Updated On: February 12, 2024
This Privacy Policy pertains to the handling of personal data for individuals ("Users") utilizing services offered by QoreUps ("Services"). The policy outlines the types of personal data collected and the purposes for its use. Users may include QoreUps's customers ("Customers"), who manage their respective marketplaces, representatives of Customers, or the end-users of Customers ("End-Users"). It is important to note that the Customer's marketplace is governed by its own privacy policy, and QoreUps bears no responsibility for the privacy policies or personal data processing practices of Customers or other third parties involved in the operations of Customers or third parties.
QoreUps ("QoreUps," "we," "us," "our") is the data controller in compliance with applicable data protection laws. QoreUps is responsible for ensuring that the processing of personal data adheres to this Privacy Policy and relevant data protection regulations.
Contact details of the data controller:
We gather Users' personal data through various methods, as detailed below:
The majority of the personal data we process is directly collected from Users. QoreUps may collect the following personal data while providing the Service:
Billing information
The following data is processed by QoreUps's payment processors (currently Paypal, Stripe, and Razorpay, subject to change):
QoreUps automatically collects and processes the following technical data about the User:
Additionally, QoreUps may gather other anonymized statistics about how the User utilizes the Services provided by QoreUps.
QoreUps processes personal data for three main purposes:
The primary objective of collecting personal data is to offer the qoreups.com website and Services, accurately bill for Service usage, and manage customer relationships. The processing of personal data in this context is grounded in the agreement between the Customer and QoreUps. This encompasses data collected during Service sign-up, usage, and the necessary technical data for secure Service operation and communication with Users.
QoreUps may periodically send emails to its Customers (and End-Users, if relevant personal data has been collected by QoreUps) to announce new features, seek feedback, or share information about QoreUps, its products, and the various marketplaces utilizing the qoreups.com service. This practice is based on QoreUps's legitimate interest in providing Users with pertinent information as part of the Services and promoting its offerings.
In an ongoing effort to enhance our Services, we may utilize User data to improve functionality. This process is grounded in our legitimate interest in growth and development. QoreUps may also gather technical data for statistical purposes, generating anonymous, aggregated statistics, such as insights into the most popular marketplaces. Information may be publicly displayed by QoreUps in an aggregate format that safeguards the confidentiality of individual marketplace statistics. Personal data is not disclosed except as described below.
QoreUps does not sell, rent, or trade your personal information to third parties. However, we may disclose your information in the following circumstances:
1. With Your Consent:QoreUps values your privacy, and we will not share your personal information with third parties without your explicit consent. If you choose to provide consent, we may share specific information as outlined and agreed upon at the time of obtaining your consent. You have the right to revoke your consent at any time, and we will respect your preferences.
2. Legal Compliance:
QoreUps may disclose your personal information when required to comply with applicable laws, regulations, legal processes, or governmental requests. This includes responding to lawful requests and court orders. We are committed to upholding the law and will only disclose information to the extent necessary to meet legal obligations.
3. Protecting Rights and Interests:
We may disclose your information to protect the rights, interests, and safety of QoreUps, our users, or others. This includes situations where we believe in good faith that disclosure is necessary to prevent or address fraud, security issues, or any other potentially harmful or illegal activities. This disclosure may involve sharing information with law enforcement, regulatory authorities, or other third parties.
4. Business Transfer or Acquisition:
In the event of a business transfer, merger, acquisition, or any other change in control of QoreUps, your personal information may be disclosed as part of the transaction. We will notify you and provide you with choices regarding your information if there are significant changes in ownership or control of QoreUps.
We may disclose personal information and service data to a third party if we believe that such disclosure is necessary for preventing fraud, investigating any suspected illegal activity, enforcing our agreements or policies, or protecting the safety of our users.
QoreUps will always strive to ensure that any disclosure of personal information is conducted with the utmost consideration for privacy and security. We take measures to ensure that any third parties receiving your information adhere to data protection standards comparable to those outlined in this Privacy Policy.
Cookies are pieces of data that are received and transmitted by a User's device when the User is using QoreUps's Services or website. QoreUps may use cookies and similar techniques to provide functionality of the Services, to enhance the user experience, and to identify Users and how they use the Services. We use cookies, for example, to log in and out authentication, to remember sessions allow Users to continue the session in case of time-out, and to prevent unauthorized use of the Services.
We also use other forms of technology, such as web beacons and pixel tags, which serve a similar purpose to cookies and allow us to monitor and improve our Services and the website.
QoreUps uses a variety of cookies for different purposes. The cookies can be set by us (so-called “first-party cookies”) or by a third party (so-called “third-party cookies”). We may use third-party cookies for statistical purposes to compile anonymous, aggregated statistics, such as to estimate the number of Users detect which parts of the Service Users find most useful, and identify features that could be improved. For such purposes, we use third-party cookies, such as Google Analytics, Google Tag Manager, Google Search Console, etc., to help analyze how our Users use the Service. The technical usage information (including IP address) generated by the cookie about the use of the Service is transmitted to such third parties to compile statistical reports.
The User can at any time edit or withdraw their consent to optional-unnecessary cookies from the cookie declaration on QoreUps's website.
We commit to retaining your Personal Data only for a reasonable duration necessary to fulfill the purposes for which it was initially collected and processed. This includes meeting legal, regulatory, accounting, or reporting requirements. If you have chosen to receive marketing communications from us, we will keep information about your preferences until you opt out in accordance with our policies.
The determination of the appropriate retention period for your Personal Data involves considerations such as the volume, nature, and sensitivity of the data, the potential risks associated with unauthorized use or disclosure, the intended purposes of data use, the feasibility of achieving those purposes through alternative means, and compliance with applicable legal requirements. In certain situations, we may anonymize your Personal Data, rendering it no longer associated with you and, therefore, not considered Personal Data.
Service Data will be retained for the duration required to fulfill the terms of each specific contract with our Customers. Our commitment is to strike a balance that ensures data retention aligns with legal and contractual obligations while respecting your privacy.
Exceptionally, QoreUps may retain personal data for a longer period if we have a legitimate reason or an obligation to store data for the purposes of criminal investigation or other corresponding reasons.
QoreUps prioritizes the security of your information and has implemented various measures to safeguard against unauthorized access, use, modification, disclosure, or destruction of the data you trust us with. Here are some key security measures in place:
DNS Security: Cloudflare provides security for the domain name system, protecting against various online threats.
DDoS and DoS Attack Prevention, IP Proxy: Cloudflare is used for preventing DDoS and DoS attacks, acting as an IP proxy to add an extra layer of security.
AWS NAT (Network Address Translation): AWS NAT is implemented to create a secure layer between public servers and private servers, enhancing access control and security.
Database Management (AWS RDS): AWS RDS (Amazon Relational Database Service) is where the database is maintained, ensuring secure and managed database services.
Data Storage (AWS EBS): AWS EBS (Elastic Block Store) is utilized for storing data securely, providing a scalable storage solution.
Image Storage (AWS S3): AWS S3 (Simple Storage Service) is used for storing images securely, offering a scalable and reliable storage solution.
Performance, Cache: Cloudflare is employed for optimizing performance through caching mechanisms.
Load Balancer (AWS): AWS Load Balancer is used to distribute incoming traffic across multiple servers, preventing site downtime and optimizing performance.
Auto Scaling (AWS): AWS Auto Scaling dynamically adjusts resources based on site load, ensuring optimal performance during varying traffic conditions.
These categorizations highlight how QoreUps addresses security concerns, manages data storage, and optimizes performance through a combination of cloud-based services and infrastructure solutions.
To adhere to data protection obligations under the General Data Protection Regulation (GDPR), we are prepared to enter into a Data Processing Addendum (DPA) based on Standard Contractual Clauses. To request a DPA, please contact QoreUps, and upon receiving your request, we will promptly forward the DPA for your signature.
Certain internet browsers offer 'Do Not Track (DNT)' features, signaling to websites a user's preference is not to be tracked. As of now, no standard dictates how websites should respond to these signals. Consequently, we currently do not take action in response to DNT signals.
Our websites may contain links to pages not covered by this Privacy Policy. If you provide personal information on these third-party sites, their privacy policies govern that information. We advise caution in sharing personal details with these parties, urging users to verify their privacy practices.
Publicly accessible blogs on our websites may use the information you provide to contact you. Exercise caution when disclosing personal information in these spaces, as QoreUps is not responsible for publicly disclosed personal information. Certain profile details and posts may persist even after account termination. Contact us to request the removal of your information from our blogs.
Our websites feature social media widgets like Facebook "like" buttons and Twitter "tweet" buttons for content sharing. These widgets may collect information such as IP addresses and page navigation. Interactions with these widgets are governed by the privacy policies of the respective companies providing them.
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
a. Once your marketplace data has been deleted upon your request, the concerned details will not be recovered.
b. Individuals have a right to have personal data erased and to prevent processing in specific circumstances:
Right to Access and Correction: Users have the right to access their data and, upon request, obtain a copy. Requests should be personally signed, including necessary details for data retrieval, and addressed to the contact person specified in this Privacy Policy. QoreUps rectifies, erases, or supplements potentially erroneous, unnecessary, incomplete, or obsolete personal data either proactively or upon User request. Users are encouraged to contact QoreUps's designated contact person to correct any potentially inaccurate data.
Right to Prohibit Processing for Direct Marketing: Users can prohibit QoreUps from processing their personal data for direct marketing purposes. To exercise this right, Users are advised to notify QoreUps's contact person in writing, as indicated in this Privacy Policy.
Right to Data Portability: Users have the right to data portability as granted by applicable data protection rules. This entails the right to receive personal data in a structured, commonly used, machine-readable format and transmit it to another data controller.
QoreUps may modify this Privacy Policy periodically. Users are advised to regularly review the Privacy Policy to stay informed about any changes. The date of the Privacy Policy will be provided for users to track modifications. QoreUps will communicate potential changes through reasonable and available channels, ensuring users are informed of any updates.