Privacy Policy

Last updated: 2018-12-01

In this Privacy Policy we describe what data we collect from you when you use our websites, products or services, how we use and disclose the data, and your options to access or update your data.

This Privacy Policy may be amended from time to time. The respective latest version of the Privacy Policy at the point of time of the purchase or consent, whichever occur latest, shall apply unless otherwise agreed upon.

The data controller is Origami Solutions OÜ, registry code: 14393256, located at Sepapaja 6, Tallinn, 15551, Estonia ( hereinafter “Origami Solutions”, “we”, “us”, and “our”)

Definitions

The following definitions are used throughout this Privacy Policy

Origami Software Product
Any software product created or owned by Origami Solutions, with the exception of software products created on behalf of a third-party
Origami Service
Any Origami Software Product that is offered as a hosted solution where the solution is maintained by Origami Solutions
Origami Website
Any website that is the property of Origami Solutions and that links back to this Privacy Policy
Personal Data
Any data relating to an identified or identifiable natural person

Origami Software Product, Origami Service, Origami Website may collectively be referred to as “Origami Products”

Why we collect the data

To provide you with software, services or information

We may collect data which are required to provide you with the software, support or services. This includes checking for updates, licenses, reporting of issues and bugs, contacting support and other processing connecting to the use of Origami Products. You explicitly provide the data during purchase or use of Origami Products, contacting support either through the Origami Website or by email.

The legal basis for this processing is performance of contract between you and us.

To improve the products based on usage

We may collect usage data of our products in order to better understand usage patterns and the behaviours associated with using our products. We do not associate these data with the personal information you have provided with us. The collection of these data is done only with your explicit consent.

The legal basis for this processing is our legitimate interest in improving our software and services

To protect us from unlawful use of our software and services

We may collect data which are required to protect us from any unlawful or unauthorized use of our software or services, or which are necessary to ensure the security of our products. This data may include both data that you have provided to us, and data collected by usage of Origami Products.

The legal basis for this processing is our legitimate interest in protecting Origami Products from any unlawful use

For internal auditing, and to protect the rights and interests of Origami Solutions and other users

We may collect data which are required to keep evidence of provisioning software and services to you, of any communication between you and us, your contact details, of any payments or refunds. We may use or disclose these data where there is legitimate and appropriate to do so in order to protect the rights and interests of Origami Solutions or its customers.

The legal basis for this processing is our legitimate interest in protecting the rights and interests of us and our users

To promote and market our products and services

We may use data we collect and aggregate to assist us in determining appropriate marketing and advertising for our products and services. With your consent we may also use your contact details to send you commercial emails about our products and services. We may also use third-party service providers to assist us with our email marketing, in which case the third-party service provider will have access to your name, email, and other information necessary to conduct in the marketing and will act as a data processor for this purpose.

The legal basis for this processing is our legitimate interest in promoting and marketing our products and services

We may use or disclose your personal data where it is required by law, such as keeping and disclosing our accounts, tax records, and in response to a court order, or other legal process.

The legal basis for this is our compliance with our legal obligations

Data we collect

We may collect the following data where applicable:

Children

We do not knowingly collect personal information from children below 16 years old unless their parent has provided verifiable consent. If we learn that a child below 16 years old have submitted information to us without consent we will delete that information from our systems as soon as possible. Parents or guardians who suspect their child may have submitted information can contact us at privacy@origami.solutions.

Transfer of Personal Data

Personal data may be shared between Origami Products based on Subscription Agreement, License Agreement, Terms of Use of the product or service in use, and this Privacy Policy.

According to Terms of Use of a product or service, and as part of a functionality of the product or service, collected data may be shared with other representatives of your company.

Your data may be shared with other organizations or individuals, such as email marketing providers, if we have obtained your consent to do so.

We may share your data with certain third parties which help us provide you with Origami Products, or to run our business, such as providers of data storage, backup services and cloud computing.

We may also share your data with certain third parties if we are obliged to do so under applicable legislation or if such sharing is necessary in order to achieve the purposes defined above

Security

To ensure that your personal data is safe, our products and services are designed with security and privacy in mind. We encrypt your data in transfer and at rest where it is technically feasible. All external web resources are protected by TLS encryption. We continually review our processes of collecting data, storage and processing in order to keep them consistent with applicable privacy and security laws. When the reason for data storage expires, we remove your personal data, or anonymize it for further usage.

Location

Any servers or services that contain personal data is contained within EU. At times Origami Solutions may process or transfer some of your personal data, such as name or email, outside EU. Any such transfer will be made in accordance to with the applicable laws on data protection and this Privacy Policy.

Data Retention, data removal

We retain data as long as it is necessary in order to achieve the purpose for which it was collected. We may retain your data if it is required in order to comply with legal obligations or defense in case of violation of Terms of Use and/or Privacy Policies. We may keep the data to protect ourselves from damage in case of litigation with accordance to current legislation. We may store data pertaining to a customer or user for as long as they are entitled to a license or usage of Origami Products. Data collected from non customers through communication either via Origami Website or direct emails will be retained for reference up to 6 months after last contact.

If at any time you cease to use Origami Products, you may ask for your data to be removed from our servers by sending a request to privacy@origami.solutions or via your account on the applicable service.

After the data removal, we may keep pseudonyms of your personal data solely as a record of data removal.

Access to data, withdrawal of access, your rights

As permitted by applicable law, you are may request information about what data we have about you. In order to do so, please send a request to privacy@origami.solutions. We may charge a fee in accordance to applicable law for excessive use of this service.

You may at any time opt out of certain kinds of data collection, either by, depending on the kind of data collection, sending a mail to support@origami.solutions or via your account on the applicable service

Right to rectification. You may have the right to obtain from us the rectification of inaccurate personal data. Depending on the purpose of the processing, you may have the right to make incomplete data complete, in particular by providing supplementary information.

Right to be forgotten Under certain circumstances, you may have the right to request data to be removed.

Right to data portability Under certain circumstances you may have the right to receive your personal data that you have provided us in a structured, commonly used, machine readable format and to have it transferred directly to another data controller.

Right to object Under certain circumstances, you may have the right to object, on grounds pertaining to your particular situation, at any time to the processing of your personal data.

These rights can be exercised by sending an email to privacy@origami.solutions.

Changes to this policy

We may make changes to this Privacy Policy from time to time, so make sure you check back periodically. We will post any changes to the policy on Origami Website. If we make significant changes that affect our practices with regard to the information we have previously collected from you, we will provide you with an advance notice of such change by highlighting the change on Origami Website, and if applicable and permitted by law send out an email notifying about the change.

Privacy Questions

If you have any questions or concerns regarding this Privacy Policy or data processing, or if you feel that this Privacy Policy has been violated in any way, please let us know immediately by contacting privacy@origami.solutions.

You may also lodge a complaint to your local data protection supervisory authority or in particular Estonian Data Protection Inspectorate. For more information please visit: https://www.aki.ee/en