Privacy Notice

Prometheus, Inc. (“Prometheus,” “we,” or “us”) is committed to your privacy and protecting your personal data. This notice explains what personal data is collected and processed by Prometheus. If you have any questions or concerns about the information in this notice, we encourage you to contact us.

Contacting Prometheus

Prometheus is a data controller of personal data we have collected. There are several different ways that you can contact us. You may contact us by mail or telephone at:

111 Monument Circle

Suite 2700

Indianapolis IN 46204
Toll-Free: 317-684-5238

You may also contact us directly by completing a form here, or preferably, email us at privacy@prometheusenergetics.com.

Application Of This Privacy Notice

This notice applies to the processing by Prometheus of all personal data of customers, suppliers, vendors, visitors, and other individuals. It does not apply to former, current, or prospective employees. Our privacy notice for job applicants can be found here. If you are a California resident, our CCPA notice can be found here.

The Personal Data We Process And For What Purpose

When you directly interact with Prometheus

We will process your name, contact details, and any other personal data you include in your communications to respond to inquiries and other communications.

For health, safety, and security, we may process your name, contact details, company details, and your image through CCTV feeds when you visit our premises. In addition, if you connect to our IT network, we will process personal data sent from your device, such as your IP address. Such information is needed to provide you with internet access, to monitor your use of our information and communication systems to ensure compliance with our policies, and to ensure network and information security.

When you do business with Prometheus

Prometheus collects personal data that you or your business provides us in connection with a business relationship between your company and Prometheus. We process your contact details such as your address, email address, telephone number, and other business contact information, professional details such as your job title, and other categories of personal data that may be contained in written communications or disclosed orally.

We collect such personal data to assess whether to enter into a contract with your company, to enter into a contract with your company, to perform a contract with your company, to enforce contracts, to communicate with your company, to market to your company, and for internal management purposes.

We may also collect personal data about you from publicly available sources, such as LinkedIn.

In addition to the purposes for collecting personal data described under the headings above, we may also process your personal data for the following purposes that we consider to be everyday business purposes:

  • For legal and regulatory compliance, including all uses and disclosures of personal data required by law or as reasonably needed for compliance with Prometheus policies and procedures;
  • For audits, including financial, security, and compliance audits, and analysis and reporting;
  • To respond to and defend against legal claims; and

The Legal Basis For Processing Your Personal Data

We will only collect, process, and share your personal data when we reasonably believe that we have an appropriate legal basis to do so. To process your personal data, we may rely on different legal basis, including:

  • Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your personal data, you may withdraw your consent at any time;
  • To establish a contractual relationship with you and to perform our obligations under such contract;
  • To comply with legal obligations and to establish, exercise, and defend ourself from legal claims; and
  • To pursue a legitimate interest, including:
    • Marketing to you or your company;
    • Entering into or performing a contract or commencing contractual negotiations as well as communicating with your company;
    • Responding to your inquiries or other direct communications with us; and
    • Ensuring our networks, information, and premises are secure.

If You Fail to Provide Your Information

Failing to provide your personal data to us when you:

  • Directly interact with us may prevent us from being able to respond to your inquiry or other communication.
  • Visit our website may prevent the website from performing optimally and may prevent us from contacting you about products you may be interested in.
  • Visit one of our facilities, we may prevent you from entering the facility beyond the reception area.
  • Or your company has a business relationship with us may prevent us from entering into a contract, performing under the applicable contract, or furthering our business relationship.

Disclosing Your Personal Information

Prometheus does not sell, trade, or rent your information to third parties. Nor does Prometheus maintain any relationships with any ad server companies, and no advertising appears on our website except our own.

We may share or disclose your personal data with the following types of third parties:

  • Members of the Prometheus joint venture: Because the work that Prometheus performs or processes it undertakes make be contracted or delegated to members of the joint venture comprising Prometheus. subsidiaries often collaborate for purposes of conducting our business, your personal data may be shared between and among Prometheus and its subsidiaries or affiliates.
  • Data hosting service providers to centralize and secure information.
  • Customer Relationship Management (CRM) systems: We may utilize CRM systems to manage relationships with customers, suppliers, and other business partners.
  • Customers, vendors, suppliers, and other business partners: We may transfer your personal data to our business partners in connection with a contractual or business relationship we have with you, for business opportunities, and for communication purposes.
  • IT security service providers: Your personal data may be processed by IT security service providers to protect our information, networks, and security.

We will also disclose your information to the extent required by law and to comply with legitimate governmental requests, subpoenas, court orders, and to establish or exercise our legal rights or defend against legal claims.

We will also disclose your information to third parties if we choose to sell, transfer, merge, or otherwise disposes of all or parts of our business or our assets.

Transferring Your Information

We transfer, process, and store information about you on servers located in the United States. We may also disclose or transfer your personal data to the members of Prometheus to fulfill one or more of the purposes described above.

Choices You Have About Your Information

When your information is collected in the EEA, the UK, or Switzerland, you have the right to: (1) withdraw consent where you have previously given your consent to the processing of your personal data; (2) request access to, correction, and/or erasure of your personal data; (3) object to our processing of your personal data; (4) request a copy of your personal data, or have a copy thereof sent to another controller, in a structured, commonly used and machine readable format under the right of data portability. You may exercise these rights by reaching out to us through one of the contact methods provided above.

Prometheus will offer individuals in the EEA, the UK, or Switzerland the opportunity to choose (by either opt-out or opt-in) if their personal data is (a) to be disclosed to a third party that is not an agent performing tasks for us under our instructions, or (b) to be used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized by the individual.

For Sensitive Personal Data, Prometheus will give individuals the opportunity to affirmatively and explicitly consent (opt-in) to permit Prometheus to (a) disclose their sensitive personal data to a third party or (b) use Sensitive Personal Data for a purpose that is not related to or compatible with the purpose for which it was originally collected or subsequently authorized by the individual.

Prometheus will provide individuals with reasonable, clear, and conspicuous and readily available mechanisms to exercise these choices. To request to limit the use and disclosure of your personal data, please submit a written request to privacy@prometheusenergetics.com.

Legitimate Interest and Direct Marketing Objections

For information collected from individuals in the EEA, the UK, or Switzerland, you may object to Prometheus processing your information where we are relying on a legitimate interest. We will stop processing your information unless we can demonstrate appropriate, overriding legitimate grounds for the processing or if needed for the establishment, exercise, or defense of legal claims.

You may also object to Prometheus processing your information for purposes of direct marketing. Anyone can do this no matter where your information was collected by clicking the “Unsubscribe” link in any automated marketing email or by submitting your request to Prometheus through one of the contact methods described above.

Security

Prometheus takes reasonable and appropriate organizational and technical security measures to protect your personal information from loss, misuse and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of such data, and comply with applicable laws and regulations.

Personal Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which the data was collected. When Prometheus determines how long to retain your information, we will consider whether we have an active or potential business relationship with you, whether there are any legal obligations to which we are subject, and whether retention is prudent because of legal considerations (such as statute of limitations, litigation, or other investigations).

Prometheus May Modify This Notice

Prometheus reserves the right to update this notice at any time, without prior notice, to the extent permitted by applicable law. The updated notice will be posted on our website. Any changes will be effective immediately unless otherwise stated.