privacy-policy
This Privacy Policy ("Policy") applies to all web products and mobile applications created and owned by emaa, a company committed to protecting your privacy and personal data. This Policy outlines what information we collect, how we use it, and your rights regarding your personal data.
emaa owns a software platform that includes various applications and services (collectively "Service"). Our main website is the primary point of access to our services ("Website").
By using our Service or Website, you consent to this Policy. We are committed to complying with the General Data Protection Regulation 2016/679/EU ("GDPR"), ensuring the highest standards of data protection.
1. Purposes, Legal Grounds, and Data Retention
We adhere to the data minimization principle and only collect data essential for delivering our services. The retention period depends on:
- Specific data type
- User category (Partner/Customer/other)
- Legal or regulatory requirements
- Safety, security, and fraud prevention
- Unresolved account issues like credit or disputes
We retain personal data only as long as necessary for the purposes outlined in this Policy. If you refuse to provide your personal data, we may not be able to provide all our services to you.
| Purpose | Legal Basis | Data | Whose Data |
|---|---|---|---|
| To render services to our Partners and Customers | Contract | Phone number, Name, Email, Photo, Driver's license, Car information, Geolocation, Date of birth, Payment details | Service users |
| Analyze interaction with the Service | Consent | IP address, Browser info, Device ID, Usage Data | Service users |
| Analyze interaction with the Website | Legitimate interest | Browser info, IP addresses, Device IDs, Cookies | Website visitors |
| Respond to inquiries | Legitimate interest | Email, Address, Name, Phone, Position | Inquiring users |
| Promotions and competitions | Contract | Email, Name, Phone, Position, Date of birth | Participants |
| Creating emaa ID | Contract | Phone number, Name, Email | Service users |
| Service recommendations | Legitimate interest | Name, Email, Phone | Past service users |
| Marketing communication | Consent | Subscribers | |
| Payment processing | Contract | Phone number, Payment details | Payment users |
| Safety and fraud prevention | Legitimate interest | Phone, Name, Email, Photo, License, Car info, Documents, Date of birth, Payment details | Service users |
Your Rights:
- You can withdraw your consent for data processing at any time where the legal basis is your consent
- If the legal basis is legitimate interests, you have the right to object to this use of your data
- Personal data will be deleted within 90 days of your request
Exceptions for retention:
- A portion of personal data may be retained to prevent fraud, scams, and other misconduct
- emaa may retain some data after a deletion request to comply with legal or regulatory obligations
- Retention may also occur for reasons explicitly stated in this Policy
2. Where and How We Obtain Personal Data
From You:
When you use our Service or Website - for example, when you sign up, fill in order information, visit the Website, contact support, provide account and payment information, browse through our services, or through our communications, complaints, or other interactions.
From Your Devices:
Your computers, phones, and other web-connected devices that access our Service and Website transfer to us your IP address, device information, operating system, browser type, location data, and other technical information.
From Third Parties:
We engage with third-party processors who are compliant with GDPR. Their roles and responsibilities in data processing are clearly defined in our contracts with them:
- Service providers: Such as those reviewing accounts for fraud, transaction information services which include information about your purchases: date, currency, amount, payment type, and the last four digits of the card number
- Subprocessors: Third-party subprocessors for cloud hosting, content delivery, data analysis, internal logging, fulfillment services, and email transmission
- Analytics and cookie providers: We receive information by using cookies, social plugins, pixels, and tags to measure how users interact with our Website
A detailed list of third parties emaa uses may be provided to you upon request within a reasonable time.
3. Who We Share Your Personal Data With
Advertising Partners:
We may share with them a unique advertising identifier that is not attributable to you and is used to target advertising. We may also share your technical data with our advertising partners based on our legitimate interest.
Service Providers Under Contract:
They may use your personal data to provide services to us, such as fraud/spam investigations, payment processing, analytics tools, and operations. These third parties are prohibited from using your personal data for any other purpose.
Business Transfers:
Your personal data may be transferred to the new owner in case of a business transfer, such as a merger or acquisition.
Our Affiliates:
Entities that are controlled by us or are under common control with us. Our affiliates may use personal data we share in a manner consistent with this Privacy Policy.
Legal Requirements:
After assessing necessity and proportionality, if required, for legal obligations or to protect legitimate interests, such as defending our rights in litigation or preventing fraud. We will not disclose data to protect against legal liability where no additional legitimate interests exist.
4. Cookies the Website Uses
With cookies (a piece of data from a website stored within a web browser that the website can retrieve later), emaa may collect information about:
- Your device, including your IP address, operating system, and browser type
- Your usage of our Website including session data, preferences, approximate location, analytics data, login information, etc.
Cookies enable us to:
- Estimate emaa's audience size and usage patterns
- System administration and improvement
- Store information about preferences to customize the Website according to your interests
- Improve emaa's services to deliver more personalized services
- Recognize you when you return to the Website
- Ensure the Service's content is presented effectively for you and your device
These statistics are gathered in a way that doesn't allow identifying individuals. On the Website, you may refuse to accept optional cookies but cannot refuse essential cookies. You can activate settings on your browser to refuse all cookies, however, this may prevent you from accessing certain parts of the Website.
5. Where and How emaa Stores Your Personal Data
emaa keeps personal data on servers of third parties in the European Union. The data that emaa collects may be transferred to and stored at a destination outside the European Economic Area ("EEA").
You agree to transfer, store, or process the data to destinations outside EEA by submitting personal data. When transferring data outside the EEA, we employ safeguards such as Standard Contractual Clauses and ensure the receiving country has adequate data protection laws as determined by the European Commission.
When we transfer personal data to trusted third parties in different countries, we sign Data Processing Agreements or Standard Contractual Clauses with them.
emaa restricts access to your data to individuals who need access to it to process it on emaa's behalf. Agreements bind the employees and contractors who work with your data to be processors thereof. emaa will file a lawsuit or claim if they fail to meet the required data processing security.
We use neither automated decision-making nor personal data to assess aspects of your personality (automated profiling) automatically.
6. Third-Party Integrations
Our service may involve integrations with or direct you to websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party, not emaa, and you and your personal data are subject to the third party's privacy policy.
7. Marketing Communication
We may send you marketing information without your consent only if you are our customer and the message we send you relates to our new products of the same type of product you have. It is our legitimate interest.
We send this information through direct emails or third-party email service providers.
You may stop receiving marketing and promotional information anytime by clicking "Unsubscribe" at the bottom of each email or sending us a direct request to unsubscribe you from further promotional emails.
8. emaa ID
emaa will securely store the login information and personal data of Partners, Customers, and any other Service users in its system called "emaa ID".
If a Customer wants to use the Service, emaa may share some of their emaa ID data with the Partner. The Partner may then use that data to provide the necessary services.
The emaa ID data may be shared outside the Service for facilitating logins and the performance of services by third parties if a Customer/Partner agrees to (for example, if there is a third party's integration in the Service). In this case, such a Customer/Partner and the data they agreed to share will be subject to the third party's privacy policies.
9. Your Rights
The GDPR gives you the right to:
- Access your personal data
- Rectify the information we hold about you
- Erase your personal data
- Restrict our use of your personal data
- Object to our use of your personal data
- Receive your personal data in a usable electronic format (right to data portability)
- Revoke your consent
- Complain with your local data protection authority
Under Art. 77 GDPR, you, as a data subject, have the right to file a complaint with a supervisory authority of the EU Member State in your permanent place of residence, place of work, or in which there was an alleged violation of your information privacy.
Other rights:
You have the right to:
- Request that emaa not process your personal data for marketing purposes
- Ask emaa to amend any data it holds about you if it is inaccurate or misleading as to any matter of fact. emaa may also ask you to provide documents so that emaa can verify your identity
10. Changes to the Privacy Policy
Any changes emaa may make to the Policy in the future will be posted on this page. We will notify you via email or other ways before any changes. We will inform you in a reasonable time, not less than 3 days.
The date of the most recent revisions will appear on this page.
11. Security
We use technical, physical, and administrative measures to protect your personal data. You are responsible for your password and account information.
We are responsible for reporting a data breach without undue delay and, where feasible, not later than 72 hours after becoming aware of it.
emaa may post links to third-party websites on the Services. These links are not administered or verified by emaa. You access the links at your own risk. emaa makes no representations or warranties about the content of such websites and cannot be held liable for any losses you suffer from using such third-party websites. emaa recommends you read any third-party websites' privacy policies before providing information to them.
Contact Us
Please submit any questions, comments, and requests regarding the Policy to:
privacy@emaa.com