OUr Privacy Policy

While using our Website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you.

Personally identifiable information (“Personal Information”) may include, but is not limited to:
• Name
• Email address (personal or business)
• Username
• Login data
• Audit logs
‍
Before using our Application, you will grant us access to your organization’s Microsoft 365 which allows us to read the information necessary to operate the application.

This includes but is not limited to:
• Organization name
• Tenant ID
‍
We will not access any more information than strictly required to operate the Application. We will not sell or otherwise share any information except when required by law.

Before you use our Website or Application, we may collect publicly available information about you in order to contact you about our Application. We do so on the basis of our legitimate interest in offering our services to organizations that may benefit from them. You may object to this processing at any time, and we will then stop contacting you.

When you provide your contact details, for example by email or through a contact form, we process them to answer your question, to arrange a demonstration or to take steps at your request before entering into an agreement. Where we rely on your consent, you may withdraw it at any time by contacting us.

You have the right to access, correct, delete, or restrict the processing of your data. You can also request data portability or object to specific processing activities. We aim to respond to your request within one month.

Personal Information is processed solely for the purposes described in this privacy statement. When the data is no longer required, it will either be deleted or anonymized, except where legal retention obligations apply.

When an organization becomes our customer, we process the personal data of the people who represent that organization, such as their name, business email address and telephone number. We use these details to enter into and perform the agreement, to send invoices, to handle support requests, to send service announcements and to maintain the customer relationship. We keep support tickets, correspondence and notes of the conversations we have with them for as long as the relationship requires, and our invoicing records for as long as the law requires us to.

For this processing we are the controller ourselves. It is separate from the personal data that our customers store within the Application, which we process on their behalf as a processor under our Data Processor Agreement. Representatives of our customers can exercise their rights, including the right of access to the notes we hold about them, directly with us at the address below.

We may also invite these representatives by email to take part in a customer satisfaction survey. We do so on the basis of our legitimate interest in improving our service. Every invitation contains an option to opt out, and we will not send further invitations once someone has done so.

We collect information that your browser sends whenever you visit our Website or Application (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.

Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.

We use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. You may also opt out of categories of cookies while using our Service.

We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.

We host the Application on Microsoft Azure within the European Union. We also use service providers for our own business operations, such as customer relationship management, support, invoicing, payment processing and scheduling. An overview of all providers we engage is published at https://isoplanner.app/gdpr.

These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

The security of your Personal Information is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. We employ robust security measures such as data encryption, restricted access controls, and regular security evaluations to ensure the protection of your personal information.

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Our Website and Application do not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we discover that a child under 18 has provided us with Personal Information, we will delete such information from our servers immediately.

We process your Personal Information on the legal grounds set out in the GDPR: performance of a contract and steps taken at your request before entering into one, our legitimate interests, compliance with legal obligations such as tax retention, and, where we rely on it, your consent. We will disclose your Personal Information where required to do so by law or subpoena.

When handling support requests and customer communications, we use supportive automation and AI functionalities. These are used to assist our staff with summarising requests, generating response suggestions and classifying support tickets. The use of AI is strictly supportive; no fully automated decision-making with legal or similarly significant effects takes place. Our employees always remain responsible for the final handling and communication.

The Application and its data are hosted within the European Union, and the AI functionality within the Application runs on models in the European Union. Personal data may be processed outside the European Economic Area by some of the providers we use for our own business operations, in particular by the AI functionality of our customer relationship and support software and by our payment and scheduling providers. For those transfers we rely on an appropriate transfer mechanism under Chapter V GDPR, being the Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-U.S. Data Privacy Framework. We can provide the relevant clauses or evidence of certification on request.

We engage carefully selected processors to support the delivery of our services and to run our own business. We have concluded a data processing agreement with each of them in accordance with the GDPR. Our published overview distinguishes between the subprocessors that process personal data held within the Application on behalf of our customers, and the other providers we engage for our own business operations.

It is available at: https://isoplanner.app/gdpr

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.