PrivacyPolicy
1. Scope
1.1 This Privacy Policy (hereinafter the "Privacy Policy") covers all services from:
WelcomeBob Group A/S
CVR-no. 43644041
Pilestræde 52a
1112 Copenhagen K
("WelcomeBob", "we", "our", "us", etc.) to the Customers.
1.2 This Privacy Policy describes the types of Personal Data we collect, how we process such Personal Data, and whom you can contact if you have questions or comments regarding this Privacy Policy.
1.3 The Privacy Policy describes our processing of Personal Data as the Data Controller for Personal Data. Our processing of Personal Data on behalf of the Customers, as Data Processor, is governed by the Data Processing Agreement. See also section 4 of this Privacy Policy.
2. Definitions
2.1 Terms and expressions with capital letters used in this Privacy Policy shall have the meanings set forth in this section 2.2.
2.2 "Customer", "you", "your", etc., shall mean a customer of services provided by WelcomeBob.
2.3 "Data Controller" and "Data Processor" shall mean "controller" and "processor" respectively, as defined in the GDPR.
3. Data Processing
3.1 "The Data Processing Agreement" shall mean the Data Processing Agreement entered into between the Customer and WelcomeBob in connection with the Customer's use of or subscription to the Services.
3.2 "GDPR" shall mean the General Data Protection Regulation (EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data). In Denmark, GDPR is supplemented by the Act on supplementary provisions to the regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (Act No. 502 of 23 May 2018, as amended from time to time) ("The Data Protection Act").
3.3 "Personal Data" shall mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3.4 "Services" shall mean all services provided by WelcomeBob to the Customers in connection with WelcomeBob's access control system, including the actually purchased access control product, corresponding systems and software, WelcomeBob's app or other software applications developed by WelcomeBob, support and helpdesk services, etc.
4. Data processing on behalf of Customers
4.1 With respect to all Personal Data entered, transferred, or stored on behalf of the Customers in WelcomeBob's or third-party suppliers' databases in connection with WelcomeBob's provision of the Services, the Customer is the Data Controller, and WelcomeBob is the Data Processor.
4.2 WelcomeBob's processing of Personal Data on behalf of the Customer in relation to the Services is regulated by the Data Processing Agreement, which the Parties enter into upon the Customer's subscription to the Services.
5. Application Features
5.1 Ad-free application: Our application does not contain advertisements and is designed to provide an ad-free user experience.
5.2 Suitability for all ages: We confirm that our application is suitable for users of all ages. We have considered the needs of various age groups and implemented appropriate measures to ensure that the content is suitable and safe for all users.
5.3 Use of SMS permissions: Our Android application requires permission to receive SMS messages to automatically insert an SMS one-time password allowing you to access an iLOQ key within the app. SMS messages are only stored locally. This permission is not required but improves the user experience.
6. Categories of Personal Data
6.1 Personal Data includes information that can be used to identify you as an individual. If you sign up, we ask you to provide us with certain personally identifiable information, including:
- Contact information such as name, phone number, email, and postal address
- Account information such as online password and other login details
- Address and company registration number (VAT/CVR nr.) upon subscription
- Product setup information such as the name and description of your WelcomeBob product
- Product usage information such as door unlocking and key sharing
- Social media handles, content and other data posted on our social media pages
- Information from third-party social media services (e.g. Facebook, Google)
- Information regarding career opportunities at WelcomeBob
- Other personal information contained in content you submit to us
6.2 When you use our website, we collect information about your use through cookies. See point 12 for further information.
7. Our Purposes for Processing Personal Data
7.1 Our Services are designed to allow you to see, hear, and speak to anyone through your WelcomeBob device. We process and store log files captured when you use our Services. We do not record video or audio streams. Log files are encrypted and securely stored.
7.2 You are responsible for ensuring that you comply with applicable law when using our products or services.
7.3 We process the Personal Data we collect for the following purposes:
- Establish and manage your WelcomeBob account and profile
- Process and fulfill requests and orders
- Personalize your experience with our products
- Allow you to stream content through our services
- Identify and authenticate you
- Create logs for access and sharing of users
- Communicate with you and provide customer support
- Allow you to interact with third-party products
- Provide functionality, analyze performance and improve our products
- Evaluate, develop and improve our business
7.4 Through our service, you can choose to connect to certain third-party services. You can revoke a connection at any time by contacting WelcomeBob at service@welcomebob.com.
8. Transfer of Personal Data
8.1 WelcomeBob is located in Denmark, and Personal Data is primarily processed in Denmark or other member states within the EU/EEA. We store Personal Data on servers in the Europe-West data region.
8.2 We may from time to time use third-party providers located outside the EU/EEA. These third-party providers will only have access to your Personal Data if it is necessary to perform the agreed tasks.
8.3 Before transferring Personal Data to a third country, we will assess whether the transfer ensures an adequate level of protection in accordance with GDPR.
9. Our Use of Data Processors
9.1 If third-party providers act as data processors and process Personal Data on our behalf, we ensure to enter into data processing agreements with the data processors before they perform any processing of Personal Data.
10. Storage and Erasure
10.1 We will only store your Personal Data for as long as necessary. The storage period depends on the nature of the information and the purpose for storage.
10.2 Generally, we store log files and related Personal Data as long as the user has an active account and for up to 6 months after termination. Daily log files are stored for 3 months. Payment information is stored for five (5) years in accordance with Danish accounting regulations.
11. Security Measures
11.1 We have taken technical and organizational measures to prevent your information from being deleted, disclosed, lost, damaged, or misused.
11.2 All data transferred between the intercom and users is encrypted. User profile information is stored in a separate database. User passwords are encrypted and cannot be accessed by WelcomeBob.
11.3 We host all data on updated servers protected against unauthorized access. We perform backups every 24 hours.
12. Cookies and Tracking Technology
12.1 Cookies are small text files placed on your device when you visit a website.
12.2 We use the following types of cookies:
- Necessary cookies: Necessary for the website to function correctly.
- Preference cookies: Remembers your settings and preferences.
- Statistical cookies: Helps us understand how visitors interact with our website.
- Marketing cookies: Used to track visitors across websites.
13. Your Rights
13.1 GDPR grants you certain rights concerning your Personal Data. You have the right to request access, rectification, update, erasure, or restriction of processing of your Personal Data. You also have the right to object to our processing and to data portability.
13.2 Contact us using the information below to exercise your rights.
14. Contact us
If you have questions or comments, please contact us:
15. Changes to this Privacy Policy
15.1 We reserve the right to update or change this Privacy Policy from time to time. Changes take effect when they are published on our website.
15.2 In case of significant changes, we will notify you via email or by a prominent notice on our website.