Lawful Bases
As mentioned, we collect the following personal data when you use our services. Note that all references to “you” in this section apply only to our Customers
Processing for Primary Use (Functionality)
Data About the Customer. We process Customer’s name, address, and username for purposes of allowing you and your authorized users to use the services as legitimate users, and to comply with our obligations under this agreement. In all these instances, your personal data is provided by you voluntarily as you register your account with us.
In order for us to verify your payment and to properly issue your invoice, we collect the following personal data: name or company information, as well as billing information, including bank and other payment details. Do note that third party payment providers of your choice may also process this data.
To allow us to respond to your queries and concerns, we collect the following personal data: Name, Mobile Number, and email-address.
We also process “Online Identifiers” such as IP address, device ID, cookies, and similar information, as well as “device/browser information” such as internet service provider (ISP), operating system, device type, browser type, and setting of any individual to track usage, which will be used strictly to analyze usage patterns and provide you with an improved software that better suits your needs.
We may also collect information about your location (city or state only), in order for us to implement data privacy measures based on the privacy state laws you are covered. We do not collect precise geolocation data.
Data About the Third-Party Respondents. We also collect data through the forms you generate using our platform, i.e., form data. This may include personal data of third-party respondents, particularly those that are necessary for the functionality of the services, and are also provided voluntarily by your respondents as they fill out your forms. These are processed to enable the Customer to generate forms, collect responses from the third-party respondents, and to create QR codes.
However, this data, whether provided by third-party respondents while filling up your forms or generated while using our platforms, shall be owned, organized, or managed by you (our customer). In light of these, you, as our customer, shall be primarily responsible for these personal data as the data controller, and you shall therefore obtain the third-party respondents’ consent to the processing of their personal data and implement the .
Other Purposes Related to Primary Use. Upon collection of these information or thereafter, we may also use one, or a combination of the aforementioned personal data, to send you updates, newsletters, and promotional materials, which you can opt-out at any time. We will also use them to pursue legitimate interests of fraud prevention and network and information security, to comply with legal obligations, and to enhance our platform’s functionality, troubleshoot issues, and analyze usage trends.
Option to Withdraw Prior Consent. Like other rights, the right to data protection can be waived by the data subject, by providing consent to the processing of their personal data. However, in processing the personal data mentioned above, we not only rely on your consent, but also on the following grounds:
- Contractual Necessity: When data processing is necessary for the performance of an obligation with you, which is to provide the services in accordance with the features you have chosen.
- Legal Obligation: When we need to comply with legal obligations.
- Legitimate Interest: When we need to pursue legitimate interests, which is reasonably expected by the data subject under the circumstances.
You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Note, however, that even though there are instances allowing you to withdraw your consent anytime, we may still process your personal data when there is another ground allowing us to continue processing the same, subject to your exercise of your right to request the deletion of your account and personal data, when appropriate.
Processing for Purposes of Secondary Use
Secondary use, refers to further use that is not necessarily related to the initial purpose discussed above. Thus, aside from those mentioned above, we may also use some, all, or a combination of the personal data mentioned above for their specified purposes, upon separately obtaining consent from you.
