Source: https://crate.io/legal/privacy-policy/
Timestamp: 2019-04-19 19:24:14+00:00

Document:
7. How does Crate.io secure your information?
We (may) process data about your use of our website and services and save these as "server log files" ("usage data").
The data collected are for statistical purposes only and to improve the website. However, the website operator reserves the right to retrospectively check the server log files should concrete evidence point to unlawful use. These data cannot be assigned to specific persons. A merger of this data with other data sources will not be done.
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you may not be able to use all the features on our website. Cookies are stored on the basis of Art. 6 (1) letter f GDPR. The website operator has a legitimate interest in the technically error-free and optimised provision of its services.
Enquiry data will be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The information you provide in the enquiry will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage has been fulfilled (e.g., after your enquiry has been processed). Mandatory statutory provisions, especially retention periods, remain unaffected. The processing of the data entered into the enquiry takes place exclusively on the basis of your consent (Art. 6 (1) letter a GDPR).
The source of the service data is you, the user. The service data may be processed for the purposes of providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you.
The legal basis for this processing is Art. 6 (1) letter f GDPR. The website operator has a legitimate interest, namely the proper administration of our website and business. Furthermore it is based on Art. 6 (1) letter b GDPR which allows the processing of data to fulfil a contract between you and us and/or pre-contractual measures, namely taking steps, at your request, to enter into such a contract.
We may process information about the usage of our product CrateDB (“product usage data”). The product usage data may include the IP and MAC address and size and version number of CrateDB installations.
The legal basis for this processing is Art. 6 (1) letter f GDPR. We have a legitimate interest to improve and manage our main product, however, if you do not want to provide any product usage data, you can disable the feature.
We use a variety of tools for the purposes of analysing the use of the website and services. The data collected may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use .
This website uses IP anonymisation. The IP address of users is shortened within the member states of the EU, Swiss and the European Economic Area. This shortening eliminates the personal reference of your IP address. Under the terms of the agreement that website owners have signed with Google Inc., they use the information collected to compile an evaluation of the website's use and website activity, and to provide services related to the use of the Internet. You have the option of preventing the cookie from being stored on your device by adjusting the appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without limitation if your browser does not allow cookies.
Our website offers you the opportunity to subscribe to our newsletter. The newsletter will be sent by e-mail and contains information about new projects, products … and offers. For this we need your email address and your declaration that you agree to receive the newsletter. To provide you with targeted information, we also collect and process information voluntarily provided, such as areas of interest, birthdays and postcodes.
When registering for the newsletter, your email address will be used with your consent for your own advertising purposes until you unsubscribe from the newsletter. After you have subscribed to the newsletter, we will send you an email containing a link to confirm your registration.
Crate.io provides online forums for Crate.io community members to comment and interact. These include blogs, support forums, etc. Personal information you choose to submit in such a forum may be read, collected, or used by others who visit these forums, and may be used to send you unsolicited messages. Crate.io is not responsible for the personal information you choose to submit in these forums.
If you leave a post or comment on this website, the IP address of the author will be saved. This is for our security as a website operator: If your text violates the law, we want to track your identity.
The legal basis of this processing is the predominant legitimate interest of the site operator according to Art. 6 (1) letter f GDPR.
This is done on the basis of Art. 6 (1) letter b GDPR, which allows the processing of data to fulfil a contract or pre-contractual measures.
We do not sell or rent your Personal Data to third parties for marketing purposes. We share Personal Data within Crate.io and with third party service providers for purposes of data processing or storage.
Affiliates and Business Transfers: We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy. Crate.io has offices in San Francisco, New York, Berlin and Dornbirn (Austria).
Suppliers and subcontractors: We may disclose specify personal data category or categories, especially your contact information to our suppliers or subcontractors insofar as reasonably necessary for crate.io merchandise products, ordered by you.
Protection of Crate.io and Others: In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Notwithstanding the principle to delete personal data that is no longer necessary to keep without undue delay, we may retain your personal data as long as there are statutory retention requirements or statute of limitations of potential legal claims have not yet expired.
We utilize a combination of industry-standard security technologies, procedures, and organizational measures to help protect your Personal Information from unauthorized access, use or disclosure. To protect your data, we use reasonable measures such as encryption, secure socket layer, firewalls, password protection, physical lock and key and other internal restrictions on who may access data. Furthermore we inform our employees on a regular basis on IT security in general and how to keep you data even more secure.
We recommend you take every precaution in protecting your Personal Information when you are on the Internet. For example, change your passwords often, and make sure you use a secure browser. If you have any questions about the security of your Personal Information, you can contact us at info@crate.io.
In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure.
You may exercise any of your rights in relation to your personal data by contacting us via privacy@crate.io.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Crate.io is subject to the regulatory and enforcement powers of the U.S. Federal Trade Commission.
Pursuant to the Privacy Shield Frameworks, EU and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to privacy@crate.io. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to privacy@crate.io.
Crate.io’s accountability for personal data that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Crate.io’s remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Crate.io’s proves that it is not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, Crate.io commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact Crate.io by email at privacy@crate.io.
Crate.io has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
This website is owned and operated by Crate.io Inc.
We are registered in Austria under registration number 459941i, in Germany under registration number 28722724 and in San Francisco under the company number 3763521.
Our principal place of business is at 535 Mission Street, San Francisco, CA 94105.
If you have any questions or concerns regarding privacy in connection with the Services, please send us a detailed message at privacy@crate.io. We will make every effort to resolve your concerns.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6