When you use our Services, you entrust us with your personal data and other data that can identify or are associated with you. We take seriously the responsibility to protect and maintain its confidentiality.
We will process the following types of personal data provided directly by you:
One or more of the types of personal data mentioned above will be processed in the following cases:
We process this data to understand which features you use most often and how we can improve the Services and protect you and us against attempts to misuse the Services. We will process the following types of personal data when you interact with our App or website:
We may collect your personal data from third parties and others, including social media platforms, advertisers, statistical data providers or your employer. The data we may receive from third parties is subject to agreements you already have with these. We use reasonable efforts to ensure that these people have all the necessary rights to collect and transfer your data. We may also collect data about you from public sources, such as press articles or public registers and databases.
We will process this data and may corroborate it with data already provided by you in situations such as organizing a media campaign or verifying your identity.
We process your personal data based on a legal basis, such as:
Execution of the Contract
We process your data to provide you with the Services and to comply with our obligations under the Contract.
There are situations where we process your data to pursue our legitimate interests or those of third parties. In these cases, we will consider whether the data processing is necessary and whether the benefits of the processing do not disproportionately contravene your rights and interests.
For example, we will base our data processing on the legitimate interest to:
– maintaining and improving the security of the Services as well as preventing, detecting and remedying security incidents, acts of fraud, abuse or improper use of the Services;
– providing and improving the Services, as well as developing new services and products;
– understanding how you use the Services and customizing them to provide you with a more pleasant experience;
- carrying out research activities in the public interest.
Fulfilling legal obligations
The processing of your personal data may be required by specific statutory provisions and regulations applicable to us.
We request your express consent regarding collecting certain categories of data and processing it for specific purposes.
For example, your personal data is processed based on consent when we ask whether you wish to receive messages for direct marketing purposes.
Provision of Services
Legal basis: execution of the Contract, legitimate interest, legal obligations
We process your data to provide the Services such as:
Service development and analysis
Legal basis: legitimate interest
We process your data to understand how you use the Services and the features you use most often. We may use the data we collect in an anonymized and aggregated form (so that you are not identified) to test the integrity and security of our systems, support research, analyze, improve the Services, and develop new products, services or features.
Prevention of fraud and crime
Legal basis: legitimate interest, legal obligations
We process your personal data for purposes such as detecting, investigating and reporting irregular use that could be considered illegal activities or verifying your identity. In these situations, we may retain the data and disclose it to competent authorities to investigate the facts.
Communication with you
Legal basis: consent, execution of the Contract
We process your personal data to communicate with you in connection with the provision of the Services or to respond to you when you contact us.
Complying with legal obligations and promoting our rights and interests
Legal basis: legitimate interest, legal obligations
We process your personal data:
- to respond to any complaints or requests from you or the competent authorities
- to keep administrative and accounting records, as required by law
- to be able to defend us or file a complaint or legal action.
Marketing and promoting products and services that may be of interest to you.
Legal basis: consent, legitimate interest
The processing of personal data for this purpose may involve:
The right to be informed
This Policy is intended to inform you about how we process your personal data. Feel free to ask us any questions about this Policy or how we process data.
The right of access, modification and rectification
You can always ask us for a copy of the personal data we process about you and to change or rectify it if you think it is wrong or incomplete. Note that you must prove that the new data provided is correct. Also, to allow you access to the data or to respond to a request for modification or rectification of the data, we have to verify the requester's identity.
The right to data deletion
You can request the deletion of your personal data at any time if:
- the personal data are no longer necessary to fulfil the purposes for which they were collected or processed
– you have withdrawn your consent based on which the processing takes place
– you objected to data processing
– we have processed your personal data illegally
– we have a legal obligation to delete the data
Please note that we may refuse your data deletion request if another legal basis (such as compliance with legal obligations) compels us to continue processing your data.
The right to object to the processing of personal data for marketing purposes
You can request that we stop processing your personal data for marketing purposes at any time. Note that you will still receive communications related to the Services (such as notices of changes to the Contract or emails related to the provision of the Services).
The right to object to the processing of personal data based on our legitimate interests or those of third parties
You can request that we stop processing your personal data at any time based on our legitimate interest. However, please note that we may continue to process data if another legal basis (such as compliance with legal obligations) compels us to do so.
Also, if you object to processing your personal data necessary for providing the Services, we will not be able to provide you with certain services or features.
The right to request the restriction of the processing of personal data
You can request the restriction of the processing of your personal data at any time if:
– you ask us to investigate the accuracy of the data
– the data processing is illegal, but you do not want us to delete the data
– we no longer need the personal data, but you ask us to keep it to use it in legal action
– you have objected to data processing, but we need to check whether another legal basis overrides your rights.
The right to portability of personal data
You can request at any time that we transfer your personal data that we process. Suppose we have the necessary means, and this is not prohibited by law or a provision of the competent authorities. In that case, we will transfer your data in a structured and commonly used format.
The right to withdraw your consent to the processing of personal data
You can withdraw your consent to processing your personal data at any time. The withdrawal of consent does not affect the legality of the processing carried out beforehand.
How you can exercise your rights
You may exercise the rights described above by contacting us by email at firstname.lastname@example.org or directly through the Services when this option is available. You can also find full information on how to contact us by post on our contact page.
For security reasons, we will need to verify your identity to respond to your request (for example, we may ask you to provide us with an ID document). In addition, please note that we may require you to pay the costs incurred by us due to an excessive or unfounded claim.
You may also lodge a complaint with your local data protection authority. For individuals residing in the European Economic Area, appropriate contact details may be found here. For UK residents, the Information Commissioner’s Office website may be found here.
We transfer your data in the following ways:
We may share or make publicly available within the Services your personal data in order for you to access certain features of the Services. For example, we may share your name or other identifying information if you choose to give us a review or post a comment on our blog.
We do not and will never sell your personal data.
We engage third-party vendors and external collaborators to enable us to provide and improve the Services. These third parties have access to your data based on your consent or another legal basis, which they process only for the purposes indicated by us. In addition, we constantly assess whether these third parties have implemented and maintained adequate technical and organizational data security and privacy measures. You can find the full list and the role of each of them on our page dedicated to Third Party Providers, External Collaborators and Affiliated Entities.
– companies that provide us with the technical, organizational, analytical and security infrastructure necessary to provide the Services to you, such as data storage and hosting, IT services or customer support providers
– external collaborators that provide certain legal and accounting services
– courts and other public authorities
In certain situations, we may be required to transfer your data to law enforcement authorities, following their express requests, as required by law.
We may also process and transfer your data when we reasonably believe this is necessary to detect, combat, remedy or respond to fraud, unauthorized use of the Services or breach of the Contract. We do this to protect ourselves, you and others during investigations by competent authorities or legal action.
If we terminate your account because you have violated our terms or policies, please be aware that we will need to continue to store your data for the period of time necessary to prevent and reduce the risk of repeated or new abuse violations.
Cookies are small, often encrypted text files, located in browser directories. They are used by web developers to help users navigate their websites efficiently and perform certain functions. You can learn more about cookies at https://www.allaboutcookies.org/
Essential cookies. These cookies are necessary in order for us to be able to provide the Services.
Analytics Cookies. We and our Subprocessors use these cookies to analyze how people are using our Services and evaluate their performance.
– Google Analytics: Google Analytics is a web analysis service that helps us understand how people visit our websites. For example: from which web page you accessed our website, which pages you accessed and how long you spent on them. The information provided by Google Analytics is available to us in an anonymized form. You can learn more about how Google processes your personal data here.
– Manage cookies on Internet Explorer
– Manage cookies on Firefox
– Manage cookies on Chrome
– Manage cookies on Safari
Depending on your location and the services provided, your personal data may be transferred, stored and processed outside your country of residence in the locations where our third-party providers carry out their operations. We make reasonable efforts to ensure that they have implemented adequate data protection and security measures so that your data enjoys the level of protection required by regulations such as the General Data Protection Regulation. We have entered into data processing agreements with each of our third-party suppliers, which include, among other things, their contractual obligation to implement and maintain appropriate data protection procedures and measures.
When we transfer your data outside the European Economic Area, we do so on a legal basis and consider several legal mechanisms, such as Standard Contractual Clauses approved by the European Commission and supplier certification under the EU-US Privacy Shield.
In principle, we only store your data for as long as necessary to provide the Services or until we can comply with a request from you to delete your data – whichever comes first. However, we retain certain personal data even after these situations, such as when the processing is based on a legitimate interest or compliance with a legal obligation.
The controller of your personal data is Little Big Things LLC (“us”, “we”), a company registered in the United States, with its principal office at 1309 Coffeen Avenue STE 1200 Sheridan, Wyoming 82801 USA.
Regarding your personal data, you can contact us by email at email@example.com.