Is my personal data collected?
Yes, eGTSA strictly collects professional information required to connect and work on the TRAFEC platform (Service)
Why is data collected?
eGTSA collects your information under the legal basis of the execution of a contract or through the consent you provided in order to ensure the best service possible. This includes processing your data to be able to offer:
- a customer support, operation and maintenance of the platform
- a secured and monitored platform (check account, monitor any suspicious activity…)
Moreover, and only given your consent, we might use data for marketing purposes such as testimonials.
What kind of data is collected?
eGTSA collects data from the information filled out by the client in the service agreement. All information you provide us with through your profile settings could also be used.
However, we do not use those data for any profiling, nor sell information to advertisers or for marketing purposes.
We strictly use mandatory data to provide you with our best service possible; this mainly includes: first name, last name, email addresses, company’s information, phone number
For payment and billing purposes, we might collect billing representative’s name and contact information.
When you visit our website, we collect information that web browsers, mobile devices and servers make available, such as the internet protocol address, browser type, language preference, time zone, referring URL, date and time of access, operating system, mobile device manufacturer and mobile network information.
How is data stored and processed?
All data is stored in servers in Switzerland and in the Customer Relationship Management service provided by Zoho (https://www.zoho.com/privacy.html#long)
We also work with third party service providers, which may require to access or use your information for the following purposes:
- application development
- hosting, maintenance, back up, storage, virtual infrastructure
- technical support
If a service provider needs to access information about you in order to access TRAFEC on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your information.
How long is my data kept?
Your data is kept as long as you have an active account in our application. Once you have decided to stop using our service, eGTSA will keep your data for a reasonable period of time (in case you decide to reuse the service), unless you specifically ask us to delete your information.
We also retain some of your information in compliance with our legal obligations, to resolve disputes, enforce our agreements, support business operations, and continue to develop and improve our Service.
If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow your team members or other users to make full use of the Service.
Moreover, as the service is made available to you through an organization (e.g., your employer), we retain your information as long as required by the administrator of your account.
Under which legal basis is my data processed?
If you are an individual in the European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws. This means, that we collect and use your information only when:
- Needed to provide you with the Service, including to operate the Service, provide customer support as well as personalized features and to protect the safety and security of the Service;
- It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Service and to protect our legal rights and interests;
- Given your consent to do so for a specific purpose; or
- Needed to process your data to comply with a legal obligation.
If you have consented to our use of information for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already been operated.
What are my rights?
Right to access:
You have the right to access (and obtain a copy of, if required) the categories of personal information that we have about you, including the information’s source, purpose and period of processing, and the people with whom the information is shared
Right of rectification:
At any time, you can rightfully ask eGTSA to modify information if it is incorrect and/or complete data if it is incomplete.
Right to erasure:
You have the right to request that we delete your personal information under certain circumstances, such as when it is no longer necessary for the purpose for which it was originally collected for.
Right to be informed:
In case of a breach of your data, you have the right to be informed by eGTSA within a timely matter after the breach has been discovered.
Right to restriction of processing:
You also have the right to request the restriction of the use of your information under certain circumstances, such as when you have objected to our use of your data. We however will then need to verify whether we have an overriding legitimate right to use it.
Right to data portability:
You have the right to transfer your information to a third party in a structured, commonly used and machine-readable format, in circumstances where the information is processed with your consent or by automated means.
Right to object:
At any time, you have the right to object to the way eGTSA processes your data. eGTSA will then immediately suspend the processing of your information, unless, proven that your data is processed through another legal basis than consent (see notice to end users).
Rights in relation with automated decision making and profiling:
At any time, you have the right to decline the processing of your data for marketing purposes.
How to exercise my rights?
To exercise any of the above-mentioned rights or if you disagree with a particular information, you can contact eGTSA directly via firstname.lastname@example.org. We will gladly assist you and answer your questions you might have.
What if I am an end user?
Our platform is proposed to organizations and not to individuals.
When TRAFEC is made available to you through an organization (e.g. your employer), that organization is the administrator of the Service and is responsible for the accounts and/or Service site over which it has control.
If you are an administrator of a group of users within the Service, we may share your contact information with current or past Service users for the purpose of facilitating Service-related requests.
Administrators are able to:
- require you to reset your account password;
- restrict, suspend or terminate your access to the Service
- access information in and about your account;
- access or retain information stored as part of your account
Even if the Service that you benefit from is not currently administered by an organization, if you use an email address provided by an organization (such as your work email address) to access TRAFEC, then the owner of the domain associated with your email address (e.g. your employer) may assert administrative control over your account and use of TRAFEC.
If you no longer wish to use our Service, your administrator may be able to deactivate your Service account. Kindly be aware that deactivating your account does not delete your information; your information remains visible to other Service users based on your past participation within the Service.
Kindly communicate your data privacy questions and concerns to your administrator, as your use of the Service is subject to that organization’s policies. EGTSA is not responsible for the privacy or security practices of an administrator’s organization, which differ from this policy.