Table of Contents

I. Introduction

HeroCoders Sp. z o.o. (“HeroCoders”, “we” or “us”,) is committed to protecting and respecting your privacy. We want to tell you how we use and protect your personal information (“Personal Data”). This includes informing you of your rights regarding your Personal Data that we hold.

We believe that the EU General Data Protection Regulation (“GDPR”) is an important step forward in the protection of your Personal Data, and we are committed to GDPR compliance across our organization and provide GDPR related assurances in this Privacy Policy (“Policy”). In addition, we also take into account other data protection legislation that may apply to us, most notably, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CCPA”), which requires us to provide the additional disclosures below regarding our privacy practices. Please refer to the dedicated Section XI of this Policy to know more about your rights under the CCPA.

This Policy covers the information we collect about you when you use our products or services, including all of our SaaS/Cloud software products and our downloadable software products (collectively, the “Apps”) and all public websites (“Website(s)”) provided and/or maintained by HeroCoders, or otherwise interact with us (for example, by contacting us through e-mail, the support portal or applying for a job). We refer to all of these Apps and Websites, together with our other services as “Services” in this Policy. Depending on the context, “you” means the end-user of our Services or the legal entity who is the licensee of our Apps, the visitor of our public Websites, or the person who otherwise interacts with us.

If you do not agree with this Policy, do not access or use our Services or interact with any other aspect of our business.

II. Data controller

The controller of your Personal Data is HeroCoders Sp. z o.o., a company incorporated under the laws of Poland, with its registered office in Gdańsk, Poland (postal code: 80-119) at ul. Zosi 16, entered into the Register of Entrepreneurs of the National Court Register by the District Court Gdańsk-Północ in Gdańsk, VII Commercial Division of the National Court Register, under KRS number: 0000910925, Tax ID: 5833433174, National Business Registry Number: 389423957, with the share capital of PLN 75,000.00.

You can contact us by e-mail at support@herocoders.com.

Please note that in some cases HeroCoders may act as a processor of Personal Data on behalf of the other data controller. In such cases, HeroCoders does not determine the purposes or means of processing Personal Data. More information in this regard can be found in Section III of this Policy.

III. Notice to End Users

Our Apps are intended for use by organizations. Where the Apps are made available to you through an organization (e.g., your employer), that organization is the administrator of the Apps and acts as a data controller of your Personal Data, while HeroCoders processes it on their behalf as a data processor. If this is the case, please direct your data privacy questions to your administrator, as your use of the Apps is subject to that organization’s policies.

Administrators are able to:

  • restrict your access to the Apps and therefore restrict your ability to edit, modify, or delete your Personal Data; and
  • access, modify, and remove the information about you.

Even if the Apps are not currently administered or made available to you by an organization, if you use an e-mail address provided by an organization (such as your work e-mail address) to access the Apps, then the owner of the domain associated with your e-mail address (e.g. your employer) may assert administrative control over your account and your use of the Apps at a later date. Please contact your organization or refer to your administrator’s organizational policies for more information.

To the extent that our Apps operate within the Atlassian environment, Atlassian is not responsible for the processing of End User Personal Data by us - we are responsible for the privacy, security, and integrity of End User Personal Data processed by us or our Apps, as described in the Data Processing Agreement and this Policy.

The scope of the Personal Data processed and other details of the respective Personal Data processing activities can be different and depend on the specific App that you choose to use. To make things more comprehensive, we provide more details about this in a separate table available at https://www.herocoders.com/legal/personal-data-access.

Data location

HeroCoders may process Personal Data both within the European Economic Area (“EEA”), e.g. in Poland, as well as outside the EEA, e.g. in the United States.

With respect to the Checklists for Jira Enterprise application, customers may be able to select a preferred data location for the hosting of certain data, such as Europe or the United States. Such functionality is intended to provide customers with greater control over the geographic location of hosted data and to support their data residency requirements. Nevertheless, customers acknowledge that the provision of the Apps may involve certain ancillary or incidental processing activities outside the selected region, where necessary for the operation, support, maintenance, security, or improvement of the Apps and subject to appropriate safeguards required under applicable law. Additional information concerning data residency may be made available through Atlassian’s website https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/.

Sub-processors

Recipients of Personal Data may include entities supporting HeroCoders in the provision of the Apps, the full list of which is available at https://www.herocoders.com/legal/subprocessors.

Data subjects’ rights

As a processor of Personal Data, we will assist our Customers with responding to individual rights requests that they receive under the GDPR. In many cases, Customers may be able to address these types of requests by logging into the applicable product and using settings available within such product or your account. Where this is not possible, please contact us at support@herocoders.com to request assistance with any such individual rights requests.

1. Apps

Purposes of Personal Data processing

If you use our Apps, HeroCoders will process Personal Data for the following purposes:

  • to conclude and perform the service agreement;
  • to ensure the proper functioning of our Apps, including to diagnose any problems with our Apps;
  • to personalize your experience and the usability of the Apps;
  • to enhance and otherwise modify our Apps;
  • to develop other products and Apps, provided we de-identify your Personal Data.

Legal basis for Personal Data processing

The legal basis for processing your Personal Data is:

  • the necessity to perform the contract or take steps at your request prior to entering into the contract as a party to that contract (Article 6(1)(b) of the GDPR), or
  • the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of the necessity to process the Personal Data of representatives, employees, or contractors of the counterparty to the extent required to conclude and perform the contract, in particular for the purposes of communication and ongoing cooperation, ensuring the proper functioning of our Apps, personalizing the experience and use of our Apps, developing and improving our Apps.

Scope of the processed Personal Data

When using our Apps, we may process certain information about you. This information is made accessible to HeroCoders since our Apps need to work together with the host products such as Jira from Atlassian, Microsoft Teams from Microsoft and monday.com from monday.com Ltd.

The scope of the Personal Data processed and other details of the respective Personal Data processing activities can be different and depend on the specific App that you choose to use. To make things more comprehensive, we provide more details about this in a separate table available at https://www.herocoders.com/legal/personal-data-access.

As part of our Apps, we have access to the contact information (e.g., your name, phone number, billing and technical e-mail address) and license information (e.g., number of licenses, term of the license, etc.) you provide when you subscribe to a license for any of our Apps or when you renew maintenance for our Apps on the partner platform.

Retention period

SaaS/Cloud Apps

SaaS/Cloud Apps (e.g. Checklists Free/Pro/Enterprise for Jira, Clockwork Lite/Pro for Jira, Portfolio for Jira, Checklist for MS Teams, Clockwork for monday.com) are hosted by HeroCoders. In that case, we may store the information or data provided by you on our secured servers. but we currently utilize a third-party to provide this service. With SaaS/Cloud Apps, we have access to user information as provided in this Policy and https://www.herocoders.com/legal/personal-data-access, which may include data regarding how and when the Apps are utilized.

We store Personal Data for varying lengths of time depending on the circumstances:

  • Information you share on the Apps is stored until the End User, who modified or created the text (or any other authorized user), deletes that text and all related information.
  • If your account is deactivated, terminated, or disabled, all data and content you have provided or that has been provided on or through your account will remain active and accessible for as long as necessary to allow your team members or other users to make full use of the Apps.
  • After uninstalling the App, we store data for up to ninety (90) days to make sure it is there if you want to renew your subscription and start using the App again. If you want us to remove the data earlier, please contact us.

Downloadable Apps

Downloaded Apps provided by Okapya Software Solutions Inc. (www.okapya.com) through HeroCoders as an exclusive reseller store all information in the Atlassian Jira on-premise product where they are installed. All data is located in your IT system (server or data center) that hosts the Atlassian Jira on-premise product.

No information stored on the installation IT system is made available to us when you download, install, or use these Apps. These Apps do not transmit data from your IT system or from the End-User’s web browser to us or to any third-party, unless you choose to configure it otherwise.

Information received from the Partner Platforms

The contact and license information we collect about our Customers (i.e. company information and contact information of the contact persons) is stored in our databases for a year after the license expires, unless retention is required under applicable platform policies or by law (e.g., Atlassian allows us to see the expired license information in the Marketplace admin section according to the Atlassian and Marketplace policies).

2. Contractors and their representatives

Purposes of Personal Data processing

HeroCoders may process Personal Data for the purpose of establishing cooperation, as well as entering into and performing a contract.

Legal basis for Personal Data processing

If you are our contractor
The legal basis for the processing is the necessity to perform the contract or take steps at your request prior to entering into the contract as a party to that contract (Article 6(1)(b) of the GDPR).

If you are a person designated by the contractor to perform the contract (e.g., representative, contact person)
The legal basis for the processing is the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of the necessity to process the Personal Data of representatives, employees, or contractors of the counterparty to the extent required to conclude and perform the contract, in particular for the purposes of communication and ongoing cooperation.

Scope of the processed Personal Data

HeroCoders may process, in particular, identification data, contact data, the job position held, as well as other data provided in connection with the cooperation.

Retention period

Personal Data will be processed for the duration of contractual negotiations, and in the event that a contract is concluded – for the duration of its performance, and subsequently for the period required under applicable law or until the expiration of potential claims, whichever occurs later.

3. Support Services

Purposes of Personal Data processing

HeroCoders may process your Personal Data to provide support services (including technical support) to you after you have requested such services

Legal basis for Personal Data processing

The legal basis for processing your Personal Data is the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of the necessity to provide technical support and to ensure the proper functioning of the Services provided.

Scope of the processed Personal Data

When you contact us for service through the support portal, we will collect your name, e-mail address, and any other information you choose to provide.

Retention period

Personal Data shall be processed for the period necessary to provide technical support and to resolve the reported issue, and subsequently until the expiration of potential claims.

Joint Controllers

Regardless of the information provided above, HeroCoders informs that in the case of a support request concerning on-premise services provided by Okapya Software Solutions Inc. (“Okapya”), where HeroCoders acts solely as a reseller, HeroCoders and Okapya act as joint controllers of users’ Personal Data for the purpose of providing support services in this regard. You may obtain the essential content of the joint controller arrangements by contacting us at support@herocoders.com. We inform that, irrespective of these arrangements, you may exercise your rights against either of the data controllers (more information on your rights can be found in Section X of this Policy).

4. Websites

Purposes of Personal Data processing

If you use our Websites, HeroCoders may process your Personal Data in order to ensure the functionality and security of the Website, as well as for analytical and statistical purposes.

Legal basis for Personal Data processing

The legal basis for processing your Personal Data is the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of the necessity to ensure the functionality and security of our Websites, as well as to pursue statistical and analytical purposes.

Scope of the processed Personal Data

If you visit our Websites, we may automatically collect information about you, for example: technical information, IP addresses, information about the type of device you use to access our Websites, the manner in which you interact with our Websites, and other information collected through cookies or similar technologies.

Retention period

Personal Data shall be processed for the period necessary to ensure the functionality and security of our Websites and to fulfil statistical and analytical purposes. Information collected through cookies is processed for the duration of the specific cookie’s validity period or until the user deletes the cookie.

5. Social Media

Purposes of Personal Data processing

HeroCoders may process Personal Data for the purpose of operating and managing its social media profiles, promoting the HeroCoders brand and business activities, communicating with social media users, and carrying out analytical, statistical, and advertising activities related to social media engagement.

Legal basis for Personal Data processing

The legal basis for processing Personal Data is the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of operating and managing social media profiles, promoting the HeroCoders brand and business activities, communicating with users, and carrying out statistical, analytical, and advertising activities related to social media engagement.

Scope of the processed Personal Data

When you interact with our profiles, we may process Personal Data such as identification data (your name or username) and other data obtained in connection with the operation of our social media profiles (e.g., information provided in comments or private messages).

Retention period

Personal Data shall be stored for the duration of operating our social media profiles or until they are deleted (e.g., by you or by the social media service provider).

Joint Controllers

Regardless of the information provided above, HeroCoders informs that, in accordance with the operating principles of social media platforms, the provider of a given social media service may act as a joint controller of users’ Personal Data (e.g., for statistical or analytical purposes). HeroCoders informs that it does not have full influence over Personal Data processing operations carried out in this context.

More information regarding social media platforms can be found at:

6. Contact with us

Purposes of Personal Data processing

If you contact us through various communication channels (e.g., by e-mail or via a contact form), HeroCoders may process your Personal Data in order to enable the establishment of contact and to conduct further communication.

Legal basis for Personal Data processing

The legal basis for processing your Personal Data is the legitimate interest of HeroCoders (Article 6(1)(f) of the GDPR), consisting of enabling contact and conducting further correspondence in this regard.

Scope of the processed Personal Data

HeroCoders may process Personal Data such as identification data, contact data, and other data provided to us in connection with establishing contact (e.g., Personal Data included in the content of the correspondence).

Retention period

Personal Data shall be generally processed for the period necessary to conduct correspondence, including responding to submitted questions or requests, and thereafter until the expiry of the limitation period for any potential claims. However, depending on the content of the correspondence, Personal Data may be processed for a longer period, for example in the case of active customers, Personal Data may be processed for the duration of the cooperation and subsequently until the expiration of potential claims.

7. Recruitment

Purposes of Personal Data processing

If you submit an application to us, we may process your Personal Data for the purpose of conducting the recruitment process. If you give your consent, your Personal Data may also be processed for the purpose of conducting future recruitment processes.

If your application is not related to a currently ongoing recruitment process, your Personal Data will be processed for the purpose of conducting a recruitment process for a position corresponding to your professional experience and education.

Legal basis for Personal Data processing

We will process your Personal Data pursuant to Article 6(1)(b) of the GDPR. Under this provision, the data controller may process Personal Data when it is necessary to take steps at the request of the data subject (i.e., you) prior to entering into a contract.

We may also process your Personal Data on the basis of your consent under Article 6(1)(a) of the GDPR. This applies when:

  • you provide us with more Personal Data than necessary to carry out the recruitment process (for example, by including a photo in your CV, you consent to the processing of your image, which also constitutes Personal Data);
  • you consent to participation in future recruitment processes.

Please note that you may withdraw your consent at any time. However, this will not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Scope of the processed Personal Data

In connection with the recruitment process, HeroCoders may process the following categories of Personal Data:

  • identification data;
  • contact data;
  • data concerning education, professional experience, and skills;
  • other data included in application documents or obtained during the recruitment process (e.g., image).

Retention period

Personal Data shall be stored until the recruitment process is completed, and in any case no later than 24 months and 14 days from the date of application, unless further retention is required by law. If you give your consent, we will store your application for no longer than 24 months from the date it was collected, in case another suitable position becomes available. After this period, the information you provided will be deleted.

8. Marketing activities

Purposes of Personal Data processing

HeroCoders may process your Personal Data to send you occasional company news, updates, related Apps and Services, promotions, special offers, or service information regarding our Services if you have consented to or requested such communications.

Legal basis for Personal Data processing

The legal basis for the processing of Personal Data is HeroCoders’ legitimate interest (Article 6(1)(f) of the GDPR) in the form of direct marketing.

Marketing activities carried out using electronic means of communication, such as e-mail, are conducted solely after obtaining your consent to receive commercial information. You may choose to opt out of certain e-mail communications at any time by using the “unsubscribe” feature in the e-mail message or by contacting us directly.

Scope of the processed Personal Data

HeroCoders may process Personal Data such as contact details (e-mail address) and other Personal Data obtained in connection with the conduct of marketing activities.

Retention period

The Personal Data shall be processed for as long as HeroCoders has a legitimate interest in doing so or until a valid objection is raised, and in the case of marketing conducted via e-mail - until the consent to receive commercial information is withdrawn, whichever occurs first.

9. Online meetings

Purposes of Personal Data processing

HeroCoders may process Personal Data in order to organize and conduct an online meeting and, if you give your voluntary consent, to record the meeting and document its course, as well as to transcribe the recording (including automated transcription).

Legal basis for Personal Data processing

The legal basis for the processing of Personal Data is:

  • HeroCoders’ legitimate interest (Article 6(1)(f) of the GDPR), consisting of the need to organize and conduct the meeting and to ensure business communications;
  • your consent (Article 6(1)(a) of the GDPR) with respect to recording the online meeting and preparing its transcript (including automated transcription).

Scope of the processed Personal Data

HeroCoders may process Personal Data such as:

  • Personal Data provided in the electronic forms regarding the meeting request, such as your full name and e-mail address;
  • Personal Data obtained during the online meeting, including your voice and any other information shared during the meeting.

Retention period

Personal Data shall be stored for the duration of the online meeting and no longer than 30 days thereafter. If the meeting is recorded and/or transcribed, data will be erased upon withdrawal of consent or when no longer necessary, and in any case no later than 12 months from the date of recording, unless further retention is required for legal claims.

10. Trust Center

Purposes of Personal Data processing

When using our Trust Center, HeroCoders may process Personal Data in order to ensure the functionality and security of the Trust Center, as well as to provide access to HeroCoders’ documents related to data protection and information security, and to enable the conclusion of a non-disclosure agreement (NDA).

Legal basis for Personal Data processing

The legal basis for the processing of Personal Data is:

  • HeroCoders’ legitimate interest (Article 6(1)(f) of the GDPR), consisting of the necessity to ensure the functionality and security of the Trust Center, as well as to provide documentation required to demonstrate an adequate level of Personal Data protection and information security;
  • your consent (Article 6(1)(a) of the GDPR) for subscribing to the Trust Center updates.
  • the necessity to perform the contract or to take steps at your request prior to entering into the contract (Article 6(1)(b) of the GDPR) - for the purpose of concluding a non-disclosure agreement.

Scope of the processed Personal Data

If you visit the Trust Center, we may automatically collect information about you, such as technical information, IP addresses, information about the type of device you use to access the Trust Center, the manner in which you interact with it, and other information collected through cookies or similar technologies.

If you subscribe to Trust Center updates, HeroCoders may process Personal Data such as contact details.

If you submit a request for access to documents, HeroCoders may process Personal Data such as identification data, contact details, and the name of the entity.

Retention period

Personal Data shall be stored for the period necessary to ensure the functionality and security of the Trust Center.

In the case of subscribing to Trust Center updates, Personal Data may be processed until you withdraw your consent or in accordance with platform (Vanta) retention rules, whichever occurs first.

In the event that a request for access to documents is submitted, Personal Data may be processed for the period necessary to provide access to the requested documents and the Trust Center and, in case of NDA conclusion, until the expiration of potential claims.

11. Status Page

Purposes of Personal Data processing

When using the Status Page, HeroCoders may process Personal Data in order to ensure the functionality and security of the Status Page, as well as to provide notifications regarding the operation of our Apps.

Legal basis for Personal Data processing

The legal basis for the processing of Personal Data is:

  • HeroCoders’ legitimate interest (Article 6(1)(f) of the GDPR), consisting of the necessity to ensure the functionality and security of the Status Page;
  • your consent (Article 6(1)(a) of the GDPR) for subscribing to status notifications about our Apps.

Scope of the processed Personal Data

If you visit the Status Page, we may automatically collect information about you, such as technical information, IP addresses, information about the type of device you use to access the Status Page, the manner in which you interact with it, and other information collected through cookies or similar technologies.

If you subscribe to notifications, HeroCoders may process Personal Data such as contact details (depending on the chosen notification channel).

Retention period

Personal Data shall be stored for the period necessary to ensure the functionality and security of the Status Page. In the case of subscribing to notifications, Personal Data may be processed until you withdraw your consent or in accordance with platform (Atlassian Statuspage) retention rules, whichever occurs first.

12. Other purposes of processing

Purposes of Personal Data processing

In all cases, HeroCoders may also process Personal Data for the following purposes:

  • carrying out statistical and analytical objectives;
  • fulfilling internal administrative purposes;
  • establishing, exercising, or defending against legal claims.

Legal basis for Personal Data processing

The legal basis for the processing of Personal Data is HeroCoders’ legitimate interest (Article 6(1)(f) of the GDPR), consisting of the necessity to pursue statistical and analytical objectives, fulfil internal administrative purposes, and ensure HeroCoders’ legal protection.

HeroCoders may also process Personal Data for any other specific purpose for which you have expressly provided your consent. The legal basis for such processing is your consent (Article 6(1)(a) of the GDPR). Providing consent is voluntary, and you may withdraw it at any time. The withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Scope of the processed Personal Data

HeroCoders may process Personal Data such as identification data, contact details, and other data necessary for the fulfilment of the processing purposes.

Retention period

Personal Data may be stored for the period required by applicable law or until the limitation period for potential claims expires - whichever occurs later.

In the case of Personal Data processed on the basis of HeroCoders’ legitimate interest, the Personal Data may be processed for as long as HeroCoders maintains such a legitimate interest or until a valid objection is raised.

In the case of Personal Data processed on the basis of your consent, the Personal Data may be processed until the consent is withdrawn, or until the Personal Data becomes outdated or no longer necessary for the specified purposes.

Please note: where HeroCoders acts as a data processor, we will process your Personal Data (including covered by the User Content as defined in our Terms of Service) on behalf of our customers. More information in this regard may be obtained in Section III of this Policy.

V. Sources of obtaining Personal Data

Personal Data may have been obtained:

  • directly from you (e.g., if you complete an online form, contact us via the available communication channels, or use our Services), or
  • from third-parties (e.g., when your Personal Data is provided for the purpose of participating in a meeting via the “schedule a demo” option), or
  • via Partner Platforms – as part of our Services, we have access to the contact details (e.g., your name, phone number, and e-mail address) and licensing information (e.g., number of licenses, license term, etc.) that you provide when you subscribe to a license for any of our Apps or when you renew maintenance for our Apps on a Partner Platform.

VI. Personal Data recipients

HeroCoders will share the information we have collected about you (including your Personal Data) only if we are required to do so by law, or if:

  • HeroCoders engages certain service providers to process information to support our business and our Services;
  • HeroCoders engages prospective investors and/or advisers in connection with potential investments, financings, or other corporate transactions, which may involve the sharing of information solely for due diligence purposes, subject to appropriate confidentiality obligations and adequate safeguards;
  • a third-party acquires HeroCoders or substantially all of its assets, Personal Data held by HeroCoders about its customers will be one of the transferred assets of the company;
  • HeroCoders must comply with any legal obligation;
  • it is necessary in order to protect the rights, property, or safety of HeroCoders, our customers or others.

We reserve the right, consistent with data privacy and other user data protection requirements applicable to the jurisdiction where Personal Data is stored, and if mandated by applicable law, regulation, legal process, or governmental order, disclose user Personal Data or other information, but only to the extent required to satisfy those laws, regulations, or orders. Unless prohibited by law or other order, we will provide reasonable notice of any such required or requested disclosure to you and reasonably cooperate to limit such disclosure to the extent allowed by law.

VII. Obligation to provide Personal Data

Providing Personal Data is generally voluntary, but it may prove necessary in order to achieve the purposes of processing. In some cases, providing the Personal Data may be mandatory where this obligation results from applicable laws. Refusing to provide the Personal Data may make it impossible to achieve the purposes of processing, e.g. it may prevent us from establishing a business relationship or contact, participating in an online meeting, or using our Services.

In the case of recruitment, providing the Personal Data is voluntary, but necessary in order to participate in the recruitment process. Refusing to provide the Personal Data may result in your inability to take part in the recruitment process or in our inability to consider your application.

VIII. Data transfers

HeroCoders may process Personal Data both within the EEA, e.g. in Poland, as well as outside the EEA, e.g. in the United States. Where your Personal Data is transferred outside the EEA, we will transfer the Personal Data to a country in respect of which the European Commission has issued an adequacy decision, or will implement appropriate safeguards to protect your Personal Data, including the Standard Contractual Clauses adopted by the European Commission. You may obtain a copy of these safeguards by contacting us at support@herocoders.com.

IX. Automated decision-making, including profiling

HeroCoders shall not perform activities involving automated decision-making, including profiling.

X. Your rights

HeroCoders, as a data controller, will respect your legal rights to your Personal Data.  Below are the legal rights that you have under law:

The right to access

You have the right to access your information, including obtaining a copy thereof. Please contact HeroCoders at support@herocoders.com if you have any questions or you wish to access the Personal Data HeroCoders holds about you or wish to obtain a copy thereof.

The right to rectification

If the information HeroCoders holds about you is inaccurate or not complete, you have the right to ask us to rectify it. Please contact us at support@herocoders.com if you need us to rectify your information.

The right to erasure

This is sometimes called ‘the right to be forgotten’. If you want HeroCoders to erase all your Personal Data (provided we do not have a legal reason to continue to process and hold it), please contact us at support@herocoders.com.

The right to restrict processing

You have the right to ask HeroCoders to restrict how we process your Personal Data. If you want us to restrict processing of your Personal Data, please contact us at support@herocoders.com.

The right to data portability

You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit those Personal Data to another data controller, in the cases provided for by law. If you wish to exercise your right to data portability, please contact us at support@herocoders.com.

The right to object

You have the right to object to HeroCoders processing your Personal Data to the extent that your Personal Data is processed on the basis of HeroCoders’ legitimate interests. If you wish to object, please contact us at support@herocoders.com.

The right to withdraw consent

If you have given us your consent to process your Personal Data but change your mind later, you have the right to withdraw your consent at any time, which will not affect the lawfulness of the processing carried out on the basis of your consent before it was withdrawn. If you want to withdraw your consent, please contact us at support@herocoders.com.

The right to complain to a Supervisory Authority

You have the right to lodge a complaint with a competent Data Protection Authority, in particular the one in the EEA country of your habitual residence or place of work – in accordance with the applicable laws. We encourage you to inform us of your request before lodging a complaint with the supervisory authority, which will allow us to ensure that your rights are properly exercised.

XI. California privacy rights

If you are a California resident, the provisions in this section apply in addition to the rest of this Policy. The CCPA requires us to provide the additional disclosures below regarding our privacy practices.

Personal Data we collect

Over the last twelve (12) months, we have collected the types of Personal Data listed below:

  • Identifiers (e.g., name, e-mail address, IP address);
  • Internet or other electronic network activity information, including information on your usage of our Website;
  • Geolocation data, only to the extent you have configured your device settings to allow us to collect this information.

Please note that we may share the Personal Data with our service providers for business purposes (so service providers can deliver their services to us). Please note that we don’t share or sell Personal Data with first-parties for their marketing purposes. More information about the disclosure of Personal Data can be found in Section VI of this Policy.

More information on the purposes for collecting Personal Data and the length of time we intend to retain Personal Data can be found in Section IV of this Policy, and more information on the categories of sources from which Personal Data is collected can be found in Section V of this Policy.

Your rights

You are entitled to certain rights over your Personal Data under the CCPA. Specifically, as a resident of California, you have the right to:

  • know about the categories and specific pieces of Personal Data that we have collected about you and access a copy of your Personal Data (“Right to Know”);
  • have inaccurate Personal Data about you corrected (“Right to Correction”);
  • request deletion of your Personal Data that we have collected (“Right to Deletion”);
  • opt out of the sale of your Personal Data (“Right to Opt-Out”). Please note that we don’t sell Personal Data to any third-parties.

You may designate an authorized agent to submit a request on your behalf to exercise your rights. In such a case, the agent must be authorized with documented, signed permission to submit the request (e-mail shall be sufficient). Please note that we may ask you and/or your agent to provide certain information to verify your and/or your agent’s identity and authorization before fulfilling the request. The information we request will depend on your prior interactions with us.

We undertake to treat you like everyone else and not discriminate against you if you choose to exercise your rights. To submit the request to exercise your rights, you or your authorized agent can send an e-mail to support@herocoders.com.

XII. Cookies

What are cookies?

Cookies are small files which are stored on a user’s computer or other electronic device. They are designed to hold a modest amount of data specific to a particular client and website. This allows the server to deliver a page tailored to a particular user, or the page itself can contain some script which is aware of the data in the cookie and so is able to carry information from one visit to the website to the next.

Enabling and disabling cookies

We can place cookies on your device by default if they are strictly necessary for the use of our Websites. For all other types of cookies, we need your consent.

Unless you choose otherwise, we can store and process only those cookies that are necessary for the operation of our Websites. If you don’t want to be tracked by other types of cookies, you can refuse to give your initial consent or opt out later.

Cookie settings on the Websites (i.e., providing or withdrawing consent, or selecting which cookies we may use) can be managed in the following ways:

You may also view your browser’s help pages or information on how to manage cookies at https://allaboutcookies.org.

What types of cookies do we use?

We use various types of cookies on our Websites. The types of cookies are divided into three categories:

According to storage duration:

  • session cookies – stored until you close your browser.
  • persistent cookies – remain on your device after closing the browser for a specified period or until you delete them manually.

According to their purpose:

  • necessary (technical) cookies – these cookies are essential for the functioning of our Websites and therefore cannot be disabled. Their use does not depend on your consent. You can configure your browser to block these cookies or to notify you about them. However, certain elements of our Websites may not function properly without them. These cookies do not store any Personal Data.
  • preferences cookies – these cookies make our Websites more efficient and more personalized. They are used to tailor our Websites’ operation to your needs. They may be set by us or by third-party providers whose services we use on our Websites. If you do not allow these cookies, some or all of these services may not function correctly. These cookies may only be used based on your consent.
  • statistics cookies – these cookies help us understand how users interact with our Websites, which enables us to improve its content and the services available on it. They help us measure visitor numbers and traffic sources, allowing us to enhance our Websites’ performance. They enable us to determine which parts of our Websites are most popular and how visitors navigate through it. These cookies may only be used based on your consent.
  • marketing cookies – these cookies are used to remember your preferences and display advertising content that matches your expectations. These cookies may also be set on our Websites by advertising partners, who may use them to build profiles of your interests and to display advertisements on other websites. These cookies may only be used based on your consent. If you do not allow them, the content displayed on our Websites will be less personalized.

Detailed information about the cookies we use, including their descriptions and storage durations, can be found in the cookie banner by clicking on “Details”.

According to the entity placing the cookie:

  • first-party cookies – cookies placed on our Websites by us.
  • third-party cookies – cookies placed on our Websites by our advertising partners or other service providers. The providers that place cookies on our Websites are listed in the information displayed in the cookie banner. To obtain more information about how they use cookies, please refer to the relevant third-party website and review the privacy policies of the entities that provide such cookies.

Information collected through cookies generally shall not allow for the identification of a specific user and therefore does not constitute Personal Data. If we process information that allows us to identify you as a natural person and is therefore classified as Personal Data, such information is processed in accordance with this Policy. Please note that cookie providers may act as separate controllers of Personal Data.

XIII. Google Analytics

We use Google Analytics to analyze traffic on the Websites and the activities undertaken by you while browsing the Websites, as well as to create reports on the functioning of our Websites. Through this tool, we process statistical and analytical information related to the users of our Websites. You may additionally opt out of Google Analytics data collection by installing Google’s Analytics Opt-out Browser Add-on (please note that if you do not consent to the use of cookies originating from Google Analytics, they will not be used, regardless of whether the aforementioned plugin is installed).

Further information on the terms of use and data protection can be found on the following websites: https://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=en.

From time to time, the Websites or Services may contain links to and from other websites, advertisers, and affiliates. The Websites may also contain links to social media platforms. If you follow a link to any of these websites or social media platform, please note that these websites or social media platform may have their own privacy notices and that we do not accept any responsibility or liability for any such notices. Please check these notices, where available, before you submit any Personal Data to these websites or social media platforms.

XV. Data Protection Officer (DPO)

HeroCoders’ Data Protection Officer contact information:

Paweł Maliszewski
HeroCoders sp. z o.o.
Ul. Zosi 16, 80-119 Gdańsk
Poland

You can contact the Data Protection Officer by e-mail at dpo@herocoders.com.

XVI. Changes to this Policy

HeroCoders may change this Policy from time to time in the future. Any such changes will be posted here and, where appropriate, notified to you in document form, for example through notifications in the Trust Center (you can subscribe to such notifications here). We advise you to check back frequently to see any updates or changes.