Source: https://www.toladata.com/data-privacy-policy/
Timestamp: 2019-11-17 10:38:40
Document Index: 356479005

Matched Legal Cases: ['Art. 77', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6']

Data Privacy Policy | TolaData
Below TolaData GmbH (“TolaData” or “we”) provides you with an overview of what personal data we process for what purpose and how we ensure the protection of that data.
In section I. you can find information applicable in general. In section II. We explain the processing of personal data in the context of you visiting our websites (www.toladata.com, toladata.io, help.toladata.com) (“Website”). In section III. We explain the processing of personal data when subscribing to our services.
1. Who is responsible for the processing of personal data and whom you can approach
TolaData GmbH, Wöhlertstraße 12-13, 10115 Berlin/Germany; email: datasecurity@toladata.com; telephone: +49 (0)30 7674 9999
TolaData GmbH, Datenschutzbeauftragter, Wöhlertstraße 12-13, 10115 Berlin/Germany; email: datasecurity@toladata.com; telephone: +49 (0)30 7674 9999
We process personal data provided by you or generated by us.
For further information, see sections II. and III.
In addition, if you are of the opinion that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). This right to complain is without any prejudice to any other administrative or judicial remedy. The competent supervisory authority for TolaData is: Berliner Beauftragte für Datenschutz und Informationsfreiheit
On our Website we may link to other websites by third parties. Such websites by third parties are governed by the provisions and privacy policies of the respective third party offering the content behind those links. We do not actively check such links and external content unless required by applicable laws.
If you discover wrong and/or inappropriate content please inform us, for example via email to datasecurity@toladata.com and we will delete and change such links immediately.
We collect data about each visit of our Website (so-called server logfiles) (“Access Data”). Access Data includes the following:
When using a mobile device Access Data also contains: Country code, language, device name, operating system and version name. We use this Access Data for statistical analysis for the purpose of operation, security and optimization of our Website. We anonymize Access Data before processing it for statistical analysis. However, we reserve the right to check these Access Data retrospectively if there is a justified suspicion of illegal use based on concrete indications.
This data is stored because this is the only way to prevent the misuse of our Website and Software and, if necessary, allow us to investigate any potential crimes committed. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the transfer of data serves criminal prosecution purposes.
You can also prevent the processing of your personal data through Google Analytics on our websites by clicking on this button:
An opt-out-cookie will be stored on your device. This will prevent further allocation of data through the Google Analytics cookie on our websites. Preventing storage of cookies may prevent you from taking full advantage of our websites.
You can find further information about terms and conditions as well as data protection on https://www.google.com/policies/privacy/
We have included YouTube by Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA videos in our website, which are directly playable from our website. Without any action by you as User the YouTube Plugin is deactivated and therefore no data are transferred.
If you wish view the video, you have to click the respective button first. Only with the click of the respective button a connection to YouTube will be set up and data transferred thereto. The Google Inc. will get the information that you have accessed the corresponding website of our online service. In addition, automatically collected Access Data are transmitted.
Google Inc. processes the data collected about you via the Plugins, creates usage profiles and uses them for purposes of advertising and/ or market research. Such processing is carried out in particular for the presentation of needs-based advertisement and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles, whereby you must contact the respective provider of the Plugin.
This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to YouTube, your data will be assigned directly to your account. If you do not wish to associate with your profile on YouTube, you must log out before activating the button.
Google is certified according to the EU-US agreement “privacy shield,” https://www.privacyshield.gov. The “privacy shield” is an agreement between the European Union (EU) and the USA to ensure compliance with European data protection standards in the USA.
The data and privacy policy of YouTube can be found at https://www.google.de/intl/de/policies/privacy/.
Through the embedded videos, we offer you the opportunity to play YouTube videos directly on our site, so that we can improve the usability of our website and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) f. GDPR.
5. Social Networks and Social Plugins
Without any action by you as User the Social Plugins are deactivated and therefore no data is transferred. If you wish to share for example a content, you have to click the respective button first. Only with the click of the respective button a connection to the respective social network will be set up and data transferred thereto.
The provider of the Plugin will get the information that you have accessed the corresponding website of our online service. In addition, automatically collected Access Data are transmitted.
The data collection by the respective provider of the Plugin is carried out regardless of whether you have an account with the provider and are logged while using the Plugin. If you are logged into your Social Media account, your collected data will be assigned directly to your existing account with the provider of the Plugin.
For example, if you link the page, the Plugin provider also stores this information in your user account and shares it with your contacts publicly. We recommend that you log out regularly after using a social network, but especially before activating the Plugin.
The use of social media plugins is based on Art. 6 (1) f. GDPR. Our legitimate interest is improved functionality of our website and enabling our visitors to share our content on social media.
Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA or Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“).
Facebook is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov. The “privacy shield” is an agreement between the European Union (EU) and the USA to ensure compliance with European data protection standards in the USA.
LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA or LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). LinkedIn is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov.
The data and privacy policy of LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.
Twitter is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov.
When contacting us (e.g. by email), we process your name, email address and any personal data disclosed in the message itself. The processing is based on Art. 6 (1) f. GDPR. Purpose and our legitimate interest is answering your enquiry and, if applicable, follow-up questions.
We use third party service providers, like Freshworks Inc (“Freshworks”) to enable interaction with you on our website and/or our product. As a data processor acting on our behalf, Freshworks automatically receives and records certain information of yours like device model, IP address, the type of browser being used and usage pattern through cookies and browser settings. Freshworks performs analytics on such data on our behalf which helps us improve our service to you. You can read about the cookies Freshworks’ sets in their cookie policy here.
7. Signing up for a free trial
Via a contact form you can register for a free trial of our Software. We then process the following categories of personal data:
– Master data (name of your organization, name of contact person, email address)
– Additional data, should you choose to disclose it (phone number, website)
The processing is based on Art. 6 (1) b. GDPR. Purpose is initiation of a contract and providing our services.
With our newsletter we inform you about our products and us. When registering for the newsletter, you have to provide an email address. In case of registration for the newsletter, we also store the date of registration as well as the user’s first and last name, if you choose to additionally disclose those.
After registration, the user will receive an email to confirm the registration. The processing is based on your consent (Art. 6 (1) a. GDPR). Purpose of the processing is the distribution of our newsletter.
We process your requests for information, correction, deletion, restriction of processing of personal data and data portability pursuant to the GDPR.
In doing so we process the following personal data:
– Privacy statements (consent to the processing of personal data, withdrawal of your consent, objections to the processing of personal data, statements asserting your rights of access, to rectification, erasure, restriction of processing, and data portability, including the information you provide us by asserting your rights)
– All data or categories of data that are the subject of the request.
11. Who receives your personal data
– Google Ads, Facebook Ads, Twitter, LinkedIn
ChargeBee Inc., 340 S. Lemon Avenue, Suite 1537, Walnut, California 91789, USA
We use the subscription billing and recurring payments software by ChargeBee. Chargebee processes data for the purpose of managing payments and billings for us.
Chargebee Inc. is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov. The “privacy shield” is an agreement between the European Union (EU) and the USA to ensure compliance with European data protection standards in the USA based on Art. 45 GDPR.
For further information please refer to https://www.chargebee.com/privacy.html
Github Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA
For the purpose of providing and further developing our software and services on the Software we use the software development platform by GitHub.
GitHub, Inc. is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov
For further information please refer to https://help.github.com/articles/github-privacy-statement/ or use the contact form under https://github.com/contact/privacy
Digital Ocean LLC, 101 Ave of the Americas, 10th Floor, New York 10013, USA
We use the service of Digital Ocean LLC to host our website.
Digital Ocean LLC is certified according to the EU-US agreement “privacy shield”. The “privacy shield”, https://www.privacyshield.gov/
For further information refer to https://www.digitalocean.com/legal/privacy
Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
We use Mailchimp by Rocket Science Group LLC to dispatch our newsletter and analyze our newsletter campaigns.
Rocket Science Group LLC is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov
For further information please refer to https://mailchimp.com/legal/privacy/
We use Google Analytics to analyze traffic on our Website.
Personal data is anonymized before being transferred outside of the EU/ EEA.
For further information please refer to https://www.google.com/policies/privacy/
Calendly, LLC, 1315 Peachtree St NE Atlanta, GA 30309, USA
We use Calendly to manage demo requests from our website.
For further information please refer to https://calendly.com/pages/privacy
We use Eventbrite to manage our webinar dates.
Eventbrite, Inc is certified according to the EU-US agreement “privacy shield”, https://www.privacyshield.gov/welcome
For further information please refer to https://www.eventbrite.com/privacypolicy/
III. Processing of personal data in the context of a subscription to our services
This chapter describes additional processing to the processing described in section II – “Processing of Personal Data regarding our Website” in the context of a subscription to our services.
1. Subscribing to our services/ creating an admin account
If you choose to create an account for your organization (“Customer”) and use our Software we process the following categories of personal data:
– Data relevant for payment (e.g. address, credit card number, tax number)
The processing is based on Art. 6 (1) b. GDPR. Purpose is initiation and execution of our contract and providing our services.
Once the Customer is registered with our software, he can create user accounts for employees or other individuals involved in the Customer’s project. Regarding this, we process the following personal data of the users:
– Master data (user name, email address)
– Additional data, should you choose to disclose it (first name, last name, title)
3. Data you enter while using the Software (“Customer Data”)
While using our Software to manage your projects, you may enter personal data into our Software (“Customer Data”). Please keep in mind, that the Customer is the controller of processing of such personal data. We will only process such personal data as instructed by the Customer and as laid down in our Terms of Use and the Processing Agreement. Instructed processing usually includes anonymizing the personal data you enter into the Software and creating statistics based on anonymized Customer Data.
4. Analysis and improvement of the Software using anonymized Customer Data
We also process the anonymized Customer Data for internal purposes, especially the purpose of improving the software, evaluating our product and creating new best practice regarding our Software. We do not use Customer Data containing any personal data for these purposes.
However, we do process master data regarding the Customer (i.e. name of organization, name of contact person)
The processing is based on Art. 6 (1) f. GDPR. Purpose and our legitimate interest is improving our Software.
5. Marketing using anonymized Customer Data
We also use statistics based on anonymized Customer Data for marketing purposes, i.e. by displaying them publicly.
The processing is based on Art. 6 (1) f. GDPR. Purpose and our legitimate interest is direct marketing.
In some cases we share your personal data with third party controllers (see Article 4 No. 7 GDPR). These are the following controllers.
For any processes regarding payments we use the services of Stripe. Regarding any processing of payments, Stripe will use payment data for the purpose of managing the payments relating to our services.
Stripe Inc. is certified according to the EU-US agreement “privacy shield.” https://www.privacyshield.gov/welcome
For further information please refer to https://stripe.com/de/privacy
Freshworks Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA
Our Software uses the ticketing and helpdesk online-tool “Freshdesk” by Freshworks. We use “Freshdesk” for the purpose of organizing the helpdesk and support services provided in connection with the Software.
Freshworks, Inc. is certified according to the EU-US agreement “privacy shield.” https://www.privacyshield.gov
For further information please refer to www.freshdesk.com, wwww.freshdesk.de, https://www.freshworks.com/privacy/?utm_source=freshdesk&utm_medium=referral or https://www.freshworks.com/privacy/gdpr/?_ga=2.175376737.292306692.1513174399-228235686.1513174399
Amazon Web Services (AWS), Inc., 410 Terry Avenue North Seattle WA 98109, USA
We use the service by Amazon Web Services for the purpose of hosting your data provided in the Software.
Zapier Inc. is certified according to the EU-US agreement “privacy shield.” https://www.privacyshield.gov
For further information please refer to https://zapier.com/privacy/
Zapier Inc. provides the Software with API, connecting various tools used by the Software.
Humanitec GmbH, Wöhlertstraße 12-13, 10115 Berlin
For the purpose of hosting the tool (platform with micro-services Humanitec)
For further information please refer to https://www.humanitec.com/privacy-policy/
Inline Manual Ltd., 20-22 Wenlock Road, London N1 7GU, England
We use Inline Manual to provide a product tour in our software.
Inline Manual Ltd. is certified according to the EU-US agreement “privacy shield.” https://www.privacyshield.gov
For further information please refer to https://inlinemanual.com/legal/privacy/
SendGrid, Inc., 1801 California Street, Suite 500, Denver, Colorado 80202, USA
We use SendGird to dispatch emails to users of our software.
SendGrid is certified according to the EU-US agreement “privacy shield.” https://www.privacyshield.gov
For further information please refer to https://sendgrid.com/policies/privacy/