – How long we process your personal information
Unless otherwise required by law:
2 years from testing, market research campaign, or feedback submission.
Legal bases – Specific legal reasons that permit us to use your personal information
Legitimate interests: ensuring the integrity, security, and improvement of our services.
Controller – Which Perk entity is responsible for your personal information
Perk Platform SLU in relation to Perk
Perk UK Ltd in relation to Click Travel powered by Perk
American Travel Solutions LLC in relation to AmTrav powered by Perk.
Managing Perk events and your attendance at Perk events
Purpose – Why we process your information
Including:
sending you communications about Perk events that you have signed up for
managing your registration to our events
logging and managing your entry at our events
managing our event catering
managing event site and access requirements
promoting our events
processing event feedback to improve our future events.
Data subjects – Who is the personal information about
An attendee of a Perk event (whether hosted, operated or sponsored by Perk).
Personal information – What personal information we process
Information you provide to us or we collect automatically:
name
business contact details (e.g., e-mail address)
professional details (e.g., title or role)
your photograph
recordings of your voice and likeness (if for example, you are a presenter at one of our events)
meal preferences
access requirements
event feedback forms
your attendance at our event.
Retention – How long we process your personal information
Unless otherwise required by law:
2 years following the event.
Legal bases – Specific legal reasons that permit us to use your personal information
Contractual necessity: delivering the event you have registered for.
Consent: any health related information related to access or dietary requirements.
Legitimate interests: processing your feedback in order to improve future events.
Controller – Which Perk entity is responsible for your personal information
Perk Platform SLU.
Ensuring the security of our offices and people through CCTV
Purpose – Why we process your information
Including:
ensuring the safety and security of our staff, visitors, premises, and property
prevent, deter, and detect crime
assist in the investigation of crime.
Data subjects – Who is the personal information about
A Perk office visitor.
Personal information – What personal information we process
Information we collect automatically:
images and video footage: CCTV cameras will collect images and video footage if you are in the vicinity of the camera when visiting a Perk office
vehicles and vehicle licence plates: CCTV cameras will collect images and video footage of the vehicle that you are driving or in which you are a passenger if you are in the vicinity of one of our offices, which may include its licence plate number.
Retention – How long we process your personal information
1 month from its collection.
Exception: to the extent footage is under review or investigation in connection with the purposes outlined above, the applicable footage will be isolated and retained for as long as necessary in connection with the review or investigation.
Legal bases – Specific legal reasons that permit us to use your personal information
Compliance with legal obligations (e.g., if we are legally required to make CCTV footage available to relevant law enforcement authorities).
Public Interest: ensuring the safety and security of people and property in commercial environments.
Legitimate interests: ensuring the safety and security of our people and property.
Controller – Which Perk entity is responsible for your personal information
Perk USA Inc. in the US
Perk UK Ltd in the UK
Perk Platform SLU in Spain
Perk Deutschland GmbH in Germany
Perk Switzerland AG in Switzerland
Perk Netherlands BV in the Netherlands.
Recruitment
Purpose – Why we process your personal information
Searching for and reaching out to the most suitable candidates.
Scheduling and conducting interviews to assess fit for the role.
Contacting you with relevant open roles.
Issuing a contract offer to you and concluding an employment contract.
Data subjects – Who is the personal information about
A Perk job candidate (whether as an employee, worker or contractor).
Personal information – What personal information we process
Information you provide to us, we collect, or is provided to us by a third party (e.g., a recruiting agency) may include:
personal details (name, address, email address, phone number, other contact details)
professional and employment information (CV, cover letter, employment history, education background, qualifications, certifications)
social media profiles (LinkedIn and other professional networking platforms)
interview and assessment data (notes, feedback, test results, and recordings [if applicable] from interviews or assessment exercises)
availability and logistical details (calendar availability, location, and any reasonable accommodations required for the interview process)
compensation information (current salary, benefits, and future salary expectations)
references (professional or character references)
background verification, where applicable (results from background checks, right-to-work documentation, or identity verification as required by law)
offer and contractual data (name, address, email address, national identification or social security number, and details of your offer [including salary, benefits, and contractual terms], used to prepare and issue a contract)
optionally diversity or equal opportunity data (if collected, this is always voluntary and used only for monitoring and reporting in compliance with applicable laws).
Retention – How long do we process your personal information
Unless otherwise required by law, we retain your personal data for up to 2 years after the completion of the recruitment process. This allows us to consider you for any future opportunities, unless you request otherwise, exercise your right to erasure, or become an employee. Once this period has ended, your data will be securely deleted or, where appropriate, anonymised for statistical purposes.
Legal bases – Specific legal reasons that permit us to use your personal information
Legitimate interest: to identify, assess, and recruit the most suitable candidates for current and future job opportunities, and to manage an efficient recruitment process.
Contractual necessity: to take steps at your request prior to entering into an employment contract and, if successful, to prepare and execute your employment agreement with the company.
No automated decision-making – All decisions are made with human involvement
Artificial intelligence (provided by Ashby) helps us with initial screening of CVs to find the most suitable candidates for open roles, but does not make any decisions on its own. You may opt out of that during the process, and there will be no negative consequences to your application. All CVs are reviewed by human recruiters. Members of our team regularly review the performance of artificial intelligence based on samples to ensure the output is fair, accurate, and useful. Our team tracks hiring data to screen for any bias in a thorough quarterly review.
Controller – Which Perk entity is responsible for your personal information
Depending on where you are applying for a role, a different entity within the Perk group will be responsible for your information:
Perk USA Inc. in the USA
Perk UK Ltd in the UK
Perk Platform SLU in Spain
Perk Deutschland GmbH in Germany
Perk Switzerland AG in Switzerland.
What third parties may have access to your data?
We may be required to share your information with different companies or organisations:
Perk group companies where necessary for the purposes described above,
Perk’s third-party service providers who provide services related to the purposes described above,
competent authorities where necessary to exercise or defend claims or to comply with an order or request from competent courts, agencies or authorities,
a potential buyer (including its agents and advisors) in connection with any proposed purchase of any part of our business,
any other third party with your consent or where required or permitted by law.
Is your personal information processed internationally?
Perk processes your personal information:
on our Amazon Web Services servers, which are located in Ireland (EEA/EU), with a fallback site in Frankfurt, Germany (EEA/EU),
in the USA relation to AmTrav powered by Perk,
at our office locations in Barcelona, Berlin, London, Birmingham, Edinburgh, Zurich, Vienna, Amsterdam, Dublin, Chicago, Boston, Miami, Los Angeles.
We also have third party suppliers who may process your personal information outside the territory in which you are resident.
If Perk transfers personal information to a country outside of the EEA/EU it will ensure that any such transfers are compliant with applicable data protection law.
In practice, this means that Perk will only transfer your personal information to a non-EEA/EU recipient where:
the recipient is located in a country that the European Commission has decided is adequate to receive personal information from the EEA/EU,
the recipient has signed appropriate contractual terms with Perk that incorporate the European Commission’s Standard Contractual Clauses, or
a data transfer derogation applies (for example, where You have consented to the transfer of Your personal information).
Do we use cookies or similar technologies?
At Perk, we use cookies to provide our website and in connection with our services. Please check our Cookies Policy for more information on how we use cookies.
Your rights
Data protection laws give you rights with respect to the collection and use of your personal information. Depending on the laws that apply in your country and to which we are subject, these may include the ability for you to:
to request access to, correction of, deletion of, or portability of personal information that we process about you,
to request that we restrict processing, or to object to our processing, of personal information about you,
to opt-out of marketing communications that we may send you (even if you previously consented to receive these) – for example, by clicking on the unsubscribe link in any marketing emails we send,
to not be subject to wholly automated decisions if these have legal effects on you or similarly significantly affect you, and
if our processing is based on your consent, to withdraw your consent to our processing (although this will not affect the lawfulness of our processing prior to your withdrawal).
If you wish to exercise any of your rights, you can send your request to privacy@perk.com. We will fulfil any requests in accordance with applicable data protection laws.
You also have the right to complain to your local data protection authority about our use of your personal information. However, while you are not required to do so, we ask that you contact us first to give us the opportunity to address your concerns directly before speaking with your data protection authority.
If you are based in the United States, you also have the following rights:
to request disclosure of:
the categories of personal information we’ve collected about you,
the sources we used,
our business or commercial purposes for collecting or sharing it,
the categories of third parties with whom we share it,
to opt-out of the sale or sharing of your personal information,
to limit use and disclosure of your sensitive personal information (for example, precise geolocation, race or ethnicity, health and biometric data) to the purposes you’ve authorized,
to non-discrimination, meaning we won’t deny you goods or services, charge you different prices, or otherwise penalize you for exercising any of these rights.
How to contact us?
If you have any questions about this Notice or want to contact us or our Data Protection Officer, you can do so by writing to privacy@perk.com.