Privacy Policy
Updated 16 Apr 2024
1. INTRODUCTION | |
Who are we? |
We are KASPR SAS a limited company registered in France. Our company registration (SIREN) number is 843898396 and our registered office is at 8 Rue Dunois 75013 Paris 1, France. Where we decide the means or purpose of processing your personal data, we are the data "controller". |
What’s this policy about?
|
KASPR respects your privacy and is committed to protecting your personal data. This policy explains how we process your personal data as a data controller when we provide you with access to our website or to our other online services (the “Services”). This policy also explains how we process personal data about you which may be included within the business profiles we make available to our users (this is described at section 3 of this policy). You can opt-out at any time from our sharing your information with our clients, by completing this form: opt-out. We keep our privacy policy under regular review. Historic versions can be obtained by contacting us at privacy@kaspr.io. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. |
How do you contact us?
|
If you have questions about this policy or to exercise your rights, please write to us at: privacy@kaspr.io. If you have any concerns about our use of your personal information, you can make a complaint to us at privacy@kaspr.io. If we can’t resolve your issue, and you are in the UK you can also get in touch with the Information Commissioner’s Office: https://ico.org.uk/concerns. Or, if you are in France, with CNIL: https://www.cnil.fr/ If you are based in another country, you may also be able to liaise with your local regulator. |
What are your rights?
|
You have the following rights, although these rights may be limited in some circumstances:
If we rely on consent to process data, or send any direct marketing, you can withdraw consent by contacting us using the email to the address above.
WHAT WE MAY NEED FROM YOU We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. You are not required to pay any charge for exercising your rights. If you make a request, we try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
|
2. PERSONAL DATA AND HOW WE USE IT (FOR OUR WEBSITE VISITORS & USERS) | ||
Your data | How we use it | Sources and recipients |
Enquiry data (information we receive when you get in touch):
How long we keep this We keep your enquiry data for 6 years from when you first get in touch. |
We collect and process this information to respond to your support and other enquiries. Legal basis We may process this data in accordance with the terms of our contract with you (where we need this information to provide Services to you) or to take steps at your request prior to entering into a contract. We also use this to pursue our legitimate interests, including: (a) our interest in responding to enquiries to ensure smooth operation of our business and services; and (b) to understand our customers and improve our website and Services, by taking on-board your feedback. More information You may be required to provide us with certain additional information for us to respond to your enquiriesSources |
Sources
Recipients We may store this information with our suppliers, including, in particular, HubSpot Inc. and Userback Pty Ltd. |
Account data (information we receive when you set-up and use your account via our Services):
How long we keep this We keep your account data for 6 years from when our relationship with you ends. |
We collect and process this information to set-up, maintain, administer and manage your account and the Services, to process and fulfil your orders, to communicate with you regarding purchases, support, feedback and enquiries, to let you know about security, privacy & other announcements relating to the Services, for billing purposes, and to respond to your enquiries. Legal basis We process this information in accordance with the terms of our contract with you (where we need this information to provide Services to you) or to take steps at your request prior to entering into a contract. We process certain billing information to comply with our legal obligations include our accounting and tax obligations. We also use this information to pursue our legitimate interests in responding to enquiries, detecting & preventing fraud and unlawful activity which may jeopardise or negatively affect the Services, enforcing our rights and the rights of others, and to understand our customers and improve our Services (for example for testing, research, and statistical analysis). More information You may be required to provide us with certain additional information for us to respond to your enquiries. |
Sources
Recipients We may store this information with OVH Limited and MongoDB (a Group including MongoDB, Inc., MongoDB Limited, and MongoDB Serviços de Software No Brasil LTDA). We do not process payment data (such as your card, PayPal or other payment data) directly, this is instead processed by our payment processor (Stripe). For information on how they use and process your data, please see PayPal’s privacy policy, here https://www.paypal.com/webapps/mpp/ua/privacy-full and Stripe’s privacy policy here: https://stripe.com/gb/privacy |
Marketing data (information we process about you to send you emails to let you know about news and updates relating to us and our Services):
How long we keep this Until you have opted-out of marketing communications. |
We collect and process this information to send you marketing communications. Legal basis We process your personal data for this purpose where either: (a) we have your consent; or (b) where you are a corporate subscriber or decide not to opt-out of such marketing in the course of registering with the Services, in pursuit of our and your legitimate interests in ensuring you find out about new features, news and updates, to help you make the most of the Service. More Information You can withdraw consent or opt-out at any time by contacting us using the details outlined above, or by clicking on the unsubscribe link in our emails. |
Sources We collect this information from you. Recipients We may use Active Campaign LLC and Sendinblue to manage our email marketing. |
Referral data (information we collect and process about you to send you emails inviting you to register for our Services):
How long we keep this We store your email address until you have opted-out and offer you the ability to easily opt-out when we send you the invitation. |
If one of our customers wants to refer their contacts to our Services, they can provide us with your name and email and we will send you an email invitation to visit our website. Legal basis We process your personal data for this purpose in pursuit of our and your contact’s legitimate interests in inviting you to use our Service. |
Sources We collect this information from the contact who refers you. Recipients We may use Active Campaign LLC and Sendinblue to manage our email marketing. |
Analytics data (information we collect and process about how you interact with our Services which might (but not always) be associated with a unique ID) including:
How long we keep this After 26 months the underlying data is deleted, but we may retain anonymous, aggregated statistics generated from that data. |
We use our Services, HubSpot and Google to collect data about visitors to our website and Services, to understand how many people visit, where they come from, and how they interact with our Services and website, and to help us improve and maintain our Services and address bugs. Legal basis We may process website analytics data which uses cookies or similar technologies with your consent (if you give it). If we undertake analytics without storing or accessing information on your device (for example by reviewing log information on our servers which explain how our Services have been used) then we do this in pursuit of our legitimate interests in understanding how people use our Services and improving them. More information You can find out more about how Google uses data by reviewing their privacy policy here. You can withdraw your consent for Google analytics by using the following link: Google Analytics. |
Sources We use HubSpot and Google’s services to collect this data and otherwise collect it from you. Recipients Google and HubSpot in the USA collect and process analytics data on our behalf. |
Where explicit retention periods are not described above, we hold data for as long as necessary bearing in mind the purpose for which it was collected. To determine the appropriate period, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements. |
3. PERSONAL DATA AND HOW WE USE IT (BUSINESS CONTACTS IN OUR DATABASE) | ||
Your data | How we use it | Sources and recipients |
Profile data:
How long we keep this We hold data for as long as necessary to provide our Services, to comply with legal obligations, or to enforce our policies or resolve disputes, bearing in mind the purpose for which it was collected. To determine the appropriate period, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements. |
We collect business profile information from trusted business partners and various public sources, to enhance and maintain our database, and to keep it current and up to date, so we can provide our Services. We make our database available to our registered customers for the following purposes:
For more detailed information about the way this personal data is used, please get in touch by writing to privacy@kaspr.io. Legal basis We process this data to pursue legitimate interests, including: (a) our interests carrying on our business and providing our Services; (b) the interests of our clients in obtaining information for business marketing purposes, and to help detect and prevent fraud, misuse of their services and money laundering; (c) the interests of people in our database, in receiving more information relevant to B2B products and services; (d) the interests of the public in preventing fraud, misuse of services and money laundering. More information You can opt-out at any time from our sharing your information with our clients, by filling out this form: Opt-out |
Sources We collect this data from public sources, business directories & our data partners from time to time. Recipients Information in our database is made available to our registered customers. |
4. TRANSFERS AND DISCLOSURE | |
Transfers |
Your data is generally stored in the UK or European Economic Area. Where we use data processors outside the UK and European Economic Area and transfer personal data to a country which does not provide an adequate level of protection, we use contracts approved by the Information Commissioner’s Office and/or European Commission which give personal data protection similar to that which it has in the UK or Europe. For more information drop us a line using the contact details at the start of this policy. |
Disclosure |
Other than as set out above, we may disclose your personal data:
|
Consent to the use of cookies.
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner