This privacy notice describes the principles of processing the personal data of the users of the web and mobile application Zelos („Service“)
The controller of personal data is Osaühing Motifon, registry code 14441989, address Tuukri põik 10, Tallinn (“Zelos”).
We have also appointed a data protection officer, whom you can contact at support@getzelos.com.
What personal information we collect
When registering as a user, we collect first name, last name, e-mail address, phone number and a photo. The legal basis for processing this data is the fulfillment of the agreement (terms of service).
In the case of personal data generated by the use of the Service (including news feed, feedback, posts, comments, photos, videos, location data etc.), Zelos is considered to be the data processor and the organisation owning the team is considered to be the data controller. The organisation may introduce additional privacy requirements and settings to the team.
In addition, Zelos processes personal data through the use of cookies and other similar technologies (see our Cookie Notice).
Location data
During the use of the Service, location data may be collected. Location data is collected only on the basis of clear and active user consent. If a task in the Service needs to have the location data collected, a notification will pop up and ask for your consent. Location data will be stored 90 days after its collection in order to provide the Service. The organisation owning the team may extend the retention period of the location data if needed and will let the users of the team know about such extension of retention period. The purpose for collecting location data is to manage the completion of tasks and to make it more efficient.
Concerning the location data Zelos is the processor and the team owner is the controller of location data.
For what purpose do we collect personal information
Zelos processes personal data for the following purposes:
• Providing and managing the Service;
• To identify the user;
• Communicating with the user;
• To ensure and fulfill the Terms of service;
• To develop and improve the Service
Access and transfer of personal data
Zelos employees have access to personal data to the extent necessary for the performance of their duties.
User’s personal data may be transferred to third parties (for example, technical support) if this is strictly necessary for the provision of the Service and fulfillment of the terms of use. If personal data is shared with third parties through the Service (including Facebook, Instagram, Twitter), then Zelos is not responsible for third party data protection practices. We recommend that you review the relevant third-party privacy notices.
Security
Personal data is stored on servers located in the European Union (Amazon Web Services). Personal data may be transferred to third parties in the United States but only to companies that have signed up to the Privacy Shield agreement, which provides a sufficient level of security.
Zelos has implemented appropriate technical and organizational measures to ensure the security of personal data, including unauthorized or unlawful processing, and accidental loss, destruction or damage of personal data. All databases are encrypted.
If a personal data breach occurs and such violation may pose a high risk to the privacy of the User, Zelos or the Subscribed User informs the User and the relevant authorities of the breach.
Rights
The user has the right to request the rectification, access and, if necessary, objection to the processing of personal data.
The user may delete his/her personal data using the functions available in the application, after which such data will be anonymized. The personal data will not be deleted if there is a legal basis for its retention.
The user has the right to receive personal data in machine-readable form and to transfer such data to another data processor.
The user has the right to withdraw his/her consent to processing personal data at any time.
In order to exercise your rights on personal data generated during the use of the Service, you must contact the organisation’s administrator.
In order to exercise your rights on personal data provided on registering as a user, please contact Zelos at support@getzelos.com.
Retention
The personal data of the user shall be retained until the user deletes his/her account in Zelos. News feeds, feedbacks, posts, comments, photos, videos etc. stored on the Zelos platform are retained until the organisation’s administrator deletes the data. In order to have this data also deleted, you can use the functions available in the application.
Personal data may be stored in anonymised form for statistical and analytical purposes.
In the event of a dispute, the personal data will be retained until an agreement is reached or until the due date for the claim expires.
Miscellaneous
If the User has given his/her consent, Zelos may send direct marketing messages to the user’s email address. The user can opt out of direct marketing messages at any time.
In case of a request, application or complaint concerning the processing of personal data, please contact support@getzelos.com.
If you have a question, request or a complaint regarding your personal data in the Zelos team eg. news, feedbacks, posts, comments, photos, videos, please contact the organisation’s team owner or administrator.
The user has the right to appeal to your local Data Protection Inspectorate.
Zelos has the right to change this privacy notice at any time. Zelos will notify you of any changes to the privacy notice on its web and mobile applications.