Last Modified: September 5th, 2019
We always seek to improve our Services to you, and that requires that we collect, store, share, and use information about you and your usage preferences. As we do so, we are absolutely committed to protecting your privacy and the security of your personal information.
We have also adopted a Data Processing Agreement (“DPA”) that places further restrictions and requirements on how we process Data. We make the DPA available separately to individuals and companies who wish to enter into a DPA with us. If you have entered into such an agreement with us, either by executing the DPA in hard copy or by clicking “I Accept” or similar language online, the DPA will apply to both parties’ actions under this Agreement.
When you enter into an agreement with us, either by accessing the Services, by executing an agreement in hard copy or by clicking “I Accept” or similar language online, we will process your Data for the purposes of fulfilling the terms of our contract with you. In that case, our processing of your Data is based on the contract, so your withdrawal of consent will only be effective after the purposes for processing that Data have been fulfilled and after we no longer have a legal obligation to keep that Data.
In all cases, we will comply with applicable law and we will cease processing your Data after the legal right or obligation or other necessity passes.
The Services are directed solely to persons 18 years of age or older or of children under 18 who are supervised by a parent, guardian, or other caregiver. Other than for Data collected for the specific purpose of providing the Services to users, we do not knowingly collect Data from users who are under 13. If we become aware that we have gathered Data from a person under 13, except to provide the Services to such person, then we will attempt to delete such Data as soon as possible, subject to our obligations under applicable law. If you believe that we have gathered Data from a person under 13 in contravention of this policy, please contact us at firstname.lastname@example.org.
Lawful Basis for Processing: Our lawful basis for processing Registration Data is our contract with you. We can only provide certain of the Services to you if we have the Registration Data, so we need to store and access that Registration Data during the term of our contract. Even when the Registration Data is not critically necessary to the provision of the Services, we may still process that Registration Data to facilitate our contractual interactions with you.
How We Use It and Who We Share It With: Registration Data is accessible only to us. We use it only to provide the Services to you. At times, we will share the Registration Data with third parties at your request or to fulfill requests that you make of us. We may use your Registration Data to offer goods or services to you, but only on an opt-in basis after getting your specific consent.
1. Data Description: Payment Data is only collected when your use of the Services is subject to the payment of a fee or other charge. Payment Data is the information necessary for us to process your payments for premium Services. Payment Data will vary depending on the payment method you use (e.g. direct via your mobile phone carrier or by invoice) but will include information such as:
2. Lawful Basis for Processing: Our lawful basis for processing Usage Data is (1) our contract with you and (2) our legitimate interest in improving our Services based on the Payment Data we receive from you.
3. How We Use It and Who We Share It With: We only use Payment Data to facilitate payment, and we only communicate it to those parties who are strictly necessary for that purpose.
We often use the services of third parties to help us to recruit new employees and independent contractors and to manage our interactions with current employees and independent contractors. We do our best to contractually ensure that these third-party service providers comply with the policies we have adopted. However, we can’t guarantee their compliance in every case.
Our lawful basis for processing Data about potential and current employees and independent contractors is our contract with them and our legitimate interest in processing that Data, both to facilitate the formation of a formal relationship and to manage that relationship once it is formed. We only use employment Data for the direct purpose of the employment or independent contractor relationship, and we cease using it as soon as that relationship ends. However, we may keep and process that Data after the relationship ends when we are required to do so by applicable law or to preserve legal claims that may arise.
When you use the Services to manage your short-term rental properties, you may input personal information about individuals with whom you do business, such as renters and service providers. This personal information is included in the definition of Engagement Data and treated as such. However, the lawful basis for our processing such information is both our contract with you and our legitimate interest in helping you process the information you need for your business. We never sell or use the personal information of your renters or service providers.
Except where a specific limitation is noted above, we may share your Data as follows:
If we ever plan to use any Data in the future for any other purposes not identified above and we do not have a separate lawful basis for that processing, we will only do so after obtaining your specific consent.
The technologies we use for automatic Data collection may include the following:
We only use your Data for marketing purposes if you give us your specific consent. If, after giving your consent, you wish to opt-out of our sharing of your information with third parties for the third parties’ direct marketing purposes, or if you wish to stop receive marketing e-mails from us, please follow the instructions below. (Note that if you are a resident of the European Union, we will never use your personal data for third-party marketing purposes unless you have clicked on a box online to expressly give consent for such use.)
We will try to comply with your request(s) as soon as reasonably practicable. Please also note that if you do opt-out of receiving marketing-related emails from us, we may still send you messages for administrative or other purposes directly relating to your use of the Services, and you cannot opt-out from receiving those messages.
California has also adopted the California Consumer Privacy Act (“CCPA”), which will take effect at the beginning of 2020. Janiis complies with the requirements of the CCPA to the extent they apply to Janiis. Contact us at email@example.com for further information about how we do so.
For employees and other authorized users operating in their role as administrators or users of our services, our lawful basis is the legitimate interest we have in providing the services to their employer.
If you are a client or customer who accesses the Data of third parties in connection with your services rendered to us, you, your employees, and your other authorized users agree to be bound by the provisions of the GDPR with respect to any Data with which you come in contact using Services, including without limitation the personal data belonging to individuals with whom you communicate or whose personal data you access using the Services. Specifically, you agree that you, your employees, or other authorized users will:
A. Never access, process, transfer, view, use, or store any Data of any third party without express authorization, and then only for purposes directly related to fulfilling your contractual obligations under your agreement with any third party (“Data Secrecy”);
B. Keep all Data strictly confidential and disclose Data only on a strict need-to-know basis to other employees or authorized users only as required for fulfilling an individual’s contractual obligations (“Confidentiality”); however, you agree that you shall not disclose or otherwise make accessible Data under any circumstances to anyone who has not been obliged to Data Secrecy and Confidentiality.
C. Ensure that your obligations of Data Secrecy and Confidentiality are observed forever, both during and after the expiration and/or termination of any agreement with us or any contractual relationship you may have with an employer or other party.
D. Upon our request to provide Company with satisfactory evidence that you have complied with your obligations of Data Secrecy and Confidentiality as set forth in this agreement.
The GDPR also requires us to take appropriate technical and organizational measures to protect the security of Data belonging to residents of Europe. We make commercially reasonable efforts to ensure the privacy and security of the Data of our European visitors and customers, and we are happy to give you a complete description of our most current efforts, if you will write us at firstname.lastname@example.org.
Pursuant to the GDPR, residents of Europe have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to email@example.com. If requested to remove data, we will respond within a reasonable timeframe.
The security of your Data is important to us. We use commercially reasonable efforts to store and maintain your Data in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Data that you provide to us. We have implemented procedures designed to limit the dissemination of your Data to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.
You have the right to access the information we hold about you in order to verify the information we have collected in respect to you and to have a general account of our uses of that information. Upon receipt of your written request, we will provide you with a copy of your information, although in certain limited circumstances we may not be able to make all relevant information available to you, such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access and modifications in a timely manner.
We will make every reasonable effort to keep your information accurate and up-to-date, and we will provide you with mechanisms to update, correct, delete or add to your information as appropriate. As appropriate, this amended information will be transmitted to those parties to which we are permitted to disclose your information. Having accurate information about you enables us to give you the best possible service.
You can help by keeping us informed of any changes such as a change of your personal contact information. If you would like to access your information, if you have any questions, comments or suggestions of if you find any errors in our information about you, please contact us at firstname.lastname@example.org. If you have a complaint concerning our compliance with applicable privacy laws, we will investigate your complaint and if it is justified, we will take appropriate measures.