privacy policy boostsite.pdf
Privacy Policy Boostsite
Last updated: May 2022
I. General provisions
This Privacy Policy includes important information about your personal data and we encourage you to read it carefully. The policy is aimed at people who use our services through our website www.boostsite.com.
This Privacy Policy describes the personal data that we collect about you, how we use it, how we share it, your rights and choices, and how you can contact us about our privacy practices. This Policy also outlines your data subject rights, including the right to object to some uses of your personal data by us.
II. Definitions
a) Personal data means any information that relates to an identified or identifiable individual, and can include information about how you engage with our Services.
b) Data controller - Boostsite Sp. z o. o siedzibą ul. Bacciarellego 93, 51-649 Wrocław.
c) Services means the services that are provided by the data controller.
d) Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
III. Personal data that we collect
a) Information we collect about you include: name, surname, e-mail, address, data from your profile on Facebook, Google account, LinkedIn (name, surname, profile picture), payment card information, data you provide during communication;
b) We use this information for the following purposes:
- when you contact us and use the form from our website to communicate with us;
- when you use our services in a free trial and register on our website to provide services to you;
- when you create your account and register on our website to give you the possibility to provide services to you;
- when you buy our paid service packages to provide you service;
- when we send you our marketing information to contact you and show you our services;
- when we contact you on the phone;
- when we have conversations with clients on chat in our website;
c) How do we collect your information?
- most of the personal data we receive comes from users of our website voluntarily;
- personal information collected via technology: as you use our website, we may collect passive information through the use of cookies;
- we may receive personal information about users from third parties such as social media sites like Facebook and Google account and LinkedIn account users;
IV. Legal bases for processing data
a) to use your information in one of the purposes: contact with users (form on the website), regular marketing our services and contact with users, register and create an account on the website (data subject has given consent to the processing art. 6 (1) a GDPR)
b) we use your information to administer our site including troubleshooting and statistical purposes (processing is necessary for the purposes of the legitimate interests pursued by the controller art. 6 (1) f GDPR)
c) the security of our website (processing is necessary for the purposes of the legitimate interests pursued by the administrator, art. 6 par. 1 f GDPR)
d) provision of services to the client, including paid services, provision of services to the client, including those paid under a contract with the client (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract art. 6 (1) b GDPR);
V. Your rights and choices
You have rights regarding your personal data. A summary of each right and how you can exercise it is provided below.
| Right | How you can exercise the right? |
|---|---|
| Right of access by the data subject | You have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data. |
| Right to rectification data | You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. |
| Right to erasure (right to be forgotten) | Under certain circumstances, you have the right to ask us to delete your personal data. These circumstances are listed in article 17 GDPR. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal information is required to comply with a legal obligation or for the establishment, exercise or defense of legal claims. |
| Right to restriction of processing | You have the right to obtain from the controller the restriction of the processing of your data, if one of the conditions of art 18 GDPR. |
| Right to data portability | In most cases, you have the right to receive all personal data that you have provided to us in a structured, commonly used and readable format. |
| Right to lodge a complaint with a supervisory authority | If you object to our processing of your personal data, you have the right to lodge a complaint with the Data Protection Authority (DPA) in the country where you live, work or where an alleged breach of data protection law has occurred. |
To exercise your data protection rights, please contact us: use our form from address: https://boostsite.com/contact/
VI. Security and retention
Data Controller makes reasonable efforts to ensure a level of security appropriate to the risks associated with the processing of your Personal Data. We maintain organizational, technical and administrative measures to protect personal data covered by this Policy against unauthorized access, destruction, loss, alteration or misuse. Only a limited number of employees who need access to the information to perform their duties have access to personal data.
We store your personal data:
a) for as long as we provide services to you and for as long as you have an account on our website; b) as long as it is necessary to achieve the purposes IV b and c; c) for how long we are required to keep under the given law; d) until you withdraw your consent;
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
VII. International data transfers
Boostsite is a business location in the EU – Poland. We provide services in EU countries and in other countries around the world. We process data in accordance with GDPR. We store personal data of our clients within the EU. In the case of transfers to third countries, we have entered into Standard Contractual Clauses, approved by the European Commission, to ensure an adequate level of protection for the transfer of your Personal Data to these entities outside the EEA.
Payments on the site for paid services are handled by the service provider Stripe. Personal data will be transferred to the USA. Standard contractual clauses have been applied. Detailed information on data processing is available: https://stripe.com/en-pl/privacy.
We also use Google Analytics. Personal data will be transferred to the USA. Detailed information on data processing is available: https://policies.google.com/privacy?hl=en-US.
Based on Article. 49 sec. 1 point 2 of the GDPR due to the fact that the USA has not been recognized by the European Commission as a country providing the security referred to in Art. 46 we inform you that there is a risk of insufficient protection of your personal data. By paying for the services and using this website, you consent to the transfer of your data to the USA.
VIII. Further processing
Further processing to provide services to our clients, we use the services of other entities that support us in business. The list of further processors is available upon request by users.
IX. Cookies and other tracking technologies.
Our website uses cookies, web beacons, file information and similar technologies to distinguish you from other users of the Services. This helps us to provide you with a good experience when you browse the Services and also allows us to improve the Services. Cookies are pieces of code that allow for personalization of the Services experience by saving your information such as user ID and other preferences.
We use or may use the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our Website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our Services.
We use the following types of cookies:
- PHPSESSID - Preserves user session state across page requests.
- @@lc_auth_token:10434997, __lc_cid, _lc_cst, side_storage# - enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
- _ga, _gat, _gid, _livechat_has_visited, History.store - help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
- _fbp, _gcl_au, fr, VISITOR_INFO1_LIVE, YSC, ytidb::LAST_RESULT_ENTRY_KEY, ytremote-cast-available, yt-remote-cast-installed, yt-remote-connected-devices, ytremote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name - used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
- Other cookies: 13313163:state, ips4_hasJS, ips4_IPSSessionFront, ips4_ipsTimezone
The cookies we use are designed to help you get the most from the Services but if you do not wish to receive cookies, most browsers allow you to change your cookie settings. Please note that if you choose to refuse cookies you may not be able to use the full functionality of the Services. These settings will typically be found in the "options" or "preferences" menu of your browser. In order to understand these settings, the following links may be helpful; otherwise you should use the "Help" option in your browser for more details.
- https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d Cookie settings in Internet Explorer
X. Register and log in
You can use your Google account, Facebook account, and LinkedIn to register and log in on our website. Before you do this, you will see information about what kind of data you give us access. You consent to the disclosure of this personal data to us.
XI. Data processing agreement
If you create an account on the Boostsite website or buy our paid services on behalf of the company, you conclude a contract with us for entrusting the processing of personal data. As the administrator of this data, you entrust us with their processing for the time we provide our services to the company. For this purpose, you entrust us with the personal data of your employees designated to contact us (e-mail address, name, and surname).
Boostsite will only process your data electronically and for the purpose of implementing the purchased services. After the end of the services and deletion of the user account, Boostsite will complete the processing of the personal data.
Boostsite implements appropriate technical and organizational measures in accordance with the applicable data protection regulation, including the ability to ensure continuous integrity, confidentiality, availability. The processor will notify the data controller without undue delay, but not later than 24 hours after becoming aware of the breach of personal data protection.
The processor will provide the Administrator with all information necessary to demonstrate compliance with the obligations set out in this Agreement.
The processor will engage other processors to process personal data without prior express or general written authorization. The processor uses the services of companies supporting it in providing services to the administrator. Their list is available to the administrator: please contact us: use our form from address: https://boostsite.com/contact/
- The processor will inform the Administrator of any intended changes to the addition or replacement of the Processing Subcontractor, thus giving the Administrator the opportunity to object to such changes. The processor entrusts the processing of data to entities that process data in accordance with the law.
XII. Update
We may change this policy from time to time to reflect new services, changes to our privacy practices, or applicable laws. At the top of this policy, it indicates when it was last updated.