Privacy Notice for MailedUp
This Privacy Notice explains how we collect, use, disclose, and process personal data in compliance with the General Data Protection Regulation (GDPR). Please read this Privacy Notice carefully to understand our practices regarding your personal data.
1. Data Controller
The data controllers responsible for processing your personal data is Arpad Kostyal E.V. and Marton Arendas E.V. („Company”) located in Hungary. If you have any questions or concerns about how your personal data is handled, please contact us at info@mailedup.com.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact Information: This may include your name, email address, postal address, and telephone number.
- Account Information: If you create an account within the software, we may collect your username, password, and other account-related details.
- Usage Data: We may collect information about your interaction with the software, such as your IP address, browser type, operating system, referring URLs, visited pages, and the dates/times of access.
- Personal data provided by you: Email addresses that you have provided to us via a list, but which are not from a public register.
3. Purposes of Data Processing
We process your personal data for the following purposes:
- To provide and personalize our services.
- To communicate with you, respond to your inquiries, and provide customer support.
- To analyze and improve the software's performance and user experience.
- To send you marketing communications, with your consent, about our products, promotions, or updates.
- To comply with legal obligations and enforce our terms and conditions.
Additionally, if you, as a customer, provide personal data other than your own (e.g., the personal data of third-party individuals such as your clients), we act as a data processor on your behalf. In such cases, we ensure that all data processing activities comply with the provisions of the Information Act and GDPR. As a data processor, we undertake to safeguard the privacy of any third-party data you share with us and process such data strictly within the scope of the services provided to you.
The Company declares that the email lists provided by it are not subject to personal data processing, taking into account their origin from public records.
4. Lawful Basis for Processing
We rely on the following lawful bases for processing your personal data:
- Performance of a Contract: Processing is necessary for fulfilling the contract between you and us, such as delivering the services you have requested.
- Legitimate Interests: We have a legitimate interest in processing your personal data to improve our services and ensure the security of our software.
- Consent: We will seek your consent before sending any marketing communications. You have the right to withdraw your consent at any time.
5. Data Sharing and Disclosure
We may share your personal data with the following parties for the purposes outlined in this Privacy Notice:
- Service Providers: We may engage third-party service providers to assist us in delivering services, such as payment processing and email delivery.
- Legal Compliance: We may disclose your personal data if required by law or in response to a legal request, such as a court order or regulatory inquiry.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred to the acquiring entity.
- With Your Consent: We may share your personal data with third parties if you provide explicit consent.
6. International Data Transfers
Your personal data may be transferred to and stored in countries outside the European Economic Area (EEA). We will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.
7. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting obligations. Once the retention period has expired, we will securely delete or anonymize your personal data.
8. Your Rights
Under the GDPR, you have the following rights:
- Right of Access: You have the right to request access to your personal data and receive information about how it is processed.
- Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances, such as when it is no longer needed for the purposes for which it was collected.
- Right to Restriction: You can request the restriction of the processing of your personal data under certain conditions.
- Right to Object: You can object to the processing of your personal data in certain situations, including direct marketing by subscribing.
- Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise your rights, please contact us using the details provided in Section 1 of this Privacy Notice.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute data security.
10. Changes to this Privacy Notice
We may update this Privacy Notice from time to time. Any changes will take effect upon posting the revised Privacy Notice on our website. We encourage you to review this Privacy Notice periodically for updates.
11. Use of Cookies
Our software and website use cookies to enhance user experience, customize services, and perform analytics. Cookies are small text files stored on your device that collect information about your activities on our website or software.
a. Types of Cookies:
- Essential Cookies: These are necessary for the proper functioning of the website, such as secure log-ins.
- Performance Cookies: These help us understand how users interact with our website and improve its performance, such as tracking the most visited pages.
- Functional Cookies: These allow the website to remember your choices, such as language preferences or form inputs.
- Targeting and Marketing Cookies: These are used to display advertisements relevant to your interests.
b. Managing Cookies:
You can manage your cookie preferences, including rejecting or deleting cookies, through your browser settings. Please note that disabling cookies may impact the functionality of certain parts of our website.
12. Protection of Minors' Personal Data
Our services are not directed towards individuals under the age of 18, and we do not knowingly collect personal data from children under 18. If we discover that we have inadvertently collected personal data from a minor, we will delete such data immediately. If you believe we may have collected personal data from a minor, please contact us using the details provided in Section 11.
13. Automated Decision-Making and Profiling
Our software does not engage in automated decision-making processes that would have a legal or significant impact on you based on your personal data. Additionally, we do not perform profiling that automatically makes decisions based on personal data. If we implement such activities in the future, we will provide detailed information and ensure that your rights, including the right to intervene, are respected.
14. International Data Transfers
Your personal data may be transferred to countries outside the European Economic Area (EEA). When this occurs, we ensure that appropriate safeguards are in place to protect your data, such as:
- a. Adequacy Decisions: Your personal data is transferred to countries that the European Commission has deemed to provide an adequate level of data protection.
- b. EU Standard Contractual Clauses: When transferring data to countries without adequate data protection laws, we rely on EU-approved Standard Contractual Clauses (SCC) to ensure your data is protected.
- c. International Transfer Agreements: In certain cases, we may also implement other legal mechanisms such as Binding Corporate Rules (BCR) to safeguard your data during international transfers.
15. Appointment of a Data Protection Officer (DPO)
The Company may appoint a Data Protection Officer (DPO) to oversee the processing of personal data, particularly if the nature or scope of processing requires it. The DPO's role is to monitor compliance with data protection regulations and liaise with supervisory authorities.
Contact Information: If a DPO has been appointed, their contact details are as follows:
DPO Name:…………………..
Email:………………………..
Phone: ……………………….
16. Right to Lodge a Complaint and Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe your rights related to personal data have been violated. In Hungary, the relevant authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
a. Contacting the NAIH:
- Website: www.naih.hu
- Address: H - 1055 Budapest, Falk Miksa utca 9-11.
- Phone: +36 (1) 391-1400
- Email: ugyfelszolgalat@naih.hu
If you are based in another EU member state, you may lodge a complaint with the supervisory authority in that country.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Notice or our data practices, please contact us at info@mailedup.colud.
