Personal Data processed for the following purposes and using the following services:

• • Analytics

    • OVH Data Analytics

      Personal Data: Trackers; Usage Data

  • Backup saving and management

    • OVH Storage and backup

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Building and running All websites under the "INDST.eu" domain name

    • WordPress (self-hosted)

      Personal Data: billing address; city; company name; contact info; country; Data communicated while using the service; date of birth; device information; email address; first name; gender; geographic position; language; last name; password; payment info; phone number; physical address; profession; purchase history; shipping address; Usage Data; username; VAT Number; ZIP/Postal code

  • Collection of privacy-related preferences

    • iubenda Privacy Controls and Cookie Solution

      Personal Data: IP address; Trackers

  • Contacting the User

    • Phone contact

      Personal Data: phone number

    • Contact form

      Personal Data: city; company name; country; county; date of birth; email address; fax number; field of activity; first name; gender; last name; number of employees; phone number; physical address; profession; state; Tax ID; Trackers; Usage Data; User ID; various types of Data; VAT Number; website; ZIP/Postal code

  • Data transfer outside of the UK

    • Data transfers according to a UK adequacy regulation

      Personal Data: various types of Data

  • Data transfer outside the EU

    • Data transfer from the EU and/or Switzerland to the U.S based on Privacy Shield and Data transfer to countries that guarantee European standards

      Personal Data: various types of Data

  • Device permissions for Personal Data access

    • Device permissions for Personal Data access

      Personal Data: Approximate location permission (continuous); Approximate location permission (non-continuous); Calendar permission; Camera permission; Contacts permission; Microphone permission; Phone permission; Photo Library permission; Precise location permission (continuous); Precise location permission (non-continuous); Reminders permission; Siri permission; Storage permission

  • Displaying content from external platforms

    • Google Fonts

      Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service

    • Google Site Search

      Personal Data: Cookies; Usage Data

    • Font Awesome

      Personal Data: Usage Data

    • Bing Maps, Fonts.com Web Fonts, Google Maps widget, OpenStreetMap widget, Vimeo video and YouTube video widget

      Personal Data: Trackers; Usage Data

    • Gravatar

      Personal Data: email address; Usage Data

    • YouTube IFrame Player

      Personal Data: Data communicated in order to use the Service; Data communicated while using the service

    • YouTube video widget (Privacy Enhanced Mode)

      Personal Data: Trackers; Universally unique identifier (UUID); Usage Data

  • Handling activities related to productivity

    • Human resources managed internally

      Personal Data: browsing history; city; education history; email address; first name; interview-related data; job position; last name; number of sessions; phone number; profile picture; session duration; session statistics; social media accounts; user content; work history

  • Handling payments

    • PayPal

      Personal Data: various types of Data as specified in the privacy policy of the service

    • Apple Pay

      Personal Data: billing address; email address; first name; last name; payment info; phone number; purchase history; shipping address; various types of Data as specified in the privacy policy of the service

    • Payment by bank transfer

      Personal Data: company name; first name; last name; payment info; physical address

    • Paysafecard and Skrill

      Personal Data: billing address; device information; email address; first name; last name; payment info; phone number; purchase history; Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

    • Stripe

      Personal Data: billing address; email address; first name; last name; payment info; purchase history; Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

    • Payments processed via the Google Play Store

      Personal Data: billing address; device information; email address; first name; last name; payment info; phone number; purchase history; Trackers; Usage Data

  • Hosting and backend infrastructure

    • OVHcloud

      Personal Data: Usage Data

    • ArubaCloud and Amazon Web Services (AWS)

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Location-based interactions

    • Geolocation

      Personal Data: coarse location; geographic position; precise location

  • Platform services and hosting

    • Google Play Store

      Personal Data: Usage Data

    • App Store Connect

      Personal Data: diagnostics; product interaction; purchase history; search history; Trackers; Universally unique identifier (UUID); Usage Data; User ID

  • Registration and authentication

    • Direct registration and profiling

      Personal Data: billing address; company name; country; county; data relating to the point of sale; date of birth; email address; fax number; field of activity; first name; gender; geographic position; language; last name; marital status; password; phone number; physical address; picture; prefix ; profile picture; shipping address; Social Security number (SSN); state; Tax ID; Trackers; Usage Data; User ID; username; various types of Data; VAT Number; website; workplace; ZIP/Postal code

  • Social features

    • Public profile

      Personal Data: city; company name; country; county; date of birth; email address; first name; gender; geographic position; last name; phone number; physical address; picture; profession; state; username

    • Inviting and suggesting friends

      Personal Data: various types of Data

  • SPAM protection

    • Google reCAPTCHA

      Personal Data: Cookies; Usage Data

    • Cloudflare Bot Management

      Personal Data: app information; Application opens; browser information; browsing history; city; clicks; country; county; custom events; device information; device logs; geography/region; interaction events; IP address; keypress events; language; latitude (of city); launches; longitude (of city); metro area; motion sensor events; mouse movements; number of sessions; operating systems; page events; page views; province; scroll position; scroll-to-page interactions; search history; session duration; session statistics; state; touch events; Trackers; Usage Data; video views; ZIP/Postal code

  • Traffic optimization and distribution

    • Cloudflare

      Personal Data: Cookies; various types of Data as specified in the privacy policy of the service

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

• • Personal Data collected through sources other than the User

    The Owner of All websites under the "INDST.eu" domain name may have legitimately collected Personal Data relating to Users without their knowledge by reusing or sourcing them from third parties on the grounds mentioned in the section specifying the legal basis of processing.
    Where the Owner has collected Personal Data in such a manner, Users may find specific information regarding the source within the relevant sections of this document or by contacting the Owner.

  • Analysis and predictions based on the User’s Data (“profiling”)

    The Owner may use the Personal and Usage Data collected through All websites under the "INDST.eu" domain name to create or update User profiles. This type of Data processing allows the Owner to evaluate User choices, preferences and behaviour for the purposes outlined in the respective section of this document.
    User profiles can also be created through the use of automated tools like algorithms, which can also be provided by third parties. To find out more about the profiling activities performed, Users can check the relevant sections of this document.
    The User always has a right to object to this kind of profiling activity. To find out more about the User's rights and how to exercise them, the User is invited to consult the section of this document outlining the rights of the User.

  • Automated decision-making

    Automated decision-making means that a decision which is likely to have legal effects or similarly significant effects on the User, is taken solely by technological means, without any human intervention. All websites under the "INDST.eu" domain name may use the User's Personal Data to make decisions entirely or partially based on automated processes according to the purposes outlined in this document. All websites under the "INDST.eu" domain name adopts automated decision-making processes as far as necessary to enter into or perform a contract between User and Owner, or on the basis of the User’s explicit consent, where such consent is required by the law.
    Automated decisions are made by technological means – mostly based on algorithms subject to predefined criteria – which may also be provided by third parties.
    The rationale behind the automated decision making is:

    • to enable or otherwise improve the decision-making process;
    • to grant Users fair and unbiased treatment based on consistent and uniform criteria;
    • to reduce the potential harm derived from human error, personal bias and the like which may potentially lead to discrimination or imbalance in the treatment of individuals etc.;
    • to reduce the risk of User's failure to meet their obligation under a contract. To find out more about the purposes, the third-party services, if any, and any specific rationale for automated decisions used within All websites under the "INDST.eu" domain name, Users can check the relevant sections in this document.

    Consequences of automated decision-making processes for Users and rights of Users subjected to it

    As a consequence, Users subject to such processing, are entitled to exercise specific rights aimed at preventing or otherwise limiting the potential effects of the automated decisions taken.
    In particular, Users have the right to:

    • obtain an explanation about any decision taken as a result of automated decision-making and express their point of view regarding this decision;
    • challenge a decision by asking the Owner to reconsider it or take a new decision on a different basis;
    • request and obtain from the Owner human intervention on such processing.

    To learn more about the User’s rights and the means to exercise them, the User is invited to consult the section of this document relating to the rights of the User.

  • Pseudonymous use

    When registering for All websites under the "INDST.eu" domain name, Users have the option to indicate a nickname or pseudonym. In this case, Users' Personal Data shall not be published or made publicly available. Any activity performed by Users on All websites under the "INDST.eu" domain name shall appear in connection with the indicated nickname or pseudonym. However, Users acknowledge and accept that their activity on All websites under the "INDST.eu" domain name, including content, information or any other material possibly uploaded or shared on a voluntary and intentional basis may directly or indirectly reveal their identity.

  • Push notifications

    All websites under the "INDST.eu" domain name may send push notifications to the User to achieve the purposes outlined in this privacy policy.

    Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then change those settings for All websites under the "INDST.eu" domain name, some or all of the apps on the particular device.
    Users must be aware that disabling push notifications may negatively affect the utility of All websites under the "INDST.eu" domain name.

  • Push notifications based on the User's geographic location

    All websites under the "INDST.eu" domain name may use the User's geographic location to send push notifications for the purposes outlined in this privacy policy.

    Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all of the apps on the particular device.

    Users must be aware that disabling push notifications may negatively affect the utility of All websites under the "INDST.eu" domain name.

  • User identification via a universally unique identifier (UUID)

    All websites under the "INDST.eu" domain name may track Users by storing a so-called universally unique identifier (or short UUID) for analytics purposes or for storing Users' preferences. This identifier is generated upon installation of this Application, it persists between Application launches and updates, but it is lost when the User deletes the Application. A reinstall generates a new UUID.

  • Unique device identification

    All websites under the "INDST.eu" domain name may track Users by storing a unique identifier of their device, for analytics purposes or for storing Users' preferences.

  • Transfer of personal information outside of Brazil to countries that guarantee the same protection standards as LGPD

    We can transfer your personal information outside of the Brazilian territory, if the destination country, or the international organization which receives the personal information, provides an adequate level of protection of the personal information according to the ANPD.
    The ANPD authorizes such transfers whenever it considers that country to possess and provide personal information protection standards comparable to those set forth by the LGPD, having taken into account the following:

    • the general and sectoral rules of the legislation in force in the country of destination or in the international organization;
    • the nature of the personal information subject to the transfer;
    • the compliance with the general principles on the protection of the personal information and on the rights of the individuals as set forth in the LGPD;
    • the adoption of suitable security measures;
    • the existence of judicial and institutional guarantees for the respect of personal information protection rights; and
    • any other pertinent circumstance related to the relevant transfer.

  • We do not collect personal information about California consumers below the age of 16

    We do not knowingly collect personal information of consumers who are below the age of 16 nor do we sell or share it.

  • Equal protection of User Data

    All websites under the "INDST.eu" domain name shares User Data only with third parties carefully selected to ensure that they provide the same or equal protection of User Data as stated in this privacy policy and requested by applicable data protection laws. Further information on data processing and privacy practices by third parties can be found in their respective privacy policies.

  • The Service is not directed to children under the age of 13

    Users declare themselves to be adult according to their applicable legislation. Minors may use All websites under the "INDST.eu" domain name only with the assistance of a parent or guardian. Under no circumstance persons under the age of 13 may use All websites under the "INDST.eu" domain name.

  • Transfer of Data outside of Switzerland to third countries that guarantee an adequate level of data protection

    If this is the condition for Data transfer, Personal Data can be transferred outside of Switzerland to a destination country, or international organization guaranteeing an adequate level of protection of the Data according to a decision of the Swiss Federal Council.

  • We do not collect personal data about Virginia consumers below the age of 13

    We do not knowingly collect personal data of Virginia consumers who are below the age of 13 nor do we sell their data or process them for targeted advertising purposes.

  • We do not collect personal data about Utah consumers below the age of 13

    We do not knowingly collect personal data of Utah consumers who are below the age of 13 nor do we sell or process their data for targeted advertising purposes.

  • We do not collect personal data about Connecticut consumers below the age of 13

    We do not knowingly collect personal data of Connecticut consumers who are below the age of 13 nor do we sell or process their data for targeted advertising purposes.

  • We do not collect personal data about Colorado consumers below the age of 13

    We do not knowingly collect personal data of Colorado consumers who are below the age of 13 nor do we sell or process their data for targeted advertising purposes.

Contact information

• • Owner and Data Controller

    INDST.eu
    
    For more information about the owner, contact the following email address:

    Owner contact email: support@indst.eu