Privacy Policy

This is the Privacy Policy of Keboola Group companies (collectively “Keboola” or “we”). Keboola develops and licences a data operations platform Keboola Connection and provides various ancillary services, such as support or implementation professional services (together “Services”).

SCOPE OF THIS PRIVACY POLICY

This Privacy Policy describes how Keboola as a data controller collects and uses your personal data if you use our Services or if you show an interest in our Services, for example by subscribing for our newsletter (“you”). This document also provides important information about your rights.

In addition to information below, Keboola as a data processor may also process personal data of individuals who interact with persons or entities who use our Services (each of them a “Subscriber”). Subscribers to our Services act as data controllers and are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations relating to the collection of personal data of such individuals with whom our Subscribers interact. However, we are committed to provide tools for protecting the privacy of such individuals – please refer to the security section of our website. For more information about the purpose and legal grounds of such processing and about the rights of the concerned individual, please refer to the privacy policy (sometimes also referred to as a privacy notice) of the particular Subscriber, as these are out of the scope of this Privacy Policy.

DATA CONTROLLERS

Keboola Czech s.r.o. (Dělnická 191/27, Holešovice, 170 00 Praha 7, Czech Republic), Keboola LLC (20 West Kinzie St, Chicago, 60654, USA) and Keboola Data Services, Inc. (210 - 1461 Johnston Road, White Rock, BC, V4B 3Z4, Canada) are the data controllers for the personal data processed in connection with use of our Services, depending on which entity is party to the contract under which you use the Services. If you are not a user yet, Keboola Czech s.r.o. and Keboola LLC are both data controllers.

You may reach each data controller at their registered address, via our support or at privacy@keboola.com.

PERSONAL DATA WE COLLECT

Data that you provide to us:

When you intend to use, or use our Services, we ask you to provide certain personal data (“Account Data”) to identify you as a contractual party or a user and to allow you to invite other users, if applicable, and to allow you and the invited users to use our Services. These data may include your name, email address, company and other information, such as names and email addresses of users you want to invite. By voluntarily providing us with personal data of invited users, you represent that you are an authorized user of such personal data and no invited user has objected to such processing by us. When you subscribe for our newsletter, we collect and use your email address. We ask for and collect personal data such as your name, address, phone number and email address when you register for or attend an event organized by us. We will make it clear in case some data are collected on a voluntary basis. In absence of such information, the provision of the information is compulsory for you to be able to use our Services.

Data that we collect from you when you use our Services or websites

We use cookies and other information gathering technologies to provide, market and improve our Services. These technologies may provide us with personal data, information about devices and networks you utilize to access our websites or Services, and other information regarding your interactions with our websites or Services. Web beacons, tags and scripts may be used on our websites or in email or other electronic communications we send to you. These assist us in understanding usage and campaign effectiveness and determining whether an email has been opened and acted upon. We gather certain information and store it in log files when you interact with our websites and Services.

Data from other sources

You can log into certain Services using sign-in services such as Google Authentication. These sign-in services will authenticate your identity, without the need to sign in with a username and password combination.

HOW WE USE THE DATA – PURPOSE OF DATA PROCESSING

We use the personal data which we collect about you to:

(a) provide, operate, maintain and improve the Services;

(b) enable you to access and use the Services;

(c) process and complete transactions, and send you related information, including purchase confirmations and invoices ;

(d) send Services messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages;

(e) send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners;

(f) monitor and analyze trends, usage, and activities in connection with our websites and Services and for marketing or advertising purposes;

(g) investigate and prevent fraudulent transactions, unauthorized access to the Services, and other illegal activities;

(h) personalize our websites and Services;

(i) comply with our legal obligations, including our obligations related to personal data protection.

DATA SHARING AND TRANSFERS

We may share your personal data with our affiliates and third-party service providers to provide data-warehousing, development, analytics and other services for us. These third-party service providers may have access to or process your personal data for the purpose of providing these services for us. We do not permit our third-party service providers to use the personal data that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us. By default, we and our service provider process your personal data only within the EU. If the data are exceptionally transferred outside the EU, we do so in accordance with applicable laws and we rely either on adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses.

SECURITY OF YOUR PERSONAL DATA

We take reasonable and appropriate steps to protect your personal data in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction. – please refer to the security section of our website.

LEGAL GROUNDS FOR PROCESSING (IF YOU RESIDE IN EEA, UK OR SWITZERLAND)

We process your data for the purposes described in this Privacy Policy, based on the following legal grounds:

(i) When we’re pursuing legitimate interests:

We process your information for our legitimate interests and those of third parties. This means that we process your information for things like: providing, operating; maintaining, and improving our Services; enabling you to access and use the Services; promoting the Services; sending promotional communications; monitoring and analyzing trends, usage, and activities in connection with our websites and Services; investigating and preventing fraudulent transactions, unauthorized access to the Services, and other illegal activities; personalizing the websites and Services.

(ii) When we’re providing a service:

We process your data to provide a Service you’ve asked for under a contract between you and us. This means that we process your information for things like: enabling you to access and use the Services; processing transactions, and sending you related information; providing customer service and support; personalizing our websites and Services.

(iii) When we’re complying with legal obligations:

We’ll process your data when we have a legal obligation to do so, for example, if we’re responding to a legal process or an enforceable governmental request.

(iv) With your consent:

We may ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time. For example, we may ask for your consent to publish your testimonial, if it includes your identification. If you wish to withdraw your consent, you can contact us at privacy@keboola.com.

YOUR RIGHTS (IF YOU RESIDE IN EEA, UK OR SWITZERLAND)

To the extent available by data protection protection applicable to you (such as GDPR), you may exercise the following rights:

(a) you may request access to your data from us (information about what your specific data we process and how do we work with them); (b) you may request restriction of the processing your data (which means that we do not delete the data but we will not work with them); (c) you may request data deletion and correction (always if the legal conditions are met); (d) you may object to the processing of data – it means that you may refuse data processing based on a legitimate interest and we will limit processing, unless we prove serious and qualified legitimate reasons for the processing; and (e) you may exercise your right to data portability. To exercise any of these rights, contact us via above mentioned contact details - the easiest way is to send us an email to privacy@keboola.com and we would be glad to help you exercise your rights. If you believe that we are violating legal rules by processing your personal data, you have the right to lodge a complaint with the national supervising authority (Czech Office for Personal Data Protection for Keboola Czech s.r.o.).

You can opt-out of receiving newsletters by clicking on the "unsubscribe" link located on the bottom of our newsletters you may send a request to privacy@keboola.com.

CALIFORNIA RESIDENTS

Under the California Consumer Privacy Act (“CCPA”), we are required to inform California residents who are users about the categories of personal information we collect about you and the purposes for which we will use this information. We collect information which you give us at the registration, in particular your name and email address and information about your use of our Services. We use and disclose the personal information we collect for our business purposes as identified in the CCPA for communicating with you about the Services as well as for legal compliance, performing services, internal operations, protection against security incidents and activities to improve and maintain our business. California residents have the right to request that we disclose what personal information we collect from you, to delete that information, and to opt-out of the sale of your personal information, subject to certain restrictions. We do not, and will not, sell your personal information.

MINORS

We do not knowingly collect any personal data from children under the age of 16. If you are under the age of 16, please do not use or submit any personal data through our websites or Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Policy by instructing their children never to provide personal data through our websites or Services without parental permission. If you have reason to believe that a child under the age of 16 has provided personal data to us through our websites or Services, please contact us at privacy@keboola.com, and we will use commercially reasonable efforts to delete that information.

DATA RETENTION AND DELETION

We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax or accounting requirements, to enforce our agreements or comply with our legal obligations). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing, until deletion is possible. When processing data on behalf of our Subscribers, we will retain such data for as long as our customer instructs us to based on our Service contract with the Subscriber and/or as required by applicable law.

CHANGES TO THIS PRIVACY POLICY

We may change this Privacy Policy from time to time. If we make any changes to this Privacy Policy, we will add or change the “Last Updated” date at the top of the page. If such changes are material in nature, we will provide you with additional notice (such as adding a statement to our website or sending you an email notification).