Privacy Policy
Introduction
Privacy is a primary concern for modern website visitors who want to know if websites are collecting information about them, what that data might be, how it’s getting stored, and what it’s used for.
Damilah Technology Limited is a software business company that builds innovative, fantastic, ethical products and delivers outstanding customer service. Damilah Technology DOOEL is a software business company whose employees perform the services agreed upon with the clients of Damilah Technology Limited.
This Privacy Policy is designed to help you understand how both companies collect, use, process and share your personal data through the website and to help you understand and exercise your privacy rights.
Our Privacy Policy
In this policy, “We”, “Us”, and “Our” refer to both companies. We are committed to safeguarding the privacy and accuracy of the personal data of our website visitors and job applicants.
More specifically, this policy applies where Damilah Technology Limited and Damilah Technology DOOEL are acting as Joint Data Controllers concerning the personal data of the job applicants and website visitors; in other words, both companies jointly determine the purposes and means of processing the personal data.
This policy also applies where Damilah Technology DOOEL is acting as a Data Processor performing the services on behalf of Damilah Technology Limited.
More specifically, any reference to a data subject means a natural person whose personal data is processed by Damilah Technology Limited, as a Data Controller or as a Joint Data Controller or by Damilah Technology DOOEL, as a Joint Data Controller or as a Data Processor; in other words, you.
Any reference to the GDPR applies to UK GDPR and EU GDPR. Likewise, any reference to EU countries will also apply to the UK. This will remain the case so long as the UK is subject to an adequacy decision by the EU. Should there be a conflict between the two, the version that grants data subjects the most significant protection will apply.
How We use Your personal data
Through the form “Book a meeting with our team” on our website, We collect the following personal data: first name and last name, business email address, company, place of business and job position.
The legal basis for this processing is your consent as a website visitor. If you fill out the form, one of our representatives will contact you immediately.
Through the form created for the job applicants on our website, We collect the following personal data: first name, last name, email address and CV file.
The legal basis for this processing is your consent as a job applicant. By submitting the job application, you, as a job applicant, agree that we will process your personal data to consider your application in our selection and recruitment process. You must note that you can withdraw this consent at any time. If your application is unsuccessful, your data will be deleted after one year.
In this Section, We also talk about the General Categories of personal data that We may process:
Usage Data
We may process data about your use of our website (“Usage Data”). The Usage Data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, and information about the timing, frequency and pattern of your service use. The basis of the Usage Data is Google Analytics and our analytics tracking system. This Usage Data may be processed to analyse the use of the website.
The legal basis for this processing is our legitimate interests: monitoring and improving our website and tailoring any communication with you.
Account Data
We may process your Account Data (“Account Data”). The Account Data may include your name, email address, company information, contact information, and other related information we may collect about you. The source of the Account Data is generally you or your employer. The Account Data may be processed to provide our services, ensure the security of our website and services and communicate with you.
The legal basis for this processing is the performance of a contract between you and us (or your employer) and/or taking steps, at your request, to enter into such a contract. Sometimes, we rely on legitimate interest as our lawful basis, using your data to operate our business and improve our services.
Service Data
We may process your personal data while using our services (“Service Data”). The Service Data may include name, email address, telephone number, and other related information. The source of the Service Data is you or your employer. The Service Data may be processed to provide our services and communicate with you.
The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
Enquiry Data
We may process data contained in any enquiry you submit regarding our services (“Enquiry Data”). The Enquiry Data may be processed to offer and sell relevant services to you.
The legal basis for this processing is consent, which you may withdraw at any time by contacting us, or contract and/or legitimate interest where your requests represent an invitation to send you information about our services.
Notification Data
We may process the data you provide to subscribe to our email notifications and/or newsletters (“Notification Data”). The Notification Data may be processed to send you the relevant notifications and/or newsletters.
The legal basis for this processing is consent, which you may withdraw at any time by contacting us.
Public Data
We may process information found on public social networking profiles and others from other publicly available sources (“Public Data”). This data may include name, employment information, career information, education details, job title, and other relevant information. Public Data may be processed to offer and sell appropriate services to you and/or your employer.
The legal basis for this processing is our legitimate interests, namely the administration of our business, to develop our business, and for us to make a profit.
Legal Claims Data
We may process any of your personal data identified in this policy where necessary for establishing, exercising, or defending legal claims, whether in court proceedings or an administrative or out-of-court procedure (“Legal Claims Data”).
The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
Third-Party Data
We may process any of your personal data where we purchase this data from a third party. This includes name, address, email, phone number, other contact details, employment details, etc. Where we purchase data, we will ensure that the supplier has the appropriate lawful basis and is GDPR compliant. We will also ensure we have appropriate evidence of consent where necessary or have an alternative reasonable, lawful basis and GDPR compliance processes to allow us to use your data.
In addition to the specific purposes for which we may process your personal data set out in this Section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.
Source of your Personal Data
We use various sources to provide our services, including public domain and social media sources. Our approach is based on carefully targeting business contacts with offers they will be interested in. We carefully select representatives from businesses and then only send relevant offers. Where we source data from other third parties, we will ensure these companies are GDPR compliant, and that your rights are always protected.
International transfers of your personal data
In this Section, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (“EEA”). Damilah Technology DOOEL, which processes personal data with Damilah Technology Limited as a Joint Data Controller and on behalf of Damilah Technology Limited, as a Data Processor has offices and facilities in the Republic of North Macedonia where your personal data may be processed. Transfers to the Republic of North Macedonia are protected by appropriate technical and administrative safeguards included in our contract for data processing agreed between both companies, which consists of the standard clauses required under GDPR UK and GDPR EU.
This privacy policy applies only to our website, not to external websites that we link to, which will have their privacy policies. We are not responsible for these external websites’ privacy policies and practices. In addition, if you linked to our website from an external site, we cannot be responsible for the privacy policies and practices of the owners and operators of that external website and recommend that you check the privacy policy of that external site.
Retaining and deleting personal data
This Section sets out our data retention policies and procedures to help ensure that we comply with our legal obligations concerning the retention and deletion of personal data. Personal data we process for any purpose or purposes shall be kept as long as is necessary for that purpose or those purposes.
Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.
Cookies
By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of our Cookie policy.
The rights of data subjects
In this Section, we have summarised your rights under data protection law. Some rights are complex, and not all details have been included in our summaries.
It would help if you read the relevant rules and guidance from the regulatory authorities for a full explanation of these rights. Your principal rights under data protection law are:
- The Right to be Informed
This is the right of data subjects to know details regarding the processing of their data and how we acquired their data; this information is included in this Privacy Policy.
- The Right to Access
You have the right to confirm whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you a copy of your personal data upon request and within one month of verification of your identity (we may extend the time within which we must provide the information by a further two months if the request is particularly complex, or if there are numerous requests and we will let you know if this is the case).
- The Right to Rectification
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed. If we accept the request, the rectification will be completed within one month (may be extended by a further two months if complex).
- The Right to Erasure (also known as the “Right to be Forgotten”)
In some circumstances, you have the right to erase your personal data without undue delay. However, there are exclusions to the right to erasure.
- The Right to Restrict Processing
In some circumstances, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may continue to store your personal data. However, we will only otherwise process it with your consent for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of vital public interest.
- The Right to Object to Processing
You have the right to object to our processing of your personal data on grounds relating to your particular situation. If you make such an objection, we will cease to process the personal data unless we can demonstrate legitimate grounds for the processing which override your interests, rights and freedoms.
- The Right to Data Portability
If the legal basis for our processing of your personal data is consent or the processing is necessary for the performance of a contract to which you are a party, and such processing is carried out by automated means, you can receive your personal data from us in a structured, commonly used, machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
- The Right to Complain
If you consider that our processing of your personal data infringes data protection laws, you should first contact us. If dissatisfied with the outcome, you have a legal right to lodge a complaint with a Supervisory Authority responsible for data protection.
Contacting us concerning the contents of this Privacy Policy
As such, your privacy is important to us; we take our responsibilities seriously and will always respond quickly and courteously to any request. If Your query relates to this Privacy Policy or should you wish to exercise one of Your Data Protection Rights as a data subject, you can contact us in the following ways:
By post to Our registered office: Damilah Technology DOOEL Skopje, Str. Vasil Gjorgov No. 20A – 2nd floor, 1000 Skopje, North Macedonia
By telephone on: +389 71 200 419
If you remain unsatisfied by our response, you may complain to the Supervisory Authority.
Agency for Personal Data Protection
Blvd. Goce Delchev No.18, Skopje
Tel: +389 2 323 0635
e-mail address: [email protected]
Amendments to this policy
We may update this policy occasionally by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.
We may notify you of changes to this policy by email.