Contact us
Fill out this form and an Iron Mountain specialist will contact you within one business day.
Last updated: February 2023
Certain Iron Mountain’s subsidiaries may be obliged to adhere to such local data protection laws that require the disclosure of their own country specific privacy statements (that are usually provided to you by our local Iron Mountain subsidiary at the time of personal data collection). You can access the country specific supplements here:
•CCPA/California consumer privacy act
For the translated version of this privacy notice, please see relevant country websites. For instance, the German version of this document is accessible at our German language websites.
We conduct our business with privacy and data protection in mind. We ensure that processing has a legitimate basis and is compliant with applicable privacy law. In most cases We collect and use your Personal Data based on the following legal grounds:
•Contract performance:when processing is necessary to conclude and perform contracts with our customers, vendors, business partners, or other stakeholders;
•Consent:when We have obtained your consent for processing your Personal Data (e.g., for sending marketing communications about our products or services or tracking your activities on our websites via cookies to improve your customer experiences);
•Legitimate interest:当我们希望履行合法的业务聚氨酯rposes (e.g., for displaying website content relevant to your geographical location or otherwise customise). We rely on legitimate interest only if this is proportionate and guarantees the good balance between our business goals and your privacy rights;
•Compliance with applicable laws:when processing is necessary to comply with the relevant legal or regulatory obligations that We have (e.g., when We need to share Personal Data with the public and tax authorities).
Depending on your relationship with Iron Mountain and subject to the applicable laws and regulations, We may collect and use your Personal Data as follows:
•Business Contact Details (customers, prospect customers, vendors): business contact information(e.g., business contact, professional address, telephone number);personal data of customers’ and vendors’ representatives(e.g., name, contact details);structured data(e.g., proprietary data);technical information(e.g., customer portal, user IDs and passwords, access logs),processed for the following main purposes:contract negotiation and execution, regulatory compliance, business developments and relations, claim management, administration, accounting, improving our services and providing them to customers.
•Audit, Investigations, Due Diligence Personal Data (customers, vendors): name, contact details(e.g., address, phone number, email address),title/function, tax number, bank account informationas well as other information relating to the vendor or customer relationship,processed for the following main purposes:audit, investigation, operational security, regulatory compliance, due diligence screening, claims management, litigation purpose.
•Online Collection of Personal Data (website visitors):information collected via Iron Mountain websites such as contact details, login credentials, online comments, and feedback from online forums and surveys etc.,processed for the following main purposes:enabling efficient use of our websites, optimising the functionality of such websites, engaging with customers/prospects and suppliers in online forums, conducting and evaluating customer satisfaction.
•Children Personal Data:We are concerned about the safety of children when they use the Internet and will never knowingly collect Personal Data from minors (children under 16 years of age, or any other age defined under applicable law).
•Direct Marketing (customers, prospect customer):We might use your Business contact details (e.g., e-mail) to provide you with information about our products and services which We believe might be of your interest. For this purpose, We may also create a personal profile containing business-related information on the company you work for or the interactions between us with the aim of being able to offer you and the company you work for relevant information and suitable offers for our services and products and to improve our personal communication with you. Iron Mountain will only send you such communications (e.g., by email and/or contact you by telephone) if you gave us your prior consent to receive it (“opt in consent”) or as permitted until you have opted out of receiving such communications.Withdrawal of consent or opting out for marketing communication:If you are receiving marketing communications but would no longer like to, you maywithdraw your consentoropt out at any timehere.
We process personal data of our customers as a data processor without reviewing the content or origin of such personal data. We may collect, store and process such personal data solely on our customers’ behalf and at their direction. Our customers who use our services in this way are data controllers and are responsible for obtaining any consents, permissions and for providing privacy notice required for the collection and use of such information.
Iron Mountain data sharing standards
We will not share your Personal Data with third parties without your consent, unless to: (a) fulfil a legitimate business purpose of Iron Mountain (e.g., to use a service delivered by a supplier); (b) respond to duly authorised requests of public authorities; (c) comply with applicable laws and regulations; (d) enforce/protect the rights and properties of Iron Mountain; or; (e) protect the rights of our employees, and other individuals using Iron Mountain property when allowed and in each case in accordance with applicable law. We does not and will not sell your personal data.
Your Personal Data may be transferred to or accessed by other Iron Mountain companies and subsidiaries and third partiesglobally. The recipients may be located in countriesthat do not provide an adequate level of protection to your Personal Data from the perspective of the origin country.
We ensure that Personal Data, subject to the transfer, is adequately protected as required by the applicable data protection laws of the origin country. While transferring your Personal Data, We normally rely on one or more of the following:
•Standard Contractual Clauses (“SCCs”) for international transfers of Personal Data,as may be applicable and relevant, (e.g., transfer of EU/UK/Swiss Personal Data to countries such as the U.S.A and India). If you would like to receive more information about the appropriate safeguards and/or receive a copy of the SCCs for your review, please contact us atglobal.privacy@ironmountain.com.
• Where required by applicable law, We request yourconsent for transfer of yourPersonal Data.
• Iron Mountain has executedan intercompany agreement on the transfer and processing of Personal Datawithin its company group to enable internal transfer of Personal Data.
• Iron Mountain complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). You may find more informationhere.
We respect your data subject/consumer rights and, in as provided for by applicable privacy laws, you may exercise your right(s) to:
Subject to legal and other permissible considerations, We will make every reasonable effort to respond to your request as soon as possible (in any case within the timeframe required by law) or inform you if We require further information to fulfil your request. In some cases, your ability to access or control yourpersonal data will be limited, as required, or permitted by applicable law. We may ask you for additional information to verify your identity and for security purposes, before disclosing the requested personal data to you. We also reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
If you have a privacy concern, complaint or question to Iron Mountain please contact us:
Global Privacy & Compliance
Global Privacy Officer
EEA/UK Group Data Protection Officer
global.privacy@ironmountain.com
You may find both the name of our local subsidiary and contact detailshere(for Crozier entitieshere) by selecting region and country. We will aim to ensure that your complaint is resolved in a timely and appropriate manner and treat your requests and complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint observing whether there are any local rules that indicate a deadline to resolve your request.
Fill out this form and an Iron Mountain specialist will contact you within one business day.
Log in to your account or learn how to create one.
Our Customer Support Centre can help provide you with the quickest answers to your questions.
Connect with one of our knowledgeable representatives to address your specific solution needs.