PRIVACY POLICY
Mirsad Engineering technology consulting (hereinafter referred to as “we,” “our”, “us” or the “Company”) is a US based company with the address registered at Ikitelli Osb. Mah Pik Dokumculer A6 Blok Sk. Pik Dokumculer Sitesi A6 Blok No:12 Ic Kapi No:12 Basaksehir, Istanbul, Turkey The Company is operating from the website https://mirsadtechnology.com/ (“Website”). The Company is committed to providing software development and quality assurance, customer support and technical support operations in IT.
- Introduction
This Policy provides an overview on how our Company protects the personal data and privacy of individuals who visit our Website and Web Application (hereinafter referred to as “Visitors and Users”), who register to use our products and services (available at https://mirsadtechnology.com// (hereinafter referred to as the “Services”).
The Company is committed to protecting your privacy and handling your data in an open and transparent manner and in accordance with the European Regulation and the relevant data protection legislation which is applicable in the United States of America. The personal data that we collect and process depends on the product or service requested and is agreed in each case.
Effective May 2018, Mirsad Engineering technology consulting has updated this Privacy Policy (hereinafter referred to as the “Policy”).
- Definitions
Controller – the natural or legal person, public authority, agency or other body which alone or jointly with others, determines the purposes and means of the processing of personal data;
Processor – a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Personal data – any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data Protection Officer (DPO) – a person appointed by the Company that takes formal responsibility for data protection compliance within an organization;
Data Protection Authority – an independent public authority that is legally tasked with overseeing compliance with applicable data protection laws.
- What we need
Our Personal Data Protection Policy governs the use and storage of your data.
Mirsad Engineering technology consulting is a Controller of the personal data Visitors and Users provide to us. We only collect basic personal data about Visitors and Users.
Visitors and Users personal data (meaning any information about data subject from which You can be personally identified, such as Your name, address, telephone number or email address, and which is referred to in this Privacy Policy as “Your Information”), will be processed by Mirsad Engineering technology consulting (which includes its agents and employees), and (where appropriate) our partners and subcontractors in order to be able to provide the full range of the Services to Visitors and Users. The Visitors and Users information is collected when Visitors and Users submit a written query to Mirsad Engineering technology consulting, during providing IT support and Client Maintenance service and during the activity of Visitors and Users.
Kindly note that if you do not provide us with the required data, we will not be allowed to commence or continue our business relationship either to you as an individual or as the authorized representative/agent or beneficial owner of a legal entity.
- Why we need it
We need your personal data in order to provide you the following services:
Provide Personal meeting – collection of name and email for the purposes of arranging personal meeting and getting feedback from Mirsad Engineering technology consulting team.
Advertising or promotion – collection of an email address and the customers name for advertising and sending news, offers and promotions from Mirsad Engineering technology consulting.
Provide Feedback – collection of visitors name, email and telephone number for the purpose of contacting Mirsad Engineering technology consulting representatives and receive feedback.
Provide Questionnaire results – collection of visitors name and email for the purpose of filling the questionnaire and getting results.
Provide Client Maintenance and Support – collecting of clients email, name, phone number for the purpose of performing incoming support for the application end user, handling incoming requests.
Provide IT Support – collecting of user IP, name for the purpose of monitoring and IT support of web servers, dns, application servers, business reports, ETC.
Provide emergency Service – collecting of name and telephone for the purpose of providing emergency services.
Provide compliance with the relevant legislation and regulations – collection of customers personal data (IP addresses) for the purpose of live monitoring of anti-fraud activities.
Provide security monitoring for possible anti fraud and illegal activities – collection of customer’s personal data (IP address, browser identification) for the purpose of monitoring customers’ activities.
Website and Web Application Analytics – usage of Google Analytics and Amplitude Analytics: collection of information about users visiting our website and web application, IP addresses, pages visited, duration of visit, type of browser and operating system for the purpose of improving our website and web application. For more information, please refer to Google Analytics and Amplitude Terms of Service and Google and Amplitude Privacy Policy.
Website cookies – we use cookies. This technology provides us with personal information: information about devices and networks you utilize to access our Website. For detailed information about the use of cookies in the Website and Web application, please read and review our Cookie Policy.
We do not use automated decision-making policies, including profiling.
- Who receives your personal data for processing?
Your personal data is processed in:
3W Infra B.V., located in the Netherlands, Lemelerbergweg 28, 1101 AH Amsterdam DPO contacts: abuse@3winfra.com. Storage of Customer Data (Hosting provider).
Cloudflare Inc., located in the US, 101 Townsend St., San Francisco, CA 94107. DPO contacts: privacy@cloudflare.com. DDoS protection service provider.
DigitalOcean, LLC. Located in the US, 101 6th Ave, New York, NY. DPO contacts: privacy@digitalocean.com. Mirsad Account Registration, Payment Information, Content (Hosting provider).
Blue Software, LLC. Located in the US, 8430 W. Bryn Mawr, Chicago, Illinois 60631. DPO contacts: bluenotice@bluesoftware.com. Customer and IT support.
Google LLC. located in the US, 1600 Amphitheatre Parkway, Mountain View, CA 94043.
Mirsad Engineering technology consulting., located in Ukraine, Kyiv, Kudryavs’kyi descent 5b, 04053, DPO contacts: dpo@Mirsad-us.com. Software development, storage of Personal data and Customer support data.
We will never disclose or sell any personal information to any company outside of the list of Data Processors above and except to help prevent fraud and/or unlawful usage, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
- Transfer of your personal data to a third country or to an international organization
Your personal data may be transferred to third countries [i.e. countries outside of the European Economic Area and USA] using the following tools:
Signed Standard Contractual Clauses for other third countries according to Article 46 Section 2 lits. c, d GDPR.
Processors in third countries are obligated to comply with the European data protection standards and to provide appropriate safeguards in relation to the transfer of your data in accordance with GDPR Article 46.
- How long we keep your personal information for
All Personal Data will be kept in a format that allows the Data Subjects to be identified for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods of time if personal data are processed solely for archiving purposes and for reasons of general interest, scientific or historical research or for statistical purposes or for the defense of any legal rights. - Your data protection rights
You have the following rights, in terms of your personal data we hold about you:
Receive access to your personal data. This enables you to e.g. receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to erase your personal data [known as the ‘right to be forgotten’] where there is no good reason for us continuing to process it.
Object to the processing of your personal data, where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
Withdrawal of the consent that you gave us with regard to the processing of your personal data at any time. Note that any withdrawal of consent shall not affect the lawfulness of processing based on consent before it was withdrawn or revoked by you.
In the event that you wish to complain about how we handle your personal data, please contact Mirsad Engineering technology consulting DPO by the following email address: dpo@Mirsad-us.com or by post to address: 910 Foulk Road, Suite 201, Wilmington, DE, USA, 19803. Valid Data Subjects Access Requests listed below will be responded up to 30 days:
Know whether a data controller holds any personal data about them.
Receive a description of the data held about them and, if permissible and practical, a copy of the data.
Be informed of the purpose(s) for which that data is being processed, and from where it was received.
Be informed whether the information is being disclosed to anyone apart from the original recipient of the data; and if so, the identity of those recipients.
Be informed of the data storage period.
If the data is being used to make automated decisions about the data subject, to be told what logic the system uses to make those decisions and to be able to request human intervention.
According to Article 12 (3) GDPR, we will provide response on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.
If any of the Personal Data we hold is incorrect or incomplete, you can request on legitimate grounds to have the information corrected, restricted or removed by writing to the DPO at Mirsad Engineering technology consulting at the above address.
To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact the DPO at Mirsad Engineering technology consulting at the above address and by completing the Data Subject Consent Withdrawal Form.
- California Privacy Rights
Residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of PI the business shares with third parties for those third parties’ direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us. Your request should specify your full name and the email address you used when submitting PI to us. According to CalOPPA, we agree the Users can visit our site anonymously.
Mirsad Engineering technology consulting does not currently respond to browser “Do Not Track” (DNT) signals or other mechanisms. Third parties may collect personal data about your online activities over time and across sites when you visit the Site or use the Service.
- COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under the age of 13 years old.
- Right to lodge a complaint
If after complaining to the DPO you still feel that your Personal Data has not been handled appropriately, according to the law, you can lodge a complaint with the Office of the Delaware Department of Justice (Delaware Attorney General) regarding the Processing of your Personal Data by us or on our behalf:
- Changes to this Privacy Policy
Mirsad Engineering technology consulting will occasionally update this Privacy Policy to reflect company and customer feedback. Mirsad Engineering technology consulting encourages you to periodically review this Privacy Policy to be informed of how Mirsad Engineering technology consulting is protecting your information.