1. Protection of personal data
The protection of Users personal data is one of Orgtomic’s priorities and any processing of personal data is carried out conscientiously, legally, in good faith and in accordance with all relevant legislation. Personal data is every information related to an identified person or a person that can be identified, whether his identity can be determined directly or indirectly, in particular on the basis of an identification number or one or more factors specific to his physical, psychological, mental, economic, cultural or social identity.
In order to become a Website user you have to Register. Our Website has a subscription model, therefore we need your private personal information**, including credit card details in order to process charges. Orgtomic does not store Credit Card data. All credit card information is stored on Stripe which is is a validated Level 1 PCI DSS Compliant Service Provider. Orgtomic is not subject to PCI obligations.
2. Legal basis
By entering personal data during and after the registration on the Website, the User expresses his agreement to the processing of his personal data for the stated purpose based on General Terms.
The User has the right to terminate the agreement at any time and request the termination of further processing of his personal data, except when it comes to processing data for statistical purposes when the aforementioned data does not allow the identification of the person to which they relate. The User is responsible for the accuracy of the entered information.
In case you have any concerns about privacy or your personal information please send us an email to firstname.lastname@example.org with subject line "website privacy concern" and we will reply as soon as possible.
3. Information that may be collected
Orgtomic collects User data during the registration.
Visitor data is collected when using the Website and browsing it's content. Orgtomic will not collect and process personal data whose collection is prohibited by law, such as data relating to racial or ethnic origin, political opinions, religious or other beliefs, trade union memberships and other data the collection of which the law expressly prohibits, except under the law enumerated conditions and situations.
User data being collected:
- Full name (first name, last name)
- Phone number
- Email address
- Company name
- Company address
Visitors data being collected:
- IP address
- Location data
In case when Visitor downloads marketing materials (E-books, resources, tutorials, guides), additional data is collected and stored:
- First name
- Last name
- Job title
- Email address
- Phone number
4. The purpose for which the data is collected User
Orgtomic collects User information for the sole purpose of carrying out activities which are the subject of their business. The collected data can be used for further development and improvement of the Website, to adapt and improve the content and services that the Website provides, as well as to inform and offer the User other contents and services that can be used through the Website.If you are a User, Orgtomic will use your information to provide you with information and updates about The Website for marketing purposes.
Orgtomic collects Visitor data for purposes of optimizing Website performance and availability. Additionally, data entered by Visitors themselves, when downloading marketing materials, is used for providing information and updates on relevant content.
5. Disclosure of personal data
Orgtomic will not transmit any personal data to third parties, except in the manner specified in the Policy. Any transfer to third parties must comply with the regulations of the Policy and third parties are bound to comply with the regulations of the Policy regarding data handling.
User personal data may be transferred to affiliates, third parties that are contracted by Orgtomic to carry out certain activities or provide certain services and in the case of ownership, organisational and status changes regarding Orgtomic, as well as when such an obligation is expressly stipulated by law. In particular, we provide a limited amount of your information (such as your email and address) to Stripe Payments Malaysia Sdn. Bhd.
6. Storing Personal Data
Orgtomic approaches the storing of personal data conscientiously and with all due care, taking the utmost effort that the data are adequately protected from any form of accidental or deliberate abuse, destruction, loss, unauthorized alteration, disclosure or access.Personal data transmission takes place via the internet and is, in spite of all efforts, never truly secure, therefore Orgtomic does not guarantee the safety of such a transfer and the User/Visitor performs it at their own risk.
After receiving the information from the User/Visitor, Orgtomic will take all necessary measures in order to prevent any misuse of the data.
7. Data security
Customers data is stored in multi-tenant data-stores, we do not have individual data-stores for each customer. However strict privacy controls exist in our application code to ensure data privacy and prevent one customer from accessing another customers data. We have many unit and integration tests in place to ensure these privacy controls work as expected. These tests are run every time our code base is updated and even one single test failing will prevent new code being shipped to production.
All data sent to or from Orgtomic is encrypted in transit using 256 bit encryption. Orgtomic is served 100% over HTTPS.
8. Right to access and change information
9. Data deletion
Your personal information will be retained until it is deleted. Your personal information will be deleted on one of the following occurrences:
- deletion of your personal information by you, the User(or by another person engaged by the User, where you are using the Website and/or Services on behalf of a User).
- written request by you to us (email@example.com)
- automatically, after 1 year of inactivity upon active subscription expiration or cancellation
10. Data portability
11. Data Protection Officer
We have a dedicated Data Protection Officer to help you with any requests or questions you have about your data. You can reach out to us by emailing firstname.lastname@example.org