github 669

Nussknacker Cloud Privacy Policy

January 1, 2024

General information

  1. This Privacy Policy establishes the terms and conditions for processing of personal data by Nussknacker acting as a controller of personal data, for the protection of Nussknacker Customers using the Nussknacker Cloud Service (hereinafter "Nussknacker Cloud") in connection with the processing of their personal data.
  2. Terms defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) such as “Personal Data”, “Controller” and “Processor” have the same meaning while used in the hereunder Privacy Policy.
  3. This Privacy Policy describes the manner, scope, and purposes of collecting personal data related to the use of the Nussknacker Cloud.
  4. Our overriding goal is to ensure that Nussknacker Cloud Customers and other persons to whom Customers have granted access to Nussknacker Cloud have their privacy protected at least in accordance with the standards set forth in applicable laws, in particular the Act of July 18, 2002 on the provision of electronic services (Journal of Laws of 2002, No. 144, item 1204, as amended) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Basic terms

  1. All terms contained in this Privacy Policy shall be understood as defined in the Nussknacker Cloud Service Rules, and in the absence of definitions in the aforementioned document, as described below:
    1. Registration Data - data provided by the Customer to start using the Nussknacker Cloud in the manner described in Section How to get started, subsection 1 of the Rules, including but not limited to an e-mail address, name, and company name.
    2. Processing - operations performed on Personal Data such as collecting, recording, storing, developing, altering, sharing, backing up, and other operations necessary for the Nussknacker Cloud Service.
    3. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Principles and scope of data collection and processing

  1. The provision of the Nussknacker Cloud service includes the following activities on the part of Nussknacker: setting up an Account, performing all activities falling within the scope of the Nussknacker Cloud service and described in detail in the Rules, and activities undertaken to serve Customers, processing of complaints, invoicing, collection of fees, potential claims, and quality control of the Nussknacker Cloud.
  2. As part of Nussknacker Cloud, Nussknacker processes the following data:
    1. Registration Data and the password set by the Customer,
    2. data provided to Nussknacker by the Customer for the purpose of operating the Account,
    3. Nussknacker Cloud activity data, including but not limited to: session, device, operating system and browser data, Account login dates, data on the use of certain Nussknacker Cloud functionalities, clicks,
    4. Customer's history and activity related to e-mail communication with Nussknacker
    5. and other data provided to Nussknacker by the Customer as part of the use of Nussknacker Cloud, not covered by the Data Processing Agreement,
  3. The entry and provision of Personal Data, especially the Registration Data by the Customer is entirely voluntary but necessary in order to use the Nussknacker Cloud. Failure to do so will make use of the service impossible.
  4. Use of the Nussknacker Cloud service does not include processing of special categories of personal data referred to in Art. 9 of the GDPR, personal data related to criminal convictions and infringements of the law referred to in Art. 10 of the GDPR, or the personal data of children. Entering the above-mentioned data by the Customer is not allowed.

Purpose and legal basis for processing

Customers' Personal Data and other Personal Data provided by Customers will be processed in connection with the legitimate interests of Nussknacker for the following purposes:

  1. to provide the Nussknacker Cloud service;
  2. to process complaints under the terms and conditions described in the SLA;
  3. to assert or defend against claims related to the use of the Nussknacker Cloud;
  4. to carry out legal obligations, if any, will be incumbent on Nussknacker;
  5. to conclude and implement the agreements described in the Rules;
  6. to fulfill legal obligations incumbent on Nussknacker under tax law, accounting law, and obligations related to the keeping of tax documents;

Rights under the GDPR

Customers, as part of their use of the Nussknacker Cloud, shall have the following rights with respect to the Personal Data they provide:

  1. the right to be informed about the principles of Personal Data processing,
  2. the right of access to Personal Data,
  3. the right to make copies of Personal Data,
  4. the right to rectify Personal Data and to have Personal Data completed,
  5. the right to request deletion of Personal Data (the "Right to be Forgotten") – requesting deletion of all Personal Data will be equivalent to requesting deletion of the Account. The Customer has the right to request deletion of Personal Data in the following situations:
    1. processing of Personal Data is carried out in violation of the law or the necessity of deletion of Personal Data results from generally applicable laws,
    2. Personal Data are no longer necessary for the purposes for which they were being processed,
    3. the Customer has withdrawn consent to the processing of Personal Data (to the extent that the consent provided the legal basis for the processing),
    4. the Customer has objected to the processing of Personal Data where the basis for the processing of Personal Data is Nussknacker's legitimate interest,
  6. the right to view Personal Data, as well as to receive copies of them;
  7. the right to request the restriction of the processing of Personal Data (submission of such request by the Customer will entail blocking the Customer's access to the Account by Nussknacker). The Customer has the right to request the restriction of processing of Personal Data in the following situations:
    1. in case of comments on the correctness of the Personal Data,
    2. in case of unlawfulness of the processing of Personal Data (and in case of failure to exercise the right to delete the aforementioned data),
    3. when Personal Data are no longer necessary for the purposes for which they were collected, and the Customer needs them to assert or defend his claims,
    4. where the Customer has objected to the use of Personal Data.
  8. the right to object to the processing of Personal Data (when the basis for the processing of Personal Data remains Nussknacker's legitimate interest),
  9. the right to request a transfer of Personal Data.

Recipients of the data processed

  1. Nussknacker only shares Personal Data with third parties that provide support to Nussknacker as processors or separate controllers for the purposes of the Nussknacker Cloud.
  2. In all cases where a third party provides support to Nussknacker as a processor all provisions of Article 28 of the GDPR shall be followed.
  3. If there is a need to transfer Personal Data outside the EEA, Nussknacker shall use, as an appropriate data protection measure, the contractual clauses in accordance with Article 46 of the GDPR.

How long data are stored

The Customer's Personal Data will be stored by Nussknacker no longer than:

  1. for the period of the Customer's use of the Nussknacker Cloud, in particular for the period of holding the Account and for a period of 60 days after the termination of the Account;
  2. until such time as the Customer's objection is taken into account to the extent that the Customer's data are processed based on the so-called legitimate interest of Nussknacker;
  3. until the Customer withdraws its consent to data processing, if the basis for the processing was consent;
  4. for a period necessary for tax and accounting purposes according to relevant provisions of law;
  5. limitation periods in civil and criminal cases established in accordance with the applicable provisions of Polish law to the extent that the Customer's Personal Data will be processed for the purpose of establishing, asserting, or defending against claims.