This is the Privacy Policy for Assenteo Ltd (“we”, “us” or “Assenteo”) that outlines how we collect and process your personal data when you engage with our website (“Site”) or services (‘Services’) (collectively our “Services”). This Privacy and Cookies Policy (the “Privacy Policy”) is intended to inform you about our practices regarding the collection and use of your data that you may submit to us through our Services. It does not concern the privacy practices of companies we provide services to. 

This Privacy Policy was last modified on the last updated date above you can always find the most recent version on our Site. By using our Service you agree to be bound by the terms. If you do not agree, please stop using the Services. 

We do not knowingly collect or ask for information from people under the age of 18. If you are such a person, please do not use our service or send us your information. We delete information that we learn is collected from a person under the age of 18 without verified parental consent. 

To learn more about personal data management or if you have any other questions, you're welcome to contact us at hello@assenteo.com (the “Contact Email”).

1. Who processes your personal data?
   
   

   Your personal data is processed by our company Assenteo Ltd, registered at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, (the „Controller“, “we”, “us” or “our”). 
   
   We process your data with due care, in accordance with all applicable laws and regulations, including the regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (the “GDPR”) and the UK GDPR (the “UK GDPR”).

2. Personal data that we process.

We may collect the following types of information about you: 

1. Personal Data. We may collect and process your names, email address, and any other data that identifies you for the purpose of arranging to receive Services. This information is provided by you voluntarily when you use our Services. 
   
   

2. Technical Information. Upon your consent, we and/or our authorised external service providers (as stated in this Privacy Policy) may automatically collect technical data when you visit or interact with our Services. Technical data may include, in particular, the URL of the website you visited before using our Service, the time and date of user visits, surfing habits, IP address, the browser name, the type of computer or device accessing our Service, time spent on the website and other similar technical information. 
   
   

3. Cookies. To make our Services work properly, upon your consent we utilise cookies and similar technologies on your device. The cookies will not be used for any purposes other than the ones stated above. When visiting the website for the first time, you may choose to accept or refuse cookies by selecting the appropriate settings on our Site. You may later change your preferences on our Site.
   
   

   • Upon your consent, we use analytical cookies from Google Analytics (Google LLC) for the improvement of our Site and Platform. We may collect data such as device data, browsing data and interactions with the Site and Platform. 

   • When you select your cookie preference, our website provider Framer B.V. also drops a cookie in your browser to remember your cookie settings. 

   • We also may use cookies provided by external service providers we work with. These companies collect and use this information under their own privacy policies and are responsible for their practices concerning cookies, however we only work with vendors that meet our own standard of data protection and sign agreements where applicable.
     
     

3. What are the purposes and legal basis for processing your personal data?

We process your personal data in order to:

1. carry out the agreement existing between us based on your decision to use our Service including: 

   • creating and providing your account from personal data you provide upon registration;

   • providing you with our Services;

   • responding to you in relation to any queries you may have with respect to our Services;

   • resolving potential agreement-related troubleshoot problems and disputes. 

Legal basis for such processing: the performance of a contract in accordance with Article 6 (1) (b) of GDPR.

2. market our Services. We may market current or future Services to You if you subscribe to our newsletter or consent to marketing cookies, as described above.
   
   Legal basis for such processing:  your consent in accordance with Article 6 (1) (a) of GDPR (granted during submitting your email address to our newsletter bar) or legitimate interest in accordance with Article 6(1) (f) of GDPR (if you have an existing relationship with Us) . 

You can stop direct marketing communications from us by clicking the “Unsubscribe” link in any email communication that we send you. We will then stop any further newsletter emails. 

3. It is necessary for legal reasons. In the event we are required by law to disclose your personal information we will firstly inform you and take reasonable steps to prevent disclosure where possible.  We may disclose your personal information if we have a good-faith belief that access to and use of your personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of the Controller, our users or the public as far as in accordance with the law. When possible, we will inform you about such processing.

4. Who are recipients of your personal data?

   To provide our Services we work with external service providers (the “Sub-processors”). When Sub-processors need access to your personal data to provide our Services to you, we have taken the appropriate contractual and organisational measures to ensure that your personal data are processed in accordance with all applicable laws and regulations, through confidentiality agreements, security practices and measures and agreements. 

To provide our Services we work with the following Sub-processors:

• Google LLC (United States) - provision of Google Workspace

• Slack Technologies, LLC (United States)  - provision of client communications 

• Stripe, Inc. (United States) - facilitates payment for services
  
  

Other than listed above, your personal data remains within the organisation of the Controller, Assenteo.

5. Do we transfer your data to countries outside the EU/EEA?

   • Where possible data of users in Europe and UK does not leave Europe through using European data centers. However, if we are required to transfer your personal data to a country outside the European Union, we transfer your personal data only to a country that is considered to have an adequate level of protection in accordance with the EU Commission's decision or there are appropriate safeguards in place to protect your personal data, such as standard contract clauses or binding internal company rules. Regardless of the country in which your personal data is processed, Assenteo takes reasonable technical, legal and organisational measures to ensure that the level of protection is the same as in the European Union and the European Economic Area. 
     
     

6. What is the storage period?

   • We store your personal data only if it is legally permitted and necessary for the purposes for which the data were collected. 
     
     

7. How is personal data secured?

   • We take all reasonable, appropriate security measures to protect our customers from unauthorised access to or unauthorised alteration, disclosure or destruction of personal data we hold. Measures include, where appropriate, encryption, firewalls, secure facilities and access rights systems. If a security breach occurs that is likely to have negative effects on your privacy, we will inform you about the breach as soon as reasonably possible. 
     
     

8. What are your rights?
   
   

   1. Right of access - The Controller offers you access to your personal data we process. This means you can contact us and request from us a confirmation whether or not your personal data are being processed and if so, you have the right to request access to your data, which we will provide to you in the form of a so-called "registry" (stating, in particular, purposes, categories of personal data, categories of recipients of personal data, storage periods or criteria for determining storage periods).

   2. Right to rectification - You have the right to have inaccurate personal data we have stored about you rectified.

   3. Right to erasure - You may also ask us to erase your personal data from our systems. We will comply with such requests unless we have a legitimate ground to not delete your personal data. 

   4. Right to restriction of processing - You may request us to restrict certain processing of your personal data. If you restrict certain processing of your personal data, this may lead to fewer possibilities to use our Services and website.

   5. Right to data portability - You have the right to receive your personal data from us in a structured, commonly used and machine-readable format in order to transmit the personal data to another controller.

   6. How to use your rights - You may exercise your rights above, free of charge, via our Contact Email. We may require confirmation of your identity depending on your request. 
      
      

9. May you complain?

   • In case you consider our processing activities of your personal data to be inconsistent with the applicable data protection laws, you may lodge a complaint with the local supervisory authority for data protection.