Last Updated: August 30, 2024
This Privacy Policy describes the rules and principles for collecting and processing Users’ personal data by Deveit sp.z o.o, a company registered under Polish law with its legal address at ul. Gabrieli Zapolskiej 44, 30-126 Krakow, Poland.
The Privacy Policy (“Policy”) outlines the procedures for collecting, processing, storing, and transferring personal data, establishes the legal grounds for processing such data, and governs Users’ rights in accordance with applicable data protection laws.
In this Policy, terms such as “we,” “our,” or “us” refer to Deveit sp.z o.o (hereinafter “Deveit”), depending on the context. The terms “you,” “your,” or “yours” refer to Users of our web service.
We are committed to ensuring the confidentiality and protection of your personal data. All collected data will be processed solely within the scope defined by this Policy. Deveit will collect and use your data only for the purposes specified in this Policy.
Your decision to use our web service and provide your personal data is voluntary. However, if you choose not to provide the necessary information, it may limit your ability to use certain features of the Service.
Deveit sp.z o.o (hereinafter “Company”) is committed to protecting your privacy. This Policy explains how we collect, use, and safeguard your personal data while using our Service.
TERMS AND DEFINITIONS
In this Policy, the following terms are used with the meanings specified below:
Personal Data – any information that relates directly or indirectly to an identified or identifiable natural person (data subject), including but not limited to IP addresses, language and time zone settings, device information, email addresses, User IDs, access keys to integrated platforms, and other data provided by Users during their interaction with the Service.
User – an individual or entity that uses the Deveit Service for personal or commercial purposes and provides Personal Data during registration or while using the Service’s features.
Service – the website, applications, and other online resources provided by Deveit, intended for use by Users.
Cookies – small text files stored on the User’s device when visiting the Deveit website, used to retain information about the user session, settings, and other preferences.
GDPR – General Data Protection Regulation, an EU regulation that governs the processing of Personal Data of EU citizens and ensures their protection.
CCPA – California Consumer Privacy Act, a California state law that grants consumers control over how their Personal Data is collected and used.
TYPES OF PERSONAL DATA WE COLLECT
Deveit is committed to ensuring a high level of User confidentiality by minimizing the amount of Personal Data we collect. We do not collect or process information such as names, surnames, addresses, phone numbers, payment card details, bank account information, geolocation data, or special categories of Personal Data, including information about racial or ethnic origin, religious or philosophical beliefs, sexual life and orientation, political views, union membership, health information, as well as genetic and biometric data. We also do not collect information about criminal convictions and offenses committed by Users.
Personal data collected automatically. During interactions with the Service, some information about Users is collected automatically through our web application. We may collect the following Personal Data:
IP address is used to determine the User’s connection location, set language preferences, and ensure security. IP addresses also help us detect suspicious activities and prevent unauthorized access to the Service.
Time zone and language settings help provide appropriate localization and improve the user experience by adapting the interface and functionality according to the user’s language and regional settings.
Device information includes data about the type of device (e.g., mobile phone, tablet, or computer), operating system, browser version, and other technical specifications used to enhance interaction with the Service, ensure its smooth operation, and optimize content display.
Cookies and similar technologies are used to collect data about user activity on our website. This includes storing user preferences, monitoring sessions, and analyzing interactions with the Service to improve its functionality.
Webhook data ensures Service continuity, monitors technical status, and responds addresses are used for communicating with users and sending important updates, notifications, and marketing materials (with user quickly to potential issues. This data may include technical details about user sessions, server requests, and other operational data.
User IDs are used to manage accounts, provide personalized experiences, and ensure convenience in using the Service. User IDs facilitate effective support and resolve technical issues.
Personal Data provided by Users voluntarily. We also collect Personal Data that Users provide voluntarily during interactions with our support service or while using the Service. This data includes the following categories.
Name and surname are used to identify Users when providing Services and ensure a personalized approach. Names are necessary for account creation and management, as well as for granting access to certain Service features.
Email address is used for communication with Users, sending important updates, notifications, and marketing materials (with User consent). They are also used for account recovery and other security-related operations.
Email content includes the content of emails sent and received through our Service, primarily through integrations with platforms like BigCommerce and Shopify. Personal Data contained in emails may pertain to both Users and their clients.
Access keys provided by Users for integration with external services such as BigCommerce, Shopify, and others. These keys are used to ensure seamless integration and process automation. Keys are retained until the setup is completed or the User removes them.
Information from emails sent to addresses provided by the Service will be stored. These emails may contain Personal Data from the Users who created the forms and the end-users who submit them.
Auto-configuration functionality for integrations such as for BigCommerce. When using auto-configuration features, access keys to the store provided by the User will be stored until the setup is complete. This data is kept to ensure proper integration setup and is deleted after the process is finished.
Other data provided by the User. This may include profile settings, usage information, subscription data, transaction history, and other data voluntarily provided by the User to enhance their experience with the Service.
METHODS OF COLLECTING PERSONAL DATA
Filling out registration forms. Users provide their data when creating an account or subscribing to the Deveit Service by filling out registration forms on our website. This may include name and surname names, email addresses, and other information required for registration.
Automatic data collection via the Service. During interactions with the Deveit Service, some data is automatically collected. This includes the IP address, device type, operating system version, browser version, language settings, and time zone. This information helps ensure the smooth operation of the Service and optimize the User experience.
Data collection via Cookies. The Deveit Service uses Cookies and other tracking technologies to collect information about User activity on our website, store their preferences, and improve ease of use. Cookies also help us analyze traffic and assess the effectiveness of marketing campaigns.
Data transmission via webhooks. When Users integrate Deveit with other platforms (such as BigCommerce or Shopify), webhooks may be used to transmit and process data, automating processes and ensuring the proper functioning of integrations.
Voluntary data collection during support requests. Users may provide Personal Data when contacting Deveit’s support service via email, chat, or phone. This data may include any information Users voluntarily provide to resolve technical issues or improve service quality.
Data collection through integrations with other platforms. Deveit integrates with other platforms, such as BigCommerce and Shopify, to provide services to Users. Access keys and other data necessary for the proper functioning of integrations may be collected during such integrations.
Data collection via feedback forms and surveys. Users may fill out feedback forms or participate in surveys on our website. This information is used to improve the Service, optimize functionality, and adapt it to the needs of Users.
AGE RESTRICTIONS FOR USERS
The Service is intended exclusively for individuals aged 18 or older or authorized representatives of legal entities. The use of the Service by minors is prohibited.
We do not knowingly collect or process Personal Data from individuals under 18. If we become aware that an individual under 18 has provided us with their Personal Data, such data will be immediately deleted.
If you witness or suspect that a minor is using our Service, please notify us immediately so that we can take appropriate action.
The Service may also include features that allow for age restrictions on access to certain content or Services. This provides an additional layer of protection for minors from accessing materials that may be inappropriate for their age.
PURPOSES FOR USING PERSONAL DATA
We collect and use Personal Data for various purposes to ensure our Service’s quality and security, while enhancing your User experience. The primary purposes include:
Providing and improving our services. We use Users’ Personal Data to operate the Service, give you access to its features, and continuously improve our offerings based on your feedback and experience.
Email content analysis. The content of emails sent through our Service may be analyzed to maintain quality standards, enhance communication, and offer personalized solutions to Users.
Generating reports and analytics. We utilize collected data to generate reports and conduct analytics, helping us better understand how Users interact with our Service and make informed decisions for its improvement.
Service protection and security. Data is used to maintain the security of the Service, including detecting and preventing fraud, protecting against unauthorized access, and ensuring compliance with information security standards.
Communicating with you about updates, changes, or technical support. We may use your contact information to notify you about important updates, changes to the Service, technical issues, or to provide support.
MAILING AND PROMOTIONAL OFFERS
We may use your Personal Data to send you newsletters and promotional offers related to our Service, including new features, special promotions, or other news that may interest you.
Please note that promotional offers may be added or removed at our discretion, and they are available for a limited time. We encourage you to pay attention to the validity period of these offers to take advantage of them before they expire.
If you prefer not to receive such communications, you can always opt out. Simply use the unsubscribe link provided in every email or contact our support team to adjust your communication preferences.
We respect your choices and ensure that you will no longer receive these messages once you unsubscribe, except when necessary to provide core Service services.
PERSONAL DATA RETENTION PERIOD
Your Personal Data is retained for as long as necessary to fulfill the purposes described in this Policy or as required by law. We make every effort to ensure the security of your Personal Data throughout the retention period.
For free account Users, Personal Data is stored for a shorter period and in a more limited capacity compared to data from paid accounts. This limitation applies to both the amount of information collected and the duration for which it is stored.
For paid accounts, where Users have access to enhanced features and a broader range of Services, Personal Data may be retained for a longer time to ensure proper service and support.
We comply with local legal requirements for storing and processing Personal Data. In jurisdictions where the law mandates data retention for a specific period (such as the GDPR in the European Union or the CCPA in California), we ensure adherence to those regulations. Once the legally required period or the purpose of data processing has been fulfilled, your Personal Data will be securely deleted or anonymized.
Specifically, in the event of account termination or discontinuation of Service use, we retain Personal Data only for the time necessary to fulfill legal obligations, resolve disputes, or protect our rights.
We use automated systems to delete or anonymize your Personal Data once the retention period has ended. All deletion processes are carried out in compliance with our internal security policies and legal requirements. Data anonymization involves converting the information into a format that no longer allows you to be identified as an individual.
DATA SECURITY AND DATA PROTECTION OFFICER (DPO)
We use modern technologies and methods to protect your Personal Data, adhering to the legal requirements of the European Union and Poland, particularly the General Data Protection Regulation (GDPR) and the Polish Personal Data Protection Act.
Technological security measures. Data Encryption. We implement AES-256 (Advanced Encryption Standard) data encryption to ensure the highest level of security for your Personal Data. AES-256 is used both for encrypting data at rest in our databases and during its transmission over the internet via SSL/TLS protocols. This protects against unauthorized access and meets international security standards.
Access control. Access to Personal Data is strictly limited to employees and contractors who require it to perform their duties. We use multi-level access control, including multi-factor authentication, to prevent unauthorized system access.
Physical server security. Our servers are located in data centers that comply with the highest physical security standards. These centers use video surveillance, access control systems, security alarms, and other measures to prevent unauthorized access to data.
Role of the Data Protection Officer (DPO). In accordance with Article 37 of the GDPR, we have appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with data protection laws. The DPO’s main responsibilities include:
Monitoring legal compliance: The DPO ensures that our data processing activities comply with GDPR and the Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych).
Advising on security measures: The DPO advises the company on implementing necessary technical and organizational measures to ensure the security and confidentiality of data.
Interaction with regulatory authorities: The DPO is the primary point of contact for interactions with data protection regulatory authorities, including Poland’s Chief Data Protection Inspector (UODO).
Communication with Users: The DPO also serves as the contact person for users who have questions or concerns about the processing of their Personal Data.
We strictly comply with the requirements of Article 32 of the GDPR regarding data processing security, and we implement appropriate measures to ensure the integrity and confidentiality of data.
Legal Framework:
General Data Protection Regulation (GDPR): Articles 32-34 outline security requirements for data processing, including encryption and other security measures.
Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych): This law, based on GDPR provisions, regulates data protection in Poland and includes security requirements for organizations handling Personal Data.
INTERNATIONAL TRANSFER OF PERSONAL DATA
Your Personal Data may be transferred outside your country for processing, including to countries that are not part of the European Union. We recognize the importance of ensuring the security and confidentiality of your data during international transfers, and we take all necessary measures to provide an adequate level of protection, regardless of where it is processed.
GDPR compliance. We guarantee that any transfer of your Personal Data outside the European Economic Area (EEA) is conducted in compliance with the General Data Protection Regulation (GDPR). Specifically, this means:
Adequacy of the protection level. We only transfer data to countries that have been recognized by the European Commission as providing an adequate level of data protection.
Standard Contractual Clauses (SCC). In cases where data is transferred to countries without an adequacy decision, we implement Standard Contractual Clauses (SCCs) approved by the European Commission to ensure a sufficient level of data protection.
Additional safeguards. We may also implement additional technical and organizational measures, such as encryption and access controls, to safeguard your Personal Data during international transfers.
Third-Party data transfers. When we transfer your Personal Data to third parties located outside the EEA, we ensure that such third parties comply with data protection requirements under GDPR and other applicable laws. We enter into appropriate agreements that include data protection provisions to ensure the confidentiality and security of your data.
Legal basis. Articles 44-50 of the GDPR govern the transfer of Personal Data to countries outside the EEA and establish the required safeguards to ensure adequate protection.
If we transfer your data to countries that do not provide adequate data protection, according to the European Commission, we use Standard Contractual Clauses (SCCs). We may also implement additional technical and organizational measures, such as encryption and access control, to protect your Personal Data during international transfers.
INTEGRATED THIRD-PARTY SERVICES
To ensure the efficient operation of our Service, we utilize third-party services, such as hosting from Digital Ocean and the payment system Stripe. These services help us maintain the reliability, security, and quality of our Service. However, we do not transfer your Personal Data to other third parties without your consent, except as required by law.
Interaction with Third-Party Privacy Policies. Users interacting with our Service are automatically subject to the privacy policies of the third-party services we integrate.We recommend reviewing the privacy policies of these services to understand how they handle your Personal Data. You can find more information on their privacy policies via the following links:
Integration of additional services. We reserve the right to integrate additional third-party services to improve our Service or provide new features without prior notice to Users. All newly integrated services will comply with the security and privacy requirements outlined in this Policy.
If we need to transfer your Personal Data to a new service, we will ensure the transfer complies with legal requirements and that all necessary protective measures are in place.
We continuously review and update our integrations to ensure the highest level of security and effectiveness of our Service. If you have any questions about using third-party services, you may contact us for further information.
We reserve the right to add new third-party services without prior notice to Users if necessary for enhancing the functionality of our Service. Information about new integrations will be included in our Privacy Policy, and you can find updates on this page.
ADVERTISING AND ANALYTICS SERVICES
We utilize several third-party advertising and analytics services to ensure the efficient operation of our Service, analyze user interaction with our website, and improve marketing strategies. We fully comply with international legislation, particularly the General Data Protection Regulation (GDPR) in the European Union and Poland’s Personal Data Protection Act.
Analytics Services: Google Analytics. We use Google Analytics to collect and analyze website visitors’ data. This service helps us understand how users interact with our Service, allowing us to enhance its functionality and user-friendliness. Google Analytics uses cookies to collect information such as IP addresses, visit times, pages viewed, and other user activity statistics. It is important to note that this data is anonymized, and we do not use it to identify individuals. The Google Analytics Privacy Policy can be accessed here.
Advertising Service: Google Ads. We plan to use Google Ads to promote our Service, attracting new users and increasing our online visibility. Google Ads uses cookies and other technologies to track the effectiveness of ad campaigns and deliver personalized ads based on users’ online activity. This will help us target the audience most interested in our services. The Google Ads Privacy Policy can be accessed here.
Compliance with legislation. The use of advertising and analytics services complies with the requirements of the GDPR and Poland’s Personal Data Protection Act. This includes:
User consent. We collect User consent to use Сookies for data collection necessary for the operation of advertising and analytics services. Users can change their Сookie settings or withdraw consent at any time through browser settings.
Data anonymization. Data collected through analytics services, such as Google Analytics, is anonymized to avoid identifying Users.
Right to access and deletion. Users have the right to access their Personal Data collected through these services and request its deletion under Articles 15-18 of the GDPR.
Data transfer outside the EU. In cases where data is transferred to services based outside the European Economic Area (EEA), we ensure compliance with GDPR requirements by using Standard Contractual Clauses (SCC) or other mechanisms approved by the European Commission.
USER RIGHTS
Under the General Data Protection Regulation (GDPR), Users have the following rights regarding their Personal Data:
Right to access (Article 15 GDPR): You have the right to know how your Personal Data is being processed, including the purposes of the processing, the categories of data being processed, and the recipients or categories of recipients who have received or will receive your data. You also have the right to request a copy of the Personal Data we store about you.
Right to rectification (Article 16 GDPR): If your Personal Data is inaccurate or incomplete, you have the right to request correction without undue delay.
Right to erasure (“Right to be forgotten,” Article 17 GDPR): You have the right to request the deletion of your Personal Data if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal basis for processing. This right also applies if your data is being processed unlawfully or if deletion is required to comply with legal obligations.
Right to restrict processing (Article 18 GDPR): You have the right to request the restriction of the processing of your Personal Data under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful, but you oppose erasure.
Right to object (Article 21 GDPR): You have the right to object to the processing of your Personal Data in some instances, particularly if the data is being processed for direct marketing purposes or based on the company’s legitimate interests. Upon objection, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing.
Right to data portability (Article 20 GDPR): You have the right to receive your Personal Data, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance from us.
Right to withdraw consent (Article 7 GDPR): If the processing of your Personal Data is based on your consent, you have the right to withdraw that consent at any time. However, this does not affect the lawfulness of the processing that was carried out before the withdrawal of consent.
If you wish to withdraw your consent for the processing of your Personal Data, you may contact our support team. Withdrawing your consent does not affect the legality of the processing done based on your consent prior to its withdrawal.
DATA BREACH NOTIFICATION
We are committed to informing you of any data breach that may affect your Personal Data. If we discover a data breach that poses a high risk to your rights and freedoms, we will promptly notify you and the relevant supervisory authorities in accordance with GDPR requirements (Article 34).
These notifications will include details about the nature of the breach, the measures taken to address it, and recommendations on minimizing any potential negative effects.
DISCLAIMER
We make every effort to protect your Personal Data and ensure its security in accordance with this Privacy Policy and applicable laws. However, we cannot guarantee absolute security of your data in cases of force majeure or actions by third parties that are beyond our control.
Our disclaimer includes the following:
Technical failures or attacks. We are not liable for the loss or compromise of Personal Data resulting from technical failures, cyber-attacks, virus infections, unauthorized third-party access, or other similar events that could not have been anticipated or prevented through reasonable security measures.
Force majeure events. We are not responsible for any damages caused by force majeure events, such as natural disasters, wars, terrorist acts, government regulations, or other events beyond our control.
User errors. We are not responsible for the consequences of User errors, such as sharing account credentials with third parties, failing to safeguard Personal Data, or violating the terms of use of our Service.
Use of third-party services. We are not responsible for the privacy policies, security measures, or actions of third-party services you interact with through our Service. We recommend reviewing the privacy policies of such services before using them.
ADDITIONAL PRIVACY NOTICE FOR USERS
California Privacy Notice. In accordance with the California Consumer Privacy Act (CCPA), California residents have additional rights concerning their Personal Data. These rights include:
Right to know: California residents have the right to know what Personal Data is collected about them, the sources of this data, the purpose of processing, and the categories of third parties with whom this data may be shared.
Right to deletion: California residents have the right to request the deletion of their Personal Data, except where retention is necessary to fulfill contractual obligations, comply with legal duties, ensure security, or for other legitimate purposes outlined by the CCPA.
Right to opt-out of data sales: California residents have the right to opt-out of the sale of their Personal Data to third parties. If we plan to sell Personal Data, we will provide you with an opportunity to opt-out of this process. For more details on your rights under the CCPA, visit the official California government website or contact us directly.
European Union Privacy Notice (GDPR): Residents of the European Union have rights under the General Data Protection Regulation (GDPR). These rights include access to their data, correction, deletion, restriction of processing, objection to processing, and data portability. We comply with GDPR requirements and ensure an adequate level of protection for your data.
Canadian Privacy Notice (PIPEDA): Under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canadian residents have the right to know what Personal Data is collected, the purposes for which it is used, and the ability to correct or delete it. We ensure transparency and compliance with our obligations regarding Personal Data processing under PIPEDA.
Australian Privacy Notice (Australian Privacy Act): In accordance with the Australian Privacy Act, residents of Australia have the right to know what Personal Data is collected about them, the right to request access to their data, and the right to request correction or deletion. We adhere to the privacy standards set forth by this law and ensure that your data is properly protected.
United Kingdom Privacy Notice (UK GDPR): The UK GDPR governs the protection of Personal Data in the United Kingdom. Residents of the UK have similar rights to those under the European GDPR, including the right to access, correct, delete, restrict processing, and object to the processing of their Personal Data.
USE OF COOKIES
Our Service uses Cookies and similar technologies to provide the best user experience, analyze traffic, and personalize content. Cookies are small text files stored on your device when you visit our website.
Types of Cookies we use:
Necessary Cookies. These Cookies are essential for the proper functioning of our Service. They enable you to navigate the site and use its features, such as accessing secure areas. Without these Сookies, certain services, like shopping carts or electronic invoicing, would not be possible.
Functional Cookies. These Cookies allow our Service to remember your preferences (such as language or region selection) and provide enhanced, personalized features. They may also be used to remember your settings, such as font size, fonts, and other customizable options on our Service.
Analytical and performance Cookies. We use these Cookies to gather information about how Users interact with our Service so we can improve its functionality. For example, they may collect data on the most visited pages or errors that occur during use. All information collected by these Сookies is anonymous and used solely to enhance the performance of our Service.
Advertising Cookies. These Cookies track how you use our Service and allow us to display advertisements that are most relevant to you. They also limit the number of times you see an ad and help measure the effectiveness of advertising campaigns. These cookies may be shared with third parties, such as ad networks.
How to manage Cookies. You can control and/or delete Cookies on your device according to your preferences. Most browsers automatically accept Cookies, but you can modify your browser settings to refuse Cookies or receive a warning before they are stored. Please note that disabling Cookies may impact the functionality of our Service and limit your access to certain features.
Consent to Cookies. By using our Service, you agree to the use of Cookies in accordance with this Policy. If you disagree with using Cookies, please adjust your browser settings or discontinue using our Service.
CHANGES TO THIS POLICY
We may update this Privacy Policy occasionally to reflect changes in our data processing practices, legal requirements, or in response to new regulatory obligations. All changes will be posted on this page, along with the date of the latest update, so that you always have access to the current version of the Policy.
If any changes are significant, we may notify you directly, for example, via email or by posting a notice on the main page of our Service. We will do our best to ensure that you are informed about any changes that may affect your rights and privacy.
Your continued use of our Service after changes to this Policy indicates your acceptance of the new terms. We encourage you to periodically review this page to stay informed about how we protect your Personal Data and what updates have been made.
If you do not agree with any changes to this Policy, you may discontinue using our Service and contact us to request the deletion of your Personal Data, in accordance with your rights.
If there are significant changes to this Privacy Policy, we may notify you via email or other means, such as posting a notice on our website. Your continued use of our Service after such changes will be considered as your acceptance of the new terms. If you disagree with the changes, you can stop using our Service.
Last updated on: 11.01.2025.
CONTACT INFORMATION
If you have any questions, concerns, or comments regarding this Privacy Policy or the processing of your Personal Data, we are here to help. You can reach our support team via email at: support@formlogger.com.
How to contact us:
Email: The quickest way to get in touch is by sending us an email. We strive to respond to all inquiries within 48 hours.
Website feedback form: You can also use the feedback form available on our website. Fill in all the required fields, and our support specialists will get back to you as soon as possible.
What we offer:
Answers to Privacy Policy Questions: If you want to learn more about how we collect, process, and store your Personal Data, our support team is ready to provide all the necessary information.
Assistance with exercising your data rights: If you wish to exercise your rights, such as access, correction, or deletion of your Personal Data, our team will guide you through the necessary steps.
Technical issue resolution: If you encounter technical difficulties while using our Service, our technical support specialists will provide instructions and assistance to resolve the issue.
