We take the protection of your privacy and your personal data very seriously. We process and protect the data that you provide to us in accordance with the current legislation, particularly the General Data Protection Regulation and the Slovak Act No. 18/2018 on Data Protection. In this document we describe what information and data we process, for what purpose, and what your rights are.
1. What personal data we process
We collect and process the data of users and affiliates whenever you use our Windows/Mac/Android app ("App").
Users or affiliates cannot use our applications and services fully without prior registration or purchase.
If you are using the demo application, you still need to fill out a registration form, providing your e-mail, name, surname and access password.
Whenever users register their demo Nifty Stats app, we store the following data:
The reason for storing this
data is to enable the apps to function correctly over a limited period of time
and to prevent unauthorized extension of the trial period by using the apps
beyond what is agreed in the trial period agreement.
During the use of the application we collect the following data:
We collect the following information when an app is purchased:
The reason for storing this data is to enable the apps to function correctly, as agreed in the purchase agreement. The address is stored for billing and tax purposes, as required by law. According to legislation this data is stored for 10 years.
During the use of the app we collect the following data:
- Affiliate ID, if the user visited the website through an affiliate link
- Time and IP address of downloading the install executable- Time and IP of starting the app, closing the app and downloading an app update (new DB version, language version) - Reports on inoperative affiliate programs sent in by the userCertain data need to be processed in the app which you purchase in order to ensure that you are able to make full use of it, according to the purpose for which the app was created.
In order to promote the app and sell paid licenses (i.e. for marketing and commercial purposes) we employ both an internal and an external affiliate program. The data needed for this purpose is collected on the basis of a contract with the vendor of the app. We also collect the data required by tax and other authorities, as required by the GDPR Regulation.
The data collected by our internal affiliate system for this purpose include:
Some data, like log-ins and log-outs, are integral to the affiliate system; the whole affiliate section and any personal data are protected by an original SSL certificate.
The external affiliate program is operated by 2checkout.com, a third party which is individually responsible for GDPR compliance with regard to its own system. You can find all relevant information in the GDPR section of the 2checkout.com website at https://www.2checkout.com/legal/gdpr-commitment/
Our company also makes use of 2checkout.com
to operate the payment portal. Please find more information about GDPR
compliance at 2checkout.com: https://www.2checkout.com/legal/gdpr-commitment/
2. Purpose of data processing
Our company or any third parties have no access to the statistics (expenses and revenues) of the users who use our apps.
• Sending notifications about the service provided by the app, e.g. database
updates.
User:
We store user data to ensure authentication in the system, and for marketing purposes
Application improvement and security
We have a legitimate interest to improve the application, particularly its
design, and to optimize its content and functions, as well as to ensure user
and affiliate security while using the services provided by the app. We also
use the data for the following purposes:
• informing you about changes related to the app and updates to the terms and conditions of use, by means of notifications delivered into the in-app inbox or to the e-mail address of the user or affiliate
• promoting new features of the app, like new filters, functions etc., by displaying a notification inside the app or sending a notification e-mail;
Marketing
We only send advertising and commercial messages (in the form of a newsletter) to active subscribers. If you are interested in receiving our newsletter, you need to provide your consent by subscribing. When subscribing to the newsletter you will be requested to provide your e-mail address. By subscribing you express your consent with the processing of your e-mail address for marketing purposes, i.e. to offer you products and services and to send you commercial information etc. Provision of your data for this purpose is voluntary. You can withdraw your consent to receive the newsletter at any time by clicking the unsubscribe link included at the end of every e-mail sent by us in connection with the newsletter.
3. Period for which the personal data will be stored
We store the data which you provided in a secured
manner for the duration of your registration.
Some type of data, e.g. accounting information, is retained for at least 5
years, according to law. These data may include name, surname or a personal
identification number and may be used on documents like salary sheets, wage
slips, tax documents and the related supporting documentation.
4. Provision and transfer of data
We only transfer personal data to buyers or sellers, and only to the extent and for the purposes described above.
Your personal data is only processed in the European Union (EU). Due to the fact that the level of personal data protection in the Member States of the EU was harmonized by the adoption of the GDPR, you can be sure your personal data is adequately secured during any such transfer. We never publish your personal data.
5. Your rights
With regard to your personal data which we process you have the rights described below. You can claim these rights by sending us a request to ns @ niftystats.com
Right of access
to the data
At any time you have a right to request a confirmation of whether we process
your personal data and if so, you have a right to obtain access to such data (a
copy of the personal data) as well as information on how the data is processed.
We usually provide this information within one calendar month from receiving a
request from you.
Right to rectification and amendment
In case of incorrect or incomplete data you have a right to request their rectification or amendment. You can update your data by sending the correct information via our support form at https://www.niftystats.com/support/
Withdrawal of consent
If you subscribed to receive advertising and commercial messages (i.e. the
newsletter), you can withdraw your consent at any time by clicking on the
unsubscribe link at the end of every email sent by us in relation to the
newsletter. Any processing performed before your withdrawal of consent will
remain legal. Withdrawal of consent will result in the erasure of the personal
data which you entered when subscribing to the newsletter, unless there is an
overriding legal basis for their processing.
Right to erasure
You can have your personal data erased if any of the following grounds apply:
Right to restriction of processing
You can request a restriction of processing of personal data, if:
• you contest the accuracy of the personal data: the processing is restricted for the period in which we verify their accuracy
• the personal
data were processed unlawfully (and you oppose erasure), or
• we no longer need the personal data for the purposes described above, but you
need them for the
establishment, exercise or defense of legal claims,
• you object to the processing of the personal data which is performed in
legitimate interest, pending the verification whether there are legitimate
grounds for their further processing.
Right to portability
You can have the data provided to us for the purposes of the contract or with
your consent, and which we process by automated means, transmitted to another
organization, as long as it is technically feasible.
Right to object
You can object, on grounds relating to your particular situation, to processing
of personal data performed in legitimate interest. In case of such objection we
will stop processing your personal data unless there are compelling legitimate
grounds for further processing or for the establishment, exercise or defense of
legal claims.
6. Security
We have adopted the necessary technical and organizational measures to protect your data against unauthorized access or manipulation. These measures include the necessary software and hardware security including firewalling, data encryption and restricted access with private key authentication. These security measures are regularly adapted and continuously optimized to keep pace with the latest technological developments.
7. Updates
These Principles of Personal Data Protection are effective as of 25 May 2018.
We regularly check and revise our processes for the processing and protection of personal data and we may update these Principles of Personal Data Protection from time to time. We will inform you whenever such updates include substantial changes. The current version of these Principles is always published on our website Nifty Stats - Affiliate Stats Tracking software
8. Contact If you have any questions related to the processing of your personal data or about these Principles, please contact our staff at: ns @ niftystats.com
SELFIX s.r.o.
Tallerova 4
81102 Bratislava
Slovakia