General Data Protection Regulation (GDPR)

What is GDPR?

The intent of the General Data Protection Regulation is to protect the personal data and privacy of its citizens for transactions occurring within EU member states. The GDPR is a way to harmonize data privacy laws across Europe so people can feel safe about how their information gets used when they shop, visit, access or subscribe to any platform. The European Union (EU) General Data Protection Regulation (GDPR) effective on 25 May 2018 replaces the previous EU Data Protection Directive 95/46/EC. GDPR also addresses the export of personal data outside of the EU. Any business that processes personal information about EU citizens within the EU must ensure that they comply with GDPR. Under GDPR, processing personal information means any operation performed on personal data, such as collecting, recording, erasing, usage, transmitting, and disseminating.

What do businesses need to know about GDPR?

The General Data Protection Regulation applies to any business with operations in Europe. And depending on what they do and who their customers or clients are - even if that company has no presence there at all - they're still responsible for compliance! To be GDPR-compliant, businesses need to understand what personal data they are processing and make sure appropriate technical measures are in place for its security.

Your rights regarding your personal information

You have certain data protection rights. We-Connect aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Each right is described in full in Section 5 of our Privacy Policy at we-connect.io/privacy. To exercise any of these rights, contact us at [email protected].

Our commitments

We permanently delete all your data within 90 days after you cancel your account. When you request deletion of your data, we verify your identity and provide written confirmation of the deletion within 30 days.

Security

We have implemented technical and organizational measures to protect your data, including logged and verified connections to our infrastructure and identity verification before actioning sensitive account requests such as data deletion. The security measures that apply to customer data are described in our Data Processing Agreement at we-connect.io/dpa.

Data processing addendum

Under Article 28 of the GDPR, controllers must have a written data processing agreement in place with their processors. Our Data Processing Agreement, which incorporates the EU Standard Contractual Clauses, is available at we-connect.io/dpa. If you need a countersigned copy for your records, contact us at [email protected].

What do we do with your personal information?

We-Connect collects your personal data fairly and lawfully and in accordance with General Data Protection Regulation and our Privacy Policy. The main purpose of collecting personal data is to provide you with a safe, optimal, efficient, and personalized experience.

We may use your personal data to:

• Provide our service: When creating an account, you agree to our Terms which allows us to process your data to give you access to We-Connect. This way, you can have an account on our platform, save and process prospects, outreach to them, invite other team members, etc.

• Offer customer support: We provide customer support to help you take full advantage of our service or fix any problem you encounter.

• Fight fraud: We actively fight credit card fraud and misuse of our services by detecting risk patterns.

• Market new services: Regularly, we launch new services. We’ll let users know about those releases if they have asked us to keep them up to date.

• Perform any other function: that we believe in good faith is necessary to protect the security or proper functioning of our Platform or the We-Connect Services.

Our lawful bases for processing

We rely on the following lawful bases under Article 6 of the GDPR:

Performance of a contract. We process your account data, such as registration, login, and billing information, because it is necessary to provide the We-Connect service you have subscribed to.

Legitimate interest. Where our customers use the platform to contact business prospects, the lawful basis is legitimate interest: business-to-business outreach using professional information that individuals have made publicly available on LinkedIn. We also rely on legitimate interest to send our customers service and product communications, to fight fraud, and to secure and improve the platform. A copy of our Legitimate Interests Assessment is available on request at [email protected].

Consent. Where we send optional marketing communications, we rely on your consent, which you can withdraw at any time using the unsubscribe link in any email.

Legal obligation. We process certain data where required by law, for example for tax and accounting purposes.

If we intend to use your data for any new purpose, we will inform you before that processing begins.

Log Retention

We keep technical logs for monitoring, debugging, and security purposes. Logs are deleted within 3 months of their collection date, unless a specific security investigation requires retaining them longer.

Data Breaches

Should your personal data that we control be lost, stolen or otherwise breached, where there constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the Data Protection Officer who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.

Pseudonymisation of Personal Data

Where personal data does not need to remain in its original form, we pseudonymise it: identifying attributes are removed or replaced so that the data can no longer be linked to a specific person without additional information that is kept separately.

Disclaimer

This GDPR Compliance is provided “as is” and without warranty. In no event will We-Connect or its affiliates have any liability whatsoever arising from in connection with this document. You acknowledge and agree that you are solely responsible for complying with any and all laws and regulations in association with your use of We-Connect and/or other We-Connect products and solutions, including without limitation, laws and regulations related to data privacy.

CONTACT INFORMATION

Questions about this GDPR document should be sent to us at [email protected]