Privacy Policy

Privacy Policy PODNOSH LTD APP (Impact Assessment App)

As of May 2022

Table of contents

  1. Identity and contact details of the data controller
  2. Contact details of the data protection officer
  3. General information on data processing
  4. Rights of the data subject
  5. Data Processing in the Podnosh App
  6. Provision of the app and creation of log files
  7. Use of Technical Cookies
  8. Registration
  9. Contact via Email
  10. Corporate Web Presences
  11. Telemetry data
  1. Identity and contact details of the data controller

The data controller responsible in accordance with the purposes of the UK General Data Protection Regulation (UK GDPR) and other data protection regulations is:

Podnosh Ltd
Moseley Exchange, 149-153 Alcester Rd
Birmingham B13 8JP
United Kingdom
Phone: +44 121 364 1740
Email: [email protected]
Website (URL): https://impactassessmentapp.com/

  1. Contact details of the data protection officer

The designated data protection officer is:

DataCo International UK Limited

c/o One Peak Partners, 41 Great Pulteney Street 2nd floor
London W1F 9NZ
United Kingdom
+44 20 3318 17 18
www.dataguard.co.uk

  1. General information on data processing

1. Scope of processing personal data

In general, we only process the personal data of our users to the extent necessary in order to provide a functioning app with our content and services. The processing of personal data regularly only takes place with the consent of the user. Exceptions include cases where prior consent technically cannot be obtained and where the processing of the data is permitted by law.

2. Legal basis for data processing

Art. 6 (1) (a) UK GDPR serves as the legal basis to obtain the consent of the data subject for the processing of their data.

As for the processing of personal data required for the performance of a contract of which the data subject is party, Art. 6 (1) (b) UK GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual activities.

When it is necessary to process personal data in order to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) UK GDPR serves as the legal basis.

If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) UK GDPR serves as the legal basis.

If the processing of data is necessary to safeguard the legitimate interests of our company or that of a third party, and the fundamental rights and freedoms of the data subject do not outweigh the interest of the former, Art. 6 (1) (f) UK GDPR will serve as the legal basis for the processing of data. If the processing of data is necessary to safeguard the legitimate interests of our company or that of a third party, and the fundamental rights and freedoms of the data subject do not outweigh the interest of the former, Art. 6 (1) (f) UK GDPR will serve as the legal basis for the processing of data.

3. Data removal and storage duration

The personal data of the data subject will be erased or restricted as soon as the purpose of its storage has been accomplished. Additional storage may occur if it was provided for by international regulations, laws, or other relevant regulations to which the data controller is subject. Restriction or erasure of the data also takes place when the storage period stipulated by the aforementioned standards expires, unless there is a need to prolong the storage of the data for the purpose of concluding or fulfilling the respective contract.

  1. Rights of the data subject

When your personal data is processed, you are subsequently a data subject in the sense of the UK GDPR and have the following rights:

1. Right to information

You may request from the data controller to confirm whether your personal data is processed by them.

If such processing is the case, you can request the following information from the data controller:

You have the right to request information on whether your personal data will be transmitted to a third country or an international organisation. In this context, you can then request for the appropriate guarantees in accordance with Art. 46 UK GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and/or modification of the data controller, if your processed personal data is incorrect or incomplete. The data controller must correct the data without delay

3. Right to the restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

If the processing of personal data concerning you has been restricted, this data may – with the exception of data storage – only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest.

If the processing has been restricted according to the beforementioned conditions, you will be informed by the data controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

If you request from the data controller to delete your personal data with immediate effect, they are required to do so immediately given that one of the following applies:

b) Information to third parties

If the data controller has made your personal data public and has to delete the data pursuant to Art. 17 (1) UK GDPR, they shall take appropriate measures, including technical means, to inform data processors who process the personal data, that a request has been made to delete all links to such personal data or copies or replications of the personal data, taking into account available technology and implementation costs to execute the process.

c) Exceptions

The right to deletion does not exist if the processing is necessary

5. Right to information

If you have the right of rectification, erasure or restriction of processing over the data controller, they are obliged to notify all recipients to whom your personal data have been disclosed of the correction or erasure of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You reserve the right to be informed about the recipients of your data by the data controller.

6. Right to data portability

You have the right to receive your personal data given to the data controller in a structured, standard and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the data controller who was initially given the data, given that

    • the processing is based on a consent in accordance with Art. 6 (1) (a) UK GDPR or Art. 9 (2) (a) UK GDPR or on a contract in accordance with Art. 6 (1) (b) UK GDPR and
    • the processing is done by automated means.

In exercising this right, you also have the right to maintain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons shall not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the data controller.

7. Right to object

Subject to your situation, you have, at any time, the right to object against the processing of your personal data pursuant to Art. 6 (1) (e) or (f) UK GDPR; this also applies to profiling based on these provisions.

The data controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data in regard to such advertising; this also applies to profiling insofar as it is associated with direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option, in the context of the use of information society services, to exercise your right to object to automated decisions that use technical specifications.

8. Right to withdraw the data protection consent declaration

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.

9. Automated decisions on a case-by-case basis, including profiling

You have the right to not be subjected to a decision based solely on automated processing – including profiling – that will have a legal effect or affect you in a similar manner. This does not apply if the decision:

However, these decisions must not be based on special categories of personal data under Art. 9 (1) UK GDPR, unless Art. 9 (2) (a) or (g) UK GDPR applies, and reasonable measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the data controller shall take appropriate measures to uphold your rights and freedoms as well as your legitimate interests, including the right to obtain assistance from the data controller or their representative, to express your opinion on the matter, and to contest the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to the relevant supervisory authority if you believe that the processing of the personal data concerning you violates the UK GDPR. In the UK, the relevant supervisory authority is the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
https://ico.org.uk/global/contact-us/

The ICO shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 UK GDPR.

  1. Data Processing in the Podnosh Ltd App

On this page, we inform you about the data protection provisions applicable in the Podnosh Ltd App for Android and iOS ("App"). The App is an offer of Podnosh Ltd LTD, Moseley Exchange, 149-153 Alcester Rd, Birmingham B13 8JP, UK ("Podnosh Ltd", "we" or "us").

1. Scope of processing:

Our app enables users to measure, promote and develop their work. The users use the impact assessmentapp to capture the difference their work makes in their client´s development.

Our users are part of community groups, charities and government services.

Functions of the app:

  1. [Functions]

Data processed when using the app:

Third parties do not get access to server log files.

2. Purpose of processing

We process personal data mainly:

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data in the context of the creation and use of a user account is the consent of the user pursuant to Art. 6 (1) (a) UK GDPR.

The processing of technical data serves to protect a legitimate interest of our company to provide a functional application for users and is therefore based on Art. 6 (1) (f) UK GDPR as the legal basis for the processing.

4. Duration of storage

We delete or anonymize your personal data as soon as they are no longer necessary for the purposes for which we process them. The specific storage period depends on how you use our offer. The is the case for the data collected during the registration process if the registration is cancelled or modified on our app.

5. Right to withdraw and object

The user can withdraw his or her consent to data processing at any time informally by going into the user settings located in the profile page. The user can then find the delete account button which will take him or through the steps of removing the user data.

6. Recipients of personal data

We use the following sub processors:

We use these sub-processors for the development and usage of the app. We have concluded data processing agreements with them to ensure lawful processing.

  1. Provision of the app and creation of log files

1. Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in this context:

- The operating system of the user

- Date and time of access

This data is stored in the log files of our system. Third parties do not have access to server log files. This data is not stored together with other personal data of the user.

2. Purpose of data processing

The storage in log files is done to ensure the functionality of the app.

In addition, we use the data to optimize the app and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 (1) (f) UK GDPR.

3. Legal basis for the data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) (f) UK GDPR.

4 Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the app, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible.

5. Possibility of objection and elimination

The collection of data for the provision of the app and the storage of the data in log files is mandatory for the operation of the app. Consequently, there is no possibility of objection on the part of the user.

  1. Use of Technical Cookies

1. Description and scope of data processing

We use technical cookies to enable the use of the app.

The following data is collected in this context:

- Log-in information

- Utilisation of app functionalities

2. Purpose of data processing

The purpose of using technical cookies is to simplify the use of the app for users.

The user data collected by technical cookies are not used to create user profiles.

These purposes are also our legitimate interest in data processing according to Art. 6 (1) (f) UK GDPR.

3. Legal basis for the data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) (f) UK GDPR.

4 Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the app, this is the case when the respective session has ended.

5. Possibility of objection and elimination

The collection of technical cookies data for the provision of the app is mandatory for the operation of the app. Consequently, there is no possibility of objection on the part of the user.

VIII. Registration

1. Description and scope of data processing

We offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected as part of the registration process:

As part of the registration process, the user's consent to the processing of this data is obtained.

2. Purpose of data processing

Registration of the user is required for the provision of certain content and services through our app.

3. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) (a) UK GDPR if the user has given us consent.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for the data collected during the registration process if the registration is cancelled or modified on our app.

5. Withdrawal and removal

As a user you have the possibility to cancel the registration at any time. You can request a change to the data stored about you at any time. You must go into the user settings located in the profile, you can then find the delete account button which will take you through the steps of removing the user data.

IX. Contact via Email

1. Description and scope of data processing

You can contact us via the email address provided. In this case the personal data of the user transmitted with the email will be stored.

The data will be used exclusively for the processing of the conversation.

2. Purpose of data processing

If you contact us via email, this also constitutes the necessary legitimate interest in the processing of the data.

3. Legal basis for data processing

If the user has given consent, the legal basis for processing the data is Art. 6 (1) (a) UK GDPR.

The legal basis for the processing of data transmitted while sending an email is Art. 6 (1) (f) UK GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) UK GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be concluded from the circumstances that the matter in question has been conclusively resolved.

5. Objection and removal

The user has the possibility to withdraw the consent to the processing of their personal data at any time. If the user contacts us by email via [email protected], he or she can object to the storage of his or her personal data at any time.

In this case, all personal data stored while establishing contact will be deleted.

X. Corporate Web Presences

1. Description and scope of data processing

The use of social media platforms with server locations in the USA may result in the processing of personal data outside the EU. To ensure appropriate safeguards to protect the transfer and processing of personal data outside the EU, the transfer of data to and processing of data by social media operators outside the EU takes place on the basis of appropriate safeguards pursuant to Art. 46 UK GDPR, in particular by concluding so-called standard data protection clauses pursuant to Art. 46 (2) (c) UK GDPR.

We use the possibility of corporate presence in the network Twitter and YouTube.

Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

YouTube: Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland.

On our company profile we provide information and offer Twitter and YouTube users the possibility of communication. If you carry out an action on those company profiles (e.g., comments, contributions, likes etc.), you may make personal data (e.g., clear name or photo of your user profile) public.

Our corporate profile in social networks is used for communication and information exchange with (potential) customers. We use the company's profile to provide Information about products and services.

The legal basis for data processing is Art. 6 (1) (f) GDPR.

You can object at any time to the processing of your personal data that we collect within the framework of your use of our Twitter and YouTube corporate web profile and assert your rights as a data subject.

For further information on the processing of your personal data by Twitter and YouTube and the corresponding objection options, please click here: https://policies.google.com/privacy?gl=DE&hl=en

https://twitter.com/en/privacy

Publications on the company appearance can contain the following content:

2. Purpose of data processing

Our corporate presence in social networks is used to promote and support our work.

The legal basis for data processing is Art. 6 (1) (f) GDPR.

The data generated on the company appearance are not stored in our own systems.

3. Legal basis for data processing

You can object at any time to the processing of your personal data that we collect within the framework of your use of our Twitter and YouTube corporate web presence and assert your rights as a data subject.

In that case. please send us an informal e-mail to [email protected].

XI. Telemetry data

1. Description and scope of data processing

We collect telemetry data on our app. We implement this with our internal api.

2. Purpose of data processing

The data is processed for the following purposes:

- Application monitoring

- Bug Fixing

3. Legal basis for data processing

The collection of this data is based on Art. 6 (1) (f) UK GDPR. The platform operator has a legitimate interest in the technically error-free presentation and optimization of its app.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Objection and removal options.

You may object to the processing of your personal information at any time by sending an informal email to [email protected]. All other rights for you as a data subject, you can also address to this email address. In this case, the therapy cannot be continued.

This privacy policy has been created with the assistance ofDataGuard.