All collection, processing and use (hereafter “usage”) of data by Data Reports Ltd (Octoboard) is exclusively for the purposes of providing the Octoboard services (hereafter “services”). The services have been designed with the goal of collecting as little personal data as possible to function. By “personal data”, we mean all particulars related to an identified or identifiable natural person (the “data subject”).
The following statements describe which types of data we collect when you use our services, what happens with this data, and how you can object to this data processing, where applicable.
“Our Website(s)” and “Octoboard Websites” refers to any website owned and / or operated by Octoboard (as listed above), especially octoboard.com (including all subdomains).
“Octoboard Application” refers to Octoboard’s product hosted at app.octoboard.com.
When you visit our website, our server temporarily saves details of your access in its logs. These logs contain the following data, and are kept until their automatic deletion:
- The IP address of the computer making the request
- The date and time of your request
- The requested URI
- The amount of data transferred to you in response
- Whether the request was successfully processed or not
- Identifying data about the browser and operating system you use
- The referring website from which you made the request
- The name of your Internet Service Provider
The purpose of recording this data is to make it possible to serve the website to you (by establishing a TCP/IP connection), to secure our servers, the technical administration of our infrastructure as well as the optimisation of our services. Only in the case of unauthorised access or attacks on our infrastructure will your IP address be analysed.
No further information is required from you in order to access our website.
In order to secure your data we have put in place technical and organisational measures which meet the requirements of the GDPR, and require any third-party service providers we use to do the same.
When we use third parties to provide the services, for example email and infrastructure service providers, these third parties are only engaged after a comprehensive review. This review carefully considers each third party’s competence as well as their technical and organisational data protection measures. The results of this review are recorded in writing, and a data processing agreement which is compliant with Article 28 of the GDPR is signed with the third party.
Your data is only ever saved on secure servers, which may only be accessed by a few authorised personnel. When you use a form on our website to transmit data to us, this transmission is only performed over an encrypted TLS connection.
In order to provide our services, we use third-party services located outside the European Economic Area. To protect your personal data in this case, we have signed special data processing agreements with these service providers.
We use the following third-party service providers:
- Service providers which Octoboard uses to send emails
- Service providers who offer server storage.
In addition to the previously listed data, cookies will be saved on your computer when you use our website. Cookies are small pieces of textual data which are saved on your hard disk by your web browser, through which Octoboard, who sets the cookie’s contents, can collect certain information about you. Cookies cannot execute any code, nor transfer any viruses to your computer. We use them in order to anonymously or pseudonymously analyse the use of the website, and present relevant offers to you.
This website uses the following types of cookies, whose scope and functionality is detailed in the following paragraphs.
- Transient cookies are automatically deleted when you close your browser. They are used particularly as session cookies. These save a so-called “session ID” which is used to link subsequent requests made by your browser to each other. Through this, your computer can be recognised when you return to our website. These session cookies are deleted, when you log out, or close your browser.
- Persistent cookies are only deleted after a predetermined duration, which can be different for each cookie. You can delete these persistent cookies anytime, though the “Settings” configuration of your browser. We advise you, that if you do so, that not all functionality of this website will be available.
The placement of cookies on your computer can be prevented through the relevant settings of your internet browser. Previously set cookies can also be deleted through the settings of your browser. We advise you that preventing the placement of cookies on your computer can mean that not all functionality of our website are available without limitations.
The data subject can register on the website. For this to take place, it is required that the data subject enter their details in the “Sign Up” form. The data given by the data subject to register will solely be used for registration, and not passed to any third parties unless Octoboard has a lawful ground to do so. In the course of registration on our website, your IP address, date and time of access will be recorded, in order to prevent any potential misuse. During, or after the registration, the data subject is free to alter their personal data. It is also possible for the data subject to completely cancel their registration, so that all personal data is deleted.
Disqus provides the infrastructure for comments in Octoboard’s blog.
The responsible entity is:
Disqus, Inc., 717 Market St, San Francisco, CA 94103 USA
The blog comment hosting services is made possible through the use of JavaScript, cookies and clear gifs.
Information that the user provides when choosing to register for or log into Disqus, or submit a comment, including personally identifiable information, like name & email address, as well as the content of the comment, is transferred to Disqus’ servers located in the United States, and saved there.n
Other information obtained via the cookies, JavaScript widget, and / or the clear gifs is transferred to Disqus’ servers located in the United States, and saved there.
The analyses of your actions on our website is transferred to us in the form of reports. Disqus may give this information to further parties where legally required to do so, or these parties are contracted to by Disqus. Disqus also uses this information to provide targeted advertising to the user.
Users that have a Disqus account can update the privacy settings in their account to opt out of targeted advertising. Users that do not have a Disqus account can opt out of targeted advertising by visiting https://disqus.com/data-sharing-settings/
You can find further information about Disqus’ data processing and data protection at:
https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Octoboard uses LiveChat. This is a customer service platform provided by LiveChat, Inc. and enables us to provide support to our customers and users by a) offering help desk articles online, and b) offering means to contact Octoboard.
The responsible entity is:
LiveChat, Inc. One International Place, Suite 1400, Boston, MA 02110-2619, USA
Helpdesk Articles
Access to helpdesk articles is provided using a dedicated website, a JavaScript widget embedded on Octoboard’s website (LiveChat Webwidget), and the use of cookies. Information obtained via these cookies and / or the JavaScript widget is transferred to LiveChat’s servers located in the United States, and saved there. The analyses of your actions on our website is transferred to us in the form of reports. Zendesk may give this information to further parties where legally required to do so, or these parties are contracted to by Zendesk.
Contacting Octoboard
If a user chooses to contact Octoboard, either by emailing support@octoboard.com, or any other email address associated with our LiveChat account; or by submitting a ticket through the contact form on our website or the LiveChat Webwidget, the content that the user chooses to submit is transferred to Zendesk’s servers located in the United States, and saved there. The content and metadata of your messages are submitted by LiveChat to Octoboard. LiveChat may give this information to further parties where legally required to do so, or these parties are contracted to by LiveChat.
You can find further information about LiveChat’s data processing and data protection at:
https://www.livechatinc.com/privacy-policy/
Octoboard uses ActiveCampaign to send newsletters to subscribers.
The responsible entity is:
ActiveCampaign Inc, 1 N Dearborn, 5th Floor, Chicago, IL 60601, United States
Personally identifiable information, including name & email address is submitted to ActiveCampaign servers and saved there when a user chooses to sign up to the Octoboard Application, or chooses to subscribe to one of Octoboard’s newsletters.
Other information, including IP address, browser & OS version, and timestamps, is submitted to ActiveCampaign when a user loads resources embedded in, or a link contained an email sent through ActiveCampaign.
The analyses of your actions with the messages sent through ActiveCampaign is transferred to us in the form of reports. ActiveCampaign may give any of your information to further parties where legally required to do so, or these parties are contracted to by ActiveCampaign.
You can find further information about ActiveCampaign data processing and data protection at:
https://www.activecampaign.com/privacy-policy/
Octoboard uses LinkedIn on its website.
The responsible entity for LinkedIn is:
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA
If the user is logged into a LinkedIn account (even if it is not their own account) at the same time that they access the Octoboard website, LinkedIn will additionally receive a notification that they have visited Octoboard’s website. LinkedIn collects this information, so the theoretical possibility exists that it could associate it with the LinkedIn account.
To prevent this, you can log out of any LinkedIn accounts prior to visiting the Octoboard website. To do this, you must visit the LinkedIn website.
For further information relating to data protection and LinkedIn, please see:
https://www.linkedin.com/legal/privacy-policy
Octoboard uses Google AdSense, a service provided by Google Inc that enables us to advertise to previous visitors of our website and allows us to track the effectiveness of these ads.
The responsible entity is:
Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States
The display of ads and measurement of their effectiveness is made possible through the use of cookies and clear gifs. Information obtained via these cookies and / or clear gifs is transferred to Google servers located in the United States, and saved there. The analyses of your actions on our website is transferred to us in the form of reports. Google may give this information to further parties where legally required to do so, or these parties are contracted to by Google.
You may opt-out of targeted advertising through Google AdSense by visiting: https://www.google.com/ads/preferences/
You can find further information about Google’s data processing and data protection at:
https://policies.google.com/
Our website uses Google Analytics. This is a service of Google Inc (hereafter “Google”) which analyses website access, and enables us to improve our site.
The responsible entity is:
Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States
The analysis of your use of our website is made possible through the use of cookies. Information obtained via these cookies is transferred to Google servers located in the United States, and saved there. The analyses of your actions on our website is transferred to us in the form of reports. Google may give this information to further parties where legally required to do so, or these parties are contracted to by Google. The Google tracking on our website uses the “anonymizeIp()” function, which truncates the transmitted IP addresses so as to prevent the direct identification of any individual users.
You can stop the placement of Google Analytics cookies on your computer through the settings of your web browser. If you do so, we cannot guarantee that all the functions of our website will be fully available to you. You may also stop the placement of cookies through the use of browser extensions, such as:
https://tools.google.com/dlpage/gaoptout
You can find further information about Google’s data processing and data protection at:
https://policies.google.com/
Octoboard uses Stripe to process payments for some of our existing customers and provide billing information to these customers.
The responsible entity is:
Stripe, Inc, 185 Berry Street, Suite 550, San Francisco, CA 94107
For those existing customers who are billed with Stripe or Recurly, the following data is sent, and stored by Stripe:
If you sign up to a paid Octoboard subscription, the following data will be sent to Stripe, and saved by them:
Your name and email address
Details of your payment method (credit card number, expiry date, CVC)
Your IP address, and the time and date of your transaction
If you wish to avoid sending your data to Stripe, you can do so by not signing up for a paid Octoboard plan. If you do so however, your ability to use Octoboard’s functions could be severely reduced.
You may find further information about Stripe’s data processing and data protection here:
https://stripe.com/us/privacy
Octoboard uses Zapier to connect and share data between multiple web services used by Octoboard.
The responsible entity is:
Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401
Any information, including Personally identifiable information, collected by any other service listed in this privacy policy, may be submitted to Zapier’s servers, located in the United States, and saved there when a user takes an action that results in the submission of information to the original service. Zapier may give this information to further parties where legally required to do so, or these parties are contracted to by Zapier.
You may find further information about Zapier’s data processing and data protection here:
https://zapier.com/privacy/
Octoboard reserves the right to update this Privacy Policy from time to time without notice. Any changes are effective when we post the updated Policy on our website. We recommend that you regularly check back. We may provide you with notices about changes to this Privacy Policy if you are a registered user of the Octoboard Application.
Should you have further questions, or wish to make contact with us, you can do so though our website at www.octoboard.com. When you do so, the data required to answer your query will be automatically saved and processed. Your data will not be transferred to third parties unless Octoboard has a lawful ground to do so.
Octoboard only keeps and processes personal data for so long as it is necessary. When the purpose of the data processing has been fulfilled, your personal data will be deleted in accordance with our data retention policy, unless we are legally required to retain it.
In order to process personal data, a lawful ground must exist. A number of permitted grounds for processing are enumerated in Article 6 of the GDPR.
One ground for the processing of personal data is Article 6, Paragraph 1(a) of the GDPR, which is the freely given consent of the data subject to do so. This consent is bound to a particular purpose. A second ground for the processing of personal data is in order to fulfil the requirements of a contract, as specified in Article 6, Paragraph 1(b) of the GDPR. However, this clause must be understood to include the initiation of a commercial relationship with the corresponding data processing. This ground applies to Octoboard, in the case that the user uses our contact form or contacts our Success or Sales team using any other means to obtain an non-binding quotation. Article 6, Paragraph 1© of the GDPR permits the processing of personal data where a legal requirement to do so exists. Article 6, paragraph 1(d) permits the processing of personal data in exceptional circumstances, where doing so is necessary to protect the vital interests of the data subject. This ground is relevant to Octoboard’s data processing, where Octoboard, or at a Octoboard event, may have to provide personal data to emergency services - such as name, contact details or health insurance - in order to prevent or treat an injury or other damage to health. It is also possible that personal data will be processed on the basis of Article 6, paragraph 1(f) of the GDPR. This is the so-called “legitimate interests” ground, which is interpreted with reference to Recital 47 of the GDPR. The GDPR treats this ground in the sense of a “fallback ground”, which only applies where no other previously listed lawful ground for processing does. When this ground is relied upon, an assessment must carefully weigh the legitimate interests of the data subject against the legitimate interests of the data controller.
You have the following rights concerning your personal data:
- The right to access your personal data
- The right to correct or delete your personal data
- The right to restrict processing of your personal data
- The right to object to the processing of your personal data
- The right to data portability
- The right to confirm whether your personal data is being processed or not.
If you have given your consent to the processing of your personal data, you can withdraw this consent at any time. Such a withdrawal of consent will only affect the processing of your data after it is given.
Should we continue to process your personal data because we assess our legitimate interests to do so outweigh your legitimate interests (per Article 6, paragraph 1(f) of the GDPR) you may object to this processing. This is only applicable in the case where the processing of personal data is not required in order for us to fulfil a contract with you. To exercise such an objection, we request that you detail the grounds based on which we should no longer process your personal data. We will check the details of your circumstances based on the grounds you provide, and either stop processing your personal data, or detail to you the legal basis on which we continue to process your personal data.
Additionally, you always have the right to make a complaint to the relevant authorities regarding our processing of your personal data.
Should you wish to exercise any of these rights, you will need to provide proof of identification that you are the person to whom the data relates. The data you will receive includes data we have related to you, the source of that data, the recipients, or types of recipients to whom the data was transferred, and the purposes for which the data was stored. To exercise these rights, please contact us by email or post using email and post addresses above.