6. How is my Personal Data processed specifically? Below, we provide you with information about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your Personal Data, and the respective retention period. No automated decision-making, including profiling, takes place in the individual case.
a. Website
Nature and scope of the processing When our Website is opened and used, we collect the Personal Data that your browser automatically transmits to our servers. The following information is stored temporarily in a so-called log file:
- [IP address of the requesting computer;
- Date and time of the access;
- Name and URL of the file retrieved;
- Website from which the access occurs (referrer URL);
- Browser used and possibly the operating system of your computer as well as the name of your access provider.]
Purpose and legal basis The processing is undertaken to safeguard our legitimate interest to display our Website and to guarantee security and stability on the basis of art. 6(1)(f) GDPR. The data recording and the storage in log files are essential for operation of the Website. On the basis of the exception in accordance with art. 21(1) GDPR, there is no right to object to the processing. If further storage of the log files is required by law, the processing is undertaken on the basis of art. 6(1)(c) GDPR. There is no statutory or contractual obligation to provide the data, it is also not necessary to enter into a contract with you, and you are not obliged to provide this data, although access to our Website is technically impossible without provision of the data.
Retention period The aforementioned Personal Data will be stored for the duration of display of the Website and beyond that for a maximum of [7 days] for technical reasons.
b. Contact form
Nature and scope of the processing On our Website, we offer you the option to contact us using a form provided. The information collected via mandatory fields is required in order to be able to handle the enquiry. Furthermore, you can voluntarily provide additional information that you consider necessary for the handling of the contact enquiry.
Purpose and legal basis Your Personal Data from the use of our contact form are processed for the purposes of communication and handling of your enquiry on the basis of consent, in accordance with art. 6(1)(a) GDPR. If your enquiry relates to an existing contractual relationship with us, the processing is undertaken for the purpose of contractual performance on the basis of art. 6(1)(b) GDPR. There is no statutory or contractual obligation to provide your data, and you are not obliged to provide these data but handling of your enquiry is not possible without provision of the information in the mandatory fields. Also, if you wish to enter into a contract with us, we obviously need to process your contact details, hence information in our contact form is necessary to enter into a contract with you. If you do not wish to provide these Personal Data, please contact us by other means.
Retention period If we use your Personal Data collected through the contact form and rely on your consent, we store the collected Personal Data from every enquiry for the duration of [three years] beginning with the resolution of your enquiry.
c. Provision of Services Nature and scope of the processing We collect Personal Data about you when you use any part of our Services (email, name, other contact details, your queries, analytics of your usage of your account (location, IP-address, duration of the session, history of your interactions with the account, your interactions with the interface, etc). For example, if you are logged in to your account, we will collect Personal Data as to how often you use it, what queries you created or amended, and other data about how you interact with your account. We may also collect data about how you interact with messages we send to you, for example, whether you opened an email.
In particular, we may use your Personal Data for the following range of reasons:
- Set up a user account;
- Provide, operate and maintain the Services;
- Process and complete transactions, and send related information, including transaction confirmations and invoices;
- Manage our customers' use of the Services, respond to enquiries and comments, and provide customer service and support;
- Send customers technical alerts, updates, security notifications, and administrative communications;
- Investigate and prevent fraudulent activities, unauthorized access to the Services, and other illegal activities; and
- For any other purposes about which we notify our users.
Purpose and legal basis We may process your Personal Data in order to perform a contract with you (such as to create and maintain your account). In other circumstances, we may process your Personal Data where the processing is in our legitimate interests, if those interests are not overridden by your rights and freedoms.
In particular, we use your Personal Data in this context based on the contract that we have in place with you. If you are a representative of our corporate client, we process your Personal Data on the basis of our legitimate interest in provision of Services to our corporate clients, maintain effective communication with our corporate clients and provide them all required support. Also, we rely on our legitimate interest in ensuring safety of our clients' data when we process your Personal Data for security purposes and business practice improvement (e.g., the prevention and investigation of fraudulent activities). We also rely on our legitimate interest in provision of best-in-class services when we need to personalize and improve our Service.
There is no statutory or contractual obligation to provide your Personal Data and you are not obliged to provide this data. However, provision of Personal Data in these instances might be necessary to enter the contract and perform the contract, since we obviously need to process your contact details. When we process your Personal Data for security purposes (as defined above) we need your Personal Data to protect your account. If we are not able to process those Personal Data, we will not be able to perform certain of our standard security procedures and effectively protect your account.
Retention period If we process your Personal Data to provide the Services, we store the collected Personal Data for the duration of the contract and for three years after its termination, unless a longer period is required. You can find information about the term of the contract, its use and renewal in our
Terms of Service. When the contract is terminated but you want us to store your account, we can process your Personal Data, if you give your consent until such consent is withdrawn. If we rely on legitimate interest, we process your data strictly until we achieve our purposes (e.g. in case of any legal proceedings to defend our rights etc.), but anyway no longer than the duration of the contract or the statutory limitation period.
d. Newsletters and other materials
Nature and scope of the processing When you plug in your Rocket Data account and agree to receive our newsletters and/or our free reports, surveys, and other materials, we add your personal information (e-mail, phone) to our monthly product update newsletter, from which you can unsubscribe in the text of the letter.
You will then receive an e-mail in which you must confirm the registration for the newsletter (double opt-in). If you do not confirm the registration within 48 hours, it expires automatically and the Personal Data will not be processed for distribution of the newsletters or any materials.
For distribution of newsletters and other materials, we use a service of Sendpulse, which processes your personal data on our behalf in accordance with art. 28 GDPR. For more information about third parties to whom we transfer your Personal Data, please refer to section 3 above.
Purpose and legal basis We process your Personal Data for the purpose of distribution of our newsletters and other free materials on the basis of your consent, in accordance with art. 6(1)(a) GDPR. By unsubscribing from the newsletter or any other materials, you can declare your revocation with effect for the future at any time, in accordance with art. 7(3) GDPR. There is no statutory or contractual obligation to provide your Personal Data, it is also not necessary to enter into a contract with you, and you are not obliged to provide this data. However, distribution of our materials is impossible without the provision of your Personal Data.
Retention period [After registration for the newsletter or other materials, we store the Personal Data for a maximum of [48 hours], until confirmation of the registration]. After successful confirmation, we store your Personal Data until revocation of your consent (you unsubscribe from the newsletter) and beyond that for a maximum of [7 days] for technical reasons.
e. Direct marketing Nature and scope of the processing If you expressed an interest in our Services or the Company, you could receive an email, text or phone call from us for similar services. You could also receive marketing material from us via post or through personalized social media advertising.
For marketing purposes, we collect and process the following Personal Data: your name, address, company (where relevant), telephone numbers and email address. We also process your marketing preferences.
Purpose and legal basis We process your Personal Data for direct marketing purposes on the basis of our legitimate interest or your consent as described below.
Purpose and Legal Basis Where we have an existing relationships with you (i.e. you have purchased our Services from us) and you have provided your consent for direct marketing, we offer you the opportunity to withdraw such consent at any time. If you are an existing customer, we may send information about our products and services similar to those for which you expressed an interest. We will only use the contact information we have obtained over the course of our customer relationship with you.
Consent We will ask your consent to send you information via electronic media. We will also ask your affirmative consent to send you direct marketing communications via social media.
You can withdraw consent at any time with effect for the future. You can also ask us to stop sending you any marketing material.
You can easily withdraw consent for any email marketing messages. You can do this by clicking the 'unsubscribe' link at the bottom of each marketing email.
Retention period If you decide to withdraw your consent to our marketing, we will no longer use your Personal Data for this purpose. If your Personal Data is not needed for any other legally permitted purpose, we will delete the Personal Data without undue delay.
f. Feedback and reviews provided using QR-codes Nature and scope of the processing When you scan a QR-code at any place operated by an offline business, you are given an opportunity to provide your feedback and review about your experience at such place. Our standard feedback form requires you to provide certain Personal Data (your name, phone number, text of your review or feedback).
Purpose and legal basis We process your Personal Data for the purposes of (i) preparing a pre-sale and marketing reports allowing us to show our potential clients our capabilities and demonstrate that we have information about their brand reputation and (ii) provision to our existing clients with valuable insights and information about their brand. Your Personal Data is processed on the basis of art. 6(1)(a) GDPR (your consent, given by using the QR-code). When we prepare pre-marketing reports for potential clients, we can use your Personal Data in an aggregated form (without disclosing any information which could identify you).
There is no statutory or contractual obligation to provide your Personal Data, it is also not necessary to enter into a contract with you, and you are not obliged to provide this data.
Retention period We store your Personal Data until revocation of your consent, but in any case for a maximum term of 3 years. Before deletion of your Personal Data, we may contact you to inform that we are going to delete your Personal Data.