Personal Data Privacy Policy

Last Updated: September 5, 2024


This is heybooster! Thanks to our artificial intelligence-powered system, we enable you to analyze your data, receive alerts in the event of outliers, receive periodic information about key metrics, track marketing results with automated reports, and receive suggestions for improving your marketing activities, all in an effort to increase revenues more effectively.

If you want to contact us, reach out and get detailed information or just say “Hello!” Contact details are below!

Heybooster OÜ

  • Registry Code: 16144095
  • Address: Harju maakond, Tallinn, Kesklinna linnaosa, A. Lauteri tn 3, 10114
  • Email: hey@heybooster.ai

Yet, these are not the only strong suits we have. The confidentiality of the personal data we collect and the process is extremely important to us too.


What is this Privacy Policy?

This Privacy Policy is a document designed to inform you about how we, as a data controller, handle your personal data. The confidentiality and security of the personal information we process are paramount, and we are committed to adhering to the highest standards of privacy protection.

Under the GDPR (General Data Protection Regulation) and related legislation, we have specific obligations as a data controller, and you, as a data subject, have rights regarding your personal data. This Privacy Policy details those obligations and your rights, providing you with a clear understanding of how we manage your personal information.

What is Personal Data?

Personal data refers to any information related to an identifiable individual. This includes data that can directly or indirectly identify you, such as your name, email address, IP address, and more.

When such data is collected, recorded, and used within a system, it is considered data processing. For example, recording names and phone numbers of guests is processing personal data.

Heybooster, like many other businesses, processes your personal information to deliver our services. Without this data, we cannot provide accurate services. By using our services or accessing our website, you acknowledge that you have read and understood this privacy policy.

Below, we've provided a detailed explanation of the types of personal data we process, why we process them, and what falls within the purview of the processing activity.

What Personal Data Do We Process, and Why?

The personal data we process varies depending on your interaction with heybooster. Here’s how we handle your data:

  1. Data You Provide: When you visit our website, we may process personal information that you voluntarily provide, such as when filling out forms. This data may include your name, email address, workplace, domain address, LinkedIn profile, and encrypted payment information. This information helps us respond to your needs and offer a beneficial experience.
  2. Data Obtained from Third-Parties: To deliver our services, we may obtain data from third-party service providers. We only access data that you permit and process it strictly for the purpose of delivering our services. We retain only the data necessary for service operation, and any data obtained from these sources is kept in its processed form.
  3. Authentication via Third-Party Services: If you sign in using third-party accounts (e.g., Google), we receive personal data you have provided to Google to set up your account. We use this information solely for authentication purposes. The data we receive depends on the permissions and privacy settings controlled by the third-party service. We encourage you to review the privacy settings and notices of those services to understand what data may be shared with us. This data is used only for authentication and not for other purposes.
  4. Browsing Data: To enhance your experience on our website, we process data provided by your browser, such as log files, and data collected through cookies and similar technologies. This helps us understand user interactions and improve website functionality.
  5. Communication Data: When you interact with us via our website or other methods (e.g., email), we may process personal data you share, such as your name, email address, and correspondence, to meet your needs and respond to inquiries.
  6. Marketing Data: If you opt-in to receive emails from us for marketing purposes, such as information on membership, contracts, new services, promotions, and campaigns, we use your personal data (e.g., name and email address) to send these communications. You can unsubscribe from our newsletters at any time by following the instructions provided in the newsletter, on our website, or in an email.

Legal Basis for Processing Personal Data

  1. Pre-contractual and Contractual Necessity (GDPR 6/1-b): We process personal data necessary to fulfill contracts or pre-contractual measures with you.
    1. If you apply for open positions and career opportunities listed on our website, we use the personal information you provide (such as your name, email address, phone number, application letter, resume details, photo, diploma or certificate, and references) to review and assess your application.
    2. To provide our Services, we may integrate with third-party services such as Google Analytics, Facebook Ads, etc. We process email addresses you use for integration and permit access to services provided by these third parties. However, we ensure that any data collected through these integrations is used solely for the core functionality of our application and is not shared with third parties beyond what is necessary for the direct operation and improvement of our services.
  2. Explicit Consent (GDPR 6/1-a): Where required, we will ask for your explicit consent before processing your data.
    1. On our website, you may be asked to provide personal information for membership, service purchases, information requests, subscriptions, and similar purposes. Fields marked as "necessary" must be completed to process and fulfill your transaction or request. By providing the requested information, including email addresses used for integration with third-party services, you are granting us explicit consent to process and use your personal data as described in our privacy policy. This consent also covers the integration with third-party services, where we use the data solely for the purpose of fulfilling the core functionality of our application and not for purposes beyond the scope of direct operation and improvement of the service. If you do not provide the required information, we will be unable to complete the transaction or fulfill your request.
  3. Legitimate Interest (GDPR 6/1-f): We may process log files and other data to fulfill legal obligations, enhance security, and improve our services based on legitimate interests. When you visit our website, you are not required to disclose any personal information. You can browse our website without revealing personal data. However, we collect data that your browser sends to our website's server, which we use for the following purposes:
    1. Legal Obligations and Commercial Interests: We process log data to comply with legal obligations and to serve our commercial interests, such as analyzing customer potential, understanding our target audience, and conducting marketing activities.
    2. Log Data Details: The log data we collect may include:
      1. Date and time of your visit to our website.
      2. Type, version, and settings of your Internet browser.
      3. Operating system and internet service provider.
      4. Your activity on our website, including pages viewed, clicks, and screen movements (note that screen movements are processed anonymously and solely for analyzing page interactions while you actively use our site).
      5. The website you visited before our site.
      6. Your IP address and, if applicable, tokens generated by third parties that you authorized us to access (IP address is the number assigned to your device that enables network interaction).
    3. Data Processing for Security and Improvement: The processing of this data helps us improve website functionality, stability, and security. For statistical purposes, your IP address is processed in an anonymized form to analyze and enhance website performance.
    4. Anonymization and Security: We take measures to ensure that your IP address is anonymized when used for statistical purposes. The data collected is processed to ensure the security and stability of our website and is handled in accordance with data protection regulations.

Cookies

These are small text files that contain cookie-related information that is stored on your device as you browse our website. Cookies cannot access, read, or modify other information saved on your device.

Cookies are only kept on your device by the browser that you use when you visit our website, and they are only used for the following purposes (Remember to read our Cookie Policy for more information on this).

To Whom We Disclose Data?

We are committed to ensuring that our products and services align with our customers' expectations while adhering to the highest standards of privacy and data protection. In the course of delivering our services, we may need to share certain personal data with third-party service providers. These disclosures are strictly limited to what is necessary for the operation and improvement of our applications, and we do not share user data with third parties for any purposes beyond these core functions.

When we engage with third-party service providers, some of your personal data may be processed within their systems as part of delivering our services. However, this data is protected by the most advanced security methods allowed by law, and we do not transfer or disclose your information to third parties for any purposes other than those explicitly stated.

Please note that the third parties we work with are required to handle your data in compliance with stringent privacy standards. We do not disclose your user information (such as provided by Google) to any third parties for any purposes other than to provide our services as described. 

Links and addresses on heybooster.ai

You might come across certain links and addresses of other people, sites, and platforms when you visit heybooster.ai. These links and addresses may be offered to show you some of our references, clients, or news, or to refer you to other sites that we believe may be of interest to you.

Yet, we cannot be held liable for the content of these links and addresses. You leave Heybooster's domain when you click on these links or go to the addresses (URLs). As a result of the fact that we are uncertain of what personal data is accessible in this new domain if it is shared with a third party, and whether the appropriate safety measures are undertaken.

As a result, if you click on a link or address on our website, be sure to read the privacy policy of the website you are visiting.

How long will the process take?

We store your personal information for a period that aligns with our business needs and legal obligations. Rest assured, your personal data is securely stored in electronic environments, following all applicable procedures and legal requirements.

Personal data will be retained on the necessary servers in accordance with the storage infrastructures and services we utilize. Once the applicable storage period expires, your data will be securely erased or anonymized. We do not process your personal data indefinitely.

We retain your personal data only as long as necessary to provide the services you've requested and to fulfill our legal obligations. This includes maintaining business and financial records, resolving disputes, ensuring security, detecting and preventing fraud and abuse, and enforcing our agreements.

Typically, we store personal data related to log files and cookies for three (3) months. However, if necessary, we may retain data for longer to investigate any potential security incidents or anomalies. The retention period may vary depending on the nature of the data and the purpose it serves. For more detailed information on our cookie practices, please review our Cookie Policy.

Beyond specific cases, as a general rule, we retain personal data only for as long as it is needed to achieve the processing objectives. For instance, we may need to store your personal information for the duration of our business and contractual relationship with you.

Additionally, various legal requirements may mandate different retention periods. For example, tax-related documents must be retained for seven (7) years under tax legislation. In some cases, statutory limitations on certain rights and claims may extend to thirty (30) years. To comply with potential legal demands, we may also need to retain your information until it becomes time-barred.

Rest assured, if we no longer have a valid basis to retain your personal data, we will promptly delete or anonymize it.

How can you exercise your rights?

You may exercise your rights below and ask us questions about your personal data anytime you want:

  • To access your personal data,
  • To learn whether your personal data is processed or not,
  • To request information about which data of personal data are processed if any, how they were obtained, their correctness, storage, and also whether they were transferred to third parties or abroad,
  • To learn the reason for processing personal data and whether they are used in accordance with the initial purpose,
  • To learn about the third parties to whom your personal data are transferred at home or abroad,
  • If you think that your personal data has been processed incompletely or incorrectly, demand their correction and notify the third parties to whom the data of the transactions transferred within this scope.
  • To request that the personal data gathered and/or processed in conformity with the legislation be deleted or anonymized when the reasons necessitating its processing have ceased and that the third parties to whom the personal data has been transmitted be informed of the transactions.
  • Objecting decisions after the processed data has been examined by automated processing if it is concluded against you (We do not process your personal data for the purpose of taking decisions based solely on automated processing, including profiling, which produces legal effects concerning you).
  • To request compensation for the loss in case you incur losses due to the unlawful processing of your personal data,
  • Opposing the processing of your personal data,
  • Requesting restriction of processing of personal data,
  • Data portability.

To claim your rights, you don't have to go through a lot of difficulties. By getting in touch with the Data Protection Officer, whose details are provided below, you may quickly submit your request. Regarding your request, our data protection officer will be in touch shortly.

If you feel that your rights have been violated, you may also file a complaint with the competent data protection authority (Data Protection Inspectorate Estonia).

Will this Privacy Policy be valid forever?

The only thing that doesn't change is the change itself.

The world, technology, our daily lives, regulations, and many other things that can be pertinent to this text might change every day. This privacy policy may sometimes need to be amended due to factors like updated legal requirements, changes in the scope of our operations, or shortcomings in the content.

Thanks to this change process, we intend to provide service under the most current circumstances. But don't worry! If we change the privacy policy, we will keep it constantly accessible and post the modification at the same address.