Privacy
Privacy Policy
Last updated: 11-04-2023
-
General
This privacy policy (the ”Privacy Policy”), together with the End User License Agreement (the “EULA”), available on the MiCollect website www.micollect.io, describes how MiCollect ApS, a company registered in Denmark with company number 42754374 and with its registered office at Ibstrupvej 30, 2820 Gentofte, Denmark (”MiCollect”, “We”, “Our“), as a data controller, process its customer’s (“You” in any form) personal data when using the services of MiCollect, as defined in the EULA.
Unless otherwise stated in this Privacy Policy, the definitions used herein will have the same meaning as in the EULA. Questions regarding this Privacy Policy and MiCollect’s processing of Your personal data can be sent to info@micollect.io or to MiCollect’s data protection agent:
MiCollect ApS
Data protection agent: Merete Skov Pedersen, Email: msp@micollect.io
Address: Ibstrupvej 30, 2820 Gentofte, Denmark
The Privacy Policy is intended to comply with our obligations to provide you with information about our processing of your personal information under applicable privacy laws, primarily Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
2. Collection, purpose and use of personal data
2.1 Collection, purpose and use of personal data
MiCollect will collect the personal data which You submit when creating an account in the MiCollect App or which is created when You are using the MiCollect App or the Services, as described below.
MiCollect processes Your personal data for the following purposes:
a) For the purposes of entering, fulfilling, and administering our contractual relationship with You and to correspond with You in relation to the Services, we process the following personal data:
Contact details (such as first and last name, e-mail address and phone number); and
IP address; and
User agent
Our lawful basis for the processing of your personal data for this purpose is to fulfil our contractual obligations with You (Article 6(1)(b) GDPR).
b) For the purposes of providing additional services of product logs, transfer of product ownership e.g., we process the following data:
Contact details (such as first and last name, e-mail address and phone number); and
IP address; and
User agent
The lawful basis for the processing of your personal data for this purpose is to fulfil Our contractual obligations with You, i.e. in order for Us to provide the Services (Article 6(1)(b) GDPR), or consent (Article 6(1)(a) GDPR), which You may withdraw at any time. Your consent is obtained in the MiCollect App prior to any registration of product logs.
c) For the purposes of segmenting and analyzing data in order to provide the additional service of custom circularity insights based on Your specific registration, product logs and behavior patterns, we process the following personal data:
Contact details (such as first and last name, e-mail address and phone number); and
IP address; and
User agent; and
Product logs
The lawful basis for the processing of your personal data for this purpose is to fulfil Our contractual obligations with You, i.e. in order for Us to provide the Services (Article 6(1)(b) GDPR).
d) For the purposes of providing You with the additional ability to detect Our nearby service providers, we process the following personal data:
Location data when the MiCollect App is in use (device location)
Our lawful basis for the processing of your personal data for this purpose is to fulfil our contractual obligations with You (Article 6(1)(b) GDPR).
e) For the purposes of carrying out marketing services we may process personal data including:
Contact details (such as first and last name, e-mail address and phone number)
The lawful basis on which we process personal data for marketing purposes is consent (Article 6(1)(a) GDPR) where we send marketing about third party products and services, as further described in section 5. Where our processing is based on consent you can withdraw this at any time by using the unsubscribe link in our emails or by contacting us using the details given in section 1.
f) For the purposes of developing and improving Our technology and machine learning software for detecting use of Our Services in breach of the Agreement, we process the following data from MiCollect RFID and IoT devices:
Location data (MiCollect RFID/IoT location); and
Location data when the MiCollect App is in use (device location)
The lawful basis for the processing of personal data for this purpose is Our legitimate interest to develop and improve Our technology and machine learning software for detecting use of Our Services in breach of the Agreement and (Article 6(1)(f), GDPR).
g) For the purposes of performing statistical analyses, to analyze data in order to develop the Services regarding functionality, security and methods, and to analyze markets, product and customers, we and third parties described below process the following personal data:
IP address; and
User agent; and
Information about Your use of the MiCollect App and the Services, for example, the date, time, duration, and type of your usage; and
Survey data; responses to user experience and demographic survey questions; and
Location data (device location when in use)
Our lawful basis for the processing of your personal data for this purpose is our legitimate interest to be able to develop the Services and to increase Our understanding of the markets and customers (Article 6(1)(f) GDPR). Wherever possible, we anonymize, or aggregate data processed for this purpose.
2.2 Personal data related to all categories of data subjects
In addition to the above, MiCollect may process personal data (all categories of personal data and categories of data subjects as described above) in order to comply with laws and regulations or by court order (in which case the lawful basis is a legal obligation (Article 6(1)(c) GDPR)) or to protect Micollect’s or any third parties’ rights, e.g. defending, exercising or establishing legal claims (in which case the lawful basis is Our legitimate interest in protecting MiCollect’s or any third parties’ rights (Article 6(1)(f) GDPR)).
3. Transfer of personal data
MiCollect do not sell your personal information to third parties. We may share your Data with suppliers, including service providers, our technical support, our bank and business partners who assist us, e.g. with the execution of our services, or which assists us with our IT operations, hosting, e-mail communication, etc. We also share your information to the extent that we are obliged to do so, e.g. as a result of requirements for reporting to public authorities such as Tax. In all cases, we ensure that appropriate security measures have been taken.
Recipients in other countries. We only transfer Data to recipients in other EU/EEA countries as well as recipients (for example Google) who are based in countries where the EU Commission has determined that adequate data protection has been ensured.
4. Storage of personal data
Your personal data is stored only as long as is necessary in order to fulfil the purposes for which Your personal data was collected. However, if personal data is processed on account of Your consent, Your withdrawal of the consent or valid objection will put an end to the processing, without affecting any processing that happened until then and without affecting any legal obligation to process personal data. The personal data which is processed to enter into, perform or administer an agreement between You and MiCollect, is processed for as long as You are a customer of MiCollect and have a MiCollect account. If Your account is terminated, We will delete the personal data from Your account, with the exception of personal data which needs to be stored by Us due to legal requirements or to safeguard Our legal interests.
5. Marketing
We may send You marketing regarding MiCollect’s Services as well as products and services offered by third parties. The marketing can be sent both by e-mail, push notifications and in-app. The purpose of sending marketing is to inform You about Our Services and relevant services and offers from third-parties. We may also process personal data for the purpose of evaluating a marketing campaign which may include that We will transfer some personal data, mainly e-mail addresses, to the relevant marketing campaign partners.
The lawful basis for sending marketing regarding Our Services and those of third parties is your consent (Art. 6 (1) sentence 1 point (a) GDPR), which You may withdraw at any time. Where we process personal data for evaluating marketing campaigns the relevant lawful basis is Our legitimate interests (Article 6(1)(f), GDPR) to analyze the result of Our marketing campaigns.
You may always opt out from Our marketing efforts, either directly in the actual marketing message or by contacting Us at info@micollect.io
6. Rights and contact
You have certain rights in relation to Our processing of Your personal data. Your rights are the following:
a) Right to access. You have the right to receive confirmation from Us that we process Your personal data, including a right to access Your personal data and receiving an electronic copy of Your personal data.
b) Right to erasure (“right to be forgotten”). Under certain circumstances, e.g. if you have objected to the processing and We do not have a compelling legitimate interest, You can request that Your personal data is erased. This does not, however, apply if we have a legal obligation to process the personal data or other legitimate purposes for which Your personal data is processed.
c) Right to rectification. You have the right to request that incorrect or inadequate personal data about Your is updated or corrected.
d) Right to withdraw consent. To the extent the processing of Your personal data is based on Your consent, You have the right to withdraw Your consent at any time.
e) Right to object. When MiCollect is using legitimate interest (Article 6(1)(f) GDPR) as lawful basis for the processing, or if the processing concerns direct marketing, You have the right to object to the processing. In such case, we may be entitled to continue to process Your personal data if we can demonstrate a compelling legitimate interest to continue the processing operation.
f) Right to restriction. Under certain circumstances, You have the right to request that the processing of Your personal data is restricted, so that the personal data may only be stored by MiCollect and not processed in any other manner.
g) Right to data portability. If the processing is based on Your consent (Article 6(1)(a) GDPR) or a contract (Article 6(1)(b) GDPR) and the personal data has been obtained directly from You, You are entitled to request data portability, in which case you are entitled to receive Your personal data on a commonly used machine-readable format.
You can read more about your rights in the Data Protection Authority's guidance, which you can find at www.datatilsynet.dk.
7. Rights to lodge complaints
If You have any complaints regarding Our processing of Your personal data, You have the right to lodge a complaint to the relevant data protection authority in Your country.
In Denmark, please contact the Danish Data Protection Agency (Da. Datatilsynet). You find contact information at www.datatilsynet.dk.
8. Changes to the Privacy Policy
MiCollect may change this Privacy Policy by publishing a new version of this Privacy Policy on the Website and in the MiCollect App. However, in case a change is due to any changes in Our processing operations, We will notify You by sending You an e-mail with information about the change.