Privacy Policy for INSHIFT TECH d.o.o.
This Privacy Policy (the “Policy”) explains how information about you (information that directly identifies you) and/or information that makes you identifiable (“personal information”) is collected, used and disclosed by INSHIFT TECH d.o.o., Org. No. 9613510000 (“inShift”, “Company,” “we” or “us”) in connection with our website at www.inshift.me (the “Site”), application services (the “App”) and our application services offered in connection with the Site (collectively App with the Site, the “Service”). By visiting the Site, registering for an account at the App, or otherwise using the Service, you signify that you have read, understood and agree to the collection, storage, use and disclosure of personal information as described in this Policy.
We are the responsible entity (“data controller”) for the processing of your personal data as described in this Privacy Policy. We care about our customers and their privacy. We commit to respect and protect your personal data and privacy in accordance with applicable laws, industry rules and other related standards. To help you understand how we collect and use your personal information, we have listed below our core privacy values when it comes to processing your personal data.
You may always reach out to us on matters of privacy and data protection by contacting us at business@inshift.me.
1. Information We Collect, and How We Collect It
We collect personal information in connection with your visits to and use of the Service. This collection includes information that you provide in connection with the Service, information from third parties, and information that is collected automatically such as through the use of cookies and other technologies. You may also provide such information when in contact with INSHIFT TECH d.o.o. employees officially representing inShift through e-mail, telephone or other communication channels.
Information That You Provide
We collect personal information from you. The categories of information we collect can include:
Registration information. We collect personal and/or business information that you provide when you register for an account. This information may include your name, email address, telephone number, etc.
Information collected through the use of the Service. You may also create, edit or transmit information as part of your use of the Service (collectively, “User Content”). User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Service. You have full control of the information included in the User Content.
Payment information. If you make a purchase, such as for a subscription, we collect information provided in connection with your purchase or payment, such as your credit card and payment-related information.
Inquiries and Feedback. If you contact us, we will collect the information that you provide us, such as your contact information and the contents of your communication with us.
You are free to choose which personal information you want to provide to us or whether you want to provide us with personal information at all. However, some information, such as your name, address, payment information and information on your requested Services may be necessary for the performance of our contractual obligations.
Information from Third Parties
We also collect and receive information about you from third parties if you share access to your Oura Ring account.
Information from Other Sources
We may obtain information from other sources, such as third-party information providers, or through mergers and acquisitions, and combine this with information previously collected. In these cases, our Privacy Policy governs the handling of the combined personal information.
We use this information to operate, maintain, and provide you with the features and functionality of the Service, as well as to communicate directly with you, such as by sending you email messages about products and services that may be of interest to you.
Information That Is Automatically Collected (Cookies and Other Technologies)
We, and our third-party partners, also automatically collect information about you and any computer or device you use to access the Service, read our emails, or otherwise engage with us. Some of the information we collect, and the ways we collect it, include:
Cookies. When you use or visit the Service, we may send one or more cookies — small text files containing a string of alphanumeric characters — to your computer or device that allows us to uniquely identify your browser, computer, or device. A cookie may also convey other information to us, such as: your Internet Protocol (“IP”) address; unique device identifiers; your browser settings and specifications; and information about how you use the Service (e.g., the pages you view, the links you click, features and functionalities you utilize, how frequently you access the Service, and other actions you take on the Service). Cookies also allow us to track your usage of the Service over time.
Log Files. We may record log file information each time you access the Service. This information may include information such as: your requests or actions; IP address; browser type; unique device identifiers; information about your computer or device; number of clicks; how you interact with links, features, or functionalities on the Service; and other such information.
Clear Gifs. We may employ clear gifs (also known as web beacons or pixel tags) which may collect information about you, your computer or your device such as: your requests or actions; IP address; unique device identifiers; browser type; information about your computer or device; how you interact with links, features, or functionalities of the Service; information about cookies; all of which can show your Service usage patterns.
Mobile Device Information. When you access the Service with a mobile device, we may collect and store a unique identifier associated with your device (including, for example, a UDID), or information about your mobile carrier, device type, model and manufacturer, and mobile device operating system brand and model.
We also collect information about the way you use our Service, for example, the site from which you came and the site to which you are going when you leave our Service, the pages you visit, the links you click, how frequently you access the Service, whether you open emails or click the links contained in emails, whether you access the Service from multiple devices and other actions you take on the Service. We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics of our users. We may also work with third-party partners to employ technologies, including the application of statistical modelling tools, which attempt to recognize you across multiple devices.
2. How We Use Information
We collect, use, process, combine, retain and store personal information and information that we collect or receive for a variety of purposes, including the following:
For our business activities, including to operate the Service and to provide you with the features and functionality of the Service;
To process your payment;
To communicate with you and respond to your requests, such as responding to your questions, contacting you about changes to the Service, and communicating about account-related matters;
For marketing and advertising purposes, such as to market to you or offer you information and updates on our products or services we think that you may be interested in. While we may use your personal information in this manner, please note that we do not use User Content to serve you ads, and we will never share User Content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose;
For analytics and research purposes;
To enforce this Policy, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
To comply with contractual and legal obligations and requirements;
To fulfil any other purpose for which you provide personal information; and
For any other lawful purpose, or other purposes that you consent to.
3. Sharing of Information
We also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, including to:
Service providers, subcontractors, partners, vendors, consultants, and others that help us with any of the purposes noted above or otherwise in this Policy, including by performing services on our behalf such as identifying and serving targeted advertisements, processing payments, sending postal mail, providing back-office services, or measuring site traffic. Such providers include Google and will likely expand in the future;
Our affiliates, parent companies, subsidiaries, and other related companies, all for the purposes noted above or otherwise in this Policy;
Third parties to respond or comply with, in our sole discretion, a court order, subpoena, law enforcement or other government requests (with or without notice to you, in our discretion) under applicable law;
Buyers, successors, or others in connection with a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us may be among the assets transferred;
Other third parties with your consent;
Third parties, in our discretion, to: (i) satisfy any applicable law or regulation, (ii) enforce this Policy, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third-party claims or allegations, or (iv) protect against harm to the rights, property or safety of us, the Service, other Service users, or third parties (including financial loss, or in connection with preventing fraud or illegal activity, and/or to enforce our Terms of Service); and
Third parties in the aggregate, or stripped of personally identifying characteristics (anonymized).
4. Legal Basis for Processing
The purposes for which we process your personal data are:
the provision of personal data by you may be necessary for the performance of any contractual relationship we have with you;
where it is necessary for compliance with our legal obligations laid down by EU law;
where in our legitimate interests (provided these are not overridden by your interests and fundamental rights and freedoms - this includes our own legitimate interests) such as:
to contact you and respond to your requests and enquiries;
for business administration, including statistical analysis;
to provide the Service to you;
for fraud prevention and detection; and
to comply with applicable laws, regulations or codes of practice.
We may also process your personal data based on your freely given, specific, informed and unambiguous consent. You should be aware that you are entitled under the EU Data Protection Law to withdraw your consent where that has been given, at any time. If you do this and we have no alternative lawful reason to process your personal data, this may affect our ability to provide you with rights to use the Service.
For information about choices that you may have about the information collection and use described in this Section, see the “Your Choices” Section below.
5. Information Access and Correction
If you have registered for an account with the Service, you can use the features and functionality of the Service or Google profile settings to edit the registration information.
If there is personal information in User Content, you can use the features and functionality of the Service to edit or delete the personal information or User Content.
Not all personal information is maintained in a format that you can access or change. If you would like to request access to, or correction or deletion of personal information, you may send your request to us by emailing business@inshift.me. We will review your request and may require you to provide additional information to identify yourself, but we do not promise that we will be able to satisfy your request.
6. Your Choices
We strive to give you choices about how your personal information is used. These choices include the following:
Marketing E-Mails. We may send you marketing e-mails from time to time. If you do not wish to receive them, you can opt-out by following the unsubscribe instructions in the e-mails, or by contacting us at business@inshift.me. We will work to honour your request within 10 business days. If you opt out, we will still send you e-mails for service purposes, such as for communications about your account or subscription, and responses to your requests.
7. EU Residents
If you are a resident of the European Union, you have the following rights with respect to your personal information that we hold:
Right to object. You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. You can object to marketing activities for any reason whatsoever.
Right of access.The right to obtain access to your personal information.
Right to rectification.The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete.
Right to erasure.The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
Right to restriction.The right to obtain restriction of the processing undertaken by us on your personal information in certain circumstances, such as, where the accuracy of the personal information is contested by you, for a period of time enabling us to verify the accuracy of that personal information.
Right to portability. The right to portability allows you to move, copy or transfer personal information easily from one organization to another.
If you wish to exercise one of these rights, please contact us using the contact details at the end of this Policy. In addition to the above-listed rights, as an EU resident, you also have the right to lodge a complaint with your local data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
8. Data Protection
We take what we believe to be commercially reasonable steps to help protect the personal information that we collect, but we do not guarantee that personal information will be completely protected. For example, the transmission of information via the Internet is not completely secure. Any transmission of personal information by you is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained in the Service, including the illegal acts of third parties (such as criminal hacking).
The safety and security of your information also depend on you. For example, it is important to keep your password for your account for the Service confidential. We also recommend that you log out of the Service when you are done using it. If you believe that any account credentials for the Service have been compromised, please contact us immediately at business@inshift.me.
9. Data Storage and Transfer
Your information may be stored and processed in the United States or any other country in which the Company or its subsidiaries, affiliates or service providers maintain facilities. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that offers a level of protection that may, in certain instances, be less protective of your personal information than the jurisdiction you typically reside in.
The initial transfer of your personal information to us is necessary for the performance of our contract with you. For any onward transfer of your personal information, we will enter into guarantees to ensure appropriate safeguards. If we transfer information from the European Union to third parties outside the European Union and to countries not subject to schemes which are considered as providing an adequate data protection standard, we will enter into contracts which are based on the EU Standard Contractual Clauses with these parties.
10. Data Retention
We will only retain your personal data for as long as necessary for our business purposes for which we have collected the information, or as otherwise required to operate the Service, comply with your requests, or comply with applicable law.
“System-recorded data” will be saved locally for one year on each module and on the server provided by us or our third-party supplier for as long as it is necessary. We store anonymized data for analytics purposes indefinitely.
11. Information from Children
The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children under the age of 18. If you are a parent or guardian of a child under the age of 18, and believe that your child may have provided us with personal information, please contact us at business@inshift.me and we will use commercially reasonable efforts to delete that information.
12. Third-Party Websites
The Service may provide links to third-party websites and online services. This Policy does not describe the privacy practices of those websites or services. Please review the privacy policies of those websites or services before providing personal information to them.
13. Updates to This Policy
We may amend this Policy from time to time. When we do so, we will update the “Last Revision Date” at the end of the Policy. Your continued use of the Service after an updated Policy is posted constitutes your consent to the revised Policy.
14. Contacting Us
If you have questions about this Policy or our privacy practices, please contact us at business@inshift.me.
15. Last Revision Date
This Policy was last revised on April 24, 2024.