Ocamba, as a data controller, collects and processes personal data relating to interactions on the Platform and the Website (as defined in Section “Definitions of the General Terms and Conditions).
OCAMBA PROCESSES PERSONAL DATA VIA OCAMBA ON BEHALF OF OUR CUSTOMER. THIS MEANS THAT OUR CUSTOMERS ARE DATA CONTROLLERS AND WE ARE DATA PROCESSORS
What do we mean when we use some word or phrase?
When we say “consent” we mean your explicit consent on the processing of personal data. Persons who are 15 years of age or older may give free consent to the processing of their personal data.
When we say “Data Controller” we mean the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
When we say “Data Processors” or “processor” we mean any natural or legal person who processes the data on behalf of the Data Controller. In some cases, Ocamba is a Data Processor and in others, Data Controller (as further explained in Section 2). In addition, we may use the services of various service providers to process your data more effectively. In such cases, they are either our processors or sub-processors.
When we say “Data Subject” or “you”, “your” we mean any natural person that shares personal data with us via Website.
When we say “GDPR” we mean the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
When we say “processing” we mean any operation or set of operations which is performed on personal data or sets of personal data. This includes activities such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2. DATA CONTROLLER OR DATA PROCESSOR
Who is responsible for your Data and how?
When Ocamba acts in the capacity of a Data Controller, Ocamba determines the purposes and means of the processing of personal data. The purpose of data processing is the reason why we process your personal data.
In other situations, Ocamba acts in the capacity of a Data Processor, and the Customer determines the purposes and means of data processing.
In relation to your personal data processed on or via the Website, Platform and the Service, Ocamba may be either a Data Controller or Data Processor.
Ocamba LLC 1603 Capitol Avenue, Suite 413, 3576 Cheyenne, WY 82001 United States Email: [email protected]
By using the Service, you may disclose, share, record, or otherwise use various types of data via a Platform as the User Content. The type of User Content is determined by the Customer and not by us. The extent to which personal data is processed while using the Service also depends on the Ocamba functionalities that the Customer decides to use. In that event, Ocamba is a Data Processor and Data Controller is the Customer. Thus, Ocamba does not analyze, disclose or access such data unless a User (including a User who is a legal entity) sends a request for support and, in these cases, the access is limited to enabling the functioning of the Service.
Please also note that we do not collect or process your personal data if you are an End User of Ocamba. In that case, Customer is responsible for your personal data.
If you represent a User that falls under the scope of application of the GDPR or similar data protection legislation, you may sign the Data Protection Addendum to this General Terms and Conditions (“DPA”), with Ocamba as a Data Processor based outside the EEA. The DPA includes the Standard Contractual Clauses adopted by the European Commission, as applicable, and reflects the Parties’ agreement with respect to the terms governing the processing of personal data under the Ocamba’s General Terms and Conditions. Signing the DPA will be considered as an amendment to the Agreement (within the meaning of Section “Definitions” of the General Terms and Conditions) and will be considered to form a part of the Agreement.
If would like to sign a DPA with us, please contact us at [email protected] for more information.
3. WHAT DATA WE COLLECT AND WHEN
We may collect and receive information about you in various ways:
(i) Information you provide through the use of the Service (for example, by creating the account on Ocamba);
(ii) Information you decide to provide through getting in touch with us via [email protected] ;
4. PERSONAL DATA WE PROCESS
If we act as Data Controller, it means that we determine the purpose of the processing of your personal data. We will ensure that processing is limited to what is necessary for the purposes for which the data is collected.
4.1 Ocamba as Data Controller
|DATA WE COLLECT
|Data necessary to sign in Job Title, Company name, business email address. You may also decide to share with us your Skype ID, marketing monthly budget, level of experience with hood app.
|Signing up to Ocamba and getting in touch with Ocamba sales team. Providing you with necessary information regarding the Service. Without providing your email address we will not be able to provide you with requested information. If it is more convenient for you can leave your Skype ID and we may Skype as a mean of communication.
|Processing is necessary for the providing you with necessary information regarding Ocamba and available Paid Plan which fits your needs. Your Skype ID, marketing monthly budget and level of experience with hood app is processed based on your consent.
|If you do not decide to become our Customer, we will keep this data for a period of 100 days. If you decide to become our Customer, we will keep this data for a period of 100 days after you deactivate your account or until the Agreement with Ocamba is terminated, in accordance with the General Terms and Conditions , whichever date comes first. If the processing is based on your consent, we keep the information until you withdraw your consent or within one of the above mentioned deadlines, whichever date come first.
|Email address The User will also obtain the User ID so that we can identify that User in the future.
|Creating and maintaining a User Account on the Website, according to the General Terms and Conditions
|Processing is necessary for the performance of the Agreement (as defined in Section “Definitions” of the General Terms and Conditions). Without providing an email address, the User cannot create the User Account.
|Within 100 days after the account is deactivated or until the Customer who invited you to use Ocamba terminates the Agreement in accordance with the General Terms and Conditions whichever date come first.
|Additional Data i.e., data you decide to share with us.
|If you send us an inquiry at [email protected] or otherwise request support, we will collect data you decide to share with us.
|Processing of personal data is either necessary to provide a Service or part thereof, or the processing is based on your consent.
|If the processing is based on your consent, we keep the information until you withdraw your consent or for one year, whichever date comes first.
|Information necessary for identification
|Processing is necessary for compliance with a legal obligation which the Controller is subject to.
|We keep this information for a period of one year.
|Email address If you decide to sign up for our newsletter, we use your email address.
|This newsletter allows us to inform you of the new features of the Service, updates, as well as other news relevant to the company.
|Processing is based on your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to such withdrawal. You may unsubscribe from receiving a newsletter from us. If you wish to do so, simply follow the instructions found at the end of each email.
|We may use your email for this purpose until you withdraw your consent.
|Email address (when provided by Super Admin or Ocamba App Admin)
|Super Admin or Ocamba App Admin may invite non-users via Ocamba to join the Platform, in which case they provide the non-user’s email address.
|Processing is necessary for the performance of the Agreement between us and the User who provided the information and it is also in the User’s legitimate interest.
|After sending the message to you we will delete your personal data within 5 days unless you decide to become a User, in which case other purposes apply.
|Other personal data
|For the prevention and detection of fraud, money laundering or other crimes or to respond to a binding request from a public authority or court.
|The processing is necessary to comply with legal and regulatory obligations.
|In accordance with the applicable statutory deadlines.
If we process your personal data on behalf of our Customer, we act as Data Processor. The Customer determines the purpose of such processing and is completely liable for your Data.
4.2 Ocamba as Data Processor
As previously stated, concerning your personal data processed on or via the Service, Ocamba is a Data Processor and the Customer is the Data Controller. Ocamba processes personal data following instructions from the Data Controller and under the General Terms and Conditions and DPA (if any). The purpose of such personal data processing is management of advertising where the Customer may follow the use of funds designated for advertising and get a report of campaigns performance.
As a processor, Ocamba is permitted to collect, use, disclose and/or otherwise process your personal data only following the instructions of the Customer.
1. Processing prior to using the Service
The Customer shares your email address to enable you to access the Service.
The Customer may assign you tasks and projects if you are a member of Customer’s team.
If you have any questions regarding the legal basis for such personal data processing, please contact the Customer who invited you to the Service.
2. Processing during the usage of the Service
If you decide to accept the invitation to use the Service, you will be required to create an account. To create the User Account, you will need to share your email address and password. You manage personal data you share via your account such as name and surname and contact details (phone, mobile, email, sip and Skype details).
In the course of the use of the Service we may process system usage data, IP address, your budget, type of finance and period, campaign you work on, navigational data including website usage information such as interactions with Ocamba, and other electronic data submitted, stored, sent, or received by the Data Controller via the Service.
Ocamba does not undertake analysis of any special categories of personal data (including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation) and Ocamba functionalities are not meant to be used for the processing of any such personal data. However, if you decide to provide such personal data to us or Data Controller via the Service, you will be deemed to have consented to such processing of the data.
For more information on who may access personal data, please see here.
5. WHAT WE DO NOT DO?
Ocamba will never:
- Sell any kind of personal information or data,
- Disclose this information to marketers or third parties not specified in Section 7,
6. PERSONAL DATA SECURITY
We will take all adequate measures to protect your Data.
We take administrative, technical, organizational and other measures to ensure the appropriate level of security of personal data we process. Upon assessing whether a measure is adequate and which level of security is appropriate, we consider the nature of the personal data we are processing and the nature of the processing operations we perform, the risks to which you are exposed by our processing activities, the costs of the implementation of security measures and other relevant matters in the particular circumstances.
Some of the measures we apply include access authorization control, information classification (and handling thereof), protection of integrity and confidentiality, data backup, firewalls, data encryption and other appropriate measures. We equip our staff with the appropriate knowledge and understanding of the importance and confidentiality of your personal data security.
7. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
We may share your Data with our service providers.
This section provides information about the parties whose services we use in executing our customers’ data processing instructions and/or for certain of our own data processing purposes.
Ocamba utilizes external processors for certain processing activities. We use information audits to identify, categorize and record all personal data that is processed outside the company, so that the information, processing activity, processor and legal basis are all recorded, reviewed and easily accessible.
We have strict due diligence procedures and measures in place and review, assess and background check all processors prior to forming a business relationship. We obtain company documents, certifications, references and ensure that the processor is adequate, appropriate and effective for the task we are employing them for.
We audit their processes and activities prior to contract and during the contract period to ensure compliance with the data protection regulations and review any codes of conduct that oblige them to confirm compliance.
This is the list of processors and sub-processors with whom we share your personal data:
|Amazon Web Services, Inc.
|Infrastructure and hosting
|Infrastructure and hosting, DDOS Protection
We may also share your personal data with our outside accountants, legal counsels, and auditors.
Please keep in mind that, subject to your instructions to us while using the Service, your data may be shared with third parties in the following situations:
- If you invite another User to join the Platform;
- If you invite a non-user to join Ocamba;
- If you decide to share User Content to person who do not have an account on Ocamba by providing links to such User Content;
8. INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA
If we transfer your personal data outside your territory, we will transfer them only to the countries that ensure an adequate level of protection or by applying the appropriate safeguard measures.
We may transfer your personal data to countries other than the one you reside in. Given that we follow internal rules for the protection of personal data that are stricter than the applicable law (see Section 15.11 of the General Terms and Conditions ), in these cases, we transfer your personal data only:
- To the countries within the EEA;
- To the countries which ensure an adequate level of protection;
To the countries which do not belong to those specified under item 1. and 2, but only by applying the appropriate safeguard measures.
9. HOW LONG DO WE KEEP YOUR DATA?
We retain the Data in accordance with the applicable law to provide the Service and for legitimate and lawful purposes.
The period for which we store your personal data depends on a particular purpose for the processing of personal data, as explained in detail in Section 4. We retain personal data for as long as we reasonably require it for legal or business purposes. In determining data retention periods, we take into consideration the applicable law (see Section 15.10. of the General Terms and Conditions ), contractual obligations, and the expectations and requirements of our Users. When we no longer need personal information, or when you request us to delete your information, where this is legal, we will securely delete or destroy it.
However, as an exception to the retention periods in Section 4 the data may be processed to determine, pursue or defend claims and counterclaims.
10. YOUR RIGHTS
If we process your personal data, we will enable you to exercise any right you have when Ocamba is Data Controller.
When Ocamba is Data Processor, we are obliged to notify the Customer (Data Controller) before responding to such a request.
Given that transparency is one of our cornerstone principles, we grant Data Subjects certain rights in relation to their personal data. These rights may be exercised by Data Subject when Ocamba operates as a Data Controller.
In the event Ocamba receives a request for exercising any of these rights directly from a Data Subject, we are obliged to notify the Customer before responding to such a request.
Right of Access
At any time, you can request access to your personally identifiable information.
You can send us a request for a copy of the personal data we hold about you.
We have ensured that appropriate measures have been taken to provide such in a concise, transparent, intelligible and easily accessible form, using clear and plain language. Such information is provided in writing free of charge. It may be provided by other means when authorized by the Data Subject and with prior verification as to the subject’s identity.
Information is provided to the Data Subject at the earliest convenience, but at a maximum of 30 days from the date the request was received. Where the retrieval or provision of information is particularly complex or is subject to a valid delay, the period may be extended by two further months where necessary.
Right of Correction of Your Personal Data
At any time, you can request that we correct a record of your personal information, if you believe it is inaccurate or incomplete.
If the personal data we have about you is incorrect, you have the right to request that we correct those data. Where notified of inaccurate data by the Data Subject, we will rectify the error within 30 days and inform any third party of the rectification if we have disclosed the personal data in question to them.
Right to Erasure
Unless processing of your data is necessary, you have the right to request from us to erase your personal data.
You have the right to request from us that your personal data is deleted in certain circumstances including:
- The personal data are no longer needed for the purpose for which they were collected;
- You withdraw your consent (where the processing was based on consent);
- You object to the processing and no overriding legitimate grounds are justifying us processing the personal data;
- The personal data have been unlawfully processed; or
- To comply with a legal obligation.
However, this right does not apply where, for example, the processing is necessary:
- To comply with a legal obligation; or
- For the establishment, exercise or defense of legal claims.
Right to Restriction of Processing
If you believe the processing is unlawful, but you do not want us to erase your personal data, you have the right to request a restriction of processing under certain circumstances.
If the accuracy of the personal data is contested, you consider the processing is unlawful, but you do not want it erased, we no longer need the personal data but you require it for the establishment, exercise or defense of legal claims or you have objected to the processing and verification, you can exercise your right to the restriction of processing.
Right to Data Portability
You have the right to obtain and reuse your personal data for your own purposes.
Where you have provided personal data to us, you have the right to receive such personal data back in a structured, commonly used and machine-readable format, and to have those data transmitted to a third-party Data Controller without hindrance but in each case only where:
- The processing is carried out by automated means; and
- The processing is based on your consent or the performance of a contract with you.
Right to Withdraw the Consent
At any time, contact us if you want to withdraw your consent to the processing of your personal data. Exercising this right will not affect the lawfulness of processing based on consent before its withdrawal.
If you have provided your consent to the collection, processing and transfer of your personal data, you have the right to fully or partly withdraw your consent. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing.
Right to Lodge a Complaint
Contact us at [email protected] for any complaint.
If you have any concerns or requests in relation to your personal data, please contact us at [email protected] and we will respond as soon as possible but not later than within 30 days.
We will update our Policy from time to time after giving proper notice.
Effective as of 20.4.2023.