GOROLIST PRIVACY NOTICE
Last updated: 28th July 2021
GoroList respects your privacy and is committed to protecting your personal data. This Privacy Notice will inform you on how we look after your personal data and tell you about your privacy rights and how the law protects you. It also lets you know how information is collected, processed, stored and used in accordance with data protection laws.
Under applicable laws, GoroList is a data controller for the processing of personal data. [We are registered with the UK data protection regulator (Information Commissioner’s Office (ICO)). Our registration number is: ZB146699].
‘The company’, ‘We’, ‘Us’, ‘Our’ refers to GoroList. ‘You’ or ‘Data Subject’ refers to any individual receiving this notice for whom we hold personal information.
When you use any of our services (the “Services”) we appreciate that you are trusting us with your personal information.
Some information, such as your internet protocol (IP) address and/or browser and device characteristics – is collected automatically when you visit our website and app.
We automatically collect certain information when you visit, use or navigate our website and app. This information may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our and other technical information. This information is required to maintain the security and operation of our app and for our internal analytics and reporting purposes. Internal analytics will be in aggregate form and will not relate to a specific User.
LAWFUL BASIS FOR PROCESSING
Pursuant to data protection laws such as the UK Data Protection Act 2018, UK GDPR and where applicable the EU GDPR our lawful bases for processing personal information are highlighted below.
For example, when you agree to allow us to process your data when you install our App.
When you engage in a service with us i.e. to fulfil our contractual terms and conditions.
When we are under a statutory duty to process personal data for example, for accounting records purposes.
Where we have a business need to process personal data which does not override your interests. For example, if we send marketing material to you or contact you about our services.
On rare occasions, we may need to process personal data in “emergency” situations to protect you.
SHARING PERSONAL INFORMATION
We may need to share your personal information in the following situations:
At no point in time will we disclose any data to a third-party or business partners unless it is authorised by law or it is necessary for the execution of a contract, or it is to fulfil our business obligations,or you have consented for us to do so.
HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In circumstances where you choose to register or log in to our services using a social media account, we may have access to certain information about you.
Our app offers you the ability to register and log in using third-party social media account details (like your Facebook or Google logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, profile picture as well as other information you choose to make public on such social media platforms. Please view your social media provider settings before using social logins to ensure only relevant data is passed to us.
We will use the information we receive only for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant app.
COOKIES AND SIMILAR TECHNOLOGIES
Like many businesses, we also collect information through cookies and similar technologies. Please refer to our Cookies Policy.
LINKS AND THIRD-PARTY WEBSITES
This privacy notice applies only to the websites controlled and operated by GoroList. The websites may link to third-party websites where our privacy notice no longer applies. Please note that we do not control and are not responsible for other uses of your information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use and share your personal information and how you can set your privacy preferences on their websites and apps.
If you opted to receive any information from us or any of our affiliates at the time you registered our website or subscribed to use our app, but subsequently change your mind, you may opt-out at any time by emailing us or by contacting us (see Contact Information).
Similarly, you can change your contact or marketing preferences that you selected at registration through our opt-in mechanism at any time by contacting us or unsubscribing via the app.
GoroList does not sell your personal information to others.
CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting that you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practise in a revised version of this privacy notice.
INTERNATIONAL DATA TRANSFER
We may transfer, store and process your information in countries other than the country where you reside. We will endeavour to protect your privacy rights whenever we transfer your information internationally by adopting appropriate safeguards as laid down in law. For example, to countries deemed having an “adequate” level of protection or by adopting mechanisms such as approved standard contractual clauses. To learn more about our international transfers please contact us.
Our servers are located with Amazon Web Services (AWS) across many locations. If you are accessing our app please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.
The data we collect will only be used and processed for a specified purpose and only be retained for a reasonable period, to the extent permissible by law.
We take reasonable steps to safely and securely delete, dispose of, anonymise and/or archive personal information when we no longer have use for it. The criteria used to determine our retention periods include:
GoroList is committed to providing protection for the privacy of children. We do not knowingly collect or process personal information about children under any age stated under the applicable legal statutes. All personal information will be removed from our records with immediate effect if it comes to our notice that a child has submitted such data on our website.
By using the app, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the app. If you become aware that your child has provided us with Personal Information at one or any of our Services, please notify us so that we may delete the information from our records and discontinue any related features or services.
DATA SUBJECT RIGHTS
Under data protection laws, where we process your personal data, you have rights. Note: not all rights are absolute and will depend on the type of right request). Rights include:
All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
You are not required to pay any charge for exercising your rights in accordance with law. However, we may charge a “reasonable fee “for the administrative costs of complying with a request if it is manifestly unfounded or excessive or if you request further copies of your data. We will respond within a month. When we are unable to respond within the one-month period, a two-month extension applies, and we will inform you if this is applicable to your request. Where we refuse a request, we will let you know promptly.Please contact us if you wish to make a request.
COMPLAINTS AND CONCERNS
We want you to help us put things right, please get in contact with us with any complaints or concerns you may have. Under data protection laws you have a right to lodge a complaint with a data protection supervisory authority.
If you are a resident in the UK, the contact details for the data protection authority is here: https://ico.org.uk/global/contact-us/
EEA can find details of all relevant authorities here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
If you are a resident in Switzerland, the contact details for the data protection authority are available here: https://www.edoeb.admin.ch/edoeb/en/home.html
CHANGES TO THIS PRIVACY NOTICE
GoroList may change this Privacy Notice from time to time in response to legal, technical, or business developments. The updated version will be indicated by an updated “revised” date and the updated version will be effective as soon as it is accessible.
We encourage you to check this webpage from time to time for any updates. Where there are any substantial changes to the processing of your personal data we will contact you by the contact details you have provided to us, namely your email address or telephone number.
For any questions, concerns, requests or complaints about this privacy notice or any information on how we collect and process personal data, please contact us.