PRIVACY POLICY
Thank you for using the Jifeline infrastructure through us or through our designated partners, or for visiting our website(s). This policy explains the information we collect, how and why we collect it, and how we use and disclose it. We take your privacy very seriously and never sell your personal information, including email addresses.
Definitions
The following definitions should help you understand this policy. When we refer to "we", "us", or "our", we mean Jifeline Networks B.V., located in the Netherlands.
We provide an infrastructure that you may use to have your vehicle coded/programmed (the "Services"). This can be done either directly through us or through one of our designated partners.
"Designated partner" refers to our partners who use our infrastructure to serve their members through their own service centres.
"Member" refers to the person or entity that is registered with us or with one of our partners to use our Services. "You" refers to either a Member or any other person who visits any of our websites.
"Personal Information" means information that can be used to identify you, such as name and address details, organisation name, billing address, shipping address, (business) email address, (business) phone number, payment details, IP Address.
This Privacy Policy applies to our websites and Jifeline Google apps, as well as any other sites we own or operate.
The "Websites" include the websites themselves, and any related web pages, interactive features, applications, widgets, blogs, social networks, or other online offerings that link to this Privacy Policy.
The "Google apps" include all apps created by Jifeline, but branded for our partners.
Scope
This Privacy Policy applies to any data that we have collected or will collect about you.
Information we collect
Information you provide voluntarily
When you sign up for and use our Services, contact our customer service, send us an email, post on our blog, or communicate with us in any other way, you voluntarily provide us with information. This information may include your name, physical address, email address, IP address, phone number, as well as details such as your occupation, location, purchase history, and other demographic information.
Information we collect automatically
When you use our Services or browse our Websites, we may automatically collect information about your visit. This information may include your IP address, operating system, browser ID, browsing activity, and other details about how you interacted with our Websites. We may collect this information through log files, cookies, or other tracking technologies.
Information From the Use of the Service
We may collect information about how and when you use our Services, and store this information in log files or other types of files associated with your account. This information helps us improve our Services for you and all our users.
Cookies and Tracking
We use cookies and similar technologies to analyse trends, administer the website, track user movements, and gather demographic information about our user base.
Web Beacons
We use web beacons on our Websites and in our emails to track behavior, such as who opened the emails and clicked the links. This helps us measure the performance of our email campaigns and improve our features.
Information From Our Mobile Apps
When you use our mobile apps, we may collect information such as the type of device and operating system you use, your location, and may use audio or camera functions. We may also send you push notifications, which you can disable through your device settings.
USE AND DISCLOSURE OF PERSONAL INFORMATION
We may use and disclose your Personal Information for the following purposes:
- To promote the use of our Services, including sending you promotional emails.
- To bill and collect money owed to us by Members.
- To send you system alert messages regarding changes to our Services.
- To communicate with Members about their account and provide customer support.
- To enforce compliance with our Terms of Use and applicable laws.
- To protect the rights and safety of our Members, third parties, and ourselves.
- To meet legal requirements and provide information to legal representatives.
- To support and improve our Services, including sharing information with third parties under contract.
- To execute agreements we enter into and to maintain the relationships that arise from it.
SHARING PERSONAL DATA WITH THIRD PARTIES
We only share your data with third parties when permitted by current legislation. There may be instances where we provide your personal data to third parties because:
- We have engaged them to process certain data on our behalf;
- It is necessary to fulfill the agreement with you;
- You have given your consent for this;
- We have a legitimate interest in doing so;
- We are legally obligated to do so (for example, if the police require it in the event of a suspected crime).
The parties that process personal data on our or your behalf include:
- Cookie providers
- IT suppliers and service providers
- Our hosted e-commerce platform
- Online examination and evaluation tools
- Delivery service
- Payment service providers (and debt collection agencies)
- Consultants
- Event organizations and venues
To provide our services, we may share your personal data with parties located outside the European Economic Area (EEA). We only do this if an adequate level of protection for the processing of personal data is ensured. This may include using a standard contractual clause from the European Commission or making specific agreements about the handling of personal data.
LEGAL BASIS FOR PROCESSING
We process your personal data based on one or more of the following legal grounds:
Legitimate Interest: We may process your data when it is necessary for the purposes of our legitimate interests, such as improving our services, maintaining business relationships, and ensuring the security of our systems.
Consent: In cases where we rely on your consent, we will only process your personal data after obtaining clear and explicit consent from you. You have the right to withdraw your consent at any time.
Legal Obligation: We may process your data to comply with legal obligations, such as fulfilling tax retention requirements or responding to lawful requests from public authorities.
Performance of a Contract: We process your data when it is necessary to fulfil the terms of a contract, such as providing a service or delivering a product that you have requested.
Vital Interests: In rare cases, we may process your data to protect your vital interests or those of another person, for example, in emergency situations where life or health is at risk.
PUBLIC INFORMATION AND THIRD-PARTY WEBSITES
Blog
Our Websites may contain public blogs. Any information you include in a comment on our blog may be read, collected, and used by anyone.
Social media platforms and widgets
Our Websites may include social media features that collect information about your IP address and the page you are visiting. Your interactions with these features are governed by the privacy policies of the respective platforms.
Links to Third-Party Websites
Our Websites may contain links to other websites. Their privacy practices may differ from ours, and we encourage you to read their privacy policies.
SECURITY
We prioritise the security of your personal information and take a comprehensive approach to protect it from unauthorised access, alteration, disclosure, or destruction. We implement a range of technical, administrative, and physical security measures to safeguard your data. Below are the key security practices we follow:
Encryption
- Data in Transit and at Rest: We use encryption to protect your information both while it is being transmitted over the internet and when it is stored on our servers.
Access Control
- Role-Based Access: Access to personal data is limited to authorised personnel based on their job responsibilities.
- Authentication: We implement strong authentication, including password policies and two-factor authentication (2FA), to prevent unauthorised access.
Monitoring and Auditing
- Logs and Intrusion Detection: We monitor user activity and network traffic, regularly reviewing logs and using intrusion detection systems to spot and address potential threats.
Security Assessments
- Vulnerability Scanning and Penetration Testing: We conduct regular vulnerability scans and engage third-party experts to test our systems for weaknesses.
- Patch Management: We apply security patches promptly to keep our systems up to date.
Secure Development Practices
- Code Reviews and Testing: We follow secure coding practices, performing code reviews and rigorous testing to minimise vulnerabilities.
Data Minimisation and Retention
- Minimisation: We collect only the data necessary for specific purposes and store it only as long as needed.
- Retention: When no longer needed, data is securely deleted or anonymised.
Incident Response
- Incident Management: We have a detailed response plan for data breaches, including notification procedures in line with legal requirements.
Training and Awareness
- Employee Training: Our staff undergo regular security training, including phishing awareness and social engineering prevention.
Physical security
- Data centre and office security: Our servers are housed in secure data centres with strong physical security measures, and access to our offices is restricted.
Third-Party Security
- Vendor Management: We ensure that third-party providers meet our security standards and comply with legal requirements through data processing agreements.
If you have any concerns or suspect unauthorised access to your account, please contact us immediately.
ACCURACY OF DATA AND TRANSPARENCY
We strive to keep your data accurate and up to date. You are responsible for notifying us of any changes to your information. We will retain your information for as long as your account is active or as long as necessary to provide our Services and/or comply with legal obligations, for example, due to the seven-year tax retention period.
QUESTIONS & CONCERNS
If you have any questions, comments, or concerns, or if you wish to update, delete, or change any Personal Information we hold, please contact us at privacy@jifeline.com or use our contact form. However, if you feel that we are not assisting you properly, you can contact the Dutch Data Protection Authority (Personal Data Authority) to file a complaint.
CHANGES
We may update this Privacy Policy from time to time. The latest version of the Privacy Policy will be reflected by the date at the bottom of this page. Any updates or amendments will be effective immediately upon notice, which we may provide by posting the revised policy on our website. We encourage you to review this Privacy Policy regularly to stay informed about any changes that may affect you. Your continued use of our website or services indicates your consent to the updated Privacy Policy.
Jifeline Networks B.V.
Zweihaak 1
4251 LT Werkendam
The Netherlands
privacy@jifeline.com
www.jifeline.com
