Privacy and Personal Data Protection Policy

Last Updated: April 25, 2024

Ouriginal (as defined below) owns and operates a publicly available website at ouriginal.com (the “Website” or the “Services”).

This Privacy and Personal Data Protection Policy (the “Policy”) applies to the Services which are offered by Prio InfoCenter AB (“Ouriginal”, “we”, “us”). This Policy does not apply to any products and services offered by PlagScan GmbH whose policies are available here and does not apply to links in our Services that lead to other websites, which are governed by the privacy policies and other policies and terms on those other websites.

This Policy is intended to inform natural persons who interact with our Website about how we may collect, use, process, store and disclose Personal Data when you interact with the Website. This Policy also describes your choices and rights regarding your Personal Data and our use of your Personal Data.

The English version of the Policy is the official version. In case a translation differs, the English version is the official and applicable.

By accessing or using our Services, you acknowledge that you have read and understood this Policy.

Table of Contents

1. Personal Data We Collect; Cookies and Other Tracking Technologies
2. How We Use Your Personal Data
3. With Whom We Share Your Personal Data (Intracompany and Third Party Service Providers), including Transfers Outside of the EU and UK
4. How to Exercise Your Rights Regarding Your Personal Data
5. Data Retention and Erasure
6. Security
7. US Residents’ Rights
8. Updates to This Policy
9. Our Data Protection Officer and General Contact Information

1. Personal Data We Collect; Cookies and Other Tracking Technologies

Personal Data, for purposes of this Policy, is information that identifies, describes, or reasonably relates to an identifiable person or household, or that is otherwise defined as personal information, personal data, or similarly protected data under applicable laws (“Personal Data”).

On our Website, we collect Personal Data if you, as a visitor, provide it to us by asking us to contact you. In these cases, you may need to fill out some Personal Data, such as name, email address, and other contact info, in connection with your request.

In addition to the above, when you access our Services, our servers may also automatically collect information about your usage of, and activity on the Services (“Usage Information”) including:

• Log Data: Including information about when and for how long you access the Services.
• Device Information: We may collect the ID of any device that accesses the Services, and the Internet Protocol (“IP”) address associated with your browser and device ID. We may also collect additional information such as the make and model of your device; types and versions of software being used; login timestamp, browser type and version, the operating system of the computer and language.
• Location & Service Usage Information: We collect IP which may reveal the country, state, postal code or city from which the Services were accessed and may collect the timestamp and areas or features of the Services that our users visit most frequently or access most often.

The Usage Information we collect may be collected through the tracking technologies described below which may be considered Personal Data.

• Cookies: Cookies are small files which contain data and are stored on your browser or device. Cookies may be served by the entity that operates the website you are visiting (first party cookies) or by other companies (third party cookies). For example, a cookie may store which browser you are using or which pages you visit.
• Pixels: Pixels (also known as tracking pixels or web beacons) are small images on a web page or in an email. Pixels collect information about your browser or device and can set cookies on your browser.
• Local Storage: Local storage (also known as web storage or HTML5 storage) allows data about your browser or device to be stored locally on your device.

To read more about our use of cookies and other tracking technologies, please see our Cookie Policy page.

2. How We Use Your Personal Data

For the Website, Ouriginal acts as a data controller. Personal Data is processed for the performance of our services to you such as provide you with customer support or to respond to your request to be contacted.

We also use Personal Data we collect on the Website for the following purposes:

• To understand, measure, and improve our Services, for legally permissible purposes, including, but not limited to, analyzing the performance of our Services, improving our Services, research, and/or product development. Usage Information helps us to diagnose technical problems, and to administer and secure the Services. We also aggregate and analyze Usage Information to better understand how our Services are used and to help us improve our Services.
• To provide the Services to our Users.
• To provide customer support, to notify Website users about changes or issues impacting the Services, and to otherwise communicate information about the Website to our users.
• To protect our rights, such as to establish or exercise our legal rights or defend against claims. For example, sharing may be necessary in order to assert a legal claim or defense, such as to enforce our License Agreement Terms and Conditions (“Services Terms”).
• In relation to a known or suspected violation of our Services Terms, fraud prevention, or other unlawful use, including to share Personal Data with entities assisting us in an investigation and as may be required by applicable law.
• In connection with legal or regulatory obligations, including to disclose your Personal Data as necessary to comply with laws, protect our rights or the rights and safety of our Website users, or as necessary in the event of a court order, regulatory inquiry or other lawful request. In certain cases, however, in the event of a court order, regulatory inquiry or other lawful request, unless legally prohibited, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.
• In the event of a reorganization, merger, sale, assignment, bankruptcy, or similar business change, we may need to transfer your Personal Data to that re-organized entity or new owner after the sale or reorganization for them to use in accordance with this Policy.

In addition, customers of Ouriginal’s Anti-Plagiarism Service may also access the Anti-Plagiarism Service through this Website.

3. With Whom We Share Your Personal Data (Intracompany and Third Party Service Providers), including Transfers Outside of the EU and UK

Ouriginal works with companies that help us provide our Services or who provide services to us, including those within the family of companies owned by Turnitin, LLC of which we are a part and third party service providers. These companies are authorized to use Personal Data only to provide these services to us. These companies are our so-called processors (if Ouriginal is a data controller) of the Personal Data from a data protection perspective.

In addition, Ouriginal may share Personal Data with these companies in connection with our uses of the Personal Data as described above.

We operate globally and may receive services from these companies in locations around the world for the purposes described in this Policy, which may require a transfer of your Personal Data outside of the EU or UK, including to and from the U.S. Wherever your Personal Data is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your Personal Data. These steps may include implementing standard contractual clauses where recognized by law, obtaining your consent, or other lawful means of transferring Personal Data. In addition, Turnitin and its group company, ExamSoft Worldwide LLC, have been certified under the Data Privacy Framework.

4. How to Exercise Your Rights Regarding Your Personal Data

For users of our Website, please contact us at dpo@ouriginal.com if you wish to exercise any of your rights with regard to your Personal Data. These rights may include the right to request access to, a copy of, modification or updating of, object to the processing of, opt in or opt out of certain uses, withdraw your consent to our processing, or removal of your Personal Data. In some circumstances, these rights may be limited or conditional. For example, your right to object to the processing of Personal Data may depend on the specific circumstances of the processing activity.

Please note that we may need to verify your identity to be able to send a copy of, update or remove your Personal Data. This could mean you will need to send us a copy of your ID or other approved identification.

In addition, please see our Cookie Policy for more information on your choices regarding cookies.

If you have any questions regarding our use of Personal Data, or wish to raise a complaint, please let us know by contacting us via dpo@ouriginal.com.

You also have the right to lodge a complaint or submit a report of breaches to the competent data protection supervisory authority.

5. Data Retention and Erasure

We may retain your Personal Data for the period necessary to enable the continued use of the Services, to fulfill the purposes outlined in this Policy, for legally permissible business purposes, or as otherwise required by law. We may retain non- Personal Data, including aggregated, de-identified, or anonymized data for lawfully permissible purposes.

6. Security

We implement technical, administrative, and physical safeguards to help protect the confidentiality, integrity, and availability of Personal Data. The Internet, however, is not perfectly secure, and, despite our efforts, no security measures are perfect or impenetrable.

7. US Residents’ Rights

If you are a US resident, you may have certain additional privacy rights. Certain US state laws, including California, provide their residents with certain rights related to their Personal Data, as described below. We provide these rights to all US residents. Before we may fulfill a request in relation to our Services, we may be required by law to verify your identity in order to prevent unauthorized access to your data.

We do not “sell” or “share” Personal Data as those terms are defined under California and other applicable state privacy laws. To the extent Personal Data is disclosed to third parties, it is only to third party service providers/processors.

Please note that your exercise of the above rights is subject to certain exemptions to safeguard the public interest (e.g., the prevention or detection of crime) and our interests (e.g., the maintenance of legal privilege). We will try to comply with your request as soon as reasonably practicable in compliance with time frames set forth under applicable law. Requests to exercise these rights may be granted in whole, in part, or not at all, depending on the scope and nature of the request and applicable law. Where required by applicable law, we will notify you if we reject your request and notify you of any reasons why we are unable to honor your request.

Right to Know and Access Information: You have the right to request access to the Personal Data we maintain about you in the ordinary course of business and to receive it in a machine-readable format so that it is available to you. This may include Personal Data we collect, use, or disclose about you.

Right of Correction: You have the right to correct inaccuracies in the Personal Data we maintain about you.

Right to Delete: You have the right to request that we delete your Personal Data. In the case of all such requests, we may not fulfill all or part of the request as permitted or required by applicable law. For example, if you request that we delete your Personal Data, there may be certain records we are legally required to retain.

Authorized Agent: If you are an authorized agent trying to exercise rights on behalf of a Website user, we will need to verify your authorization to act on behalf of the Website user.

Non-discrimination: We will not discriminate or otherwise penalize anyone for exercising their rights under applicable law or this Policy.

8. Updates to This Policy

This Policy may be modified from time to time, as our services evolve. So that you are aware when changes have been made, we will adjust the “Last Updated” date at the beginning of this Policy and, when required by applicable law or regulation, we may also provide notice by email or within the Services.

The “Last Updated” note at the top of this Policy indicates when it was last revised, and updates will become effective when they are posted or we otherwise notify you.

9. Our Data Protection Officer and General Contact Information

If you have any questions regarding our data processing activities, or wish to raise a complaint, you are welcome to contact our Data Protection Officer (DPO) by email at: dpo@ouriginal.com.

If you have questions regarding this Policy, please contact us at:
6th Floor, Wellbar Central
36 Gallowgate
Newcastle upon Tyne
NE1 4TD United Kingdom
Tel: +44 (0) 191 681 0227
legal@turnitin.com

If contacting us does not resolve your complaint, you have further options, for example you may always lodge a complaint with the competent data protection supervisory authority.