Status: Last updated May 5, 2020
Controller for the purposes of the General Data Protection Regulation (“GDPR”) regarding the processing of personal data in the context of the Website is
TAPPTITUDE APPS SRL
Cluj-Napoca, str. Zorilor, nr. 45, bl. RC5, sc. 1, ap. 15, jud. Cluj
CUI: RO 32509968
(„Tapptitude“, “we”, “us” or “our”).
By means of this Policy, we would like to explain to you which data we collect in the context of our Website, for which purposes and how we use (“Use”) those data, and which rights you have.
2. Data we collect, process and use
We process your personal data only if it is necessary for providing a functional website, our contents, and our services.
2.1. Visiting our Website
The use of our Website is possible without providing your personal data to us. Regarding the Website: As is the case with most websites, our systems, however, do automatically register every access to or visit of our Website and temporarily store this information in a “log file.”
Among the data saved in this context are in particular:
- IP-address of the accessing computer
- Name and URL of the accessed file
- Date and time of the access
- Access status/HTTP status code
- Amount of data transferred for each transmission
- Browser identification data.
These data do not allow us to draw any conclusions about the data subject. The above-mentioned data are processed for the purpose of enabling visitors to use our Website (to establish a connection) and for internal system-related purposes (technical administration, system security). Log files are stored in order to ensure the functionality of our Website. Additionally, these data allow us to optimize the Website and to ensure that our systems are secure. As far as personal data is concerned, data processing related to accessing our Website is based on Article 6(1) sentence 1(f) GDPR (legitimate interests). The legitimate interest is based on the above-mentioned purposes.
Our Website offers the possibility to get in touch with us via e-mail, telephone, and via an online live-chat tool. If you contact us via e-mail or send us an enquiry, we store the personal data you transmitted via e-mail. It is not mandatory for you to provide information; we only receive and store personal data that you send us. These data are used for processing your respective request only. The legal basis for the processing of the aforementioned personal data is: Article 6 (1) sentence 1 (f) GDPR (legitimate interests). Our legitimate interest is based on the fact that we can only perform the action the user asked for (e.g. answering an enquiry) if we process his/her personal data. If you contact us with the aim of potentially entering a business relationship with us, processing your personal data is also done under the following legal basis: Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract).
2.3. Register process for marketing messaging
Our Website offers the possibility to sign up for our Newsletter or to download various Resources (ebooks, case studies, whitepapers, Sketch templates). You can opt-in for our marketing messaging through the forms available on the website or through the live chat tool.
Once you send us your email address to receive such communications from us, you allow us to personalize your experience of the website and messaging you receive on email or through the live chat tool.
You are able to customize your interests and messaging options, or opt-out at any time through the Unsubscribe button available in the emails you receive from us.
To see what technical third-party tools we use to email you, and their respective Privacy Policies, please check section 2.8 Messaging tools of this document.
2.4 Register process for Job Applications
If you apply for an open position at Tapptitude, you will need to provide some or all of the following data, as the individual case might be:
- Personal data (name, date of birth, address)
- Communication data (telephone number, mobile telephone number, fax number, e-mail address)
- Data relating to the evaluation and assessment in the application process
- Data relating to your education (school, vocational training, degree, doctorate)
- Data relating to your previous employment history, training course certificates, skills and job references
- Data relating to other qualifications (e.g. language skills, computer skills, voluntary work)
- Information on the desired salary
- Job application history
We will use the personal data you have transferred only for processing your job application and it will we stored securely and not be shared with third parties. We respond to initial inquiries within 10 working days and keep your personal data until the position is closed. You may opt to remain in our database for consideration for future positions up to 5 years. The legal basis for the processing of the data described above is Article 6 (1) sentence 1 lit. a GDPR (consent).
2.5 Register process for Projects
Our Website offers the possibility to get in touch with us to start a project. If you contact us via our “Contact Us” form, we store the personal data you transmitted, in particular, your name, E-mail address, company name (optional), phone number/Skype ID (optional) and the information how you found us. The information you provide will never be shared with third parties. The legal basis for the processing of the aforementioned personal data is Article 6 (1) sentence 1 (f) GDPR (legitimate interests). Our legitimate interest is based on the fact that we can only perform the action the user asked for (e.g. getting in touch to start a project) if we process his/her personal data.
If you contact us with the aim of potentially entering a business relationship with us, processing your personal data is also done under the following legal basis: Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract).
Transient cookies are automatically deleted when you close your browser. This includes, in particular, the session cookies. These store a so-called session ID, which identify user session in the browser. Session cookies are deleted when you log out or close your browser.
Social and Marketing cookies help us store your session data and serve you personalised ads through services such as Google or Facebook.
However, if you choose to deactivate the setting of cookies altogether, not all functions of our Website may be (entirely) usable. The legal basis for the processing of personal data related to cookies is Article 6(1) sentence 1 (f) (legitimate interest). Our legitimate interest is based on the above-mentioned purposes, to optimize Website use and to improve your user experience.
2.7 Analytic Tools
2.7.1 Google Analytics
The Website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help analyze how you use the Website.
The information generated by the cookie about your use of the Website will normally be transmitted to and stored by Google on servers in the United States. In case IP-anonymization is activated on the Website, your IP address will be truncated within the area of member states of the European Union or within other contracting states to the Agreement on the European Economic Area.
Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of the Website for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services for the website operator relating to website activity and internet usage.
You can also opt-out from the storage by Google of the data that is created by the cookie and is related to the use of the Website (including your IP address) and the processing of such data by Google by downloading and installing the Google Analytics opt-out browser add-on available under https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within this Website in the future (this opt-out option applies only for the browser in which you set it and with regard to the Website).
In this case, an opt-out cookie is put on your device. In case you delete your cookies, you will have to use the aforementioned link again. For further information on Google Analytics please refer to http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy/
The legal basis for the processing of the data described in section 2.7 (to the extent such data is to be considered personal data) is Article 6 (1) sentence 1 lit. f GDPR (legitimate interests). The legitimate interests to Use such data is that we use and analyze the respective data to improve our Website, such as by gaining a better understanding of your interests and requirements regarding our Website and to help personalize your user experience. Google is committed (to the best of our knowledge) to the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use, and retention of personal data from EU member states. Google has declared through certification that it will comply with the relevant privacy shield principles. The European Commission expects the US to provide adequate legal protection for personal data transferred from the EU to self-certified organisations in the US under the Privacy Shield. Further information can be found at https://www.privacyshield.gov/EU-US-Framework
2.8. Messaging tools
The legal basis for the processing of the data (to the extent such data is to be considered personal data) is Article 6 (1) sentence 1 lit. f GDPR (legitimate interests). The legitimate interests to Use such data is to respond to business enquiries or to respect your consent on opting-in to receive marketing messages.
2.8.5. Social media and advertising
2.9 Legal Basis
The legal basis for the processing of the data described in sections 2.7 and 2.8 (to the extent such data is to be considered personal data) is Article 6 (1) sentence 1 lit. f GDPR (legitimate interests). The legitimate interests to Use such data is that we use and analyze the respective data to improve our Website, such as by gaining a better understanding of your interests and requirements regarding our Website and to help personalize your user experience.
We also collect and/or process your Personal Data when you give us your specific consent.
3. Third Parties; Technical implementation by subcontractors
We may use external service providers for website operation and for the services offered there (hosting, live chat, registration form) who process your personal data for us. These service providers process your data only according to our instructions. The legal bases for such processing of personal data are Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract) and Article 28 GDPR (data processing).
4. How we store your personal data
We use Pipedrive as our customer relationship platform to store your personal data securely.
4.1. How long do we store your Personal Data
As far as the other stipulations of this Policy do not prescribe a certain amount of time that we need to retain your personal data, we only store personal data generated in the context of using our Website for as long as is necessary to process your requests or enquiries.
We aim to answer initial inquiries within 10 working days and will keep you in our database until you make a decision on that project, or remain idle for a period longer than 12 months.
If we pass the initial inquiry, we will delete your personal data in you remain idle for a period longer than 12 months after our last contact.
You may choose to opt-out of communications with us regarding your business inquiry at any point during the proceedings. You can communicate your wish to be opted-out through an email at [email protected] or through a direct email reply to your assigned Product Strategist.
5. Your rights
You have the right to request information from us at any time about your personal data stored by us. If the legal requirements are met, you also have rights vis-à-vis us to request from us access to and rectification or erasure or restriction of processing concerning your personal data or to object the processing of your personal data. If you have given your consent to the use of personal data, you can revoke such consent at any time (for the future). If you believe that the processing of your personal data by us is in breach of the applicable data protection laws, you can issue a complaint with the competent supervisory authority for data protection.
7. Data Security
We maintain current technical measures to ensure data security protection, especially to protect your personal data against risks during transmission and against third-party access. These measures will be updated according to the latest technical developments.