Under the terms of the applicable legislation on data protection matters, we hereby inform you:
- SERVICE – CASFLO APP / www.casflo-app.com / www.app.casflo-app.com
- Service Provider CASFLO, Unipessoal, Lda. a limited partnership located at Rua Silva Carvalho, nº122 2ºEsq 1250-257 Lisbon Portugal, registered under the VAT number 516345644, hereinafter referred to as CASFLO.
- USER – Natural or legal person who acquires/uses the Service
USER PERSONAL DATA:
- CASFLO, as author and provider of the SERVICE CASFLO APP, declares that the personal data of the USER, which is collected, is included in the client’s database owned by CASFLO for the management of the commercial relationship with the clients, invoicing, sale of products, contact with clients, marketing, promotion, advertising and statistical purposes.
- When the USER adheres to the SERVICE, accepts and recognizes that he/she will have to provide the data strictly necessary for the provision of the SERVICE; such data will be exclusively used for the purposes referred to above.
- CASFLO utilizes trusted third parties’ services (software suppliers for instance) to help us provide, improve, protect and promote our services. Those third parties have access to the USER information strictly limited to the functions that have been assigned to them and are obliged to fulfill the legal requirements regarding data protection.
- The USER personal data will not, in any circumstance, be transmitted or assigned to third parties without the express consent of the USER, except in the cases provided for in the following paragraph.
- CASFLO will provide the account data of the USER to the competent authorities if such provision is mandatory by law or CASFLO is notified to do so. CASFLO may also transfer your data to third parties in case of breach of the terms and conditions of the SERVICE, so that CASFLO may exercise its rights, or in cases related with civil, misdemeanor or criminal liability.
- At any moment, the USER may exercise its rights of access, rectification, deletion, restriction, objection and/or portability, in written, accompanied by a document which attests your identity and/or the data to rectify, if applicable, which shall be delivered to the following e-mail address: firstname.lastname@example.org.
- The objection to the processing of personal data which is communicated to CASFLO after the beginning of the processing will only have effects as from the date of reception of such communication, not affecting the lawfulness of the processing until such date. Such objection may lead to the impossibility to provide the SERVICE.
- In what respects to the data portability, please bear in mind that, in accordance with the applicable legislation, such right is only applicable in relation to the data collected with your consent.
REGARDING THE DATA THAT THE USER INSERTS IN CASFLO APP:
- The USER, in his/her capacity of controller of the data inserted in the software to use the SERVICE, declares and warrants that:
- The processing of personal data is lawful and all conditions for its performance are met.
- Will provide CASFLO with the necessary instructions for the processing intended.
- Will only transfer to CASFLO the personal data strictly necessary for the execution of the services.
- Adopts the necessary technical and organizational measures to ensure the update and correctness of the data communicated to CASFLO.
- Adopts the adequate technical and organizational measures to ensure the confidentiality and security of personal data transferred to CASFLO, in order to prevent and avoid its destruction, accidental or unlawful loss, amendment, diffusion or non-authorized accesses, namely when the data are transferred by electronic means, and against any kind of unlawful processing, in conformity with the categories of data processed.
- Has implemented the adequate procedures to ensure the satisfaction of the data subjects.
- Has implemented the adequate procedures to comply with the obligations of informing the supervisory authority and the data subjects in case of a data breach.
- The collaborative feature of our service was designed with the intent to facilitate the sharing of projects with other users, so that these collaborate with the USER. By using this feature, the user accepts that the data of his account can be shared., namely the projects and the username, and that these ban be transferred to third parties designated by the USER.
- CASFLO, as service provider and processor, undertakes to:
- Process the personal data transferred by the USER only in accordance with the instructions provided by the USER, with the purposes for which the data was collected, and only to ensure the compliance of its obligations under this Agreement and the execution of the operations defined;
- Adopt the adequate technical and organizational measures to ensure the confidentiality and security of personal data in order to prevent and avoid its destruction, accidental or unlawful loss, amendment, diffusion or non-authorized accesses, namely when the data are transferred by electronic means, and against any kind of unlawful processing;
- Maintain a written record of all categories of processing activities carried out on behalf of the USER, which shall include, at least, the USER name and contact details, of other processors and, if applicable, the data protection officer and a description of the processing performed;
- Limit the access by its employees to the personal data transferred by the USER; such access will only be given if it is necessary for the execution of their duties under the provision of the services;
- Ensure that the employees which have access to the personal data will be bound by confidentiality duties in relation to such data and that will refrain from using the data for other purposes, for owns or others’ benefit;
- Process the personal data exclusively in Portugal or in another European Union country;
- Make available to the USER the necessary information which evidence the compliance of its legal obligations as a processor.
- The USER is responsible to inform data subjects, at the time of collection of the personal data, about the data processing and its communication to CASFLO, and, if necessary, to obtain their consent to the data processing.
- CASFLO undertakes to assist the USER, insofar as it is possible, so that the USER may satisfy the data subjects rights.
- Where the data subjects submit requests to CASFLO exercising their rights of access, rectification, objection, erasure or portability of their data, CASFLO undertakes to forward those requests, as soon as possible, to the USER, to the e-mail registered in the USER account.
- CASFLO undertakes not to communicate the personal data to which it has access to third parties, not even for its preservation, except the communication which is necessary so that it may be able to keep the systems safe (hardware and software), and always upon the signature of an agreement under which such third party ensures that it complies with its obligations as a sub-processor.
- The USER shall be aware that CASFLO has contracts with providers located in the United States of America, and that the data uploaded through the SERVICE may be transferred to that country. By contracting with those providers for the processing of data on behalf of the USER, CASFLO ensures that such third parties commit themselves to the same data protection obligations as the ones established in this privacy police, in particular, the obligation to provide sufficient guarantees in what respects to the execution of adequate technical and organizational measures so that the processing is compliant with the GDPR.
- CASFLO undertakes to inform the USER, without undue delay after becoming aware of a data breach.
- Such communication shall be accompanied by the relevant documents which allow the USER, if necessary, to notify the competent supervisory authority.
- The USER is responsible to notify the competent supervisory authority in case of a data breach.
- CASFLO undertakes to keep complete secrecy and confidentiality regarding the personal data which it processes under the provision of services to the USER, in particular, the information and data of the USER or third parties to which it may have access during the execution of the services. CASFLO also undertakes not to disclose, publish, or disseminate such information by any means, either directly or through third parties, without the prior written consent of the USER.
- The USER undertakes to respect the confidentiality of the methods and procedures applied by CASFLO for the provision of the services and undertakes the responsibility for the compliance of this obligation by its employees. The confidentiality duty is not applicable to information which is accessible to the public in general.
- Upon the term of the provision of the SERVICE, CASFLO undertakes to return or destroy, as instructed by the USER, the personal data which is under its possession, regardless of the format in which it is stored, except the minimum essential data which shall be kept for the compliance of CASFLO legal obligations.