Privacy Notice
Goodzone website

Last updated 26/06/2022

Goodzone takes care of your personal data and does everything possible to protect it.

This Privacy Notice is written to help you understand how your personal data is collected, stored and used, and what happens to it, when you use our website (“website”).

For us you, as a data subject, can be a User or Customer.

Table of contents

Purpose of this Privacy Notice

Who we are

Scope of application

Personal data we process

Period of data storage

Information on data transfer

• General
• Transfer outside the European Economic Area

Your privacy rights

The use of cookie

Update

Purpose of this Privacy Notice

The Privacy Notice is a document, practically a statement of us as a data controller to you (data subject) that describes how we collect, use, retain and disclose personal information.

This Privacy Notice applies only to our website.

Who we are

Scope of application

This Privacy Notice applies to our website and data that we can collect via Linkedin, Twitter, Facebook or Instagram.

Pay attention! This Notice does not apply to our App. If you are interested in the App’s Privacy Notice, please follow the link.

Personal data we process

The data we process is divided into categories: technical information, data that is provided to us by Users and Customers and data obtained from third parties.

Technical data. When you visit our website, some data is collected automatically. We need technical data to operate, maintain, and improve our website. This includes data such as IP address, UTM parameters, geolocation, device type, browser type and data about your interaction with the website — session ID.

Session ID is your interaction with the website, the name of the website from which you came to our website, the features you use, the pages used on our website, how you use our website and the actions you take, if any.

Data provided to us by:

• Users — technical data, session ID, cookies;
• Customers — data provided by Users who filled our forms (“keep in touch” form).

Data provided by third parties:

• Linkedin: Name and Surname; photo; other data that may be collected through Linkedin (for additional information, please, read Linkedin Privacy document);
• Twitter: nickname; photo; other data that may be collected through Twitter (for additional information, please, read Twitter Privacy Notice);
• Facebook: Name and Surname; Photo; other data that may be collected through Linkedin (for additional information, please, read Facebook Data Policy).
• Instagram: Name and Surname; Photo; other data that may be collected through Instagram (for additional information, please, read Instagram Data Policy).

Once again, in detail about what personal data we collect:

Period of data storage

We store Users’ and Customers’ data during the use of our services and for 3 years afterwards.

We store technical data (and visitor data) for up to 1 year.

Please note! Some data contained in documents that are required by law to be stored for a longer period of time (for example, accounting documents).

The duration of data storage received from third parties is determined by the relevant privacy documents of such services: Facebook, Linkedin, Twitter , Instagram.

You can exercise your right to delete your data. In this case, your data will be deleted from our servers within 30 days of your request.

Information on data transfer

General

We use your personal data to perform a contract and for communication between us and the Users. We share your personal data in measures which are needed to perform a contract. Also, we transfer your data on the following grounds:

Consent. We transfer your personal data based on your explicit consent.

Compliance with the law. We will disclose your personal data to third parties to the extent that it is necessary:

• to comply with a government request, court order, or applicable law;
• to prevent unlawful use of our website or violation of the Terms of Use of our website and our policies;
• to protect against claims of third parties;
• to help prevent or investigate fraud.

Legitimate interest or performance of the contract. We transfer your personal data to third parties on the basis of a public offer for processing on our behalf, subject to technical and organizational measures to protect your personal data.

Transfer outside the European Economic Area

The personal data we collect is stored on our servers in France. By default, the data is processed in France, but we may need to process your personal data in another country.

If we need a data transfer we will use technical, administrative and physical security measures to protect against the loss and misuse of information under our control. However, if a data transfer is required to perform a contract or to provide you services, we have the right to do so without your consent.

Your privacy rights

You have the following rights:

Please note! We may ask you to verify your identity before responding to a request.

To exercise your rights, write us an email at privacy@goodzone.io. We will answer you as soon as possible.

If we do not satisfy your request, you can file a complaint to the regulatory body — the Data Protection Inspectorate (Andmekaitse Inspektsioon) at email info@aki.ee or address Tatari 39, 10134 Tallinn.

The use of cookie

We process technical data and use cookies. You may find our Cookie Policy here.

If you want to disable cookies, then you can find instructions for managing your browser settings at these links:

Update

This Privacy Notice and the relationships falling under its effect are regulated by the GDPR.

Existing laws and requirements for the processing of personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on our website.

If significant material changes are made that affect your privacy and confidentiality, we will notify you by email or display information on the website and ask for your consent.