Privacy Policy
BASIC INFORMATION ABOUT THE ADMINISTRATOR
- This Privacy Policy (hereinafter referred to as "Policy") outlines how we use and process the personal data of users who utilize the website or user accounts created on the Esteamate.co service (hereinafter referred to as "Users"). The Policy also provides information about cookies used on our website.
- The administrator of your personal data is DIGITAL LEGAL Limited Liability Company based in Gdynia (registered office and address for delivery: ul. Starowiejska 16/1, 81-356 Gdynia), email address: app@esteamate.co (hereinafter referred to as "Administrator").
- The Administrator has appointed a Data Protection Officer, who can be contacted at the email press: app@esteamate.co
- Children under the age of 16 are not permitted to use our Service, hence we do not intentionally collect their personal data.
DEFINITIONS
- Personal data: Any information relating to an identified or identifiable natural person (also conducting business activities). An identifiable natural person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Sensitive personal data: Special categories of data as defined in Article 9 of the GDPR, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership; genetic data, biometric data processed for the purpose of uniquely identifying a natural person; data concerning health, sexual life or sexual orientation of a person; and data relating to criminal convictions and offenses as mentioned in Article 10 of the GDPR.
- User: Any person using the Service who has created a user account in the Service.
- Data Protection Officer (DPO): A person designated by the Data Administrator based on Article 37 of the GDPR, who performs tasks to monitor compliance with data protection regulations in DIGITAL LEGAL LLC, as specified in Article 39 of the GDPR.
- Data recipient: The entity to whom personal data is disclosed.
- Authorized person: A person authorized to process personal data by the Data Administrator or by a person authorized by the Data Administrator, having direct access to personal data processed in the IT system.
- Processor: An entity to whom DIGITAL LEGAL LLC entrusts the processing of personal data on its behalf.
- Service The Esteamate.co application along with all provided functionalities.
- Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects of a natural person, particularly to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, for marketing purposes of the Data Administrator.
- Processing of Personal Data: An operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing, or destroying.
- GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Consent for Data Processing: Voluntary, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
BASIC INFORMATION ABOUT PERSONAL DATA PROCESSING
- While using the Service, we track information about your activity within our Service. This includes the features you use, links you click, dates and times of access, types, sizes, and names of files you upload, keywords you search for, your team's progress, and how you interact within the Service. We also collect information about the teams and people you work with and how you collaborate with them, such as who you frequently work with and communicate with in the Service.
- During your activity within the Service, we collect information about your computer, phone, tablet, or other devices you use to access the Service. Information regarding these devices includes the type and settings of the connection during installation, access, updates, or usage of our Service. We also collect information about your device, such as the operating system, browser, IP address, referring/exit page URLs, device identifiers, and crash data. We use IP addresses and/or country preferences to approximate your location and provide a better user experience.
- Server and data center administrators can disable the collection of the aforementioned information through administrator settings or prevent its transmission to us by blocking transmission at the local network level.
- We also receive information about you from other users of the Service or third parties, affiliated companies, social media platforms, publicly available databases, and our business and channel partners. We may combine this information with data we collect through other methods described above.
- We receive information about you when you or your data administrator integrates third-party applications or connects third-party services with our Services, including information about your activities within and outside the Service that we obtain from third-party partners, such as advertising and market research partners, who provide us with information about your interests and engagement within the Service and interest in online advertisements.
- We also receive information about you from third-party business information providers and publicly available sources (such as social media platforms), including information about postal addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, and social media profiles, for targeted advertising of products that may interest you, delivering personalized communications, promoting events, and profiling.
- The Administrator processes the above-mentioned personal data to ensure the full functionality of the Service and to present the offer of products and services within the Service (including for marketing purposes carried out by the Administrator based on agreements with third parties), and also to establish, pursue, or defend claims related to the use of the Service or the processing of personal data.
- To create a user account in the Service, the following personal data is required: name, surname, email address, and business name.
- Subject to the provisions of points 1-7 above, we process User’s personal data for the following purposes:
- Creating and using a User account in the Service,
- Inviting other Users to your workspace,
- Assigning specific roles to Users in the shared workspace,
- Sharing workspace with other Users,
- Providing information available in all views of the workspace,
- Issuing invoices to Users logged in the Service as well as outside its environment,
- Making offers and presenting services and products offered within the Esteamate.co Service and related services, including those offered by entities cooperating with the Administrator, such as service providers offered in the Esteamate.co service, advertisers,
- Fulfilling legal obligations imposed on the Administrator related to the maintenance of the User account in the Esteamate.co service,
- Ensuring the best functionality of the Service.
- User’s personal data will also be processed for the purpose of billing (issuing a VAT invoice or receipt) for using the paid versions of the service.
- User account data is processed electronically after being automatically entered into the Administrator’s databases.
- As the Administrator, we process your personal data as a User of our Internet Service based on:
- Article 6(1)(b) GDPR to enable the conclusion of a contract and the provision of electronic services, as well as the proper performance of these services,
- Article 6(1)(f) GDPR to ensure you can use the full functionality of our Service, which is in our legitimate interest, and to learn about your interests and improve our services, which is in our legitimate interest,
- Article 6(1)(f) GDPR to establish, pursue, or defend claims related to the use of our Service or the processing of User’s personal data, which is in our legitimate interest,
- Article 6(1)(c) GDPR to fulfill the legal obligations imposed on us by Union or Polish law – as processing is necessary to comply with the legal requirements to which we are subject.
- The User has the right to withdraw their consent to the processing of their personal data processed based on previously given consent or to delete the User account from the Esteamate.co service at any time. Consent can be withdrawn in the User profile in the Your Consents tab. Data processing operations carried out before the withdrawal of consent or deletion of the User account from the Service remain lawful.
- Personal data will be processed until the User withdraws their consent to their processing or until the User deletes their account from the Esteamate.co service. Personal data processed to fulfill the service agreement in the Service or to fulfill the obligations incumbent on the Administrator or to protect against claims will be processed until the expiration of the limitation period for claims or the expiration of the period in which, according to applicable law, the Administrator is required to store documentation related to the agreement with the User.
- The Administrator informs that in the case of deleting a User account, the data shared in the Service by the User will be deleted after 14 days from the date of account deletion. After this time, it will not be possible to recover the data stored in the User account in the Esteamate.co service.
- After the withdrawal of consent, personal data of the User processed based on consent and not subject to processing on another basis and for purposes other than those mentioned in point 5 above will be completely deleted from all Administrator’s databases.
- Providing personal data by the User is voluntary; however, if the necessary personal data to use the User account in the Service is not provided, the functionalities available in the Esteamate.co service will not be accessible, and it will not be possible for the User to use the account, the Service, and all functionalities in the Esteamate.co service.
- The recipients of the User’s personal data will be authorized employees of the Administrator or other persons with whom the Administrator cooperates within the framework of the business activity conducted in the implementation of services provided via the Service, individuals responsible for maintaining IT systems and IT support, including entities responsible for Microsoft, Google Drive software, individuals implementing products in the service, authorized entities providing accounting services.
- Data shared by the User will be subject to profiling. Profiling will be carried out in an automated manner, using tools such as Google Tag Manager, Google Analytics. Profiling will involve tailoring and sending commercial offers or marketing content to the User, tailored to their needs, expectations, preferences established based on the personal data provided by the User, and also based, among others, on information about the User’s behavior in the Service, clicks on elements of the website and the Service, dates, and times of access.
- The Data Administrator does not intend to transfer personal data to a third country or international organization.
USERS' RIGHTS REGARDING PERSONAL DATA PROCESSING
- Users have the right to access their personal data processed by the Administrator and receive a copy of the processed data.
- Users have the right to request the rectification (correction, completion) of personal data processed by the Administrator, restrict their processing, or delete them.
- Users have the right to object to the processing unless the further processing of personal data is necessary due to the legitimate interest of the Administrator.
- Users have the right to object to profiling.
- Users have the right to request the transfer of data processed by the Administrator and provided by the User, i.e., to receive them in a structured, commonly used, machine-readable format, and the right to send those data to another administrator. If technically feasible, Users have the right to request that personal data be transferred by the Administrator directly to another administrator.
- Users have the right to file a complaint with the President of the Personal Data Protection Office if they believe that the processing of their personal data violates the data protection regulations.
- In case the User accepts the use of cookies on the website, the User has the right to withdraw their consent at any time.
COOKIES
- Cookies are IT data, particularly text files, that are stored on the User's end device and are intended for using the Administrator's website. Cookies typically contain the name of the website they come from, the time they are stored on the end device, and a unique number.
- The Administrator uses cookies to enable the User to use the full range of website functionalities and to present the Administrator's products and services on the website. Cookies, in particular, allow the website to be displayed correctly on the User's end device.
- The Administrator uses two types of cookies: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files that are stored on the end device until the User leaves the website or disables the software (web browser). "Persistent" cookies are stored on the end device for the time specified in the User's cookie settings or until they are deleted.
- If the User does not want cookies to be installed on the end device they are using, they can refuse consent to the installation of cookies as follows:
In Microsoft Edge browser, select "Tools/Internet Options" from the main menu, then in the "Privacy" section, select "Advanced" and disable cookies;
In Mozilla Firefox browser, select "Tools" from the menu, then "Options," and specify the privacy level in the "Privacy" section;
In Opera browser, select "Tools" from the menu, then from "Preferences" select "Advanced," then "Cookies";
In Google Chrome browser, select "Options" from the menu on the right side, then "Advanced" and "Cookie Settings";
In Safari browser, select "Safari" from the Settings menu, then in the "Privacy & Security" section, select "Block Cookies."
These are examples of browser types. In most browsers, such information about cookies can be found in the "Tools" or "Options" menu. Restrictions on the use of cookies may affect some functionalities available on our website and the Service.