Privacy Policy
Last update: January 31, 2024
This Privacy Policy describes Vuidesign’s practices regarding the collection, use, maintenance, protection, and disclosure of information about visitors and customers. This Policy has been drafted in accordance with Article 12 of the General Data Protection Regulation, which states that the data controller must take appropriate measures to provide information when collecting personal data[1] and when personal data has been obtained but not from the data subject[2].
Who we are
What data do we collect?
This Policy applies to data collected from our website https://vuidesign.io (hereinafter referred to as the “Vuidesign Website”) and from communication with us via your design dashboard when subscribing to a design service (hereinafter referred to as the “Vuidesign Services”). Visitors to the Vuidesign Website and users of the Vuidesign Services will hereinafter be referred to as “You.” In accordance with the General Data Protection Regulation (hereinafter referred to as the “GDPR”), personal data is any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier such as a name, and any location data (hereinafter referred to as “Personal Data”).
We collect the following data:
- Personal Data You may provide to us:
- When You register an account via the Vuidesign Services
- When You complete your profile information
- When You upload personal images, audio, video, or other design materials to the Vuidesign Services
- When You contact us to make a complaint, ask a question, inquire, or provide feedback
- To submit your preferred payment method to subscribe to the Vuidesign Services
- To sign up for our newsletter system
Personal data we collect automatically:
When using the Vuidesign Website
When you browse our website, we may use cookies, which are small files placed on your computer’s hard drive or mobile device, and web beacons, to collect information about your equipment, browsing patterns, and actions. Data collected from cookies and web beacons may include information about a web browser, details of your visits to the Vuidesign Website, including traffic data and logs, page views, and IP address.
Personal data collected from third-party sources:
In order to provide you with the optimal service, We have contracted with third-party providers and service providers. We may obtain Personal Data about you from third parties, including but not limited to:
Google Analytics
This is a third-party tool from Google Inc that helps gather data. Google Analytics offers an opt-out option (add-on required).
Stripe
Stripe is used for making payments, subscribing, and managing your subscription.
Tidycal
Tidycal is used for booking a call with us or scheduling a meeting.
Trello
Trello is used to collect information and details about tasks you assign to us.
Mailerlite
Mailerlite is used for designing and sending emails.
We require all third parties providing information to have obtained this information legally and for the third party to have obtained appropriate consent to share the information. We work hard to ensure that data collected from third parties is obtained legally, however, we are not able to fully verify this, and we will not be held responsible for any violations committed by our third parties.
How do we use your data?
In accordance with the principles of data minimization and data economy, we only collect personal data and process it on the following legal basis:
- To serve you via the Vuidesign Services.
- To provide you with a user account and to identify you among other users, to contact you, to respond to your requests, complaints or questions, to diagnose and resolve issues, complaints or questions, to provide you with the products and services for which you have registered and to process payment.
- To gather anonymous analytics on how users use the Vuidesign Website and Services, to understand how we can improve our service offering.
- To operate the Vuidesign Website, ensure security and integrity, to enforce our agreements and policies.
- For a legitimate interest, mainly to protect us from legal action or claims from third parties, including you and/or to protect our legal rights and/or those of our employees.
- We strive not to collect additional personal data or use the personal data we have collected for substantially different, unrelated, or incompatible purposes without seeking Your consent.
We ensure the highest level of security and adopt high security measures to prevent unauthorized access, disclosure, alteration, or unauthorized distribution of data. Data processing is carried out using computers and/or IT tools, following strictly related procedures and organizational modes to the indicated purposes. In some cases, data may be accessible to certain types of persons in charge involved in the operation of this Service and Vuidesign Website (such as, but not limited to, administration, sales, marketing, legal, and system administration) or to external parties (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) designated, if necessary, as data processors by Us.
Legal basis
When processing Your Personal Data, we rely solely on the following legal bases:
Consent – In accordance with Article 6(1)(a) of the GDPR, data processing is lawful when the data subject has given consent to the processing of their personal data for one or more specific purposes. We will process your personal data when you have given your consent. By checking or selecting the “I accept” or “I agree” options when prompted, you consent to us processing your Personal Data. Such consent can be easily withdrawn at any time.
Contract – In accordance with Article 6(1)(b) of the GDPR, processing is authorized when it is necessary for the performance of a contract to which you are party.
Legitimate Interest – In accordance with Article 6(1)(f) of the GDPR, We process certain data to improve the Vuidesign application and to resolve and eliminate certain technical issues and to develop new features.
Who has access to your data?
We do not share your Personal Data with third parties for marketing purposes. However, we may share anonymous or hashed data with third parties for our own marketing needs. In accordance with the consent you have provided, we may share the data as follows:
Our service providers
We may share Your Personal Data with our service providers, such as our payment processor, our data storage company, app distributors, support providers, and other third parties who may from time to time be engaged to perform specific tasks for Us.
Advertising partners
We may share non-traceable and anonymous data to market our services.
Vuidesign company
Employees and owners of the Vuidesign Website and Services may have access to Your data if necessary. Additionally, the owners may share Your data during company expansion, consolidation, or bankruptcy.
Legal requirements
Law enforcement agencies may request disclosure of Your Personal Data for the establishment of any legal or litigation right by competent authorities, in cases of prima facie evident bad faith on Your part.
Your request
In accordance with the GDPR, in the event that You decide to exercise Your right to data portability as mentioned below, we have no choice but to transfer the data accordingly.
How do we store your data?
We maintain sophisticated and state-of-the-art data protection practices when it comes to securing Your data to protect them. We utilize commercially available physical and technical backup measures designed to secure Your Personal Data against loss, or unauthorized access or use. All information You provide to Us is encrypted using a secure HTTPS connection. Additionally, we do not share the Personal Data we collect, except as provided in this Policy. We have adopted a “need-to-know” policy, and therefore Personal Data is only disclosed to employees who strictly need to know Your Personal Data in order to provide You with services.
That being said, We are aware that despite all measures that are reasonably within Our reach, there might be rare instances of data loss or damage due to accidents that are beyond our control. No method of transmitting data over the Internet can be considered completely risk-free. We rely on Your responsibility to maintain a confidential and complex password.
Any transmission of Personal Data is done at Your own risk, and We cannot guarantee that such Personal Data cannot be accessed, disclosed, or altered by unauthorized persons.
Marketing
We may engage services that assist in targeted advertising. We may share data with our marketing partners who engage in targeted advertising. You can opt out of targeted advertising by using the unsubscribe option on the channel used to display these ads to You.
Data Retention
In accordance with the provisions of the GDPR[3], We retain Personal Data for as long as necessary to comply with our legal and contractual obligations. Therefore, unless you explicitly request the deletion of Your Personal Data in accordance with the following, We will retain your Personal Data in our secure database for as long as you have an active account or subscription with Vuidesign. Once an account is deemed inactive by Us, we securely delete Your data. To access, modify, or delete personal data about you or your account, please use the “Manage your Subscription” section of your Trello board.
Your rights
We want to ensure that you are fully informed of all your data protection rights. Every user is entitled to the following:
Right to Access Your Personal Data[4]
You have the right to request copies of personal data about you that have been collected. You may exercise this right at reasonable intervals. Where possible, we will strive to provide remote access to a secure system that would give you direct access to your data. This right must not adversely affect the rights or freedoms of others, including intellectual property rights, trade secrets, or copyright in software owned by Us.
Right to Rectification[5]
You have the right to request that We correct any information about you that you believe is inaccurate without undue delay. You also have the right to request completion of incomplete information about you by providing an additional statement.
Right to Erasure[6]
You have the right to request the erasure of Your Personal Data without undue delay, and We must erase this Personal Data as soon as possible when any of the following apply:
- The Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You withdraw your consent on which the processing is based, and there is no other legal ground for the processing;
- You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing;
- You object to the processing pursuant to Article 21(2) of the GDPR; or
- The processing was unlawful.
The above right does not apply to the extent that processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint with the Supervisory Authority
Right to Restrict Processing[7]
You have the right to request that We restrict the processing of your personal data under certain conditions.
- The accuracy of the Personal Data is contested by Yourself, for a period enabling us to verify the accuracy of that Personal Data;
- The processing is unlawful, and You oppose the erasure of the Personal Data and request instead the restriction of their use;
- We no longer need to process Your personal data, but these data are required for the establishment, exercise, or defense of legal claims by You.
- You have objected to processing pursuant to Article 21(1), pending the verification whether Our legitimate grounds override those of the data subject.
- When Personal Data are restricted in accordance with the above, such data may only be processed with Your consent.
Right to Data Portability[8]
You have the right to request that We transfer the Personal Data that You have provided to us in a structured, commonly used, and machine-readable format, and You have the right to transmit those data to another controller. We must not in any way obstruct this process, where:
Processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) of the GDPR.
Processing is carried out by automated means.
The right to withdraw if point (a) of Article 6(1) or point (a) of Article 9(2) applies.
California consumer rights
In addition to Section 8, in accordance with the California Privacy Rights Act, California consumers have the right to:
Delete all personal information that We hold.[9]
Correct any inaccurate Personal Information.[10]
Know what personal information is collected by Us, and have the right to access this information.[11]
Know what personal information is sold or shared by Us and to whom [12], and have the right to opt-out of this sale or sharing of data.[13]
Limit the use and disclosure of Sensitive Personal Data.[14]
Exercising any of the above rights shall not result in any direct or indirect retaliation from Our part.[15]
Protection of minors
In accordance with our Terms & Conditions, by using the Services and the Vuidesign Website, you confirm that you are over 18 years of age. Therefore, this privacy policy is exclusively intended for adults who have reached the age of 18.
International data transfer
The non-public personal data that we collect from you is collected, stored, or processed within the EU/EEA. We may work with providers located outside the EU/EEA. However, we strive to transfer data to these providers by adopting appropriate safeguards. These appropriate safeguards include contractual arrangements, standard contractual clauses approved by the European Commission.
Contactez-Nous
If you have any comments, concerns, or questions regarding this Policy or our privacy practices, please send an email to: service@vuidesign.io
[1] Article 13, General Data Protection Regulation (GDPR).
[2] Article 14, General Data Protection Regulation (GDPR).
[3] Article 5(e), General Data Protection Regulation (GDPR).
[4] Recital 63 & Article 15, General Data Protection Regulation (GDPR).
[5] Article 16, General Data Protection Regulation (GDPR).
[6] Article 17, General Data Protection Regulation (GDPR).
[7] Article 18, General Data Protection Regulation (GDPR).
[8] Article 20, General Data Protection Regulation (GDPR).
[9] Section 1798.105, Amended on November 3, 2020, by Proposition 24, Sec. 5. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[10] Section 1798.106, Added on November 3, 2020, by Proposition 24, Sec. 6. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[11] Section 1798.110, Amended on November 3, 2020, by Proposition 24, Sec. 7. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[12] Section 1798.115, Amended on November 3, 2020, by Proposition 24, Sec. 8. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[13] Section 1798.120, Amended on November 3, 2020, by Proposition 24, Sec. 9. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[14] Section 1798.121, Added on November 3, 2020, by Proposition 24, Sec. 10. Effective on December 16, 2020. Operative on January 1, 2023, pursuant to Sec. 31 of Proposition 24.
[15] Section 1798.125.