1.1. This privacy statement is applicable to the processing of your personal data by iText. This privacy statement does not cover any processing of data by third parties. iText is not responsible for privacy statements or privacy practices of any third party.
This privacy statement describes iText’s general privacy practices that apply to personal data collected, used and shared. This privacy statement will explain when and why iText collects your personal data and how it is used. Personal data is any information relating to an identified or identifiable natural person (data subject). We value that you are fully aware of our policies and practices regarding privacy and data processing. Therefore, we encourage you to read this privacy statement carefully.
1.2. iText recognizes the importance of protecting your personal data and is committed to processing it responsibly and in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (hereinafter: “GDPR”).
2. Who is processing your data?
2.1. iText Group nv is the controller with regard to your personal data, which means iText is responsible for the processing. The term 'processing' is broad and covers, among other things, collecting, recording, organizing, storing, updating, modifying, retrieving, consulting, using, distributing or making available in any way, bringing together, combining, archiving, erasing or eventually destroying of that data.
2.2. You can contact iText using the contact details below:
|Name:||iText Group nv|
|Company address:||Technologiepark-Zwijnaarde 122, 9052 Ghent, Belgium|
|Company registration number:||0895.263.973|
|Telephone number:||+32 9 298 02 31|
|Fax number:||+32 9 270 33 75|
3. What data is being processed? How do we process your data?
3.1. iText collects and processes the following categories of personal data, depending on your level of interaction with the organisation (customer, onsite visitor, website visitor, etc.):
Internal personal data:
Preference: Information about an individual's preferences or interests (interests).
- External personal data:
- Identifying: Information that uniquely or semi-uniquely identifies a specific individual (name, user-name, unique identifier, employer, job title).
- Financial personal data:
- Account: Information that identifies an individual's financial account (credit card number, bank account).
- Social personal data:
- Communication: Information communicated from or to an individual (email).
- Tracking personal data:
- Computer device: Information about a device that an individual uses for personal use (IP address).
- Contact: Information that provides a mechanism for contacting an individual (email address, physical address, telephone number).
3.2. iText also automatically collects and processes anonymous and electronic information regarding your use of its website(s) and the (software) products and services of iText. iText automatically logs which sections of the website(s) you visit, which web browser you use, which (other) website(s) you visited when you obtain access to the website(s) of iText, your IP address. This allows iText to draw up statistics regarding your use of the website(s) and to send targeted communication.
3.3. Your personal data are collected in the context of:
- you showing interest in our (software) products and services and contacting iText (e.g. after exchange of business cards);
- you visiting the website(s) of iText and you filling out the contact form on the website;
- your request for free trials, eBooks, whitepapers and/or a quote;
- the (license) agreements between you and iText;
- your use of the (software) products) and (software and support and maintenance) services provided by iText;
- you agreeing to receiving updates and exclusive emails from iText and/or subscribing to the newsletter of iText;
- the (incoming and outgoing) correspondence and communication between you and iText.
iText only processes the personal data you provide to iText and which are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (see article 4 below).
3.4. Currently iText is working with a marketing automation tool that automatically tracks if you open the email we sent you and click on certain links. Because we think this information is too intrusive, we are not even interested in this, we are investigating the possibilities of other tools. For the time being, we have implemented several data minimization measures (access control, physical security and privileged identity management). You can always contact us to get more detailed information about this.
4. For which purposes do we process your data?
iText processes your personal data for:
responding to your request(s) for information, quote(s), order(s) or support: when you contact us (via our website or otherwise) with a request for information, to order products or services of iText, we collect and process your personal data to (be able to) contact you, to fulfill your request, to grant you access to our products and/or services or to provide you with support;
- access and use of our website(s) – optimizing quality, management and content of our website(s): when you visit our website(s) or use one of our online services, we shall process information necessary to provide you with access and for the operation of our website(s). We also process information about your activities during your visit in order to improve your website experience and improve and further develop our website(s);
- improvement or development of our products and/or services;
- your use of our free trials / demo application;
- preparation, management and performance of the contract(s) with you, delivery of our (software) products and (software, support and maintenance) services to you, issuing invoicing, collecting payment, administration / management in relation to your subscription;
- (direct) marketing: sending information and/or targeted marketing and advertising, updates, newsletters and promotions by email, telephone or postal mail about our products or services;
- legal obligations.
5. What is the legal basis for processing your data?
5.1. The processing of your personal data in connection with a request, order, transaction or agreement (or preparing for the same) or to provide products and/or services to you, is necessary for the performance of an agreement with you.
5.2. The processing of your personal data for (direct) marketing purposes, improvement or development of our website(s), products and/or services or for purposes other than in connection with your agreement or request, is on the basis of your consent or a legitimate interest of iText.
When relying on this second lawfulness, the ‘weighing of interests’ is not only assessed at the start of the processing activity, but we also make sure the balance remains at all times in the benefit of the controller during the processing period.
6. Disclosure of your data to third parties
6.1.iText shall not disclose your personal data to third parties, unless necessary for the provision of our products and/or services (in which case the third party is required to use your personal data in accordance with this privacy statement).
E.g. iText can disclose your contact information (identification data) to third party service providers for support (assistance), such as handling specific support questions. The transfer is necessary for the performance of the agreement with you or to provide support services to you or is done for the purposes of the legitimate interests pursued by iText or the third party. iText concludes data processing agreements with these third party service providers which contain the necessary guarantees regarding confidentiality and protection of your personal data.
6.2. It is possible that iText discloses your personal data to:
- The competent authorities if iText is obliged to do so under law or legal proceedings and/or to safeguard and defend our rights;
- If iText, or the majority of its assets, are taken over by a third party, in which case your personal data shall be one of the transferred assets.
6.3. In all other cases, iText will not disclose your personal data to third parties, except with your consent and if iText has concluded a data processing agreement with the third party in question, which contains the necessary guarantees regarding confidentiality and protection of your personal data.
7. Transfer of your data outside the EEA/EU
7.1. In the exceptional case that customer data is transferred to countries outside the European Economic Area (EEA) or European Union (EU) and for which the European Commission has not decided it ensures an adequate level of protection, this shall be governed by the provisions of a data transfer agreement containing the necessary standard contractual clauses of the European Commission or any other appropriate safeguards.
7.2. Some American parties with whom we work together have registered under the Privacy Shield that offers sufficient protection (Atlassian, Google, Marketo, Microsoft). Personal data may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.
8. Retention period(s)
iText shall not retain nor store your personal data longer than necessary to fulfill the purposes for which your data are processed (see article 4 above), unless a longer storage period is required or justified: (i) by law or any legal or regulatory obligation (e.g. audit, accounting and/or statutory retention terms); (ii) for handling disputes or (iii) for the exercise or defense of legal claims. We will never delete your personal records before giving you a notification.
9. Your rights
9.1. As a data subject you can exercise the following rights:
- Right to information: you can request access to the personal data we possibly have from you;
- Right to rectification, completion or update of your personal data;
- Right to delete your personal data;
- Right to limit the processing of your personal data;
- Right to data portability: you can request your data to be transferred to another company or entity;
- Right to object to or to oppose the processing of your personal data.
9.2. If you no longer wish to receive information and/or targeted marketing and advertising, updates, newsletters and promotions you can unsubscribe (opt-out) at any time by sending an e-mail to firstname.lastname@example.org and/or clicking here.
9.3. If a processing is based on your consent, you have the right to withdraw your consent at any time.
9.4. You have the right to file a complaint with the (Belgian) Privacy Commission:
|Company address:||Drukpersstraat 35, 1000 Brussel (Brussels), Belgium|
|Telephone number:||+32 2 274 48 00|
|Fax number:||+32 2 274 48 35|
9.5. If you wish to invoke your rights, as defined above, you can contact iText by sending an e-mail to email@example.com. We have the right to verify your identity and ask for a copy of the front side of your identity card (ID) before handling your request.
10. Updates to our privacy statement
iText is entitled to update from time to time this privacy statement by publishing an updated version on its website(s).
11. Contact details
If you have any questions about this privacy statement, do not hesitate to contact us by sending an email to firstname.lastname@example.org.