Your privacy is one of our fundamental commitments, and therefore, we take utmost care to process your personal data in accordance with the principles set forth in the applicable legislation.
PINEAPPLE SQUARE S.R.L., having its headquarters at CAL. ARADULUI, NR.15, BL. P 71, ET.4, AP.18, Oradea, Bihor, tax code 47840942, registered with the Trade Registry under no. J05/762/2023 ("PINEAPPLE SQUARE", "us") processes, as data controller, your personal data („Personal Data”). The purpose of this privacy policy („Policy”) is to explain how your Personal Data is processed by Pineapple Square with respect to your access and use of our app available on the AppStore and Google Play Store („Platform”) and to the content of the Platform including of the services available on the Platform.
APPLICABILITY
This Policy applies strictly to the processing of Personal Data carried out by PineappleSquare, as a data controller.
For the avoidance of any doubt, this Policy does not apply to the processing of Personal Data stored and used by PineappleSquare customers (i.e., Suppliers) in the Platform.
For more information on how PineappleSquare customers process your Personal Data, please see their privacy policies.
CATEGORIES OF PERSONAL DATA, PROCESSING PURPOSES, AND LEGAL GROUNDS
For the purposes of this Policy, the following terms have the following definitions:
“Client” means a person interested in the Supplier’s products and services made available on the Platform, who sends a request for quotation to a Supplier through the Platform or with whom the Supplier concludes an agreement;
“Supplier” means the term generally used for manufacturers, resellers, distributors or other professionals who have a registered user account and offer their products and services through the Platform;
“Visitor” means any person who accesses the Platform.
(I). Personal Data processing applicable to Visitors
Browsing data
Computer systems and software procedures used for the Platform's operation acquire, during their normal operation, some Personal Data (so-called log files), the transmission of which is implicit in the use of internet communication protocols.
This information is not collected in order to be associated with identified persons, but due to its nature can, by means of processing and integration with data held by third parties, allow users to be identified. Such information includes the IP addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, and other parameters concerning the user's operating system and computer environment.
Insofar such information leads to the identification of a user, the provisions of this Policy shall become applicable.
Purpose of processing | Legal ground |
We use this data for the sole purpose of obtaining anonymous statistical information concerning the use of the Platform and to check its correct operation. | Our legitimate interest in the improvement of our Platform and in managing the server capacities, and in the bug-free preservation of our Platform (art. 6 para. 1, let. f GDPR); Compliance with our legal duties concerning the security aspects of our systems, including without limitation those resulting from the PineappleSquare obligation to take appropriate technical and organizational measures for the processing of Personal Data (art. 6 para. 1, let. c GDPR). |
(II). Personal Data processing applicable to Suppliers
User account
Creating the user account and authentication
Personal Data: first name, last name, e-mail address, phone number, position, IP, image, details of the company the user works for / represents.
Processing purpose | Legal ground |
Registering and creating the user account and authentication | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
Amending the user account
Personal Data: first name, last name, e-mail address, phone number, position, image, IP, details of the company the user works for / represents.
Processing purpose | Legal ground |
Amending the profile | Data subject's consent (art. 6, para. 1, let. a of GDPR) |
Adding a new member (appointee)
Personal Data: first name, last name, e-mail address, phone number, position, image, IP, details of the company the appointee works for.
Processing purpose | Legal ground |
Adding the appointee and informing the appointee | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
Facilitating communication between Suppliers, Visitors and Clients
Personal Data: first name, last name, phone number, e-mail address, details about the company the user works for / represents.
Processing purpose | Legal ground |
Facilitating communication between Suppliers, Visitors and Clients | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
Subscriptions
Invoicing
Personal Data: first name, last name, phone number, e-mail address, amount paid, details about the company the user works for / represents.
Processing purpose | Legal ground |
Issuing invoices related to Subscriptions | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
Payment of Subscriptions
Personal Data: first name, last name, phone number, e-mail address, bank card details, amount paid, details about the company the user works for / represents.
Processing purpose | Legal ground |
Payment of Subscriptions | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
(III). Personal Data processing applicable to Clients
Facilitating communication regarding offers / requests for quotation between Clients and Suppliers
Personal Data: first name, last name, phone number, e-mail address.
Processing purpose | Legal ground |
Facilitating communication regarding offers / requests for quotation between Suppliers and Clients | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
(IV). Personal Data processing applicable to both Suppliers and Clients
Communication with the user
Personal Data: first name, last name, phone number, e-mail address, details about the company the user works for / represents.
Processing purpose | Legal ground |
Communication with the user regarding his/her requests / claims | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6, para. 1, let. b of GDPR) |
Marketing messages (Newsletter, promotions, offers)
Personal Data: first name, last name, phone number, e-mail address, details about the company the user works for / represents.
Processing purpose | Legal ground |
Sending marketing messages in order to advertise the company's services and/or products | Data subject's consent (art. 6, para. 1, let. a of GDPR) |
Feedback
Personal Data: first name, last name, e-mail address, any other information provided by the user.
Processing purpose | Legal ground |
Requesting and analysing user’s opinions in order to improve the services | Data subject's consent (art. 6, para. 1, let. a of GDPR) |
Dispute resolution - Legal disputes
Personal Data: first name, last name, phone number, e-mail address, details about the company the user works for / represents
Processing purpose | Legal ground |
Defending the legal rights and the legitimate interests and filing any claims before the judicial bodies or any other public authority | Legitimate interest of the company (art. 6, para. 1, let. f of GDPR) Details: the legitimate interest of the company in defending the legal rights or legitimate interests or in filing the claims arising out of or in close connection with the conclusion or performance of the contract or in order to exercise the right of defense in the event of any dispute against the company |
PROVIDING YOUR PERSONAL DATA
You may refuse to provide certain Personal Data but in such a case you may not be able to benefit from certain services specific to the relationship described in this Policy.
ABOUT LEGAL GROUNDS
The legal ground for processing the personal data differs depending on the specific situation and the Personal Data processed.
When we process your Personal Data based on your consent, we will seek your free, informed, specific and unequivocal consent for the respective processing. By expressing your consent, you will agree that we may collect, use, disclose, process and transfer Personal Data in accordance with this Policy.
THE SOURCE OF PERSONAL DATA
The source of Personal Data is: online user.
AUTOMATED INDIVIDUAL DECISION-MAKING
Your Personal Data shall not be processed in order to be subject to decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, pursuant art. 22 para. (1) of GDPR.
PROCESSING DURATION
The duration of processing of Personal Data varies depending on the specific processing operation:
Operation | Duration |
Browsing data | as long as the user account exists |
Creating the user account and authentication | as long as the user account exists |
Amending the user profile | as long as the user account exists |
Adding a new member (appointee) | as long as the user account exists |
Facilitating communication between Suppliers and Clients | the period necessary to facilitate communication between Suppliers and Clients |
Invoicing | 10 years |
Payment of Subscriptions | until the payment is completed |
Facilitating communication regarding offers / requests for quotation between Clients and Suppliers | the duration necessary to facilitate communication between Suppliers and Clients |
Communication with the user | as long as it takes to solve the request / claim |
Marketing messages | until the data subject withdraws the consent |
Feedback | until the feedback is analysed |
Legal disputes | as long as it takes to solve the legal dispute |
In certain circumstances, we may retain your Personal Data for longer periods of time in order to have an accurate record of your relationship with us in the event of any complaints or if we reasonably believe that there is a prospect of litigation.
TRANSFER OF PERSONAL DATA
We may transfer Personal Data, to the necessary extent, to the following categories of recipients: IT service providers, payment services providers, payment processors / banks, accounting services, marketing service suppliers, public authorities.
These recipients can be located in the European Union and/or in the European Economic Area. Where recipients are located outside the European Union and the European Economic Area, including in countries not recognized as ensuring an adequate level of protection, the transfer of Personal Data shall be carried out only if there are appropriate guarantees, in accordance with applicable law. In this respect, we rely on several guarantees, such as the standard contractual clauses issued by the European Commission. You may receive from us a list of recipients from third countries, as well as a copy of the agreed provisions that ensure an adequate level of protection of Personal Data. For any request to this effect, please contact us at the contact details mentioned below.
SECURITY OF PERSONAL DATA
The security of your Personal Data is important for us. Your Personal Data will therefore be processed by applying reasonable technical and organizational measures to protect Personal Data, such as limiting access to Personal Data, encryption or anonymization of Personal Data, storage on secure environments. However, despite our efforts, we cannot always guarantee the effectiveness of the security measures implemented, and therefore we cannot guarantee the security of Personal Data at any time.
RIGHTS IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA
Access right: You have the right to obtain from us confirmation that your Personal Data is processed by us, as well as information on the specific processing, such as: the purposes of processing, categories of processed Personal Data, recipients of Personal Data, the period for which Personal Data is stored, the source of Personal Data, if we transfer the Personal Data abroad and how we protect it, your rights, the right to lodge a complaint before the supervisory authority.
Right to rectification: You have the possibility to request rectification of your Personal Data, provided that the applicable legal requirements are met. In the event of errors, after notification, we will immediately correct your Personal Data.
Right to erasure: In certain cases, you have the possibility to request the deletion of Personal Data, namely when: (i) the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you withdraw consent on which the processing is based according and where there is no other legal ground for the processing; (iii) the Personal Data have been unlawfully processed; (iv) you exercise the right to object to the processing. We are not obliged to comply with your request when the processing is necessary (among others) for compliance with a legal obligation or for the establishment, exercise or defence of legal claims. There are also other circumstances in which we are not obliged to comply with this request for the deletion of Personal Data.
Restriction of processing: You may request us to restrict the processing of your Personal Data in the following circumstances: (i) you contest the accuracy of the Personal Data, for a period enabling us to verify the accuracy of the Personal Data; (ii) the processing is unlawful and then you oppose to the erasure of the Personal Data and request the restriction of their use instead; (iii) we no longer need the Personal Data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; (iv) you have objected to processing, pending the verification whether our legitimate grounds override yours. However, we can continue to process your Personal Data (i) when you consent; (ii) for the establishment, exercise or defence of legal claims or (iii) for the protection of the rights of another natural or legal person.
Right to data portability: Insofar the Personal Data is processed based on your consent or on the execution of the agreement and the processing is carried out by automated means, you have the right to have your data Personal Data provided to you in a structured format, which is currently used and can be read automatically, and you have the right to request us to transfer this Personal Data to another controller. This right shall not adversely affect the rights and freedoms of others.
Right to opposition: In certain situations, such as when we process your Personal Data on the basis of a legitimate interest, you have the right to object to the processing of your Personal Data by us. In the event of unjustified objection, PineappleSquare S.R.L. is entitled to continue processing Personal Data. You also have the right to object to the processing of your Personal Data for marketing purposes.
Withdrawal of consent: Insofar you consented to the processing of your Personal Data, you can at all times withdraw your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
Right not to be subject to any automatic individual decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Such right cannot be exercised when the decision: (i) is necessary for entering into, or performance of, a contract between you and us; (ii) is authorized by law which lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or (iii) is based on your explicit consent.
Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with The National Supervisory Authority for Personal Data Processing (“DPA”) in relation to any breach of your rights regarding the processing of your Personal Data. The contact details of the DPA are: 28-30 Gheorghe Magheru Boulevard, District 1, Postal Code 010336, Bucharest, Romania; e-mail: anspdcp@dataprotection.ro.
To learn more about the manner in which you may exercise the aforementioned rights, please contact us at: support@pineapplesquare.com.
CONTACT
If you have any questions or concerns about this Policy or its implementation, you may contact us at: support@pineapplesquare.com.