Privacy Statement
This Security & Privacy Policy governs the manner in which VIEW26 GmbH collects, uses,maintains and discloses information collected from users (each, a 'User') of VIEW26 Monday App(s) in accordance with the rules set down by the European Union General Data Protection Regulation (EU) 2016/679 (the GDPR).
VIEW26 is committed to protecting your privacy. This Privacy Policy governs our data collection, processing and usage practices. It applies to the information that we obtain through your use of our website, App subscription, or whenever you interact with VIEW26.
We periodically update this Privacy Policy, so we that ask you review it frequently.
If our information practices change significantly at some time in the future, we will notify you of the policy changes before we use your data for these new purposes and we will provide you the ability to opt out of these new uses.
Information about the controller
VIEW26 GmbH
Hansastrasse 1-3
47058 Duisburg
Germany
E-Mail:privacy@view26.com
Data protection officer
Our data protection officer can be contacted via privacy@view26.com
Processing your personal data
When you install and use our App from the monday.com marketplace, the below table shows you for which purposes your data are collected
App | Purposes of processing | Categories of processing | Categories of personal data stored in App Database |
Planning in Scrum Manager | Create task estimation session from monday.com board items | Extraction of Board list and Item list (item id, and name) from the Monday Cloud account | No personal data is stored in the App database. We store account-ids , user-ids, board-ids and item-ids |
The controller approves the following sub-processors to be used for the above described purposes
Google Cloud : We use Firebase Realtime Database to store App meta-data
Google Firebase Authentication
App session logs
The log files contain your IP address, monday account id and user agent data. We only use the data to secure our information technology systems, more specifically for security forensics in the event of break-ins. The log files are deleted after 90 days at the latest.
These purpose(s) also justify our legitimate interest to process the data according to point (f) of Article 6(1) GDPR.
Support Desk
On the support website (https://view26.atlassian.net/servicedesk), we use the service provider Atlassian. Pty Ltd Level 6, 341 George Street, Sydney NSW 2000, Australia and their tool Jira Service Management (hereinafter: "Jira Service Management"), which you can use to submit support requests directly to us.
To do so, we request the following information via the support form:
e-mail address
topic and description
Any further information is voluntary. By submitting this form, you agree to us processing your data. The data will be stored until you ask us to erase, e.g. your support request or your complete profile, or if we no longer use Jira Service Management as a service provider, unless statutory obligations require a longer storage period (point (c) of Article 6(1) GDPR). Jira Service Management will completely erase the data 40 days after the erasure request.
Use of Jira Service Management as well as of the information obtained through Jira Service Management is subject to Jira Serivce Management's terms of use: https://www.atlassian.com/legal/cloud-terms-of-service .
Jira Service Management also provides additional privacy information at: https://www.atlassian.com/legal/privacy-policy
The legal basis for us processing your data to clarify your request is point (a) of Article 6(1) GDPR.
Jira Service Management automatically stores information as Local Storage. To remove the information stored as Local Storage, please delete your browser cache.
Contact by e-mail
You can contact us by e-mail (best: mailto:support@view26.com). We will store your personal data transmitted in the e-mail. The data will not be passed on to third parties and it will be processed only to handle your contact request. The legal basis for processing your personal data is point (f) of Article 6(1) GDPR. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the purpose of your contact has been fully clarified.
If your e-mail aims to conclude a contract with us, point (b) of Article 6(1) GDPR serves as an additional legal basis for processing your personal data. These data will be stored for as long as they are necessary for the performance of the contract. Otherwise, we will store your data only to comply with contractual or legal obligations (e.g. tax obligations) (point (c) of Article 6(1) GDPR).
You may withdraw your consent to the processing of your personal data at any time by sending an e-mail to mailto:support@view26.com. In this case, all personal data of the conversation will be erased and it will not be possible to continue the conversation.
Your rights
When we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: Right of access, right to rectification, right to restriction of processing, right to erasure, right to be informed and right to data portability. You furthermore have a right to object and a right to withdraw.
Below, you will find details on the individual rights:
Right of access
You have the right to ask us to confirm if we process your personal data.
If we process your personal data, you have the right to access the following information:
the processing purposes;
the categories of personal data being processed;
the recipients or categories of recipients to whom your personal data have been or will be disclosed, more specifically recipients in third countries or international organisations;
if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
the existence of a right to have your personal data rectified or erased or to restrict or object to such processing by us;
the existence of a right to lodge a complaint with a regulatory authority;
if the personal data were not collected directly from you, all available information about the origin of the data;
the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved as well as on the scope and intended effects of such processing for you.
If we transfer your data to an international organisation or to a third country, you furthermore have the right to request information on whether suitable guarantees pursuant to Article 46 GDPR are in place in connection with such transfer.
Right to rectification
You have the right to rectification and/or completion of the data we have stored about you if such data are inaccurate or incomplete. We will rectify or complete the data without undue delay.
Right to restriction of processing
Under certain conditions, you have the right to request us to restrict processing your personal data. To do so, at least one of the following conditions must be fulfilled:
You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data;
The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override Yours.
Right to erasure
You have the right to obtain from us the erasure of your personal data without undue delay if we are obliged to do so. This is the case where one of the following grounds applies:
Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw consent on which the processing was based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
Your personal data have been unlawfully processed.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
Your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Where we have made your personal data public and are obliged pursuant to the above requirements to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform other controllers which are processing the personal data, that you have requested us to erase any links to, or copy or replication of, those personal data.
However, your right to erasure will not apply to the extent that processing is necessary for the following reasons (exceptions):
For exercising the right of freedom of expression and information
For compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
For reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
For the establishment, exercise or defence of legal claims.
Notification Obligation
If you have exercised your right of rectification, erasure or restriction against us, we are obliged to notify all recipients whom we have disclosed your personal data, of the rectification, erasure or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.
Right to data portability
You have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format. You furthermore have the right to transmit those data to another controller, where:
the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
the processing is carried out by automated means.
You have the right to have your personal data transmitted directly by us to another controller, where technically feasible and if it does not adversely affect the rights and freedoms of others.
This right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right to object
You have the right to object, on grounds relating to your specific situation, at any time to processing of your personal data, which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
In case of an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves the purposes of establishing, exercising or defending legal claims.
Where we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC (Directive on privacy and electronic communications), you may exercise your right to object by automated means using technical specifications.
Right to withdraw
Pursuant to Article 7(3) GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a regulatory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes your rights under the GDPR.
For an overview of the respective data protection officers of the federal states as well as their contact details go to: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .
Version and amendments to this Privacy Statement
Status: 01 February 2024