The Privacy Policy of Promoty

  • PRIVACY POLICY

This policy sets out how we use your information and provides you with information about the personal data we collect, how we keep it secure, how we ensure your privacy is maintained and your rights relating to the personal information we hold about you.

This policy applies to you if you use any of the services of Promoty Marketing OÜ (“Promoty”) through Promoty’s marketplace software platform available online (“Promoty Platform”) and/or if you contact Promoty via email or phone to in person to enquire about Promoty’s services or have phone or email contact with Promoty for support and incident resolving purposes.

Customer – natural or legal person/entity, who: (i) has agreed to the terms and conditions available on Promoty Platform; (ii) has registered an account type that is meant for campaign creation and brand management; and (iii) uses Promoty to create and conduct marketing activities.

User – natural or legal person/entity, who: (i) has agreed to the terms and conditions written available on Promoty Platform; and (ii) has registered an account type where the main purpose is to fulfill offers and find deals. Users use Promoty to find offers created by Customers and to use other digital services provided in the Promoty Platform (statistics, content planners etc.).

All other capitalised terms not capitalised in this Privacy Policy are defined in Promoty Terms and Conditions available here.

  • WHO WE ARE

Promoty Marketing OÜ is a company incorporated in Estonia (referred to as “we” or “us” in this policy) that produces and manages a marketplace software platform (Platform) that allows the Customer and the User to organize marketing activities between each other. The main purpose of the Platform is to provide means of communication and logistics between the two parties (Customer and User) automatically. The primary business of Promoty is to license the software Platform to Customers and Users. For a more thorough description of our services and how we provide them, please refer to the latest version of the Terms & Conditions of Promoty Marketing OÜ available on our website.

We understand that privacy and the security of the Customers’ employees’ and the Users’ personal information is extremely important and we are committed to maintaining the trust and confidence of everyone using Promoty Platform.

It is our goal to always keep personal data secure and respect all privacy rights.

We will always handle personal data fairly and legally and are committed to being transparent about the data we collect and how we use it.

We don’t sell any information to other organisations and businesses, except that our partners may receive anonymised data aggregated for statistical purposes. Personal data is not included in such aggregated data.

The    Data    Protection    Officer    for    Promoty    Marketing    OÜ   is   Leonardo   Romanello (l [email protected])

Promoty uses cookies to analyze the usage of Promoty with the intent to improve the service (for example we use Google Analytics). 

  • PERSONAL DATA WE COLLECT

We may collect the following information about the Customer’s employees and/ or Users:

  1. first name and last name
  2. gender
  3. contact details (telephone number, e-mail address, physical address)
  4. personal identification code for natural persons and/or birth date for determining whether you are old enough to legally use Promoty Platform
  5. other demographic information that you have entered into Promoty Platform
  6. general payment information on deals conducted between Customers and Users, whereas more specified payment information is processed by our payment service provider, MangoPay and/ or other payment service providers in accordance with their payment service providers’ licenses
  7. personal information available (if any) on Requests and Offers submitted by Customers and/ or Users, such as your image, if it is included on the Intellectual Property submitted by you via Promoty Platfom
  8. account login details, including user name(s), company ID and similar, passwords
  9. correspondence and communications with us
  10. device ID and other details such as make and model and the version numbers of the operating system and application you use
  11. your preferences in using the website or application (language, etc)
  12. IP address

We may collect some of the above personal data directly, for example when the Customer’s employee or the User sets up an account on our Platform, or sends an email or online enquiry to our customer success team. Other personal data is collected indirectly, for example, browsing or order activity.

  • BASIS FOR PROCESSING OF DATA

The information we collect may be used to:

  • provide products and services to you. The legal basis for processing the personal data here is either the performance of a contract (art 6(1)(b) in the GDPR) or Promoty’s legitimate interest (art 6(1)(f) to offer its services to you with a high quality.
  • process Requests and Offers submitted by you. The legal basis for processing the personal data here is either the performance of a contract (art 6(1)(b) in the GDPR) or Promoty’s legitimate interest (art 6(1)(f) to answer your requests.
  • enable sending and receiving payments for concluded deals via Promoty’s payment service partner(s). The legal basis for processing the personal data here is the performance of a contract (art 6(1)(b) in the GDPR).
  • manage any account(s) that you hold with us. The legal basis for processing the personal data here is the performance of a contract (art 6(1)(b) in the GDPR).
  • verify your identity and ensure that our customers are genuine. Here, the legal basis for processing your personal data is art 6(1)(c) in the GDPR.
  • detect and/or prevent crime or fraud, and related purposes. Here, the legal basis for processing your personal data is art 6(1)(c) in the GDPR.
  • comply with Promoty’s other legal obligations. Here, the legal basis for processing your personal data is art 6(1)(c) in the GDPR.
  • carry our statistical analysis. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to plan its business activities;
  • conduct market research. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to plan its business activities;
  • help us understand more about you as a customer. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to plan its business activities;
  • personalise your experience with Promoty. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to improve customer experience;
  • tailor our website to you. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to improve the customer experience;
  • improve our services, apps and websites. The legal basis for data processing is Promoty’s legitimate interest (art 6(1)(f) in the GDPR) to improve the customer experience;
  • contact you about products and services. The legal basis for processing the personal data here is either the performance of a contract (art 6(1)(b) in the GDPR) or Promoty’s legitimate interest (art 6(1)(f) to plan its business activities or prepare personalized offers.
  • provide online advertising. The legal basis for processing the personal data here is Promoty’s legitimate interest (art 6(1)(f) to prepare personalized offers.
  • help answer your questions and solve any issues you have. The legal basis for processing the personal data here is either the performance of a contract (art 6(1)(b) in the GDPR) or Promoty’s legitimate interest (art 6(1)(f) to answer your requests.
  • manage customer service interactions with you. The legal basis for processing the personal data here is either the performance of a contract (art 6(1)(b) in the GDPR) or Promoty’s legitimate interest (art 6(1)(f) to answer your requests;
  • to prepare personalized offers and other marketing material to you. The legal basis for processing the personal data is the legitimate interest (art 6(1)(f) in the GDPR) of Promoty to carry out marketing activities an promote its business.

We will only use your personal data for marketing purposes with your consent (Art 6(1)(a)) which you can give when you sign up to use Promoty Platform. We may do this by post, email, text message, online or through social media, push notifications via apps, or other electronic means and will aim to update you about those products and services you are interested in or which are relevant to you.

You may amend your marketing preferences and have the right to opt-out of receiving promotional communications at any time, by:

  • clicking the “unsubscribe” link in our emails or using the “STOP” number for texts
  • contacting us.

We won’t send you marketing messages if you tell us not to, but we will still need to send you occasional service-related messages.

  • HOW WE SHARE YOUR PERSONAL DATA

When you create a User account on Promoty’s Platform, your personal data will be shared with Promoty and Promoty’s employees on a need to know basis. In case you submit Offers or Candidacy Submissions to Customers, such Customers will receive your personal data to the extent needed for the Customer to assess whether to purchase Intellectual Property from you. We share your personal data within Promoty group to be able to provide services to you (different services may be set up in different Promoty entities).

We share personal data with subprocessors listed at the end of this Privacy Policy. We share personal data with other service providers to the extent that this is necessary to provide our services to the company. Generally, these may include financial and accounting service providers, IT development and support service providers and other entities whose contribution is essential to service provision by Promoty. We may also share personal data with other entities within our group for processing of data within the scope of this Privacy Policy. Personal data may be disclosed to authorities if required by law.

To be able to send and receive payments, Promoty is legally required to use a licensed payment service provider. Promoty’s payment services partners are MangoPay, Stripe and Transferwise with whom we share your personal data to the extent it is necessary for these payment service providers to process payments in accordance with EU legislation. You may find more information on MangoPay here. MangoPay shall also share your personal data back with Promoty, to the extent this is required for Promoty to comply with applicable legal requirements (e.g. to prevent fraud and comply with AML rules).

As the recipients mentioned above may be established anywhere in the world, the personal data may be transferred globally. If data originating from the EEA is transferred to countries outside the EEA, we will adopt appropriate safeguards to protect the privacy such as by means of data transfer agreements. We store personal data with the following hosting providers:

(1) Amazon Web Services – Cloud computing service provider. Your personal data is hosted in EU (Ireland)

Please note that due to the nature of Promoty Platform, the goal of which is sharing and transferring Intellectual Property created by Users, Promoty needs to process and use the data and media created by Customers and Users for the Platform to fulfill its purpose. Such Intellectual Property may contain personal data. In case of valid transfer of Intellectual Property from User to Customer and/ or Promoty (as described in Promoty Terms and Conditions), Promoty and the Customer are entitled to use such Intellectual Property, which may contain personal data, with the intent to do marketing, sales or public relations in the media as regulated in Terms and Conditions. In case you decide to sell intellectual property to Promoty or Customers that contains your personal data (your image), Promoty and Customer are entitled to use such personal data (image) as regulated in Terms and Conditions. In case you disagree to the above use of personal data, Promoty kindly asks you to refrain from uploading any Intellectual Property which contains personal data (such as your image) in its content.

PROTECTION OF PERSONAL DATA

We implement appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data.

Although we will do our best to protect personal data, we cannot guarantee the security of your data transmitted to our site. Any transmission is at your own risk. Promoty transmits data in an encrypted format.

We recommend that you:

  • keep your account passwords private
  • change your password often
  • do not use the same password for multiple accounts, applications or websites.

  • STORING YOUR DATA

We will store personal data for as long as necessary to fulfill the purposes described in this Privacy Policy. These are the criteria that we use to determine when we will delete personal data:

    • We retain data to the extent required by law (such as tax/bookkeeping laws)
    • We retain data such as contact data, images (posts, stories), subscription and transactions data and communication data to the extent relevant for limitation periods for potential claims (typically three years after the date of purchasing services from Promoty)
    • We retain data such as contact data, marketing data and preference data as long as you have consented to receive marketing communications from us.
    • We retain indefinitely personal data (images) contained in Intellectual Property you have validly sold and transferred to Customer and/ or Promoty in accordance with the Terms and Conditions.
    • If you are using the services of Promoty and are a person younger than 18 years of age. We will collect personal data about your legal guardian. We will retain this personal data until you delete your account with us or until you are 18 years old and have created an account for yourself.
    • In case you delete your account on Promoty Platform, all other personal data will be deleted within thirty (30) days.

  • YOUR PRIVACY RIGHTS

Within the conditions/limitations set out in applicable law, you have the following privacy rights:

Right to information. You have the right to obtain further information on our use of your personal data.

Right of access. You have the right to receive a copy of your personal data.

Right to rectification. You have the right to ask us to correct your personal data if it is incorrect or incomplete, such as by changing your details on your account.

Right to be forgotten. You have the right to request the erase of your data if we do no longer need them.

Right to data portability. You have the right to obtain personal data that you have provided to us in a format that enables you to transfer that personal data to another organization. You may also have the right to have your personal data transferred directly from us to such organization.

Right to object to processing of personal data. You have the right to object to our use of your personal data, such as to unsubscribe to marketing emails.

You can exercise your rights by contacting us.

If you think that we have processed your personal data in a manner that is not in accordance with data protection law, we hope that you contact us, so that we can provide answers and correct any misunderstandings. You have the right to make a complaint to the relevant data protection authority), which is the authority in the EEA country where you live and work.

  • Users under the age of 18 have to get parental consent in order to use Promoty by doing the following:
  • Enter your legal guardians e-mail into Promoty to get consent or the legal guardian has to send a free form consent e-mail to [email protected]
  • The user can add a legal guardian under settings and once the legal guardian verifies their identity based on the Identity Verification process of Mangopay or Veriff, then the consent is granted.
  • Once the consent is granted the account is activated.
  • The legal guardian is responsible for accepting this Privacy Policy on the underage User’s behalf and assessing if using Promoty Platform is suitable for the underage User.

  • POLICY UPDATES

This Policy was last updated on 24th March 2021.

List of subprocessors:

Your data shall be shared with the following subprocessors with the purpose of providing services to you via Promoty Platform:

  • Mangopay – Payment service provider
  • Facebook – Advertising provider
  • Google – Advertising provider
  • Gartner – Advertising provider
  • Getresponse – Newsletter service where you have signed up to receive marketing materials from Promoty
  • TransferWise – Payment service provider
  • Stripe – Payment service provider