Privacy policy
This privacy policy sets out how we handle personal data. We care about how personal data are handled and we assure you that we observe all relevant legal requirements. We consider the protection of your privacy to be of paramount importance.
Scope of this Privacy Policy
Please note that this privacy policy covers the data processed by Flagright Data Technologies Inc. (Flagright) as a data controller in connection with the operation of our website https://flagright.com
Flagright also processes personal data as a processor in the sense of article 28 GDPR to conduct online transaction risk assessment on behalf of its clients who act as the data controllers of that data. This privacy policy does not cover these processing activities. We will forward any inquiries or claims concerning these processing activities to the respective data controller for further assessment.
Contact information
Flagright:
hello[at]flagright.com
Data protection officer:
You can contact our data protection officer at gdpr[at]flagright.com
Personal Data
Personal data refers to any information about personal or factual circumstances of an identified or identifiable person. We collect and process the following personal data about you:
- • contact and address information, if you have submitted your contact information or registered on our site
- • online identifiers (e.g. your IP address, browser type and version, the operating system used, the referrer URL, the IP address, the file name, the access status, the amount of data transferred, the date and time of the server request),
- • social media identifiers,
- • cookie identifiers and other information as detailed in our cookie policy.
Processing purposes
We process your data for the following purposes:
- • to respond to business inquiries,
- • for advertising purposes,
- • to prevent fraud and to obtain website usage statistics,
- • to send our newsletter,
- • to process job applications.
Contact information
Your data are handled according to the following legal provisions:
- • with regard to data communicated in forms, etc. with your consent, Art. 6(1)(a) GDPR,
- • with regard to data communicated in forms, etc. with your consent, Art. 6(1)(a) GDPR,
- • with regard to services you use for the performance of a contract, Art. 6(1)(b) GDPR,
- • otherwise, with particular regard to statistical data and online identifiers based on legitimate interests, Art 6(1)(f) GDPR (see below)
Legitimate interests
When handling your data, we pursue the following legitimate interests:
- improving our service,
- protecting against abuse,
- statistics and software performance experimentation.
Data sources
Unless otherwise specified, we obtain the data from you (including via devices used by you).
Retention period
We retain your data:
- if you have consented to this as part of processing, until such time as you withdraw your consent,
- if we need the data to undertake an agreement, until such time as the contractual relationship with you ceases or legal retention periods expire,
- if we use the data on the basis of a legitimate interest, until such time as your overriding interest obliges us to delete or anonymize them.
Recipients or categories of recipients of the personal data
When processing your data, we work together with the following service providers who have access to your data:
- web hosting providers,
- web analytics providers.
Data is being transferred to third countries outside the European Union. This takes place on the basis of contractual regulations provided by law, which are intended to ensure adequate protection of your data and which you can view on request.
Data protection
We have taken extensive technical and organisational measures to secure your data against potential risks, such as unauthorised login or access, unauthorised perusal, amendment or distribution, as well as against loss, deletion or misuse.
In order to protect your personal data against unauthorised access by third parties when being transmitted, we secure data transmissions, if necessary, using SSL encryption. This is a standard encryption procedure for online services, particularly for the Internet.
Web analytics
Like almost all website operators, we use analytical tools in the form of tracking software to ascertain the number of users using our website and how frequently they visit. To enable us to optimise our website and our service, we use Google Analytics, which is a web analysis service provided by Google Ireland Limited ("Google"), a company incorporated and regulated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses what are known as "cookies": these are text files stored on your computer and used to analyse your website usage. The information generated by the cookie about your use of this website (including your IP address) will be sent to a Google server in the USA and stored there. However, if IP anonymisation is enabled on this website, within member states of the European Union, or in other states that are party to the agreement on the European Economic Area Google first abbreviates your IP address. The full IP address will only be transmitted in exceptional circumstances to one of Google's servers in the USA, where it will then be abbreviated. Google will use this information on behalf of our website operator to analyse your use of the website in order to compile reports about website activities for the website operator and to perform other services connected with the use of the website and of the Internet. The IP address transmitted by your browser as part of Google Analytics will not be merged or combined with other data by Google. You can prevent cookies from being stored by applying the appropriate settings in your browser software; please note, however, that in this case you may not be able to use all of the functions of this website to their full extent. You may also prevent Google from collecting data generated by the cookie referring to your website usage (including your IP address), and from processing these data by downloading and installing the browser plug-in available from the following link . As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent Google Analytics from collecting data in this website in future (the opt-out only works in this browser, and only for this domain). This stores an opt-out cookie on your device. If you delete your cookies in this browser, you need to click on this link again. Further information is available here or here (general information on Google Analytics and data protection).
Your data subject rights
You have the right, in some instances subject to certain conditions, to request information about the processing of your data,
- to amend your data,
- to delete your data or have them blocked,
- to restrict processing,
- to object to your data being processed,
- to receive your data in a transferable format and to transmit them to a third party,
- to revoke your consent to your data to be processed in future and processing.
Data privacy for data subjects whose data is provided to us to conduct online transaction risk
Flagright processes personal data on behalf of its Clients, the legal Controllers of the data. As Flagright is not the Controller of the data and does not have a concept of user profiles, we are forwarded to the Controllers of the data for further assessment.
- You have the right to request information about whether and which personal data is processed by our company. The data will be provided to you by the Controller in a common, structured and mechanically readable format.
- You have the right to request that your personal data should be deleted.
- You have the right to demand that your personal data is rectified or amended.
- You have the right to demand that the usage of your personal data is restricted.
- You have the right to withdraw your consent to the processing and use of your data completely or partially at any time with future applications.
In order to ensure providing the information to the right person and deletion of the correct personal details, the identity of the Requestor will be validated by the Controller and require providing a valid government issued ID.
Insofar as this is not expressly stated, when data are collected, the provision of data is neither required nor obligatory.
Date of issue of this data privacy statement
September 2021.
We reserve the right to make amendments at any time to this privacy policy for future effect.
