1. Introduction
With this privacy policy, we are informing you of how personal data is processed when you visit our website.
Personal data means any information relating to an identified or identifiable natural person. They include particularly all information making it possible to conclude your identity, for instance your name, telephone number, address or e-mail address. However, certain identifiers such as your IP address or the device ID of the end device you are using are also considered personal data.
You can print out this Privacy Policy or save it by using your browser’s usual functions.
2. Contact partner
The provider of this website www.partner.aboutyou.com is SCAYLE GmbH, Domstraße 10, 20533 Hamburg, Germany (hereinafter referred to as: “SCAYLE” or “we”).
SCAYLE is also the controller in the sense of the EU General Data Protection Regulation (GDPR) for the processing of personal data of website visitors (hereinafter referred to as “you”). We are happy to assist you if you have any questions or suggestions about data protection. Feel free to send your data protection concerns to our data protection officer by email at [email protected].
For all questions about matters of data protection in connection with our product or the use of our website you can also contact our Data Protection Officer at any time. They can be reached under the above postal address and under the e-mail address [email protected] (mark your communication: “FAO Data Protection Officer”). We expressly point out that when using this e-mail address, the contents are not exclusively taken note of by our Data Protection Officer. If you wish to communicate confidential information, please contact us directly via this e-mail address first.
3. Data processing on our website
3.1 Accessing our website
Every time our website is used, we process the access data which your browser automatically transmits to make your visit to the website possible. This access data contains the so-called HTTP header information, including the User Agent, and comprise in particular:
- IP address of enquiring device;
- Date and time of enquiry;
- Address of the website called up and, if applicable, of the website enquiring (HTTP Referrer); Information on the device, browser and operating system used;
- Version of the HTTP protocol, HTTP status code, size of the delivered file;
- Request information such as language, type of content, encoding of content, character sets;
- Cookies stored on the terminal device of the domain accessed.
It is necessary to process this data to make the visit to the website possible and to ensure the permanent functional capability, availability and security of our systems. The access data is also stored in internal log files for the purposes described before, temporarily and limited to the minimum necessary in order to find the cause and take action in the event of repeated or criminal calls that threaten the stability and security of our website. Art. 6 (1)(b) GDPR is the legal basis for this data processing, if the website visit is made in course of initiation or performance of a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest in enabling website visit and the permanent functionality and security of our systems.
3.2 Making contact
You have various possible ways of making contact with us. These include the contact form for booking a demo, getting pricing information, the general contact form and our e-mail address. In this context we process data solely for the purpose of communication with yourself. The legal basis is Art. 6 (1)(b) GDPR, if your contact request is made in course of initiation or performance of a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest in answering your request.
By contacting us we collect compulsory information needed for handling your request, as example:
- first name and last name;
- e-mail address;
- company name;
- company size;
- your issue;
- your message.
3.3 Developer access
On our website, you have the possibility to get developer access. For this you have to submit your request via form to us. The legal basis is Art. 6 (1)(b) GDPR, while your request is made in course of initiation or performance of a contract. By requesting access, we collect compulsory information needed for handling your request, as example:
By contacting us we collect compulsory information needed for handling your request, as example:
- first name and last name;
- e-mail address;
- job function;
- job seniority;
3.4 Newsletter and promotional mailings
You can subscribe to our marketing newsletter, in which we regularly inform you about the latest news about our products and services.
For subscribing to the newsletter we use the so-called double opt-in procedure, i.e. we shall only send you the newsletter by e-mail if you confirm, by clicking a link in our message e-mail, that you own the e-mail address provided. Should you confirm your e-mail address, we shall store your e-mail address, the time of registration and the IP address used for the registration for such time until you cancel the newsletter. This storage serves only the purpose of sending you the newsletter and being able to provide your registration. Unsubscribing from the newsletter is possible at any time, e.g. via the unsubscribe link at the end of every newsletter. A message to the contact details given above or in the newsletter (e.g. by e-mail or letter) is of course likewise sufficient for this. The legal basis is your consent in accordance with Art. 6 (1)(a) GDPR.
We also are sending you promotional mailings via email in case you are using our products and services. In these promotional mailings we are informing you about new updates and new functions regarding the explicit services you are using. The legal basis is Art. 6 (1)(f) GDPR.
For the purpose of sending you promotional mailings and newsletters, we work together with service providers to whom we transmit, among other things, your e-mail address and your newsletter registration in order to be able to send you the newsletters and advertising mailings.
In our newsletter we use technologies usual in the market by which the interactions with the newsletter can be measured (e.g. opening of the e-mail, links clicked). We use these data in pseudonymised form for general statistical evaluations and to further optimise and develop our customer communication. This is done with the aid of graphics which are embedded in the newsletter (so-called pixels). The legal basis for this is also Art. 6 (1)(a) GDPR. We would like to share subjects with our customers which are of maximum relevance to them and to understand better what our readers are actually interested in. If you do not wish your usage pattern to be analysed, you can cancel the newsletter or disable graphics in your e-mail program in a standard way.
3.5 Sign-in with Google
On the sign-in page, you can sign in with your Google account instead of with a Seller Center password. If you choose this option, we redirect your browser to Google. Google authenticates you and then transmits data about you to us. We do not receive your Google password, and we do not store the access token that Google issues.
For users in the European Economic Area and Switzerland, the provider of the sign-in with Google is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For users in all other countries, the provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In this section, “Google” means the provider for your country. As an independent controller, Google processes data about the sign-in, for example your IP address and the fact that you sign in to Seller Center.
We request only your basic profile and your e-mail address (OAuth scopes “profile” and “email”). Google transmits your Google account ID, your e-mail address and its verification status, and technical data about the sign-in, for example its date and time. If available, Google also transmits your full name, first name and last name, the URL of your profile picture, your language setting and the domain of the organisation that manages your Google account. We do not access any other data in your Google account.
We use your verified e-mail address to find your existing Seller Center account and link it to your Google account. We link the two accounts only if all these conditions apply:
- Google has verified the e-mail address of your Google account.
- Your Google account and your Seller Center account have the same e-mail address.
- The e-mail address is a Gmail address, or an organisation manages your Google account, for example with Google Workspace.
We do not create Seller Center accounts from a sign-in with Google. We store your Google account ID together with the transmitted data. We use your Google account ID to recognise you at your next sign-in. We use the transmitted data to document which Google account is linked to your Seller Center account. At each sign-in with Google, we replace the stored data with the newly transmitted data. We also store the time of the first and of the most recent sign-in with Google.
We keep the link and the stored data for as long as your Seller Center account exists. At each sign-in with the linked Google account, we check the conditions for the link again. If a condition no longer applies, we remove the link and the stored data. You can ask us at any time to remove the link and the stored data. To do so, send an e-mail to [email protected]. After a removal, we link the accounts again at your next sign-in with Google if the conditions for the link apply. If you remove Seller Center from the linked apps in your Google account, we keep the link and the stored data.
At each attempt to sign in with Google, we log your IP address, the time, the result and, if available, your e-mail address. We also log this data if no Seller Center account matches your e-mail address. We use these log entries to detect misuse and errors of the sign-in. We keep them only temporarily, like the access data in section 3.1.
Google can process your data in the USA through Google LLC. Google LLC is certified under the EU-U.S. Data Privacy Framework and under the Swiss-U.S. Data Privacy Framework. Adequacy decisions of the European Commission and of the Swiss Federal Council cover transfers to companies with these certifications. For transfers that these decisions do not cover, Google uses the EU standard contractual clauses. For details, see Google’s privacy policy: policies.google.com/privacy
Art. 6 (1)(b) GDPR is the legal basis for this data processing, if you use the sign-in in course of initiation or performance of a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest in a secure and convenient sign-in.