Privacy Policy

Last Updated On 28-Jun-2024Effective Date 28-Jul-2024

Data Controller

The data controller of your personal information is company: Gigantic MC, located at Poland, Ul.Św.Anny 23, Zwoleń 26-700. If you have any questions regarding data protection, please contact us at: admin@joinby.me.Your privacy is extremely important to us. We adhere to a few key principles:

• We handle the personal data we request and the data we collect while providing our services with care. We retain your personal data only for as long as it is justified.
• We strive to make it as easy as possible for you to control which information is publicly accessible or kept private, and to ensure it is permanently deleted.
• We aim for full transparency in the collection, use, and sharing of your personal data.

Purpose of Collecting Personal Data

On joinby.me, we collect personal data for the following purposes:

1. Facilitating Appointments:
   • We collect personal data to enable users to schedule meetings based on their interests and passions, such as coffee meetings, cinema outings, or other joint activities.
2. Personalizing Experiences:
   • We use personal data to tailor our services to users’ preferences and interests, allowing for better matching of suggestions and recommendations related to meetings and events.
3. Communication:
   • Contact information is used for communication between users, as well as for sending notifications about new messages, responses to inquiries, and updates regarding scheduled meetings.
4. Security and Verification:
   • We collect data to ensure user safety, prevent abuse and fraud, and verify user identities to maintain the integrity of our platform.
5. User Support:
   • Data is used to respond to user questions, requests, and inquiries, as well as to provide technical support and customer service.
6. Analysis and Improvement of Services:
   • We analyze data to better understand how the service is used, gather feedback, and continuously improve our services and user experiences.

All personal data is processed in accordance with applicable data protection regulations. If you have any questions regarding the processing of data, please contact our data protection team.

Information We Collect

We only collect your data when there is a valid reason for it — such as providing our services, communicating with you, or enhancing our services.We gather this information from three main sources: when you directly provide it to us, automatically through the use of our services, and from external sources.Let’s go over the types of information we collect:

Information collected directly

• Basic account information:

We ask for some basic information to set up your account. For example, we require individuals who sign up for an account on joinby.me to provide an email address and password, as well as a username or first name — and that’s it.

• Public profile information:

If you already have an account, we collect information provided in the public profile. Your username is part of this public profile, along with any other information you include, such as a photo or an “About Me” description. Your public profile information is exactly that — public — so please keep this in mind when deciding what information to include:First name, Last name, Username, Contact details (email address, phone number), Demographic data (gender, age, location), Company name (if the user chooses to share it), Occupation, Job title, Social media links, Photos,  Appearance information (e.g., height, hair color, distinctive features), hobby,  Website name (if the user chooses to share it)

• Public information in the added listing/post:

If you post a listing, we collect the information that is publicly visible. Your username is part of this public listing, along with any other information you include in your public listing, such as a photo or an “About Me” description. Your public information in the listing is just that — public — so please keep this in mind when deciding what information you want to include:First name, Last name, Username, Contact details (email address, phone number) Demographic data (gender, age, location), Company name (if the user chooses to share it), Occupation, Job title, Social media links, Media such as photos / videos, Appearance information (e.g., height, hair color, distinctive features), hobby, Website name (if the user chooses to share it)

• Communication with Us

When you communicate with us, we may collect and process the following information:First name and last name,Adress Email – We may collect your email address when you contact us via email.Phone Number – If you contact us by phone, we may collect your phone number.Messages – We may retain the content of any messages or communications you send to us, including the date and time of the communication.Chat Logs – If you use any chat functionality on our website, we may collect and store chat logs.

•  Collection of Payment Information

Payment Information

When you make a payment through our service, we collect and process certain personal and financial information necessary to complete the transaction. For more detailed information on how we handle payment data, please refer to our separateclick:Payment Privacy Policy .

Automatically Collected Information

When you use our website, we automatically collect certain information that may be considered personal data. This information includes:

• IP Address: Your IP address is automatically collected each time you visit our site and can be used to identify your internet connection.
• Cookies and similar tracking technologies: We use cookies and other tracking technologies to monitor your activities on our site and improve its functionality. More at:  Policy Cookie
• Device Information: We collect information about the device you are using, such as device type, operating system, web browser,
• Location Data: We may collect data about your location if your device is configured to share such information.
• Log Data: We collect data regarding your visits to our site, including the date and time of visits, pages viewed, time spent on each page.
• Interaction Data: We collect information about your interactions with our site, such as clicks, mouse movements, scrolling behavior.

Collecting Data from External Sources:

We may also collect your personal data from external sources to better provide our services. This information can come from partners, service providers, and other third parties. Examples of such data include:

• Social Media Data: If you connect your account on our service with a social media platform (e.g., Facebook, Google), we may receive certain information from these platforms, such as your name, profile picture, email address, and other publicly available information.
• Analytics Data: We may receive analytics data from our partners that help us understand how users interact with our service and how we can improve it.
• Payment Service Provider Data: If you use external payment service providers (e.g., Skrill), we may receive transaction-related information, such as transaction amount, date and time of the transaction, and payment status.
• Public Records Data: We may use publicly available sources of information to verify the data provided by users.

We use this information to respond to your inquiries, provide support, and improve our services. Your communications with us are confidential, and we do not share them with third parties unless required by law.

Data Processing in User Communications

• When a user contacts another user through our service joinby.me by filling out the “Bookings form” on the subpage of a given advertisement, they provide personal data such as username, first name, email address, phone number, and image in photos. The recipient of this data is the user to whom the advertisement pertains. The recipient will be notified of new interest in the meeting and will receive all the data entered in the form in an email message from the sender. Both the sender and the recipient also have access to this data on their accounts in the management panel under the “Bookings” option on joinby.me.The recipient can delete the reservation if they are not interested, and this data will be permanently deleted from the service. All canceled reservations, whether by the sender or the recipient, will be permanently deleted from the service after 30 days.If a user wants to delete their own sent reservations, they should contact the service administrator. Alternatively, during the account deletion process, all data will be permanently deleted.

• When contacting a user on their profile page, the recipient will receive the data entered in the form (including username, first name, email address, phone number, and your message) via email.

The joinby.me service provides appropriate security measures during data transmission but does not take responsibility for the processing of personal data by the message recipient outside the service platform.

Legal Basis for Processing

In joinby.me, we process personal data based on the following legal grounds:

1. Consent:
   • We may process personal data based on the user’s explicit consent. Users can withdraw their consent at any time, and such withdrawal will not affect the legality of processing based on consent before its withdrawal.
2. Contractual Necessity:
   • We process personal data as necessary to fulfill our contractual obligations with users. This includes providing and managing our services, scheduling appointments, and addressing user inquiries and requests.
3. Legitimate Interests:
   • We may process personal data based on our legitimate interests, provided that such interests are not overridden by the user’s rights and interests. These legitimate interests include improving our services, ensuring platform security, and conducting internal analyses.
4. Legal Obligations:
   • We process personal data to comply with legal obligations to which we are subject. This may include responding to legal requests, enforcing our terms and conditions, or complying with regulatory requirements.
5. Vital Interests:
   • In some cases, we may process personal data to protect the vital interests of a user or another individual. This applies in situations where processing is necessary to protect someone’s life.

All personal data is processed in accordance with applicable data protection laws and regulations. For any questions regarding the legal basis for processing personal data, please contact our data protection team.

Your Rights

Depending on the law that applies, you may have the following rights regarding your personal data:

1. Access to data: You have the right to access your personal data and receive a copy of it.
2. Rectification of data: You have the right to rectify your personal data if it is incorrect or incomplete.
3. Erasure of data: You have the right to have your personal data erased (right to be forgotten).
4. Restriction of processing: You have the right to restrict the processing of your personal data.
5. Object to processing: You have the right to object to the active processing of your data.
6. Data portability: You have the right to transfer your personal data to another entity (right to data portability).
7. Withdraw consent: You have the right to withdraw any consent you provided to us to process your data at any time.
8. Lodge a complaint: You have the right to lodge a complaint with a supervisory authority.
9. Other rights: Any other rights as provided by applicable laws.

To exercise these rights, you can write to us at admin@joinby.me. We will respond to your request in accordance with applicable law.You may also opt-out of direct marketing communications or the profiling we carry out for marketing purposes by writing to us at admin@joinby.me.Please note that if you do not allow us to collect or process the required personal information or withdraw the consent to process it for the required purposes, you may not be able to access or use the services for which your information was sought.

Cookies Etc.

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy

Data Security

The security of your personal data is of utmost importance to us. We implement a range of measures to protect your data from unauthorized access, loss, alteration, or destruction. We work with a trusted, external hosting provider who ensures a high level of security for their systems, and we also use our own security plugins.

1. Encryption: We use advanced encryption technologies (SSL/TLS) to protect data transmitted between your device and our servers, preventing interception by third parties.
2. Hosting Provider: Our external hosting provider is a reputable and verified partner who employs advanced security measures to protect the IT infrastructure and the data stored on their servers.
3. Access Control: Access to your personal data is restricted to authorized personnel and partners who need this information to perform their tasks. Our hosting provider also employs stringent access control procedures to protect data from unauthorized access.
4. Physical and Technical Safeguards: Our hosting provider uses advanced physical safeguards (such as 24/7 security, access control to buildings) and technical safeguards (such as firewalls, intrusion detection, and prevention systems) to ensure the security of stored data.
5. Security Plugins: Our service also utilizes proprietary security plugins that further protect your personal data from threats. These plugins are regularly updated and monitored to ensure the highest level of protection.
6. Data Backups: We regularly create backups of your data, allowing recovery in case of system failure or other incidents. Our hosting provider also ensures systems for creating and managing backups.
7. Monitoring and Auditing: Our systems and those of our hosting provider are continuously monitored and regularly audited to detect and prevent potential threats.
8. We take all reasonable measures to ensure the security of personal data transmitted through our service, including implementing appropriate technical and organizational safeguards. However, we cannot be held responsible for how data is processed by the recipients of email messages. We recommend exercising caution when using contact forms. If you have any questions regarding the processing of personal data related to user contacts, please contact us at iod@joinby.me.

Your Responsibilities

To help protect your personal data, we recommend:

• Using strong, unique passwords and changing them regularly.
• Not sharing your login credentials with third parties.
• Using secure devices and networks when accessing our service.

Breach Notifications

If we detect a data security breach that may impact your rights and freedoms, we will notify you promptly in accordance with applicable laws.

Third Party Links & Use Of Your Information

Our service may contain links to third-party websites, products, or services that are not operated by us. We are not responsible for the privacy practices or the content of these third-party sites. When you click on a link to a third-party website, you will be subject to their privacy policies and terms of use. We strongly recommend that you review the privacy policies of any third-party sites you visit.We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party sites or services.

1. Third-Party Links: Our website may include links to other websites for your convenience and information. These websites may operate independently from us and have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. We are not responsible for the content or privacy practices of websites that are not affiliated with us.
2. Sharing Information with Third Parties: We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except as outlined in this privacy policy. We may share your information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential and use it only for the purposes for which we disclose it to them.
3. Third-Party Service Providers: We may employ third-party companies and individuals to facilitate our services, provide the service on our behalf, perform service-related activities, or assist us in analyzing how our service is used. These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
4. WooCommerce: We use the WooCommerce plugin to manage our online store. WooCommerce may collect information about your transactions and use it in accordance with their own privacy policy. We recommend reviewing the WooCommerce privacy policy to understand how your data is used.
5. Stripe: For payment processing, we use the external provider Stripe. Stripe adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council. Your personal data is encrypted and used solely to process transactions on our behalf. More information on Stripe’s privacy practices can be found in their privacy policy.
6. reCaptcha: We use the reCaptcha service on certain pages to protect our site from spam and abuse. reCaptcha collects information about users to determine whether they are human and not a bot. This information is collected in accordance with Google’s privacy policy. More information can be found in Google’s privacy policy.
7. Advertising and Analytics: We may use third-party service providers to display advertisements, analyze the performance of our services, and track the effectiveness of our marketing efforts. These providers may use cookies, web beacons, and other technologies to collect information about your use of our services and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information helps us and our service providers measure the effectiveness of our advertising and better understand your preferences.
8. Social Media Features: Our services may include social media features, such as the Facebook Like button and widgets, such as the Share this button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing them.

Your Responsibilities

We encourage you to read the privacy policies of any third-party websites you visit or services you use. Remember, the privacy practices of these third parties are outside of our control.

Grievance / Data Protection Officer

If you have any questions, concerns, or complaints regarding the processing of your personal data or wish to exercise your rights under applicable data protection laws, you can contact our Data Protection Officer (DPO):

1. Contact Information for the Data Protection Officer (DPO):
   • Company Name: Gigantic MC
   • Email: iod@joinby.me
2. Filing Complaints:
   • If you believe that your personal data is being processed in violation of the law, you have the right to file a complaint with the relevant supervisory authority in your country of residence or where the alleged infringement occurred. For complaints within the European Union, you can contact the relevant supervisory authority according to the [GDPR].
   • In other countries, complaints can be directed to the appropriate data protection authorities.
3. Complaint Handling Procedure:
   • We will address your complaint within one month of its receipt. If the complaint requires more time due to its complexity, we may extend this period by an additional two months. We will notify you of any such extension and the reasons for the delay within one month of receiving your complaint.
4. Protection of Your Rights:
   • Our DPO is responsible for monitoring compliance with data protection regulations and for providing information and advice on matters related to the protection of personal data.