We collect the following personal information from you:
We use this information to:
We will share your personal information with third parties only in the ways that are described in this privacy statement.
We may provide your personal information to companies that provide services to help us with our business activities (e.g. processing your payments). These companies are authorized to use your personal information only as necessary to provide these services to us.
We collect information globally and store that information primarily in the Netherlands and Ireland (and Russia, for our Clients’ installations in Russia). We process, store and transfer your information outside of your country of residence to wherever we or our third-party service providers operate for the purpose of providing you our products and/or services. Whenever we transfer your information, we take steps to protect it (see Security section below for details).
International transfers within Datafisher
To facilitate our global operations, we transfer information to and from the Netherlands, Ireland and/or Finland and allow access to that information from countries in which Clients of Datafisher have operations for the purposes described in this policy. These countries may not have privacy and data protection laws equivalent to the laws of many of the countries where our Clients and users are based. When we share information about you within Datafisher and with our Clients and/or service providers, we make use of standard contractual data protection clauses, which have been approved by the European Commission. We also rely on generally accepted standards to safeguard the transfer of information we collect from and to the European Union and elsewhere.
International transfers to third parties
Datafisher is responsible for the processing of personal data it receives and subsequently transfers to a third party acting as an agent on its behalf. With respect to personal data received or transferred, Datafisher is subject to the regulatory enforcement powers of the EU Commission and Finland’s Data Protection Ombudsman. In certain situations, Datafisher may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
We may also disclose your personal information as required by law, such as to comply with a subpoena, bankruptcy proceedings or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or respond to a government request.
If Datafisher is involved in a merger, acquisition or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership, uses of your personal information and choices you may have regarding your personal information. We may also disclose your personal information to any other third party with your prior consent.
Datafisher acknowledges that you have the right to access your personal information. Upon request, Datafisher will provide you with information about whether we hold any of your personal information. If your personal information changes or if you no longer desire our products and/or services, you may correct, update, amend, delete/remove, ask to have it removed from a public forum, directory or testimonial on our site or deactivate it by emailing us at email@example.com or by contacting us by telephone or postal mail at the contact information listed below. We will respond to your request within a reasonable timeframe (usually 30 days).
We will retain your information for as long as your relationship with us is active or as needed to provide you our products and/or services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.
The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. If you have any questions about the security of your personal information, you can contact us at firstname.lastname@example.org
Datafisher collects information under the direction of its Clients and has no direct relationship with the individuals whose personal data it processes. If you are an employee, vendor, supplier, service provider or otherwise in a contractual relationship with one of our Clients and would no longer like to be contacted by one of our Clients that use our products and/or services, please contact the Client that you interact with directly. We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our Clients.
Datafisher has no direct relationship with the individuals whose personal data it processes. An individual who seeks access to their personal data or who seeks to correct, amend or delete inaccurate data should direct his or her request to Datafisher’s Client (the data controller), who is the controller of the data. If requested to remove data, we will respond within a reasonable timeframe (usually 30 days).
We will retain personal data we process on behalf of our Clients for as long as needed to provide services to our Clients. Datafisher will also retain this personal information as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.
Many of our products and/or services are intended for use by organizations. Where our products and/or services are made available to you through an organization (e.g. your employer), that organization is the administrator of the products and/or services and is responsible for the accounts and/or Datafisher products and/or services over which it has control. If this is the case, please direct your data privacy questions to your administrator, as your use of our products and/or services is subject to that organization’s policies. We are not responsible for the privacy or security practices of an administrator’s organization, which may differ from those described in this policy.
In some cases, administrators can also:
Even if our products and/or services are not currently administered to you by an organization, if you use an email address provided by an organization (e.g. your work email address) to access our products and/or services, then the owner of the domain associated with your email address (e.g. your employer) may assert administrative control over your account and use of our products and/or services at a later date.
If you do not want an administrator to be able to assert control over your account or use of our products and/or services, you may use a personal email address to register for or access our products and/or services. If an administrator has not already asserted control over your account or access to our products and/or services, you can update the email address associated with your account through your account settings in your profile. Once an administrator asserts control over your account or use of our products and/or services, you will no longer be able to change the email address associated with your account without administrator approval.
Please contact your organization or refer to your administrator’s organizational policies for more information.
We and our marketing partners, affiliates and/or analytics or service providers use technologies such as cookies, beacons, tags, scripts and other similar technologies to analyze trends, administer our website, track users’ movements around the website and gather demographic information about our user base. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis.
As is true of most websites, we gather certain information automatically and store it in log files. This information may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data.
We do not link this automatically collected data to other information we collect about you.
We partner with a third party to either display advertising on our website or to manage our advertising on other sites. Our third-party partner may use technologies (e.g. cookies) to gather information about your activities on this website and other sites in order to provide you advertising based on your browsing activities and interests. If you do not wish to have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here (EU users). Please note that this does not opt you out of being served ads; rather, you will continue to receive generic ads instead.
If you wish to subscribe to our newsletter, we will use your name and email address to send the newsletter to you. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us at email@example.com
Our website includes Social Media Features (e.g. the Facebook Like button) and Widgets (e.g. the Share This button) or interactive mini-programs that run on our website. These Features may collect your Internet protocol address, which page you are visiting on our website, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are hosted either by a third party or directly on our website. Your interactions with these Features are governed by the privacy statement of the company providing it.
Our website includes links to other websites whose privacy practices may differ from those of Datafisher. If you submit personal information to any of those websites, your information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any website you visit.
If you have questions or an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact us at firstname.lastname@example.org.
Under certain conditions, including when other dispute resolution procedures have been exhausted, you may invoke binding arbitration. Such arbitration would take place in Helsinki, Finland. You also have the right to submit your concern to the relevant data privacy authority in Finland.
Updated: 25 May 2018