What categories of data do we process?

Privacy Policy covers accordingly the processing conducted through the Finshape website https://www.finshape.com, social networks and all forms of offline processing as well. The categories of personal data that we process are contact data, company data and online identifiers or technical data.

Contact data may include your full name, job title, bussiness email and phone number, your company, communication history with Finshape and your LinkedIn profile username.

Company data may include name of your company and industry it operates in, size and revenue of the company, address of your company, country and region where it is based, communication history with Finshape and where headquarters are based.

Technical data we collect from website visitors are your IP address, time of the visit and the address of the visited page.

Why we collect and process personal data?

We process personal information only based on a valid legal basis and always disclose the purpose of processing personal data for each data category. Valid legal basis can be including but not limited to, your consent, preparation or performance of a contract with you, complying with legal obligation and Finshape's or a third party’s legitimate interest.

When you interact with us we will process your contact and company data for the purpose of direct marketing in the future. For the purpose of direct marketing our legitimate interest is a sufficient legal basis for processing your personal data. When the law states that explicit consent is needed we will only process your personal data after we obtain it. If there is no more legitimate interest or you withdraw your consent we will stop processing your personal data as we only process it as long as necesarry.

When we are processing your contact and company data during the communications with you as our contractual partner or before entering the contract, our processing of your personal data will be based on valid legal basis of preparation or perfomance of a contract with you.

When accessing our website, due to technical reasons and in order to produce statistics on user behavior, we are entitled to store the technical data. By accessing the website, the visitor accepts that this anonymized technical data is stored.

 How long do we store your personal data?

We have criteria to determine for how long we store your personal data. In each case the exact time of the retention of your personal data depends on the data category and purpose of processing as different legal provisions may apply. After this period personal data will be anonymised.

Use of cookies

In order to ensure the personalized and efficient use and to provide the most complete user experience on the websites, our websites place small data packets, so-called cookies on the website’s visitors computers.

Excluding the necessary cookies, we need your consent to store cookies on your device. If you wish to learn more about our use of cookies please visit our cookie policy.

Principles of processing and data security

• We are commited to fair and lawful processing of personal data under all the relevant legislation.
• We take all the necesarry technical and organisational measures to ensure the privacy and security of the data we process.
• We protect the personal data with adequate measures from unauthorised access, destruction and other dangers.
• We are to commited to confidentiality throughout the whole process.

Your rights

To the extent provided by the GDPR, you have the following rights in relation to personal data concerning you:

• Right to information: You have the right to request information about the processing of your data.
• Right to access: You have the right to request from us access to your personal data processed by us.
• Right to rectification: You have the right to request us to rectify your inaccurate personal data and to request us to complete your incomplete personal data by means of providing us with suplementary statement.
• Right to erasure: You have the right to ask us to delete your personal data in certain circumstances.
• Right to restriction of processing: You can ask us to limit how we use your personal data in certain situations.
• Right to object to processing: Under certain circuimstances you have the right to object to processing your personal data.
• Right to data portability: You have the right to receive your personal data in a commonly used, machine-readable format and to have it transferred to another organization where technically possible.
• Right to withdraw your consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.
• Right to legal remedies: You can lodge a complaint with supervisor authority in regard to processing your personal data.

We take actions requested in relation to exercising your above rights without undue delay and in any event within one month of receipt of your request.

Remedies

In case you would not agree with our response or action, you have the possibility to lodge your complaint with the national authority of your country, here you can find the contact information:

https://www.edpb.europa.eu/about-edpb/about-edpb/members_en#member-si

If you believe that your rights have been infringed, then you may have recourse to courts. You can bring the case before the court within 30 days from the communication of the decision or from the last day of the deadline for communication.

Final provisions

We may review this Privacy policy from time to time and amend it as necessary. In latter case we publish it on our website.