Last update: May 24th, 2018

General

VisibleImpact (the "Service") is a product of Visible Solutions AG, Switzerland (UID number CHE-394.626.036). This Privacy Policy describes how Visible Solutions AG (referred as "Visible Solutions", "we", "our") collects, uses and shares information when you use the Service. By accessing or using our Service, you agree to this Privacy Policy and to our Terms and Conditions.

Modifications

We may change our Privacy Policy from time to time due to changes in our Service or the laws that apply to us and you. We will notify you by revising the "Last update" date on top of this document. By accessing our Service, you agree to be bound to the most recent revision of our Privacy Policy. If we do update the Privacy Policy and you do not agree with the changes, you need to stop using the Service.

Information we collect

Personal information you provide

You provide us personal information such as your name, surname, email address, profile description and picture or any other information you choose to provide when registering or modifying your personal profile on our Service or interacting with our Service (such as uploading Content or interacting with us through emails or our Service). Some of the information you provide will be visible to other users and potentially the general public, in accordance with your settings on the Service.

We may use your email address to send you Service-related notices and messages (including any notices required by law). If you correspond with us through email, we may store the content of your messages.

If you invite other users through our Service, we will ask you for personal email addresses and will send invitations. We may store these personal addresses.

Information you provide about your organisation

If you subscribe to an Organisation account, you also provide us with identifiable information about your Organisation such as contact details, description, logo or pictures. Some of the information you provide will be visible to other users and potentially the general public, in accordance with your settings on the Service. Information such as billing information will only be accessible to members of your Organisation.

Content you provide

Through our Service you can post, upload and share Content. Your Content and data related to your Content may be viewed by other users or potentially the general public, in accordance with your settings on the Service. Visible Solutions can but has no obligation to monitor your Content. We can remove any information you post, upload or share for any or no reason. Unless Content is made visible in accordance to your settings on the Service, Visible Solutions and its employees will not view your Content except to maintain, provide or improve the Service or if we suspect at our sole discretion, that your Content violates our Terms and Conditions or any applicable law.

Content you provide may include personal data of your customers, end-users, survey respondents or other types of data subjects. In such a case we are acting as a "data processor" on your behalf.

You are responsible for the Content, including all personal data you collect. You provide and must insure that all data subjects gave you their consent to collect, process and transfer their personal data. You also must insure that data subjects know their rights concerning all applicable laws and regulations, including data protection laws.

Information we automatically collect through cookies, log files, web beacons

When using our Service, we might send you small data files named "cookies". These files uniquely identify your browser session and help us run our Service. A cookie may transmit anonymous information about how you use our Service. Cookies can remain on your hard drive after closing your browser. Cookies can be removed by following your browser's instructions. You can change settings in your browser to not allow cookies, this might however result in our Service not working properly.

When using our Service, we automatically record information sent to us by your browser. These information may include your IP (Internet Protocol) address, browser type and language settings, referring or exit pages, information on how you interact with our Service or links on the Service, domain names, landing pages, mobile carrier, device type, your web request or other such information.

We may use web beacons to track the online user patterns or track activities linked to emails sent to our users.

Information we automatically collect: geo-location and device identification

When you use our Service through a mobile device, we may access, collect, monitor and store your location data, which may include your GPS coordinates. Location data may be used in conjunction with personally identifiable information. Some features of our Service, such as mobile data collection and GPS tagging of updates, will not function properly if use or availability of geo-location data is disabled, blocked or impaired.

We may also access, collect, monitor and store data that identifies mobile devices using the mobile app. These device identifiers are uniquely associated with your device and are used to enhance our Service. A device identifier may be used to streamline and regulate access to our Service by our users.

Information from third party analytics

We use third party analytic tools such as Google Analytics and analytics provided by Stripe to help understand use of the Service. These tools collect information sent by your browser, including cookies and your IP address. These tools are governed by their own Terms and Conditions and Privacy Policies.

Use of information

We use information we collect to:

• Operate, maintain and provide the tools, features and resources and functionality of the Service.
• Facilitate communication and interactions amongst users, enable you to share Content and collaborate with others.
• Personalize content and improve efficient access to the Service and to your personal profile.
• Improve the quality of the Service.
• Analyze how the Service is used.
• Diagnose and solve technical problems.
• Maintain security of the Service; investigate or prevent misuse, unauthorized access or illegal activities.
• Track Content and users to comply with our Terms and Conditions and applicable law.
• Complete transactions and send you relevant documentation.
• Analyze and aggregate metrics such as total number of users, demographic patterns.
• Inform you about relevant changes and news linked to our Service or to third-party services.
• Respond to your comments and feedback; provide customer care services.

Information sharing

Sharing on the Service

We will display Content and your personal information on the Service in accordance with your settings. This happens for example when you post, upload or share Content with other users of the Service. Content and other information is shared according to settings of the Service, these can be viewed by any administrator of your organisation. Others might use, copy, share, modify or broadcast your Content. Visible Solutions has no responsibility for such activity. Please consider very carefully what information to disclose on the Service. Your email address, name and picture (if available) will always be shared with other members of your organisation to facilitate internal communication.

Sharing with other third-parties

To improve the Service we engage with third-party providers. The current list of direct providers we engage with is available in our Terms and Conditions. We are not liable for third-party compliance to data protection however we do not engage with parties which do not demonstrate strong data protection care or do not have technical and operational measures in place to mitigate the risk of unauthorised access to your data.

We may disclose collected information if required by law or if we believe, at our sole discretion, that you are infringing law or not respecting our Terms and Conditions.

We may disclose your personal and other information in the event that we sell, merge with or buy all or a substantial portion of any business or assets. Information will potentially be disclosed to the prospective seller, merger partner or buyer of such business or assets.

Data subject rights

If you collect personal data from data subjects, you provide and must insure that all data subjects gave you their consent to the collection, processing and transfer of their personal data. You also must insure that data subjects know and can exercise their rights concerning all applicable laws and regulations, including data protection laws.

If you are a data subject and we act as a data controller for your personal data, you have specific rights concerning your data. These include:

Access

You have the right to be informed about the personal data we collect about you. Please see this policy for details or contact us by sending an Email to support@visibleimpact.org if anything is unclear or if you require additional information.

Revision

You have the right to edit the data you provided to us during registration. You can do so by using the settings of the Service.

Erasure

You have the right to delete all your personal data. If you decide to delete data, the process can not be undone. You can delete data by using the functions provided within the Service or by contacting support@visibleimpact.org when a built-in function is not available. As data is stored in backups, data erasure might take some time to be effective.

Portability

You have the right to export all personal data you provided. You can export all Content you provided using functions provided within the Service.

Lodge a complaint

You have the right to lodge a complaint.

Data location and protection

Your data is stored in Switzerland. Images and documents are stored across data centers worldwide (CDN). We use Secure Socket Layer technology (SSL) encryption to securely transmit data. We may store information in locations outside of our direct control, for example on servers hosted by specialized providers. Data is regularly backed up to prevent data loss. We protect against common web attacks, host data in secure data centers and use firewalls and access restrictions on our servers to secure our network and protect your information. Despite our efforts, you acknowledge that no method for electronic transmission and storage is fully secure and we cannot ensure or warrant the absolute security of information stored on or transmitted through our Service. In the unlikely event that personal information is compromised as a result of a malicious attack or breach of security, we will promptly notify those persons whose information has been compromised.

Data retention

We retain your data for the duration of your business relation with us. We actively delete data if you choose to delete data through functions provided within the Service or if you cancel your personal profile or account. We might also delete data if you did not access the Service for a period of more than 200 consecutive days.

Data Protection Addendum

If you collect personal data about people in the EU, the General Data Protection Regulation (GDPR) requires you have a signed Data Processing Agreement (DPA) with us. Please contact us to request a DPA.

Contact

If anything is unclear or if you have any questions or concerns about data privacy and VisibleImpact's policies, please contact us by sending an Email to support@visibleimpact.org.