GETPEGASUS PRIVACY POLICY
Updated: October 20, 2020
Thank you for your interest in getPegasus (“getPegasus”, “we,” or “us”), our web site at https://getpegasus.io/ (the “Site”), software and other services („Service“) provided by us.
This Privacy Policy (“Policy”) describes the information that we gather on or through the Service, how we use and disclose such information, and the steps we take to protect such information. By visiting the Site, or by purchasing or using the Service, you accept the privacy practices described in this Policy.
1. Definitions
“Client” means a customer of getPegasus.
“Client Data“ means personal data, reports, addresses, and other files, folders or documents in electronic form that a User of the Service stores within the Service.
“Personal Data” means any information relating to an identified or identifiable natural person.
“Public Area” means the area of the Site that can be accessed both by Users and Visitors, without needing to log in.
“Restricted Area” means the area of the Site or Service that can be accessed only by Users, and where access requires logging in.
„Service“ means software and other services provided by us.
“User” means an employee or representative of a Client or any other person authorised by a Client, who primarily uses the restricted areas of the Site for accessing the Service in such capacity.
“Visitor” means an individual other than a User, who uses the public area, but has no access to the restricted areas of the Site or Service.
2. Owner and Data Controller
getPegasus OÜ
- Vilmsi 11, 10126, Tallinn, Estonia
Owner contact email: maria@getpegasus.io
3. Data Collected
We collect different types of information from or through the Service. The legal basis for getPegasus’ processing of Personal Data are primarily that the processing is necessary for providing the Service in accordance with getPegasus’ Terms of Service and that the processing is carried out in getPegasus’ legitimate interests.
3.1 User Provided Information
When you use the Service, as a User or as a Visitor, you may provide, and we may collect Personal Data such as name, email address, mailing address, employer/company name, domicile, mobile phone number, activity data, IP information and billing information. Personal Data also includes other information, such as geographic area, user preferences or time-zone, when any such information is linked to information that identifies a specific individual. You may provide us with Personal Data in various ways on the Service. For example, when you register for an Account, use the Service or contact our customer support.
3.2 Information Collected by Clients
A Client or User may store or upload into the Service Client Data. getPegasus has no direct relationship with the individuals whose Personal Data it hosts as part of Client Data. Each Client is responsible for providing notice to its customers and third persons concerning the purpose for which the Client collects their Personal Data and how this Personal Data is processed in or through the Service as part of Client Data.
3.3 Automatically Collected Information
When a User or Visitor uses the Service, we may automatically record certain information from the User’s or Visitor’s device by using cookies. This automatically collected information may include IP address or other device address or ID, web browser and/or device type, the web pages or sites visited just before or just after using the Service, the pages or other content the User or Visitor views or interacts with on the Service, and the dates and times of the visit, access, or use of the Service. We also may use these technologies to collect information regarding a Visitor or User’s interaction with email messages, such as whether the Visitor or User opens, clicks on, or forwards a message. This information is gathered from all Users and Visitors.
3.4 Integrated Services
You may be given the option to access the Service using your user name and passwords for certain services provided by third parties (each, an “Integrated Service”), such as using your Canvanizer, Slack, Asana, Zoom, Google, Calendly or YouCanBook.Me accounts. The Integrated Services are embedded to our Service in such manner that they do not make any of your personal information or logging in details available to us nor do we access, collect or store such information in any other way. However, please check your privacy settings on each Integrated Service to understand what information that Integrated Service may make available to us, and make changes as appropriate. Please review each Integrated Service’s terms of use and privacy policies carefully before using their services and connecting to our Service.
4. Use of Data
We use the information to operate, maintain, enhance, and provide all features of the Service, to provide the services and information that you request, for creating and managing your account and subscriptions, for responding to comments and questions and for providing support to Users of the Service. Only the employees needing to carry out such tasks are provided access to the Client Data and only to Data necessary for their tasks.
The User passwords are automatically encrypted in the software’s database.
We process Client Data solely in accordance with the directions provided by the applicable Client or User. Such processing is necessary for the performance of the contract to which you are a party when you are using our Service or in order to take steps prior to entering into the contract.
We may send you e-mails for marketing purposes but only with your explicit consent. You have the right to withdraw your consent at any time and as described in Section 6 of this Policy.
We process your Personal Data if the processing is necessary for the purposes of the legitimate interests pursued by getPegasus (e.g. fraud detection, improvement of the Service, development of new features and functionalities) or for fulfilling our legal obligations (e.g. accounting and financial reporting). In every such case getPegasus will consider whether such interests might be overridden by the interests or fundamental rights and freedoms of the data subject. If the data is processed for the purpose of statistics, analysing the usage trends and preferences of our Visitors and Users, the data will only be used in anonymized or aggregated form.
We may use a Visitor’s or User’s email address or other information to contact that Visitor or User (i) for administrative purposes such as customer service, to address intellectual property infringement, right of privacy violations or defamation issues related to the Client Data or Personal Data posted on the Service or (ii) with updates on our policies and events, relating to the Service offered by us and by third parties we work with.
We may process your personal information on the basis of consent also in other cases. For example, if you contact us via our Webpage to require information about a custom solution of pricing, we ask you to provide us your name, contact information, organization name and what otherwise would be necessary for responding to your query.
We may also need to share the information collected with others (like the Site’s hosting provider during the content migration), in aggregated, anonymous form, which means that the information will not contain any personally-identifiable information about you or any other person.
For the use of automatically collected information through cookies and Google Analytics please refer to Section 7.2.
5. Data Retention
We only retain the Personal Data collected from a User for as long as the User’s account is active or otherwise for a limited period of time as long as we need it to fulfill the purposes for which we have initially collected it, unless otherwise required by law. When your personal information is no longer required, we will destroy, delete or convert it into an anonymous form.
As a derogation from previous, your data may be retained longer if other Users of our Service have the right to process your data. The data will be retained as long as the other User continues using the Service. Your communication on the Site, including any information you have provided to other Users in course of private or group conversations, the presentations you may have uploaded, evaluations given or other information made available by you on the Site, shall remain accessible to such Users as long as their user account is not deleted. For example, if an accelerator or an incubator (the Client) uses the Service to manage their program, the authorised representatives of the Client have the right to process the data and the information stored by the Client’s employees or other authorised persons (incl. evaluators and mentors) on the Site and getPegasus will retain all the relevant data until the Client uses our Service.
Upon the end of the use of Service by the Client we retain the backup of the Data without using the Data (unless required by law) for the period of one year (e.g. the purpose of potential need to provide evidence in case of disputes).
Your data might also be retained by us upon the end of the use of the Service by the Client, in situations where the Client specifically requests that and the request is formalised in writing (e.g. due to the temporary suspension of the use of Service).
In accordance with the Estonian accounting law, billing and invoicing information is retained for a period of 7 years as of the end of that financial year where, based on such information, relevant financial transaction occurred.
6. Data Protection Rights
You have the right to receive information about the Personal Data processed by getPegasus, including the categories of data processed, the sources of the data, purposes of processing etc. You are also entitled to receive copies and extracts of Personal Data processed. We may charge a small fee for this.
You have the right to check your own data stored on the Site and to correct or remove any incorrect or outdated Personal Data. You also have the right to request the correction or updating of data if it turns out that the Personal Data being processed is inaccurate.
You have a right to remove the profile information, however, please note that certain Service cannot be provided after you remove your profile information.
You have the right to object to processing of Personal Data concerning you at any time if such processing is only necessary for the purposes of the legitimate interests pursued by getPegasus.
You may forbid the processing of your Personal Data for direct marketing purposes. If you receive commercial emails from us, you may unsubscribe at any time by following the instructions contained within the email.
You may opt out from the collection of navigation information about your visit to the Site by Google Analytics by using the Google Analytics Opt-out Browser Add-on feature.
If getPegasus processes the registered person’s Personal Data based on consent, you have the right to cancel such consent. Cancelling this consent might disable this person from using our Service.
7. Cookies
7.1 What are cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. For further information, visit http://allaboutcookies.org/.
When you visit our Site, we may collect information from you automatically (see Section 3.3).
7.2 How do we use cookies
We use automatically collected information and other information collected on the Service through cookies and similar technologies to: (i) personalize our Service, such as remembering a User’s or Visitor’s information so that the User or Visitor will not have to re-enter it during a visit or on subsequent visits; (ii) monitor and analyse the effectiveness of Service; and (iii) monitor aggregate site usage metrics such as total number of visitors and pages viewed.
We use Google Analytics, a service for the marketing analysis of this website, of Google Inc. (“Google”). Google Analytics uses codes consisting of text and numbers, which will be stored on your computer and which allow for an analysis of the use of the Websites (“Cookies”). The information generated by the Cookie about your use of the Websites (including your IP address) will be transferred to and stored by a Google Server. Google will use this information, to evaluate your use of the website, to prepare reports about the website activities for the website operators and to provide further services connected to the use of websites and the use of the Internet. Google may transfer this information to third parties, if legally obliged to do so or if third parties process these data on behalf of Google. In no case, Google will connect your IP address with other data from Google. However, it is possible to anonymize the IP addresses Google Analytics collects before they are stored. You have a right to request such anonymization prior to or during the use of our Service.
7.3 What Types of Cookies Do We Use
There are a number of different types of cookies, however, our Site uses the following:
- Functionality – we use these cookies so that we recognize you on our Site and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party (set by the Site visited by the User) and third-party cookies (set by domains that are not directly visited by the User) are used.
- Security – we use security cookies to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorized parties
- Statistics – we use these cookies to help us to understand how the Users and Visitors interact with our and our Clients’ websites by collecting and reporting information anonymously.
8. How to manage your cookies
You can enable or disable the use of cookies by changing the browser settings. Cookies are required for the proper functioning of some features of getPegasus Service and we cannot guarantee the operability of our Service, if the cookie functionality is disabled.
9. Privacy Policies of Other Websites
getPegasus Site integrates other Websites. This Policy applies only to our Site and Service. If you access such third-party Website through our Site, we recommend familiarising yourself with their Privacy Policy. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
10. Changes to Our Privacy Policy
getPegasus keeps its Privacy Policy under regular review and places and updates on this Site. The date of the latest update of the Policy is provided above.
11. How to Contact Us
Please contact us with any questions or comments about this Policy, your Personal Data, our use and disclosure practices, or your consent choices by email at privacy@getpegasus.io
12. How to Contact the Appropriate Authorities
Should you wish to report a complaint or if you feel that getPegasus has not addressed your concern in a satisfactory manner, you may contact the Estonian Data Protection Inspectorate www.aki.ee
Email: info@aki.ee
Address: Tatari 39, 10134 Tallinn, Estonia