1. Purpose of this Privacy Policy

This website privacy policy describes which personal data is collected when you visit our website getfolyo.com (our “Website”) and how Folyo GmbH, Edelhofgasse 21, 1180 Vienna, Austria, (“Brightscope” or “we”) processes this data as the data controller. This privacy policy is addressed to every visitor of our website (“data subject” or “you”). We process your personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable national data protection laws. Unless otherwise defined in this privacy policy, the terms used here have the same meaning as in the GDPR.

2. What personal data we collect and for what purposes we use it

When you use our website, we may process the personal data that you voluntarily provide to us (e.g., through our contact form). However, you can also visit our website without actively transmitting any information about yourself to us. In this case, we only collect certain data that your browser transmits to our website server (i.e., log files) as well as data that we collect through the use of cookies or similar technologies. The following explanations are intended to inform you about how we collect personal data about you on our website and for what lawful purposes we may use it.

Personal data you actively provide to us.
When you actively communicate with us via our website, we process the personal data you voluntarily provide. This applies in particular to the following services we offer:

– Contact form and chatbox:
If you choose to contact us via the contact form or chatbox provided on our website, the personal data you provide (e.g., name, email address, address) will be processed in order to answer your questions, fulfill your request, or otherwise communicate with you (Art 6 Para 1 lit b GDPR – fulfillment of (pre-)contractual obligations).

– Job applications:
If you choose to contact us to apply for job vacancies published on our website, the personal data you provide (e.g., name, contact details, cover letter, CV data, photo, certificates, and references, etc.) will be processed for the purpose of reviewing your application and considering it in the recruitment process (Art 6 Para 1 lit b GDPR – fulfillment of (pre-)contractual obligations).

– Newsletter:
If you have subscribed to our newsletter via the website, the personal data you provide (e.g., name, email address, product preferences) will be processed in order to send you the requested newsletter with customized information about our products and available promotions. If you no longer wish to receive the newsletter, you can unsubscribe at any time by clicking the corresponding link in the newsletter or by sending us your withdrawal by email. (Art 6 Para 1 lit a GDPR – consent).

– Demo request:
If you have sent us a demo request via the corresponding form, the personal data you provide (e.g., name, email address, job title, company name, phone number) will be processed to enable one of our staff to provide you with the requested demonstration of our products. They will contact you to arrange an appointment for the demonstration (Art 6 Para 1 lit b GDPR – fulfillment of (pre-)contractual obligations).

– Downloading resources:
If you provide your personal data (e.g., name, email address, company name) while downloading one or more of our resources, this data will – depending on the selection you made – be processed to send you the requested newsletter with customized information about our products and available promotions. If you no longer wish to receive the newsletter, you can unsubscribe at any time by clicking the corresponding link in the newsletter or by sending us your withdrawal by email. (Art 6 Para 1 lit a GDPR – consent) and/or to provide you with the requested demonstration of our products by one of our staff. They will contact you to arrange an appointment for the demonstration (Art 6 Para 1 lit b GDPR – fulfillment of (pre-)contractual obligations) and/or for the purpose of direct marketing or other forms of marketing or advertising (Art 6 Para 1 lit f GDPR – legitimate interest of Folyo GmbH). Some of the data we request in connection with our services may be marked as mandatory. If you do not provide the required information, we may not be able to process your request or provide our services.

Log files:
You can also visit our website without actively providing information about yourself. In this case, we collect certain data that your browser transmits to our website server (i.e., log files). Our log files contain the following information: date and time of access to our website, type, version, and settings of your browser, your operating system and service provider, the requested pages and files, the website used before visiting our website, and your IP address. The IP address is a specific number assigned to your computer that allows your device to communicate in a network via the Internet Protocol (IP). IP addresses can qualify as personal data as they allow user identification under certain circumstances. Processing these log files is necessary for us to ensure the functionality, stability, and security of our website. We may also process them in the context of forensic investigations in the event of a security incident or to create user statistics. For statistical purposes, your IP address will only be used in anonymized form.

Legal basis: Art 6 Para 1 lit f GDPR (legitimate interest in maintaining the functionality, stability, and security of our website)

Cookies
This website also uses cookies. These are small text files that may be placed on your device during your visit to our website and store certain information about you. Cookies cannot access, read, or modify any other data stored on your device. When we speak of “cookies,” we also refer to other technologies with similar purposes, such as pixel tags.

We use two types of cookies on our website:

– Necessary cookies:
Without necessary cookies, the proper functionality of our website would not or only be guaranteed to a limited extent. The use of necessary cookies on our website is possible without your consent. However, you can disable cookies at any time by changing your browser settings. A detailed description of the necessary cookies used and their respective processing purposes can be found below in Section 2.7.

Legal basis: Art 6 Para 1 lit f GDPR (legitimate interest)

– Optional cookies:
This type of cookie may be used to improve our website, optimize your user experience, analyze user behavior, or personalize marketing activities. Optional cookies may also be used by external advertising companies (“third-party cookies”). Optional cookies will only be used with your consent, which you can provide by clicking the "Allow cookies" button in our website's cookie banner. This consent can be revoked at any time with future effect. The revocation does not affect the legality of the processing carried out based on the consent up to the revocation. A detailed description of the optional cookies used and their respective processing purposes can be found below in Section 2.8.

Legal basis: Art 6 Para 1 lit a GDPR (consent)

Google Analytics
If you have consented to the use of cookies (including from US partners) by us, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to enable an analysis of your use of the website. The information generated by the cookie about your use of our website (including your IP address and the URLs of the pages you visited) will be transmitted to and stored by Google on servers in the USA. We do not store any personal data collected in connection with Google Analytics. This website uses Google Analytics’ IP anonymization feature. Therefore, your IP address is immediately truncated/anonymized by Google after receipt. Google will use this information on our behalf to evaluate your use of our website, compile reports on website activity, and provide other services related to website activity and internet usage to us. Google will not merge your IP address with other data. Furthermore, this website uses Google Analytics' User-ID feature to track your interactions with our website across devices (laptop, phone, tablet, etc.). This User-ID is anonymized and encrypted and will not be merged with other data. We process your personal data for Google Analytics purposes based on your consent, which you provide by clicking the "Allow cookies (including from US partners)" button on our website's cookie banner (Art 6 Para 1 lit a GDPR). This consent can be revoked at any time with future effect. You can also refuse the use of cookies by making the appropriate settings in your browser. However, please note that in this case, you may not be able to use all the features of this website to their full extent. Furthermore, you can object to the collection and use of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. More information about Google's terms of use and privacy policy can be found at the following link: https://policies.google.com/technologies/partner-sites.

How you can control and manage the use of cookies
By clicking the “Allow cookies (including from US partners)” button in our cookie banner, you consent to the use of the above-mentioned optional cookies on our website. Your consent can be revoked (for all or individual cookies) at any time with future effect by sending your revocation to the following contact info@getfolyo.com. The revocation does not affect the legality of the processing carried out based on the consent up to the revocation. You can also prevent the use of cookies by selecting the appropriate settings in your browser or by deleting the cookies from your device or browser. Most browsers accept cookies automatically. However, you can change your browser settings to delete cookies or prevent their automatic use if you prefer. In general, you can see which cookies have been set and delete them individually, block third-party cookies or cookies from specific websites, accept all cookies, be notified when a cookie is used, or reject all cookies. Select "Options" or "Settings" in your browser to change your preferences and use the following links for further browser-specific information:

Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome
Cookie settings in Safari

Please be aware that any preferences will be lost if you delete all cookies, and many websites may not function properly or some functions may be lost.

3. Recipients of your personal data

For the purposes outlined above, we may disclose your personal data to the following recipients: Our employees, as necessary to provide our services (e.g., if you request certain services via our website); IT service providers that provide hosting, maintenance, and security services for our website; any other (legal) person based on your consent, if necessary; advertising and web analytics partners (e.g., Google LLC) that provide certain services related to our website for us. Please note: We will not share any personal data from EU visitors to our website with non-EU advertising or web analytics partners unless they have consented to the use of cookies from US partners; if disclosure is required (due to laws or regulations or to assert, exercise, or defend legal claims), we may also disclose personal data to competent authorities, such as supervisory, regulatory, or law enforcement authorities, courts, or other third parties who advise us in this regard (e.g., lawyers or forensic experts); our customer relationship management tool (CRM), HubSpot Inc. Please note: We will not share any personal data from EU visitors to our website with HubSpot Inc. without their consent; our social media partners, e.g., LinkedIn Ireland Unlimited Company. Please note: We will not share any personal data from EU visitors to our website with non-EU social media partners unless they have consented to the use of cookies from US partners. Some of these recipients may be located in countries outside the EU or the EEA to which the EU Commission has not yet attested an adequate level of data protection. It should be noted that the level of data protection in these countries may not be the same as within the EU or the EEA. Moreover, it is possible that these data may be subject to access by local authorities or courts under applicable regulations. If we transfer personal data to such third countries, we will obtain your informed and explicit consent in advance (Art 49 Para 1 lit a GDPR) or implement appropriate safeguards to ensure that your rights are protected in accordance with the provisions of the GDPR. This includes the conclusion of the standard contractual clauses for the transfer of personal data published by the EU Commission (Art 46 Para 2 lit c GDPR).

4. How long we store your data

Log files (see Section 2.5 above) are generally retained for a period of three months. Beyond this period, log files will only be retained for the purpose of investigating irregularities or security incidents in our systems. For the storage period of cookies, see Section 2.6 above. In general, we only store your personal data for as long as necessary to fulfill the purpose for which it was collected. In any case, we will store your data for the duration of our contractual or service relationship with you (see Section 2.4 above). Beyond this period, we will retain your personal data to fulfill legal retention obligations (e.g., to comply with the 7-year retention obligation under applicable tax and corporate law provisions). If necessary, we may also retain your data for as long as potential legal claims against us have not yet expired; for certain claims, the statutory limitation period can be up to 30 years. Once there are no legitimate grounds for further retention of personal data, they will either be deleted or anonymized.

5. Updating this privacy policy

We may update this privacy policy to reflect legal, technical, or business changes. When we update this privacy policy, we will take reasonable steps to notify you of the changes made. The date of the “last update” can be found at the beginning of this privacy policy.

6. Links to third-party websites

The website contains links to third-party websites. We have no control over the content or privacy practices of these other websites. Please read the respective privacy policies of any websites you visit.

7. Our contact information

If you have any questions or other concerns about the processing of your personal data by us, please contact us by email at info@getfolyo.com.