Weev.ieLtd (Weev) Privacy Notice
This privacy notice, together with any other documents referred to within, sets out the
basis on which we will process any personal data that we collect from you, or that you
provide to us. Please read the following carefully to understand our views and practices
regarding your personal data and how we will treat it.
Privacy Notice Content
The Data Controller
For the purpose of the EU General Data Protection Regulation 2016 (GDPR), the
data controller is Weev.ie Ltd (NI062495), Block A, Boucher Business Studios, 9
Glenmachan Place, Belfast, County Antrim, Northern Ireland, BT12 6QH (hereinafter
“Weev”).
How does Weev process your personal data?
What kind of data does Weev collect?
Weev collects data that is necessary forthe relationship you have with us and the purposes for
which the data are used. Weev collects the following personal data categories.
What sources are the personal data obtained from?
The processed personal data include data that are received from you at the time of the order,
at the time of joining our service, or during the customer relationship. We also receive
observeddatafromyouruseofourdevices andservices.Weevmayalsoprocessderiveddata
which have been derived from or concluded based on the received data.
In addition, we use Google Analytics, Hotjar and Flurry to track and analyse user online
behaviour
What are the purposes for processing personal data?
We process personal data only for predefined purposes. The purposes for which we process
personal data are:
On what legal basis do we process your personal data?
In order for us to be able to process your personal data, we rely on different legal bases,
including:
Automated decision-making We may make decisions about you through automated decision making. Such as automated tracking of your potential debt toWeev from previous unpaid use of our services. Our automated decision-making procedures may affect your ability to use our services. We may need to do this either to perform our legal obligations or because it is necessary to enter into, or the performance of, a contract between you and us. This means, that if we have outstanding invoices, we may deactivate your account until the bill is paid. If we have made a decision about you solely on the basis of anautomated process (e.g.through automatic profiling) and that affects your ability to use the services or has another significant effect on you,you can ask to not be subject to such a decision unless we can demonstrate to you that such a decision is necessary for entering into,or the performance of,a contract between you and us.
How long do we store personal data? Weev seeks to limit theperiod forwhich the personal data are stored to a minimum. Thus, Weev processes your personal data only to the extent and as long as is necessary to meet the purposes of the data processing. The specific retention periods may be different depending on the categories of data.As a generalrule,yourpersonaldataarestoredforthedurationofthecustomerrelationshipas well as for a period of one (1) year from the end of the customer relationship. Whereas e.g. information about transactions will be kept for at least six (6) years on a legal basis. Weev sets out and regularly re-evaluates data type specific retention periods for the personal data it holds. Once personal data is no longer necessary, Weev will delete it or anonymize it as soon as possible.
Who processes your personal data? Principally, we do not sell, trade or license any personal data to third parties. Weev processes personal data in accordance with existing privacy laws. Personal data may be disclosed to our authorized employees or affiliates to the extent necessary for the purpose of processing. The data will never be available to all employees but to a limited numberofauthorizedpersons.Wealsousethirdpartiesasourdataprocessors tohelpus develop, deliver and maintain our product and services, and fulfil our other purposes as defined in this privacy notice. When a third party processes personal data on our behalf, we always ensure via contractual arrangements that the processing of personal data is always conducted safely and in accordance with privacy laws and data processing best practices. List of categories of the third parties processing data (=data processors):
Does Weev transfer personal data to third countries? Principally,Weev does not transfer personal data out side the European Union or the European Economic Area (EEA). However, if personal data is transferred outside the EU or the EEA, Weev uses appropriate safeguards in accordance with existing privacy legislation, such as the standard contractual clauses provided by the European Commission.
How does Weev protect personal data?
Weev fulfils the necessary technical and organizational measures, which ensure and
demonstrate that privacy laws are being followed in the processing of personal data.
These measures include the use of Identity and Access Management systems to ensure that
only authorized persons have access to personal data, the use of firewalls, IP filtering, multifactor authentication, pseudonymisation and encryption of data, detailed instructions and
training for personnel on protection of personal data and careful consideration when selecting
our service providers that are involved in the processing of personal data on our behalf.
How do we handle personal data from IP addresses, cookies,and similar technologies
Cookies used on websites
When you use our services or visit our websites,Weev can collect data about your devices
through cookies and other tracking techniques.
Cookies are a small text file that we use to Identify and count the browsers and devices that
visit our websites. This information may then be used by us or third parties for marketing
purposes.
Our use of cookies differs depending on which of our websites you visit.You can get more
information about which cookies we use on a particular website by reading the specific
information about cookies on the current site.
Location data
The location data of the user’s device may be used to provide services based on the location
of the device if the user has given clear consent to the processing of location data.
The user has the right to withdraw the consentat anytime by changing appropriate settings
on their device.
What are your rights when it comes to your personal data?
Right of access
You have the right to access your personal data, which means that you have the right to obtain
confirmation as to whether or not your personal data are processed and, if so, also receive a
copy of the personal data that is processed by Weev and further information about the
processing carried out by Weev.
Data Portability Right
You are entitled to data transfer,which means that you may,under certain circumstances,
have the right to have the personal data transmitted to another controller.
Right to rectification
You are entitled to receive incorrect information about you corrected or supplemented.
Right to erasure
You have the right to have your data erased, if:
Further Information
If you wish to opt out to services like GoogleAnalytics, Hotjar or Optimizely, you can use a special command to disable this service for your browser. Click one of the following links and follow the instructions:
Google Analytics: http://tools.google.com/dlpage/gaoptout?hl=en-GB
Optimizely: http://www.optimizely.com/opt_out
Hotjar: https://www.hotjar.com/policies/do-not-track/
Changes to our Privacy Notice
We reserve the right to amend this Privacy Notice. Amendments may be necessary due to the development of our services or, for example, changes in the relevant laws.Any changes to our Privacy Notice will be communicated on our website or through our mobile application Weev. In some cases, we may choose to inform about these changes also by email.
Contac
Questions,comments,and requests regarding this privacy notice are welcomed and should be addressed by email to privacy@weev.ie or by post to:
Weev.ie Ltd
Data Privacy Co-Ordinator
Boucher Business Studios
Belfast
BT12 6QH
Phone: 028 90 313031