Privacy policy

Introduction

Innoship Technology SRL is a limited liability company which provides an AI powered platform dedicated to retailers which aim to optimize the delivery of the orders received by choosing the most cost/time efficient transport company (referred to as “Innoship”, “we” “us” “our”). This Privacy Statement on Personal Data Processing (referred to as “Privacy Statement”) concern the personal data processing carried out by Innoship through its website and Saas Platform (“Platform”).

Name of the data controller and of the website owner

Innoship is a personal data controller and the owner of the Platform and website accessible at the following web address: www.innoship.io. You are entitled to know the purposes for which we process your personal data and we will inform you prior to processing your personal data for any other purposes than that for which you disclosed your personal data to us.

Personal data processed for the performance of the contractual relationships with our clients, suppliers and/or other business partners

A. Personal data we process In order to conduct the performance of the contractual relationship, we collect the following personal data from you: a. basic data for identification purposes, such as surname, name, work place, industry and country of residence and relationship to another person with whom we have an established connection (e.g., with an employee, with another contact or client, with a person who facilitated our connection with you); b. contact data, such as the physical work address or email address and phone number; c. any data you make available to us during our interactions. B. How we collect personal data We collect the personal data that you provide voluntarily (in electronic format), as well as information and data available from public sources: – when you contact us via contact forms or email, if you are interested in becoming our client, supplier or business partner. C. Legal grounds and purposes of processing Based on the agreement we concluded with you, as client, provider or business partner of Innoship, we will process all personal data you make available to us, as well as any other data necessary to the performance of our contractual and/or legal obligations. The legal ground of processing is performance of a contract with you or, in case you act as a legal representative or a contact person for a legal entity, on the basis of our legitimate interest.

Personal data processed for professional communication purposes

A. Personal data we process The collection of your personal data is strictly limited to what is necessary to provide you with a professional communication. Personal data we process include: a. basic data for identification purposes, such as surname, name, work place, industry and country of residence; b. contact data, such as the physical work address or email address and phone number; c. any data you make available to us during our interactions. B. How we collect personal data We collect the personal data that you provide voluntarily, as well as information and data available from public sources: – when you contact us via contact forms, if you are interested in our professional communications or express desire to cooperate with us. C. Legal grounds and purposes of processing When you subscribe to receive professional communications from us, by means of the website or otherwise, we will ask for your consent for the processing of personal data in order to be able to supply those services for which you have requested the subscription. Thus, in such cases, the legal ground for processing of such data is your consent. If at any moment in time, you decide you do not want to benefit from these communications and you withdraw your consent, we will respect your decision and we will stop processing your personal data for this purpose.

Personal data processed for recruitment purposes

You may apply for a position within Innoship in the dedicated section on our website or directly by email. We shall use your personal data related to the recruitment process to: – evaluate whether you are appropriate for a position at Innoship; – contact you with regard to your application; – manage the recruitment process; – contact you with regard to subsequently vacant positions which we deem suitable for you, and – keep records of prior recruitment processes of our company in which you participated and of the reasons why you have not been presented with an offer or why our offer has been rejected. A. Personal data we process When you apply, we will limit the processing of your data to what is strictly necessary for the purpose of recruiting. Personal data we process include: a. basic data for identification purposes, such as your full name, email address, phone number and mail address, country of origin, any other data you make available to us by the application documents, which you provide by applying directly on the website or by email; b. other CV related data, such as education, professional experience, competencies, your specialization, and the type of collaboration you want; c. any other data you make available to us during our interactions. B. How we collect personal data We collect the personal data that you provide voluntarily (in electronic format), as well as information and data available from public sources: – when you contact us via email or contact forms, if you are interested in becoming and employee or contractor of Innoship. C. Legal grounds and purposes of processing We collect information necessary in the recruitment process, in order to be able to evaluate if you are appropriate for a position within Innoship and for the purposes given above in this section. The processing of personal data during the recruitment procedure is legally based on the entering into an employment agreement with you, this processing representing the pre-contractual phase of the performance of the employment agreement. If you were rejected for the position you applied for, we may also ask for your consent in order to store your personal data for a longer period and contact you with other relevant positions within Innoship. If at any moment in time, you decide you do not want to be contacted for recruitment purposes anymore you may withdraw your consent, we will respect your decision and we will stop processing your personal data for this purpose.

Use of cookies

A. Personal data we process Our website contains cookies, which collect personal data. The collection of your personal data is strictly limited to what is necessary to provide you with an experience of the highest quality with regard to the use of our website. We collect technical data (including the IP address), such as information on your visits on our website or by accessing materials and communications we send you electronically, your online identifiers, behavior on our website and profiling data. B. How we collect personal data We collect your personal data through the cookies placed on our website. The details on the processing of personal data though such tools are available in our Cookie Policy. C. Purposes of processing We use such cookies for the purpose of providing you with a better user-experience when navigating on our website, for analytical purpose in order to better improve our services, as well as for the purpose of providing you with relevant content and advertisements, in accordance with your interests. For more information with respect to the use of cookies on our website, please visit our Cookie Policy available at www.Innoship.io/Privacy

Personal data processed for the purpose of providing the Platform

The Platform is a software application developed by Innoship and provided as a SaaS application, which allows retailers to better optimize the delivery of orders which they receive. The Platform incorporates a proprietary AI technology which, on the basis of several criteria, enables retailers to automatically choose the best suited courier (from the ones with which such retailer has concluded service agreements) for each individual order, thus optimizing costs, as well as dispatch and delivery times. Access to the Platform is possible only via a user account created by Innoship specifically for this purpose on the basis of the agreement concluded with each retailer. Innoship only acts as a controller for processing activities necessary for creating and managing user accounts. For any other personal data related to the orders received from retailers (e.g. name and contact details of their clients, ordered products, additional data and comments etc.), Innoship acts only as processor of the retailer, facilitating in the name and on behalf of such retailer the transmission of the delivery details to the best suited courier, chosen on the basis of its AI algorithm. Data related to the efficiency and performance of couriers consist of various parameters unrelated to a specific individual, which cannot lead to direct or indirect identification of any natural person. Innoship does not use personal data for its own purposes, specifically for the purpose of this Platform; any personal data is anonymized and/or used in an aggregated manner, thus preventing the identification of any natural person. A. Personal data we process The processed personal data for the purpose of creating and managing user accounts on the Platform are: a. Name and surname of the user; b. Email address of the user; B. How we collect personal data We collect your personal data directly from you or from the retailer as your employer. C. Legal grounds and purposes of processing We collect for the purpose of providing the services and performing the agreement concluded with the retailer with respect to our Platform. This processing activity is based on our legitimate interest to grant you access on the Platform by virtue of the agreement concluded with the retailer.

Storage duration

If you have chosen to receive communications from Innoship, we will store your personal data to provide this service for 2 years from when you have given us consent. Afterwards, we will ask again for your consent in order for you to keep benefiting from the communication service. Personal data collected in the recruitment process is stored and used for the purpose of keeping records on past recruitments for a period of 6 months from the date when you applied at Innoship, unless we concluded an employment agreement, when it will apply the retention period for employees’ file. If you have given us consent to contact you for further job opportunities, we will store your personal data for a period of 2 years from when you have given us consent. Afterwards, we will ask again for your consent again. Personal data processed in relation to your user accounts for the Platform shall be processed for the duration necessary for us to provide you with access to the Platform, but no longer than the termination of the agreement with the retailer. We shall delete your other personal data when it is no longer necessary for the purposes for which they have been collected or when you withdraw your consent (if the processing of your data is based on consent), provided that we are not legally required to hold such data. We may also retain your personal data for an additional period to the extent deletion would require us to overwrite our automated disaster recovery backup systems.

Recipients

As a general rule, we do not share with or transfer your personal data to third parties. If the disclosure or transfer is required or if we are obliged by law, we shall inform you in the shortest possible time with regard to such transfer, unless the applicable law, including the rules of governance for the obligation to maintain professional secrecy, prevents us from sending such notification. If we disclose or transfer your personal data to third parties, we shall do so according to the applicable laws and take the necessary measures to ensure their integrity and protection. For performing our activity, we use data processors, i.e., Microsoft Azure, for the hosting platform, a service provided by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, VAT Regn No. IE8256796U and Gmail for email servers or Google Docs for document management, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, VAT number: IE 6388047V which process personal data on our behalf and strictly based on our instructions. We will maintain the control over your personal data and will use appropriate safeguards, as provided under the applicable law, to ensure the integrity and security of your personal data in relation with those processors. We shall conclude agreements for the processing of personal data with all data processors, which will include adequate clauses to ensure that data processors undertake obligations to process personal data (including to delete it) in full agreement with applicable laws and which provide an adequate level of protection to your personal data. Our Customer Relationship Management (CRM) solution providers: – The messaging and communications platform provided by Intercom R&D Unlimited Company, a company based in Dublin, based in Dublin, St. Stephen’s Green, Nr. 18-21, Stephen Court. In this situation, we process the following Personal Data: username, email address, phone, location, operating system version, browser version, operating system version, session number – The customer management platform operated by Monday.com LTD, an Israeli company based at 52 Menachem Begin Road Tel Aviv. In this situation, we process the following Personal Data: name and surname, e-mail address, telephone number, location, company, role in the company.

Security of personal data

Personal data is secured against threats and we make sure they are protected by appropriate IT infrastructure and security measures. Moreover, we have implemented internal measures that allow us to discover, notify, and document personal data breaches in the shortest possible time. If we discover any personal data breach that poses a risk for your rights and freedoms, we shall notify the National Supervisory Authority for Personal Data Processing. You will be informed with regard to your personal data breach if it leads to a high risk for your rights and freedoms.

Your rights regarding the processing of personal data

If you expressed your consent with respect to the processing activities, you might withdraw such consent at any time with future effects. Such withdrawal will not affect the legality of the processing prior to the withdrawal of your consent. As a general rule, if you withdraw your consent, we will no longer allow the processing of your personal data and will take any appropriate actions to erase any records containing your personal data, unless any mandatory legal provisions require otherwise. You have the following rights regarding the processing of your personal data:
  1. The right to access your personal data. You have the right to be informed, upon request, as to whether or not your personal data are being processed, and, where that is the case, to request access to the personal data. The access information includes, inter alia, the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed. You have the right to obtain a copy of your personal data processed. For any additional copies, we may charge a reasonable fee based on administrative costs.
  2. The right to rectification your personal data. You have the right to have your inaccurate Personal data rectified. Depending on the purposes of the processing, you have the right to have your incomplete Personal data completed, including by means of providing a supplementary statement.
  3. The right to erasure your personal data. You have the right to ask us to erase your personal data.
  4. The right to restriction of processing of personal data. This right is available to you when: a. you contest the accuracy of your personal data; b. the processing of your personal data is unlawful; c. we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or d. you have objected to processing of your personal data, pending the verification of our legitimate interest ground.
  5. The right to data portability. You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those personal data to another entity without hindrance from us.
  6. The right to object to the processing of your personal data. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. If you have a right to object and you exercise this right, your personal data will no longer be processed for such purposes by us. Exercising this right will not incur any costs.
Should you have any questions related to the processing of your personal data or if you would like to submit a request, as well as to exercise any of the rights on the processing of personal data, please contact us at: – email address: dataprotection@innoship.io – head office: Street Ienachita Vacarescu 38, Sector 4, 040157, Bucharest We will review each request and notify you with regard to the undertaken actions in the shortest possible time, but no later than one month since the registration of your request. Should we require more information from you or experience difficulties in the settlement of your request, we shall notify you without delay with regard to the fact that we need additional time to perform a proper review of your request. Should you consider that we have failed to settle all your requests or are discontent with our answers, you may file a petition with the National Supervisory Authority for Personal Data Processing. You may also refer to the courts of law.

Amendments of the Privacy Statement

If we decide to amend this Privacy Statement, we will publish the new version on our website, which will supersede the current version. Thank you for trusting us with your personal data and for finding the necessary time to read our Privacy Statement. Please feel free to contact us if you have any questions related to your personal data and our processing of your personal data.