Privacy Policy and Protection of Data Uploaded to Our Application
Contents
- 1. Introduction
- 2. Data Collection and Processing
- 3. Purpose of Data Processing
- 4. Legal Basis for Data Processing
- 5. Data Protection and Security
- 6. Data Retention
- 7. Data Sharing with Third Parties
- 8. Use of Google Analytics
- 9. Your Rights Under GDPR
- 10. Contact and Complaints
1. Introduction
Your privacy and data protection are extremely important to us. This document informs you about how we process and protect data that you provide to us through imports or manual entry into our application, in compliance with the General Data Protection Regulation (GDPR).
2. Data Collection and Processing
2.1. Types of Data
Our application enables the upload and processing of the following types of data:
- Financial statements: Imported via XML files or entered manually.
- Other accounting and financial data: Any other data entered into the application for processing purposes.
2.2. Data Collection Methods
Data is uploaded to our application in one of the following ways:
- XML file import: Data is automatically processed and stored in our database.
- Manually entered data: Users can enter data directly through our application's user interface.
3. Purpose of Data Processing
The data you upload to our application is processed exclusively for the purpose of:
- Providing services that are part of our application.
- Ensuring data security and protection.
4. Legal Basis for Data Processing
We process your data based on the following legal grounds in accordance with GDPR:
- Contract: Processing is necessary for the performance of a contract between you and us.
- Legal obligations: Processing is necessary for compliance with our legal obligations.
- Legitimate interest: Processing is necessary to protect our legitimate interests, particularly ensuring the security and integrity of our systems.
5. Data Protection and Security
We ensure that all uploaded data is protected in the following ways:
- Data encryption: All sensitive data is stored in encrypted form to ensure maximum security. Data is encrypted using AES-GCM before it reaches the database and remains encrypted after storage. Decryption occurs only when accessing data through the application.
- Access control: Data access is restricted to authorized persons with the necessary permissions only.
- Backup: We regularly perform data backups to ensure availability even in the event of technical issues.
6. Data Retention
We retain your data only for the period necessary to fulfill the purpose for which it was uploaded, or for the period required by law. After this period, data is securely deleted or anonymized.
7. Data Sharing with Third Parties
We do not share your data with third parties without your explicit consent, except in cases where required by law or necessary to fulfill our contractual obligations.
8. Use of Google Analytics
The web interface uses the Google Analytics service provided by Google, Inc. (hereinafter Google
). Google Analytics uses cookies,
which are text files stored on the computers of Buyers and Users of the web interface, enabling analysis of how the web interface is used by Buyers and Users. The information generated by the cookie about the use of the site (including the IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating the use of the web interface and generating reports on its activity, intended for the Seller and the operator of the web interface and for the use of the internet in general.
Google may also provide this information to third parties if required by law or if such third parties process this information on behalf of Google. Google will not associate the Buyer's and Users' IP address with any other data available to it. Buyers and Users of the web interface may refuse the use of cookies by selecting the appropriate setting in their internet browser; however, in this case, it is possible that not all functions of the web interface will be fully available. By using the web interface, Buyers and Users agree to the processing of data about them by Google in the manner and for the purposes described above.
By using this website, you agree to the processing of data about you by Google in the manner and for the purposes described above.
9. Your Rights Under GDPR
In accordance with GDPR, you have the following rights:
- Right of access: You have the right to obtain confirmation as to whether we process your personal data and, if so, to access it.
- Right to rectification: You have the right to request the correction of inaccurate or incomplete data.
- Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data.
- Right to restriction of processing: You may request the restriction of the processing of your data.
- Right to data portability: You have the right to obtain your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
- Right to object: You have the right to object to the processing of your personal data if we process it based on legitimate interest.
- Right to withdraw consent: If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.
10. Contact and Complaints
If you have any questions regarding the processing of your personal data, or if you wish to exercise your rights, contact us at [email protected]. If you believe that we have violated your rights, you have the right to file a complaint with the relevant supervisory authority.