Privacy policy
At Yummygum we care about your privacy. We want to inform you about your data, what we collect and what we do with it. We try to make this policy as easy to understand as possible. If you have questions after reading the privacy policy feel free to send us a email.
What data do we collect?
While using Yummygum Staging Server we might collect personal information. The table below demonstrates what data we collect and when we collect it.
| Purpose | What data | Shared with | Retention period | Collected when |
|---|---|---|---|---|
| This data is is used to provide the security functionality of Yummygum Staging Server. It allows us to give users access to certain projects. |
|
| This data is stored for as long as the data is relevant, when a project has ended and the user wishes to no longer use our staging server the data is deleted. Data of employees are deleted when their contract is terminated. Note that due to backups the data might be recoverable for up to 4 weeks after data deletion. | Data is collected when the account is created, for employees this is at the start of employment. For clients accounts are created when they get access to the staging server. |
| This data is used to prevent fraud and to protect Yummygum Staging Server from malicous actors. It may furthermore be used to restrict access to Yummygum Staging Server. |
|
| Gets deleted when the log files get deleted, if an IP address is banned then this data is stored until the ban expires. | When performing actions related to Yummygum Staging Server. |
| This data is used to detect errors, find bugs and improve the user experience. |
|
| Data gets automatically deleted when the issue gets resolved. | When Yummygum Staging Server runs into an error within the application. |
How do we use your personal data?
At Yummygum we may use your personal data for the following purposes. These are examples and might not explain all the usages.
- We use your personal data to provide access to the Yummygum Staging Server.
- We use your personal data to provide a customized experience.
- To limit access to projects to a select group of people.
- To prevent fraud and malicious actors.
- To personalize what projects you can see.
- To respond to legal requests and prevent harm.
How do we not use your personal data?
We would like to explain what we do not use your personal data for.
- We do not show ads (based on your data).
- We don't sell your data.
On what basis do we collect and or share data?
We may process or share your data that we hold based on the following legal basis. Generally speaking data is collected based on legitimate interest, because of business contracts between Yummygum and the Client.
- Consent: We may process your data if you have given us specific consent to use our personal information for a specific purpose.
- Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
- Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements). Note that we will only do this under very particular circumstances, and will always inform you about this, unless a court order has explicitly forbidden us from doing so.
- Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
How do we protect your information?
We protect your information by making sure all traffic goes over an encrypted SSL connection. We one-way encrypt data such as passwords before we store them in our database. We may introduce further encryption in the future.
We may access information using our administrator account or through a secure connection to the server. How third-parties protect your information may differ from ours, so we recommend you check out their respective policies to learn how they protect your information.
Where do we store and process personal data?
We store your personal information on our servers, our servers are hosted by DigitalOcean using the AMS3 servers.
Do we use 'cookies'?
Yes, at Yummygum Staging Server we use cookies to provide you the best experience possible. Cookies are small files that a site or it's service provider transfer to your computer's hard drive through your web browser, and enabled the site's or service provider's systems to recognize your browser and capture and remember certain information. You can find an overview of the cookies we use in the table below.
| Cookies | Purpose | Data we collect | Shared with |
|---|---|---|---|
| Strictly necessary cookies | These cookies keep you authenticated and are required to provide you access to Yummygum Staging Server. The content of this cookie is encrypted. |
|
|
Use of Automated decision-making
We may use machine learning to identify if a request is made by a possible malicious actor. Furthermore, access to Yummygum Staging Server might be restricted based on automated decision-making. For example, we might notice that you are making a request that are commonly used by malicious actors, as a result we might restrict your access for a given period of time.
Third-party disclosure
We may share data with the following third parties.
DigitalOcean
DigitalOcean is the hosting provider used by Yummygum Staging Server, we use the servers located AMS. This means the data is stored on servers in The Netherlands. DigitalOcean acts as a Data Processor for Somes, as such all data that goes through our server is processed by DigitalOcean. This will always be the case for a hosting provider.
More information
Sentry
We use Sentry to catch errors that happen (on all different parts of Yummygum Staging Server), this allows us to see what problems users are running into and reproducing the bugs that they encounter. This allows us to prioritize resolving issues, and as a result provide a better user experience.
More information
Third-party links
Yummygum Staging Server may contain links or content by clients, these are outside our control and are not covered by this Privacy Policy ("Third-Party Websites"). If you access Third-Party Websites using links provided, the operators of such sites may collect information from you which will be used by them in accordance with their own privacy policies, which may differ from ours.
We encourage you to review the privacy policies of those Third-Party Websites so that you understand if/how they collect and/or use information from you or your computer.
Children
We care deeply about the privacy of the very young. For that reason we never collect or maintain information at Yummygum Staging Server from those we actually know are under 18. And no part of Yummygum Staging Server is structured to attract anyone under 18. We ask users under 18 to not use our services.
Your rights
We respect your rights, we provide the rights that the GDPR grands to you not only to EU citizens but everyone. This gives you several rights in regards to your personal information. Such as right to view your information, correction of data and deletion of data.
View your data
You have the right to view your data. You can request this by sending us a email at info@yummygum.com.
Correction (rectification) of your data
You have the right to request correction to your data if you made a mistake. For example if you typed your email wrong. For correction of data please send an email to info@yummygum.com from the email associated with your account. Or through other channels where Yummygum can verify you are the owner of the account. In this email please also provide the correct data with proof that the new data is correct.
Deletion of your data/Withdrawing consent
You have the right to request deletion of your data. While we try to always comply with request for data erasure, there are certain situations where we might need more information or reject the request for data deletion. Such as when there is an active legal request for the data by authorities.
In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please contact us via email at info@yummygum.com. We will consider and act upon any request in accordance with applicable data protection laws.
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent
If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
California residents?
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with a Service, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).
CCPA Privacy Notice
The California Code of Regulations defines a "resident" as: (1) every individual who is in the State of California for other than a temporary or transitory purpose and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose All other individuals are defined as "on-residents." If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information.
What categories of personal information do we collect?
We have collected the following categories of personal information in the past twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name | YES |
| B. Personal information categories listed in the California Customer Records statute | Name, contact information, education, employment, employment history and financial information | YES |
| C. Protected classification characteristics under California or federal law | Gender and date of birth | NO |
| D. Commercial information | Transaction information, purchase history, financial details and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems and advertisements | YES |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video or call recordings created in connection with our business activities | YES |
| I. Professional or employment-related information | Business contact details in order to provide you our services at a business level, job title as well as work history and professional qualifications if you apply for a job with us | YES |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from other personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | NO |
We may also collect other personal information outside of these categories instances where you interact with us in-person, online, or by phone or mail in the context of:
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
Your acceptance of these terms
By using our services, you agree to this policy. If you do not agree with this policy, then please do not use our services. If you don't agree to this policy and have existing data please request data deletion with the above process.
If you continue using our services after changes are made to this policy, then that is deemed as acceptance of those changes. If you at any point stop agreeing with the terms please follow the process for data deletion and stop using our services.
Do we make updates to this privacy policy?
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. We will inform you by email when we make changes to the privacy policy. We encourage you to review this privacy notice frequently to be informed of how we are protection your information.
Severability
All rights and restrictions contained in this Agreement may be exercised and shall be applicable and binding only to the extent that they do not violate any applicable laws and are intended to be limited to the extent necessary so that they will not render this Agreement illegal, invalid or unenforceable. If any provision or portion of any provision of this Agreement shall be held to be illegal, invalid or unenforceable by a court of competent jurisdiction, it is the intention of the parties that the remaining provisions or portions thereof shall constitute their agreement with respect to the subject matter hereof, and all such remaining provisions or portions thereof shall remain in full force and effect.
Questions?
We tried to make this privacy policy as easy to understand as possible. If you have any questions that are unanswered or are unsure about parts of this policy. Don't hesitate to get in touch info@yummygum.com
Full details
Yummygum Staging Server is part of Yummygum. Our office is located at
Jacob van Lennepkade 334-H
1053 NJ Amsterdam
The Netherlands 🇳🇱
Privacy policy was last updated at July 6, 2021