The purpose of this document is to provide a concise policy statement regarding the Data Protection obligations of YouScan. This includes obligations in dealing with personal data, in order to ensure that the organization complies with the requirements of the EU General Data Protection Regulation and Irish Data Protection Act 2018.
The following key principles are enshrined in the GDPR and Data Protection legislation are fundamental to the YouScan’s Data Protection policy.
In its capacity YouScan ensures that all personal data shall:
a.be obtained and processed fairly, lawfully and transparently (Fairness, Lawfulness & Transparency).
YouScan will meet this obligation in the following way:
b.be obtained only for one or more specified, legitimate purposes (Purpose Limitation).
YouScan will obtain data for purposes which are specific, lawful and clearly stated. A Data Subject will have the right to question the purpose(s) for which YouScan holds their data, and YouScan will be able to clearly state that purpose or purposes. Any use of the data by YouScan will be compatible with the purposes for which the data was acquired, i.e. there shall be no variation in purpose.
c.be kept safe and secure (Integrity & Confidentiality).
YouScan will employ high standards of security and integrity in order to protect the personal data under its care. Appropriate security, technical and organisational measures shall be taken to protect personal data against unauthorised access to, or alteration, destruction or disclosure of any personal data held by YouScan in its capacity as Data Controller.
d.be kept accurate, complete and up-to-date where necessary (Accuracy).
e.be adequate, relevant and not excessive in relation to the purpose(s) for which the data were collected and processed (Data Minimisation).
YouScan will ensure that the data it processes in relation to Data Subjects are relevant to the purposes for which those data are collected. Data which are not relevant to such processing will not be acquired or maintained.
f.not be kept for longer than is necessary to satisfy the specified purpose(s) (Storage Limitation).
YouScan has identified an extensive matrix of data categories, with reference to the appropriate data retention period for each category. Once the respective retention period has elapsed, YouScan undertakes to destroy, erase or otherwise put this data beyond use.
g.be managed and stored in such a manner that, in the event a Data Subject submits a valid Subject Access Request seeking a copy of their Personal Data, this data can be readily retrieved and provided to them.
YouScan has implemented a Subject Access Request procedure by which to manage such requests in an efficient and timely manner, within the timelines stipulated in the legislation.
When a User creates an Account in order to use the YouScan Services, YouScan asks you to provide contact information such as name, first name, telephone number, e-mail address, company name of a User, etc. When a User acquires Services, additional information will be requested from User by YouScan such as billing information and address. We may also collect other data directly from you, from time to time.
If you contact our support services, we will collect the data we need to categorize your question and respond to it. We also use this data to track potential issues with our Services and customize our support responses to better serve you.
We collect data about you when you use any part of our Services. For example, if you are logged in to your account, we will collect data as to how often you use analytics, what queries you created or amended, and other data about how you interact with analytics. We may also collect data about how you interact with messages we send to you, for example whether you opened an email or read an in-app message.
We collect data about the device you use to use our Services, including operating system details, web browser type, your mobile device identifier and mobile operating system, and the name of your ISP or mobile carrier. We may also collect your location data if your device permits this.
The legal basis for our processing of data about you is generally pursuant to our “legitimate interests”. Our legitimate interests are in providing our Services to our customers, which includes providing technology that empowers our customers to act with more certainty in a way that is easy-to-access and use. However, the legal basis for our processing of data may also be where we have your consent (for example where consent is required to send certain marketing communications) or where the processing is necessary for compliance with our legal obligations (for example where we receive requests from regulatory authorities).
Purpose of Use of Data
YouScan uses the personal data collected for the following purposes:
Third-Party Platforms may collect personal data concerning a User if a User connects to such Platforms via the Services. YouScan is not responsible for the manner in which these Platforms handle any personal data that may be disclosed to them. User is invited to refer to the appropriate Third-Party Platform’s privacy provisions in order to verify how its personal data is used by such Platforms.
User’s Personal Data will not be shared with third parties, except as provided below.
YouScan may share data with its affiliates (meaning legal entities controlled by, controlling, or under common control with us) as reasonably necessary to provide the Services.
YouScan does not sell or trade personally identifiable information about our Site visitors or Users.
YouScan may share your personal data with:
YouScan may also share your personal data under the following circumstances:
Cookies are small amounts of data sent on User’s and any YouScan websites user browser and stored on their hard drive that may not allow identification of the party receiving the cookies, unless such party has already provided YouScan with personal information allowing such identification, e.g. by creating an Account.
In this regard, YouScan uses:
YouScan warrants that any information collected via these cookies will not be shared by YouScan with any third party.
User or any user of YouScan’s websites may set their browser parameters in order to select the types of cookies they wish to receive or not receive from YouScan.
YouScan has implemented administrative, physical and electronic measures designed to protect your information from unauthorized access. YouScan will comply with applicable law in the event of any breach of the security, confidentiality, or integrity of your Personal Data and, where YouScan consider appropriate or where required by applicable law, notify you via email, text or conspicuous posting on the Site in the most expedient time possible and without unreasonable delay, insofar as it is consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
Where YouScan has given you (or where you have chosen) a username, login or password which enables you to access certain parts of the Site, you are responsible for keeping this information confidential. YouScan asks you not to share a username, login or password with anyone.
YouScan restricts access to your Personal Information to individuals who need access to it in order to process it on YouScan’s behalf. These individuals, where employees, are bound by confidentiality agreements and YouScan will take appropriate action (which may include disciplinary proceedings) in the event YouScan finds that its employee(s) has failed to meet standards in looking after your personal data. YouScan cannot accept any liability for employees or agents acting outside its normal course of business, or for any third-parties with whom your Personal Information may be shared who act outside of the terms of our contracts with YouScan.
YouScan will retain your Personal Information only for as long as necessary to fulfil the purpose(s) for which it was collected and to comply with applicable laws.
In general, this means that YouScan store your data throughout the existence of your account with us or for as long as is otherwise required to deliver our Services, except where YouScan have a lawful basis for saving it for an extended period of time (for instance, after fully executing a contract, YouScan may still have a legitimate interest in using your contact details for marketing purposes). YouScan also retain the data YouScan need for the execution of pending tasks and the data YouScan need to investigate and realize our legal rights and our claims, as well as certain data that YouScan must store for a legally mandatory period of time. When certain data is only saved due to a legally mandatory preservation term, the processing of it by us is limited, even where you do not specifically request this.
YouScan may use User’s Personal Data to contact User to discuss the Services it has subscribed to or to send User information concerning YouScan and/or the Services and/or promotional activities via newsletters, messages, calls and letters to the e-mail address, telephone number or postal address provided by User.
User can update or correct any of his/her Personal Data at any time by contacting YouScan at the following e-mail address: email@example.com. User is entitled to request YouScan to provide User, free of charge, with a list of all of User’s Personal Data stored by YouScan by sending an e-mail in this regard to the following e-mail address: firstname.lastname@example.org.
YouScan undertakes to provide User with such list within a reasonable timeframe.