Privacy Policy
Effective Date: 01/01/2025
Last Updated: 04/01/2025
1. Introduction
At Workstein, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. It complies with applicable data protection laws, including the General Data Protection Regulation (GDPR).
2. Data Controller and Contact Information
Workstein is the data controller responsible for your personal data. If you have any questions or concerns, you can contact us:
- Company Name: Workstein
- Email: info@workstein.com
3. Data We Collect
3.1 Data You Provide Directly
- Name, email address, phone number, and other contact information.
- Job title, employer name, and work-related details.
- Account credentials (e.g., username and password).
- Feedback, survey responses, or other communications with us.
3.2 Data We Collect Automatically
- Device information, such as IP address, browser type, and operating system.
- Usage data, such as interactions with our platform, page views, and session duration.
- Cookies and similar technologies (see Section 9: Cookies Policy).
3.3 Special Categories of Data
We do not intentionally collect sensitive personal data, such as health, religious beliefs, or political affiliations, unless explicitly required and provided with your consent.
4. Legal Bases for Processing
We process your data in accordance with GDPR Article 6 based on the following legal bases:
- Consent: Where you have explicitly agreed to specific processing activities (e.g., email marketing).
- Contractual Necessity: To perform a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: To comply with legal and regulatory requirements.
- Legitimate Interests: To pursue our legitimate business interests, provided they do not override your rights.
5. How We Use Your Data
We use your personal data for the following purposes:
- To provide and manage our services, including user accounts and customer support.
- To improve and personalise your experience on our platform.
- To analyse usage patterns and optimise platform performance.
- To send you updates, marketing communications, and service-related messages (with your consent, where applicable).
- To comply with legal obligations or defend against legal claims.
6. Data Sharing and Disclosure
6.1 Third-Party Service Providers
We use trusted third-party vendors for hosting, analytics, payment processing, and customer support. These providers process your data on our behalf and are bound by strict confidentiality agreements.
6.2 Legal and Regulatory Authorities
We may disclose your data to comply with legal obligations, enforce agreements, or protect our rights.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
7. International Data Transfers
Your data may be transferred outside the European Economic Area (EEA) to countries that do not provide the same level of data protection as the EEA. In such cases, we ensure appropriate safeguards are in place, such as:
- Binding Corporate Rules (BCRs).
- Standard Contractual Clauses (SCCs).
- Explicit consent from you.
8. Data Retention
We retain your data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations:
- Account data: Retained until your account is deleted.
- Transaction data: Retained for at least 7 years for tax and accounting purposes.
- Marketing data: Retained until you withdraw your consent.
9. Cookies Policy
We use cookies and similar technologies to:
- Remember your preferences.
- Analyse platform performance.
- Deliver targeted advertisements (where applicable).
You can manage your cookie preferences through your browser settings. For more details, refer to our Cookies Policy.
10. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (right to be forgotten).
- Restriction: Limit the processing of your data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to data processing based on legitimate interests or direct marketing.
- Withdraw Consent: Withdraw consent for data processing at any time.
To exercise your rights, please contact us at info@workstein.com. You also have the right to lodge a complaint with a supervisory authority, such as the Data Protection Commission in your country.
11. Data Security
We implement robust technical and organisational measures to protect your data against unauthorised access, loss, or misuse. This includes:
- Encryption of sensitive data.
- Regular security audits and vulnerability assessments.
- Restricted access to personal data on a need-to-know basis.
12. Updates to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated to you via email or platform notifications. Please review this policy periodically to stay informed.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
- Email: info@workstein.com
