Privacy policy

TERMS AND CONDITIONS

PRIVACY POLICY

SECURITY MEASURES

DATA PROCESSING ADDENDUM

COOKIE POLICY

SUBPROCESSORS

CONTACT
Effective date: 20th May 2018

1. General

Findify AB, reg.no. 556977-1073 (”Findify”) respects and cares about your personal integrity. We want you to feel safe when we process your personal data. By way of this privacy policy (“Privacy Policy”), we want to inform you about how we ensure that your personal data is processed in the right way.

To be able to provide you as a subscriber with our services, we must process personal data about you. This Privacy Policy applies to you as a subscriber when you create an account through our website or through the installation of one of our extensions, and then use our services.

2. Data Controller

Findify is the data controller for the processing of your personal data and is responsible for ensuring that the processing is made in compliance with applicable law. You find our contact details at the last section of this Privacy Policy.

3. What are the information we collect?

We collect information, including personal information, in various ways when you use our site, products and services. “Personal information” means any information which, either alone or in combination with other information, identifies you as an individual, such as your name, post address and email address.

Information you give us

We collect personal information that you provide us voluntarily. For example:

  • When you create an account with Findify to access the Merchant dashboard, you provide us with your first name, your last name, your email address and a password.
  • When you enter information to use our service, you provide us with your postal address, country timezone, phone number, company name and credit card information.
  • If you tell us where you are (by allowing your mobile device to send us your location), we may store and use this information for internal analytics purposes.

Information collected by your use of our service

We automatically collect certain information:

  • When you utilize one of our extensions (Shopify, Bigcommerce, etc.), we will collect the currency of your shop and information about your location (city, country, timezone).
  • When subscribing to one of our plans, we will collect the transaction informations.
  • We will also collect information on how you use our services and how you browse our website findify.io.

Access and control of the personal information we collect

We recognize our customers’ right to control the type of personal information that is collected about them. Our customers can access, make rectification and delete their personal information at any time. Findify retains your personal information while you are a customer and will delete your personal information upon request.

For more information, feel free to email us at privacy@findify.io.

4. Legal basis for processing

We need to process your information in order to provide the services you have requested from us. When the processing is not strictly necessary, such as when we process your personal data in order to improve our services, we base our processing on us having a legitimate interested.

You have the right to object to processing of your personal data based upon a legitimate interest as legal basis. If you object to such processing, we will continue with the processing only if there is a compelling legitimate basis for the processing that outweighs your interest, fundamental rights or freedoms. Please see below if you want to read more about your rights.

5. How do we use the information we collect?

In general, we use the information we collect primarily to provide, maintain, protect, and improve our current products and to develop new ones. This may include:

  • To ease the creation and the security of your account on our service.
  • To administer your account if you have a subscription plan with our service, including billing and payment.
  • To identify you as a customer in our services.
  • To improve our services, products, site and how we operate our business.
  • To understand and improve your experience using our services.
  • To provide and deliver products that you may have requested.
  • For our customer success team to answer your questions.
  • To communicate with you about products updates, news or security alerts.
  • To administer and carry out our obligations towards you as a subscriber, and safeguard our legal interests.
  • To develop and improve our services.
  • To uphold a high security for our services and prevent misuse and unauthorised usage of our services.
  • To comply with our legal obligations

6. Automated Decision Making

We do not use any automated decision-making which has significantly effects on you.

7. For how long do we keep your personal data?

We only keep your personal data for as long time as necessary to achieve the purposes for which they were collected in accordance with this Privacy Policy. When we do not longer need your personal data, we remove the data from our systems, databases and backups within a period of 12 months after the termination of your contract.

We may be required to keep your personal data for other reasons, such as to comply with legal obligations or to safeguard our legal interest, or for any other important public interest.

8. With whom do we share your personal data with?

Findify may share your personal data with third parties such as our cloud provider which we cooperate with to provide our services. These IT services providers may only process your personal data in accordance with our instructions. We may also in certain cases be required to share your personal data with public authorities or other third parties in connection with court proceedings, corporate acquisitions or similar reasons.

Although we do not sell your personal data to any third party, third parties may set third party cookies when you visit our website.

9. Where do we process your personal data?

Findify aims at only processing your personal data within the EU/EEA. In some cases, we may transfer your personal data to a country outside of the EU/EEA. If personal data is transferred to any such country, we will ensure that your personal data is protected and that the transfer is carried out in accordance with applicable law.

When carrying out any transfer to a country that lacks an adequacy decision by the European Commission, we will use the standard contractual clauses issued by the European Commission as legal basis for the transfer. You find these here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/rules-international-transfers-personal-data_en

When carrying out transfers to recipients in the United States that have joined the Privacy Shield program, we use the Privacy Shield as legal basis for the transfer, which you find here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv%3AOJ.L_.2016.207.01.0001.01.ENG

10. Your right

Our responsibility for your rights

Findify is in the capacity as data controller responsible for ensuring that your personal data is processed in accordance with applicable law and that your rights have an impact on the processing. You may at any time contact us to exercise your rights. You find our contact details at the last section of this Privacy Policy.

Findify is responsible for answering your request to exercise your rights within one month from our receipt of your request. If your request is complicated, or if we have received a large extent of requests, we are entitled to prolong our response period with two additional months. If we assess that we cannot perform the actions you have requested, we will within one month explain why and inform you about your right to lodge a complaint with the data protection authority.

All information and communication, and all actions we carry out, is at no cost for you. If the action you request is manifestly unfounded or excessive, we are entitled to charge you an administrative fee to provide you with the requested information or carry out the requested action, or refuse to meet your request.

Your right to access, rectification and erasure of personal data and restriction of processing

You have the right to request:

Access to your personal data

This means that you have the right to request an abstract from our data record regarding our use of your personal data. You also have the right to request a copy of the personal information being processed at no cost. However, we may charge you a reasonable administrative fee to provide you with additional copies of the personal data. If you make your access request by electronic means such as email, we will provide you with the information in a commonly used electronic format.

Rectification of your personal data

We will at your request, or at our own initiative, rectify, anonymise, erase or complement personal data that you or we discover is inaccurate, incomplete or misleading. You also have the right to complement the personal data with additional data if relevant information is missing.

Erasure of your personal data

You have the right to request that we erase your personal data if we do no longer have an acceptable reason for processing the data. Given this, erasure shall be made by us if:

  • the personal data is no longer necessary for the purposes for which it was collected,
  • you object to the processing of your personal data based on our legitimate interest and there is no overriding legitimate ground for the processing,
  • the personal data has not been lawfully processed,
  • we are required to erase the personal data due to a legal obligation, or
  • you are a child and we have collected the personal data in relation to the offer of information society services. However, there might be requirements under applicable law, or other weighty reasons, that entail in that we cannot immediately erase your personal data. In such case, we will stop using your personal data for any other reasons than to comply with the applicable law, or the relevant weighty reason.

Right to restrict processing

This means that we temporarily restrict the processing of your personal data. You have the right to request restriction of the processing when:

  • you have requested rectification of your personal data in accordance with the section above above during the time period we are verifying the accuracy of the data
  • the processing is unlawful and you do not want the personal data to be erased,
  • Findify, in its capacity as data controller, does no longer need the personal data for the purposes for which it was processed, but you require us to retain the information for the establishment, exercise or defence of legal claims, or
  • you have objected to our legitimate interest for the processing in accordance with the section “Your right to object to the processing” below during the time period we determine whether the legitimate interest overrides your privacy rights.

At Findify, we will take all reasonable and possible actions to notify any recipients of your personal data as set out in the section “With whom do we share your personal data with” above regarding any rectification, erasure or restrictions carried out by us. At your request, we will also inform you of which third parties we have shared your personal data with.

Your right to object to the processing

You have the right to object to such processing of your personal data based upon our legitimate interest. If you object to such processing, we will only continue with the processing if we have a compelling legitimate reason for the processing that outweighs your interest, rights or freedoms, or unless continued processing is necessary for the establishment, exercise or defence of a legal claim.

Your right to portability
​
You have the right to portability. This means that you have the right to receive certain of your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. You only have this right when your personal data is processed by automated means and our legal basis for the processing is performance of a contract between you and Findify. This means e.g. that you have the right to receive and transfer all of the personal data that you have provided us with to create a user account at Findify.io.

Your right to lodge a complaint with the data protection authority

You have the right to lodge any complaints regarding our processing of your personal data with the data protection authority.

We protect your personal data

You shall always feel safe when providing us with your personal data. Therefore, Findify has implemented appropriate security measures to protect your personal data against unauthorised access, alteration and erasure. In the case of a security breach that may significantly affect you or your personal data, e.g. when there is a risk of fraud or identity theft, we will contact you and inform you of what you can do to reduce this risk.

Cookies

Findify uses cookies at our webpage and in our services to improve your user experience. We use cookies to e.g. simplify and adjust our web and application services. In our cookies policy, we provide you with more detailed information on how we use cookies and which choices you may make regarding our cookies.

Amendments to this privacy policy

Findify has the right to amend this Privacy Policy at any time. When we make any amendments that are not only linguistic or editorial, you will be provided with clear information of the amendments and which impact they will have on you before the amendments are effective.

Contact Information

Do not hesitate to contact us at Findify if you have any questions regarding this Privacy Policy, our processing of your personal data, or if you want to exercise your rights.

Findify AB, reg.no. 556977-1073 
Email: privacy@findify.io
Webpage: www.findify.io