Privacy Policy

Updated: December 22, 2020

Table of contents

Introduction

Quad/Graphics, Inc. (“Quad,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it.

This Privacy Policy describes the personal information we collect and process when you visit the website www.quad.com (our “Website”), when you call us, apply for a job with us, visit our facilities, or that we may otherwise collect in connection with offering our products and services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy), so please check this Privacy Policy periodically for updates.

Note that should the United Kingdom (UK) leave the European Union (EU), all references to the EU in this Policy shall be construed as meaning the EU and the UK.

Data controller

This privacy policy covers the following websites:

For the personal data we collect on our own behalf, Quad/Graphics, Inc. is the data controller. We are located at:

N61 W23044 Harry’s Way
Sussex, WI 53089-3995
United States
888-782-3226

Our use of information we collect as a service provider or processor is limited by the restrictions placed on that information by our clients and their privacy policies. You can learn more about how your information is collected and used by our clients by reviewing the privacy policies of the businesses you engage with.

As a business or controller, we will use personal information about you only for the purposes and in the manner set forth below, which describes the steps we take to ensure the processing of personal data is in compliance with applicable data protection law, including California’s Consumer Privacy Act (“CCPA”) and the European Union’s General Data Protection Regulation (“GDPR”).

Children under the age of 17

Our Website is not intended for children under 17 years of age. No one under age 17 may provide any information to the Website. We do not knowingly collect Personal Data from or about children under 17 and do not sell Personal Data about children under 17. If you are under 17, do not use or provide any information on our Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of our Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data from a child under 17 without verification of parental consent, we will delete that information. If you believe we might have any information from a child under 17, please contact us in any manner set forth below in the “Contact Information” Section of this Privacy Policy.

Information we collect

The personal information we collect about you helps us manage our relationship with you, primarily by allowing us to respond to your queries, to improve website performance and user experience, and to let you know of our services and of materials for download. Additionally, in the United States only we obtain certain types of personal information, such as names and addresses, from third party data brokers for marketing purposes, including helping our clients in their own marketing efforts.

We also collect information when you apply to be a member of our team.

The personal information we collect, the basis of processing and the purposes of processing are detailed below. Sometimes, these activities are carried out by third parties (see “Sharing of Personal Data” section below).

For EU data subjects, we have a lawful basis for each of our processing activities covered by the GDPR.

From Whom do we collect this data Personal data Basis and purpose of processing
Representatives of Prospective Clients. We will collect your name, email address, phone number, and payment information. We may also collect your Social Security number, address and other information in order to collect a credit history where you have submitted an application to become our Client. It is necessary to take steps at your request prior to entering into a contract (e.g. to respond to your queries and to provide you with further information; or where you have submitted an application to become our Client, to verify your creditworthiness); and Consent.
Account Holders/Current Clients. We will collect your name, user IDs/log-ins and passwords used by you when you create an account in relation to our platforms and services. It is in our legitimate interests to grant you access to a private log-in where you can access information relevant to you and your relationship with us. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Representatives of Vendors/Suppliers. We will collect your name, email address, phone number, order information for goods and services sold by you (or your organization), you/your organization’s billing, payment and banking details and any communications we have with you. It is in our legitimate interests to store vendor/supplier related information so that we can refer back to it (e.g. for our general recordkeeping and supplier relationship management). Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject. Or (if you are contracting with us as an individual) it is necessary for performance of our contract with you.
General Inquirers and those reporting issues with our website. We will collect your name, email address, phone number, and message details. It is in our legitimate interests to respond to queries and to provide you with information relating to our services and to maintain our website. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Other third party partners with whom we carry out business. We will collect your name, email address, and phone number. It is in our legitimate interests to provide you with information relating to our services. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Those who wish to be included in our electronic mailing/contact list. We will collect your name and email address, and telephone number. Consent. If you subsequently wish to withdraw your consent, you may do so at any time by clicking the “unsubscribe” link at the bottom of these communications, or by contacting us through our “Contact Us” page or using the information set forth below in the “Contact Information” Section.
Those who we have identified to receive non-electronic marketing (e.g. postal marketing) or who we are permitted to market to electronically without consent, which may include representatives of prospective clients and representatives of current clients. We will collect your name, physical address and email address (where electronic mailing). It is in our legitimate interests to grow our business by marketing sales to existing clients and new clients, by identifying you as a potential recipient for, and notifying you of, our products and services as well as providing you with information of our latest offers and promotions. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Prospective Employees. We will collect your name, email address, physical address, phone number, employment and educational history. If you receive a conditional offer from us, and depending on local laws, we may also collect a background check, including any criminal history. Necessary in order to take steps prior to entering into an employment contract; Consent.
Website Users. We will collect your location based on where you access our website. It is in our legitimate interests to enhance account security, and to ensure appropriate privacy regulations are followed. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Visitors to Quad facilities. We will collect your name, company /employer, purpose for access, driver’s license or number of other identification document; license plate number of any vehicle accessing the facility; expected length of stay; any required certificate or credential necessary for access to a restricted area; time in/time out. We also may monitor our facility using CCTV. It is in our legitimate interest in maintaining security and accountability (which does not unfairly cause you prejudice or affect your fundamental rights and liberties because it provides you with a more safe and secure visit); compliance with local laws, including those relating to health and safety.
Visitors requiring access to Quad information systems. We may monitor your usage of our network. It is in our legitimate interest to maintain security and accountability through: identifying and authenticating employees and other individuals; identifying, investigating and mitigating suspected misuse of our assets, systems and platforms. This interest does not unfairly cause you prejudice or affect your fundamental rights and liberties because it provides you with a functional and secure website to use. It is also necessary to ensure compliance with law, regulations, as well as our policies and procedures.

For California residents

The personal information about you that we collect includes information within the below categories of data. These categories also represent the categories of personal information that we have collected over the past 12 months. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category in all instances.

We have disclosed each of the below categories of information to our service providers and affiliates for a business purpose in the past 12 months.

Category Source Purpose of Collecting Information Disclosed for a business purpose in last 12 months? Types of Third Parties Shared With
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. This information is collected directly from you, our clients, our service providers or through the use of cookies and similar technologies. A subset of this data is processed in connection with a number of our operational functions, including to process payments, provide you with other services, to provide you with notices about your account, to audit our interactions with our clients and consumers, and to respond to your queries, or to take steps necessary to enter into a contract with you. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. For visitors, a subset of this data is processed in order to maintain security and accountability, and to comply with local laws, including those relating to health and safety (as well as to accommodate any special access and mobility requirements). For applicants for employment positions, a subset of this information is used to process your application. Yes Affiliates and service providers.
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. This information is collected directly from you, our clients, our service providers or through the use of cookies and similar technologies. A subset of this data is processed in connection with a number of our operational functions, including to process payments, provide you with other services, to provide you with notices about your account, to audit our interactions with our clients and consumers, and to respond to your queries, or to take steps necessary to enter into a contract with you. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. For visitors, a subset of this data is processed in order to maintain security and accountability, and to comply with local laws, including those relating to health and safety (as well as to accommodate any special access and mobility requirements). For applicants for employment positions, a subset of this information is used to process your application. Yes Affiliates and service providers.
Characteristics of classes protected under federal or California law, including: familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age, or genetic information. This information is collected directly from you or our service providers (including recruiting agencies). This information is collected and processed in connection with processing an employment application, including to make you aware of employee benefits you may elect to receive or to provide you with any accommodations you may require. For visitors, it may also be collected to provide you with any accommodations you may require. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. Yes Affiliates and service providers.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This information is collected directly from you or our service providers (including background and credit checking agencies). This data is processed in connection with a number of our operational functions, including for processing an employment application or placement into particular job positions. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. Yes Affiliates and service providers.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. This information is collected directly from you, our clients, our service providers or through the use of cookies and similar technologies. This information is collected and processed in connection with a number of our operational functions, including to optimize performance of our websites, provide products and services to our clients, and to audit our interactions with our clients and consumers. It is also processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics. It is also necessary to ensure compliance with our policies and procedures. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. Yes Affiliates and service providers.
Audio, electronic, visual, thermal, olfactory, or similar information. This information is collected directly from you or our clients. For visitors, This information is collected via our CCTV cameras. Audio data may be processed in connection with a number of our operational functions, including recording sales calls and other calls. For visitors, visual data may be processed in order to maintain security and accountability, and to comply with local laws, including those relating to health and safety (as well as to accommodate any special access and mobility requirements). Yes Affiliates and service providers.
Professional or employment-related information. This information is collected directly from you or our service providers (including recruiting agencies). This data is processed in connection with a number of our operational functions, including to process your employment application, and to provide services to our client. It may also be used for marketing purposes, including our own marketing or providing our clients with this information for offering you products or services that may interest you. For visitors, this data is processed in order to maintain security and accountability. Yes Affiliates and service providers.
Inferences drawn from any of the above categories of information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This information is collected from our clients, or our service providers. This information is collected and processed in connection with a number of our operational functions, including for our own marketing purposes or providing our clients with this information for offering you products or services that may interest you. Yes Affiliates and service providers.

Within the U.S., and as defined under California Law, we may “sell” personal information about you to our clients. Specifically, we may have sold identifiers or information that relates to you such as your name, postal address, phone number, and email address in the past 12 months so that our clients may offer you products and services that may interest you.

Cookies and other automated collection practices

A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows the website to “remember” your actions or preferences over time. Cookies are widely used by online service providers in order to (for example) make their websites or services work, or to work more efficiently, as well as to provide reporting information. Some cookies are also strictly necessary for the performance of our website.

Most Internet browsers support cookies; however, users can set their browsers to decline certain types of cookies or specific cookies by configuring their browser’s privacy settings (please refer to your browser’s help function to learn more about cookie controls). Further, users can delete cookies at any time. Note that if you disable cookies entirely, our websites may not function properly, or at all in the case of strictly necessary cookies.

Why do we use cookies?

We use cookies to learn how you interact with our content and to improve your experience when visiting our website(s). For example, some cookies remember your preferences or save your place to make future visits to one of our websites more convenient. They can also be used to remember which products you added to your cart while you continue to browse our websites. Additionally, cookies allow us to serve you specific content, such as videos on our website(s). We may employ the learnings of your behavior on our website(s) to serve you with targeted advertisements on third-party website(s) in an effort to “re-market” our products and services to you.

What types of cookies do we use?

Third-party cookies, including social media plugins, belong to and are managed by other parties, such as Google Analytics or service providers. These cookies may be required to render certain forms, such as email list sign-up, or to allow for some advertising outside of our website.

Session cookies are temporary cookies that are used to remember you during the course of your visit to the website, and they expire when you close the web browser.

Persistent cookies are used to remember your preferences within the website and remain on your desktop or mobile device even after you close your browser or restart your computer. We use these cookies to analyze user behavior to establish visit patterns so that we can improve our website functionality for you and others who visit our website(s). These cookies also allow us to target advertising and measure the effectiveness of our site functionality and advertising.

How are cookies used for advertising purposes?

Cookies and ad technology such as web beacons, pixels, and anonymous ad network tags help us serve relevant ads to you more effectively. They also help us collect aggregated audit data, research, and performance reporting for advertisers. Pixels enable us to understand and improve the delivery of ads to you, and know when certain ads have been shown to you. Since your web browser may request advertisements and web beacons directly from ad network servers, these networks can view, edit, or set their own cookies, just as if you had requested a web page from their site.

Although we do not use cookies to create a profile of your browsing behavior on third-party sites, we do use aggregate data from third parties to develop relevant, interest-based advertising. Additionally, within the U.S., we may obtain information about you from third parties for marketing purposes, including helping our clients to offer you products that may interest you. You can choose not to enable off-site and third-party-informed advertising by adjusting your cookie settings. Doing so will not remove advertising from the pages you visit, but, instead, will result in the ads you see not being matched to your interests. This implies that the ad(s) you see will not be matched to your interests by those specific cookies.

How are third party cookies used?

For some of the functions within our websites we use third party suppliers, for example, when you visit a page with videos embedded from or links to YouTube. These videos or links (and any other content from third party suppliers) may contain third party cookies, and we encourage you to consult the privacy policies of these third party vendors on their websites for information regarding their use of cookies.

For more information on third party cookies we use click here

How do I reject and delete cookies?

You can choose to reject or block all or specific types of cookies for our websites and/or the websites of any third party suppliers by changing your browser settings. Please note that most browsers automatically accept cookies. Therefore, if you do not wish cookies to be used, you may need to actively delete or block the cookies. If you reject the use of cookies, you will still be able to visit our websites but some of the functions may not work correctly. You may also visit the above links, or www.allaboutcookies.org for details on how to delete or reject cookies and for further information on cookies generally. You can also manage advertising cookies via http://optout.aboutads.info/.

How we share personal information

We share Personal Information in the following ways:

  • We may use service providers, who help with parts of our website and operation of our business; (e.g. bill collection, fraud prevention, technology services, marketing) and with whom we may share your Personal Information. We endeavor via contract to limit our service providers’ use of such information to the purposes of providing services to, or assisting us with, the operation of our business and not for their own benefit;
  • We may share with law enforcement, government officials, or other third parties to the extent we believe applicable law requires our sharing or such sharing is appropriate to protect our rights, your rights or the rights of others;
  • We may share payment information with third parties such as financial institutions as part of providing our services to you or the business you work for;
  • As part of our legitimate interest, we may share in order to manage any proposed sale, restructuring, transfer or merging of any or all part(s) of our business, including to respond to queries from the prospective buyer or merging organization; and
  • We may share with other third parties only with your consent or direction to do so.

Within the U.S., we may share your Personal Information, such as your name, mailing address, phone number, and email address, with our clients to enable them to offer you products and services that you may be interested in.

Your rights regarding your information and accessing and correcting your information

Depending on where you live, your current jurisdiction and applicable data protection laws, and subject to any relevant restrictions/exemption, you may be entitled to certain rights with regards to our processing of your Personal Information. (Please note: depending on the country you live in and the applicable data protection laws, you may only have access to some of the rights listed below).

  • Access and Update. You may be entitled to request that we disclose to you Personal Data we have collected about you, the categories of sources from which the information was collected, the purposes of collecting the data, the categories of third parties we have shared the data with, and the categories of Personal Data that have been shared with third parties for a business purpose. You can review and change any inaccurate Personal Data by notifying us through the Contact Information below or the Access or Delete webform feature of our Website, of any errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect. Data solely retained for data backup purposes is generally excluded.
  • Restrictions. You may have the right to restrict our processing of your Personal Data under certain circumstances. In particular, you can request we restrict our use of it if you contest its accuracy, if the processing of your Personal Data is determined to be unlawful, or if we no longer need your Personal Data for processing but we have retained it as permitted by law.
  • Portability. To the extent the Personal Data you provide Quad is processed based on your consent or that we process it through automated means, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in structured, commonly used and machine-readable format. You also have the right to request that we transmit this Personal Data to another controller, when technically feasible.
  • Withdrawal of Consent. To the extent that our processing of your Personal Information is based on your consent, you may withdraw your consent at any time. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Information.
  • Right to Deletion. You may have the right, subject to some exceptions, to request that we delete Personal Information about you that we have collected or maintain. We will not delete personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you while continuing to provide you with certain products and services or where we are legally required to retain certain information. This right is generally excluded from data kept for archival or back-up purposes.
  • Right to Opt Out of the Sale of Personal Information. If you are a California resident, you may have the right to opt-out of the sale of your Personal Information, as defined under California law. You can find more information about your right to opt out and submit an opt out request through the following link: Do Not Sell My Personal Info.
  • Complaints. You have the right to lodge a complaint with the applicable supervisory authority in the country you live in, the country you work in, or the country where you believe your rights under applicable data protection laws have been violated. However, before doing so, we request that you contact us directly in order to give us an opportunity to work directly with you to resolve any concerns about your privacy. For a list of the various European privacy regulators, see https://edpb.europa.eu/about-edpb/board/members_en

Submitting a request and verifying your identity

You may exercise any of the above rights by contacting us through our website or any of the methods listed under Contact Information below and through the Access, Delete, or Do Not Sell Opt-Out feature of our Website.

Please note that under California law, we are only obligated to respond to personal information access requests from the same consumer up to two times in a 12-month period. Under both EU and California law, if an individual makes unfounded, repetitive, or excessive requests (as determined in our reasonable discretion) to access Personal Data, we may charge a fee subject to a maximum set by law.

Before providing information you request in accordance with these rights, we must be able to verify your identity. In order to verify your identity, you may need to submit information about yourself, including, to the extent applicable, providing answers to security questions, your name, government identification number, date of birth, contact information, or other personal identifying information. We will match this information against information we have previously collected about you to verify your identity and your request. If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information in order to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion.

If you would like to appoint an authorized agent to make a request on your behalf, you must provide the agent with written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. The agent or attorney must provide this authorization at the time of request. We may require you to verify your identity with us directly before we provide any requested information to your approved agent.

Information collected for purposes of verifying your request will only be used for verification.

If you chose to exercise any of these rights, to the extent that they apply, U.S. state law prohibits us from discriminating against you on the basis of choosing to exercise your privacy rights. We may, however, charge a different rate or provide a different level of service to the extent permitted by law.

Do not track signals

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such a signal is broadcast or received by us.

Data security

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Processing of personal data in the United States/in other countries outside the European economic area

If you are a resident of the European Economic Area (“EEA”), in order to provide our Websites, products, and services to you, we may send and store your Personal Data outside of the EEA, including to the United States. Accordingly, your Personal Data may be transferred outside the country where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Data.

Your Personal Data is transferred by Quad to another country only if it is required or permitted under applicable data protection law and provided that there are appropriate safeguards in place to protect your Personal Data.

To ensure your Personal Data (other than Personal Data you provide directly to us on our Websites) is treated in accordance with this Privacy Policy, Quad uses Data Protection Agreements between Quad and all other recipients of your data that include, where applicable, the Standard Contractual Clauses adopted by the European Commission (the “Standard Contractual Clauses”). The European Commission has determined that the transfer of Personal Data pursuant to the Standard Contractual Clauses provides for an adequate level of protection of your Personal Data. Under these Standard Contractual Clauses, you have the same rights as if your data was not transferred to such third party. Note that Quad is not directly subject to the U.S. Foreign Intelligence Surveillance Act. You may request a copy of the Data Protection Agreement by contacting us through the Contact Information below.

Data retention periods

Quad will retain your Personal Data for as long as necessary for the purposes for which we collect it. In some instances, we may keep it longer:

  • for as long as necessary to comply with any legal requirement;
  • for backup and disaster recovery systems in accordance with our backup and disaster recovery policies and procedures;
  • for as long as necessary to protect our legal interests or otherwise pursue our legal rights and remedies; or
  • for data that has been aggregated or otherwise rendered anonymous in such a manner that you are no longer identifiable, indefinitely.
  • For CCTV footage, we will retain your information for 3 months.

Changes to our privacy policy

Quad will apply this policy at all times in accordance with applicable laws. We may change this Privacy Policy at any time, including in response to changes in laws. It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Website’s home page. If we make material changes to how we treat Personal Information, we will notify you by email, if applicable, to the email address specified, or through a notice on the Website’s home page. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.

Contact information

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy, have any requests related to your Personal Data pursuant to applicable laws, or otherwise need to contact us, you may do so using the contact information below or through the “Contact” page on our Website.

To contact Quad

Quad/Graphics, Inc.
Attn: Dana Gruen
N61 W23044 Harry’s Way
Sussex, WI 53089-3995
United States
888-782-3226

Compliancedept@quad.com

Without prejudice to any other administrative or judicial remedy you might have, you may have the right to lodge a complaint with local state regulators/data protection authorities if you believe that we have infringed applicable privacy or data protection requirements when processing personal data about you.