Data Controller and Data Protection Officer
Shoutly is responsible for processing your personal data and ensuring compliance with relevant legislation. You can reach out to us regarding personal data protection, privacy, and security at firstname.lastname@example.org.
How We Process Your Personal Data
Shoutly processes your personal data for the following purposes and legal reasons:
For General Service
Purpose: Providing, managing, developing, and customizing the Service, as well as offering user support and customer service.
Legal Basis: Processing is necessary to fulfill the agreement with you as a user.
Categories of Personal Data: Name, Personal number, Date of birth, Address, Email address, Bank account number, Phone number, Details on income, ID documents, Work and residency permits, Medical certificate, SINK tax document, A1 certificate, tax information and other documents, VAT number, TIN number, Company registration number, IP-number.
For Legal Requirements
Purpose: Fulfilling statutory requirements, such as security measures.
Legal Basis: The processing is necessary to fulfill Shoutly’s legal obligations.
Categories of Personal Data: Name, Personal number, Date of birth, Address, Country of residence, Nationality, Email address, Bank account number, Phone number, Details on income, ID documents, Work and residency permits, Medical certificate, SINK tax document, A1 certificate, tax information and other documents, VAT number, TIN number, Company registration number.
Purpose: We will use your personal data to create and send ads, newsletters, notifications, information, surveys, and invitations through various communication channels.
Legal Basis: Targeted marketing is carried out with your consent.
Categories of Personal Data: Name, Address, Email address, Phone number, IP number.
For Business Development, Market, and Customer Analysis
Purpose: Enable business follow-ups, market and customer analysis, market research, and the development of businesses and methods through regular mail, email, phone call, SMS, or the app.
Legal Basis: The processing is necessary to meet Shoutly’s legitimate interest in improving its Service and other similar services for you as a user (known as the weighing of interests).
Categories of Personal Data: Name, Address, Email address, Phone number.
You can withdraw your consent for Shoutly’s services at any time by providing written notification to Shoutly.
Who do we share your personal data with?
Shoutly may share your personal data with third-party entities, companies that provide services and support related to the Service, and group companies to fulfill the purposes of processing your personal data.
In certain cases, Shoutly is required to disclose personal data about the User to the Client. The Client may need to access and process the personal data of the User who carries out tasks on its behalf. This processing is necessary for Shoutly to fulfill its contractual obligations with the Client.
Shoutly may also share your personal data with law enforcement agencies or other government authorities, for instance, to report fraud or as part of a legitimate request.
Shoutly may disclose your personal data in other cases where you have given your consent or when we are legally entitled to do so.
Shoutly may share your personal data with other parties in connection with corporate transactions (e.g., mergers, joint ventures, assignments, spin-offs, acquisitions, reorganizations, transfers, or sale of all or any part of Shoutly’s business, including bankruptcy or similar proceedings).
We may contact you for marketing purposes as described above in the section where we explain how we process your personal data. Targeted marketing is only done with your consent.
If you do not want Shoutly to use your personal data for direct marketing, you have the right to provide written notification at any time. Upon receiving your notification, Shoutly will cease processing your personal data for marketing purposes. Even if you unsubscribe from marketing communication, we may still contact you with service-related information (e.g., details about our services, communications that align with our legitimate interests, and information about your rights).
Transfer of Personal Data to Third Countries
Shoutly does not transfer your personal data to any country outside the EU/EEA. However, recipients, partners, and suppliers may move, store, transfer, or otherwise process your personal data outside of the EU/EEA, provided such transfers meet the requirements and commitments specified in the General Data Protection Regulation.
We recommend that you also review the privacy policies of other parties involved in using the Service. If recipients or suppliers transfer personal data to a third-party country, we always seek guarantees to protect your information and rights, such as through the use of standard contractual clauses.
In its capacity as the data controller, Shoutly is responsible for ensuring that your personal data is processed in accordance with applicable law.
Shoutly will, upon request or proactively, correct, de-identify, delete, or complete information that is found to be incorrect, incomplete, or misleading.
You have the right to request from Shoutly access, correction, or deletion of your personal data (e.g., if deletion is required by applicable legislation), request restrictions on continued processing of your personal data, and the right to object to the processing (e.g., if you question the accuracy of personal data or the legality of processing).
You are entitled to data portability, which means the right, under specific circumstances, to receive and transfer your personal data to another data controller in a structured, commonly used, and machine-readable format.
Once per calendar year, you are entitled to obtain an extract from Shoutly's registry free of charge with a signed, written request, indicating which personal data about you has been recorded, the purposes of processing the data, and the recipients who have received the data or will receive it. The extract also includes information about where the data was collected, if the personal data was not collected.