PRIVACY POLICY

Your privacy is important to us. That is why we have developed this Privacy Policy that shows how we collect, use, disclose, transfer, and store your personal information.

1. How you can contact us

We, the G-E Financial Analytics GmbH, Immanuelkirchstraße 26, 10405 Berlin, („G-E“) are the controller for any data processing carried out on this website and in the Scorable application (together hereinafter referred to as “website”).

If you have any questions regarding this Privacy Policy, or the collection or processing of your personal data, feel free to contact our data protection officer at privacy@scorable.com, or by mail to our address stated above.

2. How we collect and process your personal data

2.1 Our website

If you visit our website for information purposes only, and if you do not provide personal data by registering for Scorable, we may still collect personal information about you in so-called server log files. Your browser automatically sends the following information to us:

  • your IP address;
  • your browser (type/version);
  • your operating system (including language settings);
  • date and time of your request;
  • websites from which your system accesses our website (referrer URL);
  • websites accessed by your system through our website (redirect URL).

This information is needed to enable and optimize the use of our website, for example by adapting the website to the needs of your device. Your data will not be merged with other data sources.

The legal basis for the data processing is article 6 (1) (f) GDPR because we have a legitimate interest in ensuring the effective operation and user-friendliness of our website. For more information about the collection of personal data on our website, please see the ‘cookies’ section below.

2.2 Scorable user account

In order to use Scorable, you need to set up a user account. In the registration process, we process the following personal data:

  • User and client ID, (encrypted) password;
  • company email address;
  • IP address, browser (type/version), operating system (including language settings), date and time of your request, referrer URL, redirect URL.

After submitting your application you will receive a confirmation and authorization email from us that asks you to click on the link in the email to confirm that you wish to create an account. If you do not click on the activation link within 24 hours your data will be deleted. When you activate your account, you will be asked to set a password.

The legal basis for the processing is article 6 (1) (b) GDPR. The processing is necessary for the effective use of Scorable and the administration of your user account. Your data will be stored until your account is deleted upon your request. Legal retention obligations remain unaffected. If you request to delete your account, all your account information, including all communication, will be deleted.

2.3 Contacting us

If you contact us via the contact form on our website or via email, we will store the details you provide in the contact form and in your email, usually including your name and email address, in order to process your request, and for potential follow-up questions. We do not share this data with third parties without your consent.

The legal basis for this processing is article 6 (1) (f) GDPR because processing your contact request is in both your and our interest, and article 6 (1) (b) GDPR insofar as processing your contact request is necessary for the performance of any contractual agreement for the use of Scorable between you and G-E.

2.4 Cookies

This website uses so-called ‘cookies’. Cookies are small text files that are stored on your computer and saved by your browser. They help to make our website more user-friendly and effective. Most of the cookies we use are ‘session cookies’, which are limited to the duration of your visit to our website. For certain features, we use persistent cookies, which are used to recognise visitors and stored on your computer for future sessions. Persistent cookies are deleted automatically after a set period, which can vary according to the cookie.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you are stored on the basis of article 6 (1) (b) GDPR. If cookies are used to improve the use of the website, the legal basis is article 6 (1) (f) GDPR. We have a legitimate interest in storing cookies to provide our services in an optimized, error-free way.

In addition, we work with other services that help us improve our website or provide additional functionality. Such service providers may use their own cookies.

You can prevent the use of cookies at any time by blocking or disallowing cookies in your browser settings. In addition, you can specifically disable Google Analytics cookies as set detailed in the Google Analytics section below.

2.5 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, the Scorable website uses the IP anonymization functionality. This means that Google will abbreviate your IP address in the European Union (EU) or the European Economic Area (EEA) before transmitting it to the USA. Only in exceptional cases will your full IP address be transferred to a Google server in the USA and abbreviated there. Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage for the website operator. Google does not merge the IP address provided by your browser for Google Analytics with other Google data.
We have entered into a data processing agreement with Google. Additionally, Google is certified under the EU-US Privacy Shield and the Swiss-US Privacy Shield, which ensures an appropriate level of data protection in the United States.

This website uses Google Analytics’ ‘Demographics’ feature. As a result, reports can be produced that contain statements on the age, gender and interests of website visitors. This information originates from Google’s interest-based Google advertising as well as visitor data from third-party providers. The data cannot be associated with a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described below.
You can prevent the use of Google Analytics at any time, either by installing a Google Browser Plugin that will set an opt-out cookie, or through appropriate settings in your browser. For more information, visit https://tools.google.com/dlpage/gaoptout?hl=en and https://www.google.com/analytics/terms/en.htm . For more information on how Google Analytics handles user data, see the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
Google Analytics cookies are stored on the basis of article 6 (1) (f) GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our web website and our advertising.

2.6 Hotjar

As a company based in the European Union, our technology and processes adhere to the strictest legal privacy requirements. In fact, we engaged a specialized law firm to assist us with the process of drafting a policy that is suitable for us, as well as for Hotjar users around the world. While we always recommend you seek legal advice within your territory, we suggest you review the provisions of our Privacy Policy and ensure your own policy mirrors the same principles we have included at https://www.hotjar.com/legal/policies/privacy

3. With whom we share your personal data

3.1 We only share your personal data with third parties as specified in this Privacy Policy, or if we are legally obliged to do so. We may disclose personal data to third party services that process your personal data on our behalf and for the purpose for which the data were collected or originally processed, e.g. to evaluate user behaviour on our website or to provide technical support. Such transfers will be based on legally prescribed data processing agreements. Therefore, our contractors will only use your personal data to the extent necessary to perform their functions, and will be contractually bound to process your personal data only on our behalf and with our authorization.

3.2 Your personal data may be disclosed to following third party contractors:

  • Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland (lead tracking and support);
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (user tracking and analytics);
  • Slack Technologies Limited, 4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland (internal reporting on web log analysis, bug tracking);
  • SendGrid, Inc., 1801 California Street, Suite 500, Denver, CO 80202, USA (email delivery);
  • Splitrock Studio Pty Ltd, Suite 12A 80-82 Keilor Road, Essendon North, VIC 3041, Australia (website bug tracking);
  • Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (cloud hosting service);
  • Salesforce.com, Inc., 415 Mission Street, 3rd Floor, San Francisco, CA 94104, USA (customer relationship management).
  • Hotjar Ltd, Level 2, St Julian’s Business Centre, 3 Elia Zammit Street, St Julian’s STJ 3155, Malta (user tracking, analytics, and feedback platform)

3.3 Some of the recipients mentioned above reside outside the EU/EEA.

Those countries (i.e. Australia, USA) may have different data protection standards than your country of residence. Please note that data processed in a foreign country may also be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will take reasonable measures to ensure an adequate level of data protection when sharing your personal data with recipients in those countries. Where we transfer your personal data to a recipient outside of the EU/EEA, the transfer is safeguarded by a European Commission adequacy decision, by standard contractual clauses adopted by the European Commission, or by certification under the EU-US Privacy shield. You can find further information about these safeguards under https://ec.europa.eu/info/law/law-topic/data-protection_en, or by contacting us under privacy@scorable.com.

3.4 We may disclose anonymous aggregate statistics about our website users in order to describe our services to prospective partners, advertisers, and other reputable third parties, and for other lawful purposes. Such statistics will not include personal data.

3.5 In the event that we undergo re-organisation or are sold to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law. We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).

4. How long we store your personal data

We aim to process your personal data to the least possible extent. We will therefore only store your personal data for as long as is necessary to fulfil the purpose for which the data were originally collected or, if applicable, for as long as is legally required or justified.

5. Your rights

5.1 Right to information

You have the right to request information about and access to your personal data and/or copies of such data. This includes information on the purpose of the use, the category of data used, its recipients and parties entitled to access it and, if possible, the planned period for which the data will be stored or, if that is not possible, the criteria used to determine these periods.

5.2 Right to rectification, blocking, and erasure

You have a right to the rectification, blocking or deletion of your personal data, to the extent the use thereof is inadmissible under data protection law. This is the case in particular if (i) the data is incomplete or incorrect, (ii) it is no longer necessary for the purposes for which it was collected, (iii) the consent on which the processing was based has been revoked, or (iv) you have successfully exercised your right to object to the data processing. In cases where the data is processed by third parties, we will forward your requests for rectification, deletion or restriction of processing to these third parties, unless this proves impossible or is associated with disproportionate efforts.

5.3 Refusal or revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may refuse consent or revoke your previously granted consent at any time. An informal communication to us via email is sufficient for this purpose. The revocation does not affect the legality of the data processing carried out until the time of the revocation.

5.4 Data portability

You have the right to have the data that you have provided to us submitted to you or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another controller, this will be done to the extent technically feasible.

5.5 Automated decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing that will have a legally binding effect on you or a significant adverse effect on you in a similar manner.

5.6 Right to lodge a complaint with the competent supervisory authority

If you believe that your rights have been violated because your personal data have been processed in a manner not in compliance with data protection laws, you have a right to lodge a complaint with the competent supervisory authority.

5.7 Right to object

You have the right to object to the processing of your personal data at any time if we process your data for direct marketing purposes, or if we process your data for the purpose of pursuing our legitimate interests on grounds relating to your particular situation.

6. Amendmends to our Privacy Policy

We reserve the right to change this Privacy Policy in accordance with the applicable data protection laws. This Privacy Policy was last updated on September 20, 2019.