Our policy regarding personal data can be summarised in one sentence: the security of your data is of utmost importance to us. Below, you can find some information and rules we follow. We want our service to be both enjoyable and secure, hence the high standards we set for ourselves.
In case you have any questions or doubts, you can contact us at firstname.lastname@example.org. We will answer all your questions!
Who we are?
edrone sp. z o.o. with its registered office in Cracow (31-203), ul. Lekarska 1, entered into the Register of Entrepreneurs of the National Court Register (KRS), District Court for Kraków Śródmieście in Cracow, 11th Commercial Division, under KRS number: 0000537197, Tax Identification Number (NIP): 676-248-20-64, Polish Business Registry (REGON) number: 360228388
We will be the controller of your personal data.
However, keep in mind that as regards the personal data of your Customers, it is you who decides on the purposes and methods of their processing. Therefore, for your Customers, we will be the processor (operator).
Whether we process your data or the data of your Customers, you can be sure we will adhere to the highest security standards.
What personal data do we process?
When registering an account with us, you give us your name and email address. This information is necessary for us to provide the service. After all, we need to know for whom we provide it, and how to contact them. We also process your data concerning payments and your IP number.
When using our service, remember that we use the personal data of your Customers. They should know about it. We trace their activity in your store and process their contact data. Still, you remain the controller of their personal data, and you decide on the purposes and methods of personal data processing. We provide you with a tool.
Basis for personal data processing
The primary basis for the processing of your personal data is the agreement you enter into with us by registering an account on our website. As stated above, if you do not provide your data, the registration will not be completed and there will be no agreement.
If you agree to this, we will process your data also to send you information regarding our activity. We constantly change for the better and organise many events to help you carry on business. We wish to notify you about this. The consent for such notifications is entirely voluntary. There will be no consequences if you refuse. We will continue to provide our services for you to the best of our ability.
We also process your data to facilitate contact with us and to test the functionality of your account. In this regard, the ground for processing is our legitimate interest. We need to be able to contact our Customers and to carry out activities to improve our service even further.
As concerns the personal data of your Customers, remember that you are their sole controller. In case you have any doubts as to the legal compliance of your business and your customer database, you have to notify us immediately or have an appropriate audit carried out by experts. In order to provide our services, we will need you to entrust us with the personal data of end users in the scope and for the purpose specified in a separate data processing agreement. You can find the current version of the DPA here.
How do we use your data?
Your data is necessary for us to provide the service. Therefore, we process data enabling us to contact you and concerning payments, and use this data in the system we created. Naturally, we are not self-sufficient and we also transfer your data to out partners, without whom we would not be able to provide the service.
When registering with us, you can also consent for your personal data to be processed for purposes other than the performance of the agreement.
If you use our service or visit our website, we will monitor and analyse your activity. We want to know you the best we can and tailor the service exactly to you. Hence, our system will analyse which edrone features you use the most and how. This will enable us to develop new features and improve the existing ones. Such automated processing of personal data is profiling, but we do not use it to make any binding decisions which would affect your rights.
Whom do we provide data to?
We are not yet able to perform all the services we need by ourselves (though we work hard towards it!). This is why we use the services of third party providers. We provide your data to the following categories of entities:
- accounting firms that assist us with accountancy;
- payment systems that process payments;
- communications systems that enable us to contact you;
- hosting companies.
This is the list of entities we provide your Customers’ data to.
|Name||Registered office address||Service|
|Amazon Web Services Inc.||P.O. Box 81226 Seattle, WA 98108-1226||Amazon Web Services|
|Message Systems Inc.||9130 Guilford Road Columbia Columbia, MD 21046||SparkPost|
|Vercom S.A.||ul. Baraniaka 88, 61-131 Poznań||EmailLabs|
|ComVision Spółka sp. z o.o.||ul. Toszecka 101, 44-100 Gliwice||SMS API|
|FullContact Inc.||1755 Blake Street Suite 450 Denver, Colorado 80202||FullContact API|
|PayLane Sp. z o.o||ul. Norwida 4 Gdańsk||PayLane|
As you can see, some of our third party providers are based outside of EU. The countries in which they are based have high data protection requirements.
Keep in mind that we are obligated to cooperate with law enforcement authorities and courts. If they order us to provide your personal data, we will have to comply.
- You have the right to withdraw a given consent at any time. This will not affect the service in any way. We will just stop sending you promotional messages. Of course, withdrawing consent will not affect the processing carried out until that moment, still under your consent. If you wish to withdraw your consent, modify the data in your profile or contact us.
- You have the right to request access to your personal data.
- You have the right to correct your personal data or even remove it. Removing the data required to provide the service is equivalent to deleting your account with us.
- You have the right to object to the processing of your data or to demand that this processing be limited.
- You have the right to transfer the data processed under the agreement.
- You have the right to file a complaint with the President of the Personal Data Protection Office.
How long do we keep your data?
We keep and process your data as long as you use our services. After your account is deleted, we process your data only by keeping them for the duration of the limitation period for claims. This is to protect your rights.
In case you have any questions, we will happily answer them for you. Contact us at email@example.com.
edrone sp. z o.o.
ul. Lekarska 1