Organization Information:

Cartus Corporation (formerly Cendant Mobility Services Corporation)
40 Apple Ridge Road
Danbury, Connecticut 06810
Phone: 203-205-3415
Fax: 203-205-6575
http://www.cartus.com
Contact Information:

Contact Office: John Dutt, Information Security Officer
Phone: 203-205-1540 Fax: 203-749-8932 Email: John.dutt@cartus.com

Corporate Officer Information:

Corporate Officer: Bruce M. Perlman, SVP, General Counsel
Phone: 203-205-6550 Fax: 203-205-6575 Email: bruce.perlman@cartus.com

Safe Harbor Information:

Signed up to safe harbor 06/15/2005 10:44:10 AM
Next certification 06/15/2010
EU/EEA Countries From Which Personal Information Is Received: Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Slovakia, Slovenia, Spain, Sweden, United Kingdom
Industry Sector: Employment Services - (EMP) Transportation Srvs (Except Aviation) - (TRN) Management Consulting Services - (MCS) Education & Training - (EDS)
Personal Information Received From the EU: In the course of providing relocation and assignment management services, Cartus acts as a data processor and processes data in accordance with instructions of its clients (Data Controllers) and customers. In its role as data processor, Cartus collects personally identifiable data about transferees and assignees, and their families directly and from employers and other third parties. The information is used to provide relocation and assignment management services pursuant to our contracts with our clients and as requested by customers.
Privacy Policy Effective: Effective 5/2002; last revised 5/2005
Location: Contact Cartus Corporation; http://www.cartus.com/Footer/PrivacyRegion.aspx?cid=865&regID=2
Regulated by: Federal Trade Commission
Privacy Programs: Cartus has instituted a self-regulatory program for ensuring verification and adherence to safe harbor. This consists of regular information security reviews, including privacy information reviews, physical security reviews, disaster recovery planning, testing and reviews, internal and external audits of Cartus, reviews performed by clients. This also consists of periodic certification/vulnerability assessments, which includes periodic renewal to ensure maintenance of certification. Vulnerability reviews by Cartus or its designated third parties are also performed periodically. In addition, Tru-Secure enterprise-level certification of the Englewood, CO Data Center was achieved in January, 2004 and reaffirmed in April, 2006; and Tru-Secure enterprise-level certification of the Danbury, CT data center was achieved in November, 2002 and reaffirmed in May 2006. These certifications processes provide for (among other things) quarterly reviews of the data centers and re-certification validation and assessments.
Verification: In-house; Tru-Secure
Dispute Resolution: Cartus commits to cooperation with the EU Data Protection Authorities. In addition, where applicable, Cartus may submit disputes that are not satisfactorily addressed through its internal procedures, to independent dispute resolution bodies with authority to resolve customer disputes
Personal Data Covered: On-Line, Off-Line, Human Resources Data
Human Resource Data Covered: Yes

Do you agree to cooperate and comply with the European Data Protection Authorities? Yes

Certification Status: Current
Compliance Status:

Safe Harbor Overview | Safe Harbor Documents | Workbook | Safe Harbor List
Information Required for Certification | Certification Form