1. Protection of personal data
The protection of users’ personal data is one of Oorwin’s priorities and any processing of personal data is carried out conscientiously, legally, in good faith and in accordance with all relevant legislation. Personal data is every information related to an identified person or a person that can be identified or whether his identity can be determined directly or indirectly, in particular on the basis of an identification number or one or more factors specific to his physical, psychological, mental, economic, cultural or social identity.
The processing of personal data entails any action or set of actions performed upon personal data, such as collecting, recording, organizing, storing, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, publishing or otherwise making available, alignment, combining, blocking, deletion or destruction and the implementation of logical, mathematical or other operations on that data.
Oorwin is committed to data protection of our Website Visitors and Users. However, we do gather some personal information* to improve our website, to better understand our visitors and their behaviour. This is done via cookies. In order to become a Website User, one has to register. Our Website has a subscription model, therefore we need your private personal information**, including credit card details in order to process charges. Oorwin does not store credit card data. All credit card information is stored on the payment gateway which is validated and regulated under GDPR compliance.
2. Legal basis
3. Information that may be collected
Visitor data is collected when using the Website and browsing it’s content. Oorwin will not collect and process personal data whose collection is prohibited by law, such as data relating to racial or ethnic origin, political opinions, religious or other beliefs, trade union memberships and other data the collection of which the law expressly prohibits, except under the law enumerated conditions and situations.
User data being collected:
- Profile/display picture
- Country, state, postal code, or city of residence
- Login name, screen name, nickname, or handle
- Telephone number (home/work/mobile number)
- Postal or other physical addresses
- Date of birth
- Name(s) of the school/university (including grades and graduation year)
- Name(s) of the workplace
- Job position/designation (including salary)
- Information related to social profiles, such as Linkedin Facebook, Google, GitHub, etc.
- IP addresses and other information collected passively, as further detailed in the Passive Collection section below
Visitor data being collected:
- IP address
- Location data
In case when Visitor downloads marketing materials (E-books, resources, tutorials, guides), additional data is collected and stored:
- First name
- Last name
- Job title
- Email address
- Phone number
- Workplace details
- Country of residence
4. The purpose for which the data is collected
Oorwin collects User information for the sole purpose of carrying out activities which are the subject of their business. The collected data can be used for further development and improvement of the Website, to adapt and improve the content and services that the Website provides, as well as to inform and offer the User other contents and services that can be used through the Website.
The data of Users who advertise the need for employment, which refers to the job description and requirements that must be met by potential employees, as well as information that such a User submits while presenting its business activities and their contact information shall be available to all Users and Visitors of the Website.
If you are a User, Oorwin will use your information to provide you with information and updates about The Website for marketing purposes.
We collect and/or process your Personal Data as a part of the following activities related to our Products:
- Account registration
- Use of certain Product features
- Creating or taking tests
- Generating reports based on information collected from use of our Products
- Requesting service and support for our Products
- Registering for an event (webinar, offline event, etc.)
- Participating in an online survey
- Participating in discussion groups or forums
- Registering for newsletter subscriptions
- Customizing the content you see based on relevance
Oorwin collects Visitor data for purposes of optimising Website performance and availability. Additionally, data entered by Visitors themselves, when downloading marketing materials, is used for providing information and updates on relevant content.
5. Disclosure of personal data
Oorwin will not transmit any personal data to third parties, except in the manner specified in the Policy. Any transfer to third parties must comply with the regulations of the Policy and third parties are bound to comply with the regulations of the Policy regarding data handling. User personal data may be transferred to affiliates, third parties that are contracted by Oorwin to carry out certain activities or provide certain services and in the case of ownership, organisational and status changes regarding Oorwin, as well as when such an obligation is expressly stipulated by law.
In particular, we provide a limited amount of your information (such as your email and address) to Braintree Payment Solutions, LLC when processing credit card payments; Intercom, Inc. (Full name, email and company name) to bring you personalised support experience and Mailgun Technologies Inc. (full name and email address) to send emails.
6. Storing personal data
Oorwin approaches the storing of personal data conscientiously and with all due care, taking the utmost effort to protect the data from any form of accidental or deliberate abuse, destruction, loss, unauthorised alteration, disclosure or access.Personal data transmission takes place via the internet and is, in spite of all efforts, never truly secure. Therefore Oorwin does not guarantee the safety of such a transfer and the User/Visitor performs it at their own risk. After receiving the information from the User/Visitor, Oorwin will take all necessary measures to prevent any misuse of the data.
Some of the data is being provided to Google analytics, Hubspot, Sendgrid, and a few more software companies based outside of the EU but comply with GDPR guidelines. Oorwin provides its customers with the highest level of data security and compliance, and in accordance conducts business only with companies that can provide the same level of security and compliance required under EU General Data Protection Regulation (GDPR).
7. Data security
Oorwin does have individual data-stores for each customer in a multitenant environment. However strict privacy controls exist in our application code to ensure data privacy and prevent one customer from accessing other customer data. We have many unit and integration tests in place to ensure these privacy controls work as expected. These tests are run every time our code base is updated and even one single test failing will prevent new code being shipped to production.All data sent to or from Oorwin is encrypted in transit using 256 bit encryption. Oorwin is served 100% over HTTPS.
8. Right to access and change information
9. Data deletion
User personal information will be retained until it is deleted. User personal information will be deleted on one of the following occurrences:
- Deletion of personal information by the User(or by another person engaged by the User, where User is using the Website and/or Services on behalf of a User).
- Where you are a Candidate, deletion of your personal information by a User (Company) on whose behalf we are processing your personal information.
- Written request by User to Oorwin by mailing firstname.lastname@example.org
- Automatically, after 1 year of inactivity upon active subscription expiration or cancellation
If you are a Candidate, any request by you to delete your personal information will not result in deletion of any application submitted by you to a User (Company) as we are a data processor and not a data controller.
If you require a Company to delete an application, or any other information provided by you to the Company directly, you must contact the Company to request such deletion.
10. Data portability
If any user chooses to use our invite service to tell a friend about our products, they can authorize that if they have their friend’s consent to give their name and email ID. Oorwin will automatically send the user’s friend a one-time email inviting them to visit our website. Unless otherwise authorized by your friend, we will only use your friend’s name and email ID for the purpose of sending them this one-time email and maintaining an activity log of our referral program.
Users can choose whether or not to provide Personal Data to Oorwin. However, users may not be able to access certain options, offers, and services if you have not provided your Personal Data. Users can sign up, register and therefore consent to receiving emails or newsletters from Oorwin. If users would like to discontinue receiving this communication, they can unsubscribe by using the Unsubscribe link at the end of such emails or by dropping a mail for “Unsubscribing” on email@example.com.