Privacy Policy
IKO Web Design EOOD respects the privacy of its users and is fully committed to protecting their personal data. This Privacy Policy explains how IKO Web Design EOOD (“IKO Web Design EOOD”, “we”, “us”, “our”, “designtime.me”) and our affiliates process information about individuals, including personal data, in relation to the use of the https://designtime.me website and the real-time time tracking service that analyzes productivity (“Service”). Below you may find detailed information about what type of information we collect about individuals and why, what we do with it, and how we handle such information.
By accessing or using this website or any of our Services, you agree to the terms set out in this Privacy Policy, Cookie Policy, Terms of Service, and other terms and policies posted on our website. If you do not agree to this Privacy Policy, you must leave this website and discontinue all use of any of our Services.
- Introduction
1.1This Privacy Policy governs the processing of Personal Data of independent individual users (the “User” or “you”) of the IKO Web Design EOOD Service, visitors of the designtime.me website (“you”) as well as the processing of Personal Data by IKO Web Design EOOD on behalf of companies, organizations, institutions, groups of people, etc., that track time of their employees or other individuals within their IKO Web Design EOOD account group (“Client”) within the Service.
1.2 IKO Web Design EOOD shall process Personal Data in accordance with applicable data protection laws and in respect of Data Subjects within the European Economic Area (“EEA”) IKO Web Design EOOD shall comply with requirements of European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
1.3 In this Privacy Policy the term “Designtime.me” refers to IKO Web Design EOOD, a company registered in Bulgaria, registration number: 206137617, address: Zh. Obela 245-37, Sofia, Bulgaria 1326.
1.4 The terms “Personal Data”, “Data Subject”, “Processing”, “Controller”, “Processor” and “Supervisory Authority” as used in this Privacy Policy shall have the same meanings as given in the GDPR.
1.5 IKO Web Design EOOD acts as a Data Controller and sets the purpose and means for processing the following data:
Personal Data of the Users who are themselves the clients of IKO Web Design EOOD and who transmit their Personal Data directly to IKO Web Design EOOD, such as freelancers and other individuals who register for IKO Web Design EOOD independently (create IKO Web Design EOOD account for their own use);
Personal Data of individuals who subscribe for receiving commercial communication and other news and updates from IKO Web Design EOOD, but who are not registered users of IKO Web Design EOOD Service.
1.6 When IKO Web Design EOOD processes Personal Data that has been transferred to IKO Web Design EOOD by the Clients, IKO Web Design EOOD acts as the Data Processor.
- Processing of data on behalf of clients by Desktime as data processor
2.1 This section concerns IKO Web Design EOOD Clients that transfer Personal Data of end-users of the Service, such as personal data of Client’s employees, to IKO Web Design EOOD. In respect of such data, the Client sets the purpose and means of processing Personal Data, therefore the Client is the Data Controller.
2.2 IKO Web Design EOOD processes end-users’ Personal Data on behalf of the Client, and IKO Web Design EOOD only accesses the data for the purpose of rendering the Service, therefore IKO Web Design EOOD is the Data Processor.
Details of processing:
2.3 When the Client creates accounts for end-users in its group the Client transfers the Personal Data of such end-users to IKO Web Design EOOD. In that way the Client instructs IKO Web Design EOOD to process Personal Data in order to provide Service to the Client pursuant to the agreement concluded between the Client and IKO Web Design EOOD.
2.4 For the avoidance of doubt, this Privacy Policy contains complete and final instructions of the Client to IKO Web Design EOOD in relation to processing of Personal Data of end-users, and this Privacy Policy constitutes a binding data processing agreement.
2.5 IKO Web Design EOOD will always process all Personal Data on behalf of the Client following the Client’s instructions and in compliance with the applicable data protection laws and regulations including requirements of GDPR where applicable.
Duration of the processing:
2.6 IKO Web Design EOOD will process the aforementioned data for as long as IKO Web Design EOOD provides the Service to the Client and the Client has an active IKO Web Design EOOD account.
2.7 When an end-user’s account is deleted by the Client, IKO Web Design EOOD will process data of deleted accounts in the Client’s group for statistical and analytical interests of the Client. However, such data can be deleted at any time upon Client’s request.
2.8 After terminating contractual relationship between IKO Web Design EOOD and the Client, we may continue to store some Personal Data, but limited to the minimum amount required, as might be necessary for us to comply with legal obligations, to ensure reliable back-up systems, to resolve disputes between the Client and IKO Web Design EOOD, if any, to prevent fraud and abuse, to enforce IKO Web Design EOOD agreements, and/or to pursue legitimate interests of IKO Web Design EOOD or third parties.
Sub-processors:
2.9 The Client consents that IKO Web Design EOOD, for the purpose of providing Service to the Clients, uses sub-processors that provide IKO Web Design EOOD the services indicated in Paragraph 7. IKO Web Design EOOD ensures that it only uses sub-processors that comply with the same data protection obligations as set out in this Privacy Policy, in particular provides sufficient guarantees and has implemented appropriate technical and organizational measures and otherwise comply with the requirements of GDPR where applicable. If such sub-processor fails to fulfil its data protection obligations, IKO Web Design EOOD shall remain liable to the Client.
Assistance to the controller:
2.10 Taking into account the nature of the processing, IKO Web Design EOOD as a Data Processor will assist the Client with provision of technical or organizational measures, insofar as possible, for the fulfilment of the Client’s obligations as a Data Controller in relation to:
- Any requests from the Client’s end-users in respect of access to or the rectification, erasure, restriction, portability, blocking or deletion of their Personal Data that IKO Web Design EOOD processes on behalf of the Client. In the event that a Data Subject sends such a request directly to IKO Web Design EOOD, IKO Web Design EOOD will promptly forward such request to the Client; and
- The investigation of Personal Data breaches and the notification to the Supervisory Authority and Client’s end-users regarding such Personal Data breaches; and
- Where appropriate, the preparation of data protection impact assessments and, where necessary, carrying out consultations with any Supervisory Authority.
Return and deletion of data:
2.11 Unless otherwise required by applicable law, IKO Web Design EOOD has no obligation to store the Client’s data after termination of the agreement with the Client and deletion of the Client’s account and all accounts associated with it.
2.12 At the choice of the Client, IKO Web Design EOOD will delete or return all the Personal Data to the Client after the end of the provision of Service relating to processing and shall delete existing copies, unless applicable law requires IKO Web Design EOOD to store such Personal Data.
- Purposes and grounds for processing
3.1 IKO Web Design EOOD as a Controller shall process your Personal Data in order to provide you with the Service, to improve our Service, to solve any Service related issues you may have and to ensure that you receive the best customer experience possible.
3.2 IKO Web Design EOOD collects and processes your Personal Data including, but not limited for the following purposes:
- Registering you for the use of the Service by creating your DeskTime account and providing you the Service;
- Sending you invoices and processing payments for the Service;
- Personalizing your use of the Service when you set up your account settings;
- Analyzing your performance as a feature within our Service;
- Communicating with you to inform you about DeskTime Service and provide you any Service related support, answer your questions and process your requests;
- To improve Service or to develop new features within the Service;
- Analytics and measurement to understand how our Services are used. For example, we analyze data about your usage of the Service to optimize product design, to generate reports and create statistics about use of DeskTime Service;
- Delivering personalized ads, promotions and offers to you;
- Protecting legal interests of DeskTime, its Clients, Users and other third persons and for legal reasons such as, e.g. enforcing our Terms & Conditions or Privacy Policy, complying with any applicable law and assisting law enforcement authorities.
We’ll ask for your consent before using your information for a purpose that isn’t covered in this Privacy Policy.
3.3 IKO Web Design EOOD only collects and processes your Personal Data where we have lawful basis. Legal grounds for the processing of your Personal Data vary depending on the specific group of data and the purposes for processing it. Note that we may be processing the same Personal Data for several purposes simultaneously and, respectively, on more than one legal ground.
Contract. Most of the time the legal basis for processing your Personal Data is the contractual relationship between you as the User of Service and IKO Web Design EOOD since we need certain information to conclude the contract and to fulfil our obligations arising out of this contract.
Legitimate interests. Processing of your Personal Data is necessary for pursuing legitimate interests of IKO Web Design EOOD or for the legitimate interests of third parties, always provided that such processing shall not outweigh your rights and freedoms. For example, we may process your data for marketing purposes based on our legitimate interest of growing and improving our business. Other legitimate interests include maintaining Service to meet the needs of our Users and Clients, advertising to make our Service freely available for users, detecting and preventing fraud, abuse, security and technical issues with the Service, fulfilling obligations to our partners, enforcing legal claims, etc.
Consent. Some Personal Data we process based on your consent. This is the information that we do not need for performance of the contract, but you voluntarily may provide us with such information. By taking such clear affirmative action as uploading your photo to IKO Web Design EOOD account, entering notes, entering your e-mail address in blog subscription field and clicking “subscribe” you signify your consent to the processing of your respective Personal Data. By using the absence calendar and adding “away time” you take affirmative action and manifestly make this information available at your IKO Web Design EOOD account. Note that you have the right at any time to delete this information and withdraw your consent.
- Information we collect from IKO Web Design EOOD users
4.1 IKO Web Design EOOD collects, generates and receives information in a variety of ways when you use the Service. Some of this information constitutes Personal Data.
Information you provide upon creating your account:
4.2 As a User of IKO Web Design EOOD Services you provide us with information containing your Personal Data. Upon registration and creating your profile you provide us with the following information:
- Full name
- E-mail address
- Password
- Payment information
- Phone number
4.3 Please note that some options within the Service allow our Users to voluntarily disclose their Personal Data such as your photo, or any data that you enter into notes, as well as some special category data, e.g. data concerning health, when using the absence calendar function. IKO Web Design EOOD does not oblige Users to submit such data since it is not essential for provision of the Service, and Users are able to use the Service without providing us with the aforementioned data.
Third-party integrations:
4.4 You can choose to integrate third-party services in relation to certain aspects of IKO Web Design EOOD Service. A third-party service is software that integrates with the Service and you can enable or disable such integration for your IKO Web Design EOOD account.
Information you provide by configuring your account:
4.5 Upon configuring settings of your IKO Web Design EOOD account, including performance tracking preferences, you provide us with the following information, which in connection with other information may contain Personal Data:
Location, time zone, start and end time of your workday, work duration, start and stop time of work tracking, working days, tracking days, hourly rate, offline time input options, private time input options, application names to be collected, options to hide owners, absence calendar, information about colleagues, option to use calculation tool of project costs.
Information generated when using the Service:
4.6 Some of the information processed by IKO Web Design EOOD is created by you using the Service, and this information may also contain Personal Data. IKO Web Design EOOD records the following information when you use the Service:
IP address where you logged in, browser type and browser software version, names of applications used, names of tasks to be worked on, websites visited, IKO Web Design EOOD client version, path to the application, start and end time of use, time spent on breaks, screenshots of your computer screen. IKO Web Design EOOD may record the number of keystrokes or mouse movements, but we do not record what you type or where you click.
4.7 When you are just the end-user and not the Client of the Service, the above-mentioned information is provided to IKO Web Design EOOD by the Client (e.g. your employer).
- Information we collect from Designtime.me website visitors
5.1 Upon visiting our website we may collect and process the following information that may contain your Personal Data:
- Your device and browser
- Your IP address
- Other information that is collected from cookies and similar technology we use.
5.2 When you subscribe to our blog or newsletter we will process your e-mail address to send you informative materials, such as newsletters, advertisements and others. At any point in time you can unsubscribe from receiving the above-mentioned information in your e-mail footers.
- Retention period
6.1 IKO Web Design EOOD retains Personal Data of User account for as long as you maintain your Designtime.me account or as otherwise necessary for IKO Web Design EOOD to provide you the Service.
6.2 After you as a User terminate your relationship with us by deleting your Designtime.me account or otherwise terminating the contract for IKO Web Design EOOD Service, we may continue to store certain information as reasonably necessary to comply with our legal obligations, to resolve disputes, if any, to prevent fraud and abuse, to enforce our agreement, and/or to protect our legitimate interests.
- Sharing your personal data with third parties
7.1 For IKO Web Design EOOD to be able to provide you with our Service, we work with third parties that provide us with different services we need in the ordinary course of our business. Therefore, we share your Personal Data with such third-party service providers. They process your personal data on behalf of IKO Web Design EOOD.
7.2 The categories of recipients of your Personal Data include, hosting and server co-location service providers, communication and content delivery networks, data and cyber security service providers, billing and payment processing service providers, fraud detection and prevention service providers, web analytics, email distribution and monitoring service providers, session recording service, marketing service providers, legal and financial advisors, among others (“Third-Party Service Providers”).
7.3 Third-Party Service Providers only receive strict minimum amount of Personal Data as necessary for them to provide us with requested service. IKO Web Design EOOD shares Personal Data only with such Third-Party Service Providers that are able to demonstrate that they have implemented appropriate measures to ensure that Personal Data is processed in compliance with GDPR and other applicable laws and regulations.
7.4 In certain situations we might have a legal obligations to share your information with third parties. Such situation may arise when sharing your Personal Data with third party is required by law or when information is requested by public authorities.
7.5 IKO Web Design EOOD may share your Personal Data to IKO Web Design EOOD parent company, subsidiaries, affiliates, distributors, and resellers for the provision of Services and other purposes as described in this Privacy Policy. IKO Web Design EOOD may also share your Personal Data if IKO Web Design EOOD sells, buys, merges, acquires, partners with other companies or businesses, or IKO Web Design EOOD is under reorganization, liquidation, or bankruptcy.
7.6 Personal Data processed by IKO Web Design EOOD may be transferred to recipients outside of EEA. If IKO Web Design EOOD transfers Personal Data outside of EEA, IKO Web Design EOOD will only send Personal Data to such recipients that have taken adequate data processing and protection requirements and that are able to ensure an adequate level of protection or have provided adequate guarantees.
- Data subject’s rights
8.1 Individuals located in certain countries, including the European Economic Area, have certain statutory rights in relation to their Personal Data. Subject to any exemptions provided by law, you may have the right to request access to your Personal Data to seek to update, delete or correct this data, to restrict or object to processing of your data, as well as right to portability of your Personal Data.
8.2 You can use these rights by logging into your IKO Web Design EOOD account or by getting in touch with IKO Web Design EOOD using the contact information provided below in Paragraph 12.
8.3 Furthermore, if you believe that IKO Web Design EOOD has unlawfully processed your Personal Data, you have the right to submit a complaint to IKO Web Design EOOD by using the contact information provided below, or you may submit complaint to a respective data protection supervisory authority in your country.
8.4 If you are an individual whose Personal Data has been provided to IKO Web Design EOOD by the Client (e.g. employee of the Client), please contact the Client to exercise your rights as a Data Subject stated above.
8.5 In case IKO Web Design EOOD receives complaint or request from individual, whose Personal Data has been provided to IKO Web Design EOOD by the Client, exercising his/her rights as a Data Subject, IKO Web Design EOOD will not respond to such complaint or request without prior written authorization by the Client.
- Personal data security
9.1 IKO Web Design EOOD uses reasonable organizational, technical, and administrative measures to protect the confidentiality, integrity, and availability of Personal Data. We encourage Users, Clients and their end-users to take care of their own Personal Data as well as Personal Data in their possession and set strong passwords for IKO Web Design EOOD account, limit access to computer and browser by signing out after end of session, and as possible avoid providing IKO Web Design EOOD with any sensitive information, disclosure of which could cause substantial harm to Data Subject.
9.2 All of IKO Web Design EOOD ‘s authorized personnel involved in the processing of Personal Data provided to us have committed themselves to confidentiality obligations and shall not access or otherwise process Personal Data without authorization and if it’s not necessary for the purposes such data was obtained in the first place.
9.3 In the event a Personal Data breach occurs, we will notify you in compliance with the obligations set out in applicable laws and will provide reasonable assistance regarding the investigation of Personal Data breaches and the notification to the supervisory authorities and data subjects regarding such personal data breaches.
- Data protection audit
10.1 Upon Client’s written request, IKO Web Design EOOD agrees to provide the Client with sufficient information to demonstrate compliance with obligations laid down in this Privacy Policy and applicable laws and regulations. This information should be provided to the extent that such information is within IKO Web Design EOOD’s control and IKO Web Design EOOD is not precluded from disclosing it by applicable law, a duty of confidentiality, or any other obligation owed to a third party.
10.2 If information provided to the Client does not provide sufficient information to confirm IKO Web Design EOOD ‘s compliance with this Privacy Policy, then IKO Web Design EOOD agrees to allow for and contribute to data processing audits.
10.3 Such audits are allowed to be carried out by independent third party with good market reputation, provided that it has sufficient experience and competence to carry out data processing audits, and election of such auditor must be mutually agreed by both the Client and IKO Web Design EOOD.
10.4 The timing and other practicalities related to any such audit or inspection are determined by us and any such information and assistance are provided at exclusively the cost and expense of the Client, and we reserve the right to charge the Client for any additional work or other costs incurred by us in connection with the Client using such rights. The Client has rights to request the audit once every 2 years.
10.5 The auditor will have to sign confidentiality agreement which includes obligation not to disclose business information in its audit report, and the final report will also have to be provided to IKO Web Design EOOD.
- Privacy policy changes
11.1 IKO Web Design EOOD may occasionally amend this Privacy Policy for example in cases when we introduce new services or new features. The amendments to this Privacy Policy enter into force and are applied from the moment they have been uploaded to this page.
11.2 Therefore, we encourage you to check this page from time to time. By continuing to use our Services or otherwise providing Personal Data to us, after the amendments to this policy have been implemented, you agree to the updated terms of Privacy Policy.
- Contact information
In case you have any questions about this Privacy Policy or our data processing practices, or if you would like to exercise any of your rights as a Data Subject regarding your Personal Data, please contact us by email info@designtime.com, or by using the contact details below:
IKO Web Design EOOD
Attn: Data Protection Officer
Address: Zh. Obela 245-37, Sofia, Bulgaria 1326