Privacy policy and personal data protection
This document is the privacy and personal data protection policy (the “Policy”) of Take Control — Software and Infrastructure EOOD, UIC 207604329, with registered office and management address: Sofia, PC 1715, Mladost district, Mladost 4 residential area, block 460B, carrying out activities including software development and ICT sector services — technical and software support, etc. It is an integral part of the terms of use for the MonitorDash service (the “Terms”). If you do not agree with the Terms, you will not be able to use the service to the extent that requires acceptance. Changes to the Policy will be published here.
Because of the nature of the web application and the public pages of MonitorDash, provided as a cloud service (SaaS), Take Control — Software and Infrastructure EOOD processes personal data of natural and legal persons — clients or other natural persons listed below (“data subjects”), in accordance with this Policy.
In processing personal data, Take Control — Software and Infrastructure EOOD complies with all applicable data protection legislation, including, without limitation, Regulation (EU) 2016/679 (the “Regulation”).
Definitions:
Personal data means any information relating to you and your clients (natural or legal persons) by which you can be identified, directly or indirectly;
Processing of personal data (“Processing”) means any operation or set of operations which may be performed on personal data, by automated or other means.
1. Purposes of processing personal data
Take Control — Software and Infrastructure EOOD collects data you provide in connection with use of MonitorDash — including registration, sign-in, configuration of monitored sites, visit tracking (where enabled), monitoring, logs, SEO, backups and related features. Documentation of processing and fulfilment of legal obligations and protection of legitimate interests is in accordance with applicable law:
1.1. Contract conclusion and performance
These are the purposes necessary for concluding and performing the contract between you and Take Control — Software and Infrastructure EOOD, including processing required for registration, account creation and use of MonitorDash. They also include communication with you, including by email or telephone, needed to support access and use of the cloud service and/or to notify you of changes. Processing of some or all relevant categories of data may be necessary for this purpose.
1.2. Legitimate interest
Legitimate interest purposes of Take Control — Software and Infrastructure EOOD, its employees, subcontractors or service providers or third parties include:
- ensuring normal operation and use of the service by you and other users, maintenance and administration, dispute resolution, detection and prevention of abuse;
- communication with you, including electronically on important service-related matters;
- handling signals, complaints, requests and other correspondence;
- protecting the rights and lawful interests of Take Control — Software and Infrastructure EOOD, including in court, and assisting in protecting the rights of other users and affected third parties.
1.3. Legal obligations
These include purposes such as:
- finance and accounting activities requiring processing and storage of information the law requires for tax, accounting and other reporting;
- activities to fulfil statutory duties to retain or provide information;
- documentation, reporting and other duties related to Regulation (EU) 2016/679 and applicable law, including under data processing agreements.
1.4. Explicit consent
Your data may be processed on the basis of your explicit consent, in which case processing is specific and limited to the scope of that consent, for example for sending marketing information.
Take Control — Software and Infrastructure EOOD processes personal data only in accordance with this Policy and to the extent permitted by law. Information is collected when you register, sign in and perform operations related to use of MonitorDash.
2. Retention of personal data
The retention period for personal data collected and processed by Take Control — Software and Infrastructure EOOD is 5 years, unless a shorter or longer period follows from applicable law, a client agreement or technical settings of the service (e.g. log rotation).
Data you provide may be processed to personalise and improve the user experience. Take Control — Software and Infrastructure EOOD may share some data with third parties in connection with your requests and commissioned services.
Services provided through MonitorDash are intended for persons aged 18 or over. Take Control — Software and Infrastructure EOOD does not knowingly collect, use or disclose minors’ personal data without prior consent of a parent or guardian.
3. Rights regarding personal data
As a data subject, you have the following rights:
3.1. Right to information
This Policy is intended to inform you in detail about processing of your personal data in connection with the services.
3.2. Right of access
You have the right to obtain confirmation whether your personal data are processed, access to them and information about the processing and your related rights.
3.3. Right to rectification
You have the right to rectify incomplete or inaccurate personal data, by you and/or your authorised representative.
3.4. Right to erasure
You may request erasure of data except where substantial legal grounds and/or legal obligations require continued processing.
3.5. Right to restriction of processing
The Regulation provides that you may restrict processing of your personal data where grounds set out therein apply.
3.6. Right to notification to third parties
Where applicable, you may request that we inform third parties to whom data were disclosed about rectification, erasure or restriction.
3.7. Right to data portability
You have the right to receive personal data you provided in a structured, machine-readable format and to transmit those data to another controller where you choose.
3.8. Right not to be subject to automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, except where provided by law with appropriate safeguards. MonitorDash does not use such technologies for the services described here.
3.9. Right to withdraw consent
You may withdraw consent for processing based on consent at any time, without affecting the lawfulness of processing before withdrawal.
3.10. Right to object
You may object to processing based on legitimate interest. We will assess your objection and comply where justified; if compelling legal grounds apply, we will inform you.
3.11. Right to lodge a complaint
You may lodge a complaint with a supervisory authority if you believe processing infringes applicable data protection law. In Bulgaria, this is the Commission for Personal Data Protection, Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2. Website: www.cpdp.bg.
4. Data protection contact
For any questions about this Policy, contact the data protection contact using:
Email: info@takecontrolsoft.eu
Phone: (+359) 877 897 005
Address: Sofia, PC 1715, Mladost district, Mladost 4 residential area, block 460B
5. Non-disclosure of personal data
Take Control — Software and Infrastructure EOOD collects personal data only in accordance with data protection law. Except as stated in this Policy, personal data will not be disclosed to third parties. Where disclosure to contractors is necessary for services, processing will comply with law and the requested services.
Certain data may be disclosed to competent authorities under law, court decisions or other lawful instruments, and/or where necessary for detecting offences.
6. Liability
Take Control — Software and Infrastructure EOOD is not responsible for the privacy practices of third-party websites or services linked from this site or application.
7. Confidentiality
When processing personal data, Take Control — Software and Infrastructure EOOD takes appropriate measures to protect information against loss, misuse, disclosure, alteration or destruction, and against publication to unauthorised third parties.