Privacy Policy - Legal documents

1. Definitions

“Affiliates” means the legal entities owned directly or indirectly by LLC WEEEK or that are otherwise in LLC WEEEK corporate family.
“Controller” means the entity that has certain legal rights to determine the purposes for which Personal Data will be Processed and the means by which that Processing will happen.
“Customer” means the entity that has contracted with WEEEK to receive a free, trial, or paid Platform Plan or other Service Offerings. For example: When a business purchases a Platform Plan and sets up accounts under that Platform Plan for employees, the business is the Customer, and each individual using the Platform under the Plan is a User. If a one-person business signs up for its own free Platform Plan, that person is both the Customer and the User. If that person invites others to set up accounts under that Plan, those other people will be Users as well.
“GDPR” means the EU General Data Protection Regulation.
“Personal Data” means any information about an identified or identifiable individual, such as their name or contact information.
"Platform” means the work management and collaboration platform on weeek.net and the WEEEK desktop (app.weeek.net and api.weeek.net) and mobile apps .
“Platform Plan” means a Customer’s subscription to the Platform
“User” means an individual who uses a Service Offering. Within the Platform, there are three types of Users: Regular Users, External Users, and Collaborators. Those User types are defined at that hyperlink. “Workspace” means the Platform instance to which Customer gains access when entering into a Platform Plan. The Workpace may contain one or more projects administered by Customer.
Service Offerings” means the Platform and WEEEK’s related support and professional services
“Privacy Shield” means EU-U.S. and Swiss-U.S. Privacy Shield frameworks described here.
“Process,” “Processed,” and “Processing” refer to any means any operation or set of operations that can be performed on Personal Data or on sets of Personal Data. This includes, for example, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure and destruction.
“Processor” means an entity that Processes Personal Data on behalf of a Controller.
“Service Data” is Personal Data or other information that Users: input directly into the Platform; create within the Platform; send to the Platform through our Chrome browser extension or through other apps and integrations; or provide to WEEEK through authorized methods as part of other Service Offerings.
“Service Offerings” means the Platform and WEEEK’s related support and professional services.
“User” means an individual who uses a Service Offering. Within the Platform, there are three types of Users: Regular Users, External Users, and Collaborators. Those User types are defined at that hyperlink.
“Workspace” means the Platform instance to which Customer gains access when entering into a Platform Plan. The Customer may contain one or more Workpace administered by Customer. The Workpace may contain one or more projects administered by Customer.
“WEEEK” means LLC WEEEK, whose contact information is at the end of this Privacy Policy

2. Scope of this Privacy Policy, and a Note Regarding Service Data

3. Types of Personal Data We Collect

Our Customers are empowered to provide us with any kind of Personal Data in the Service Data.

In case of User OAUTH registration and verification we require permission to read and store folowing data:

userInfo (ID)
name
email
picture

In case of file attachment of any kind we reqire permission to read and store folowing data:

File/Document
name
iconUrl
url
sizeBytes

in case of intergation with calendar we reqire permission to read, store folowing data:

Calendar type
id
summary
description
timeZone
accessRole

in case of scedule intergation with calendar we reqire permission to read, store, write, and make chandes to folowing data:

Event
id
description
start
end
status
created
updated

In addition to Service Data, we collect contact details, professional details such as title and name of company, information about the browsers and devices and individuals use to interact with us, information about an individual’s interactions with WEEEK or our partners, and payment information.

We obtain much of this data directly from the relevant individuals, including in some cases with the technology described in the “Cookies and Automated Data Collection” section further below. We also obtain Personal Data directly from our current or prospective Customers and from other third-party sources such as resellers, distributors, list vendors and marketing companies, as well as from publicly available sources such as prospective Customer websites and third-party sites like LinkedIn.

4. How We Use Personal Data

WEEEK uses Personal Data as follows:

To provide and improve our Service Offerings, including internal analysis of aggregate usage patterns;
To respond to questions, concerns, or customer service inquiries, and to otherwise fulfill individuals’ requests;
To send information about our current and future Service Offerings, including marketing communications by phone, email, online display advertising, and other channels;
To analyze market conditions and use of our Service Offerings;
To customize the content and advertising individuals see on our websites, across the Internet, and elsewhere;
To enforce the legal terms that govern our business and online properties;
To comply with law and legal process and protect rights, safety and property; and
For other purposes requested or permitted by our Customers, Users or other relevant individuals, such as website visitors.

5. Disclosures of Personal Data

For the uses of information described above, including to make appropriate disclosures in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements; and

In connection with a business sale, merger, consolidation, change in control, transfer of substantial assets or reorganization.

For those purposes, we may share information with our Affiliates and other entities that help us with any of the above, such as our sub-processors, our CRM system provider, our payment processor, and the marketing and analytics companies described in Section 7 below.

6. Legal Bases for Processing Personal Data

The laws in some jurisdictions require companies to tell you about the legal grounds they rely on to use or disclose your Personal Data. To the extent those laws apply, our legal grounds for Processing Personal Data are as follows:

To honor our contractual commitments to an individual: Some of our Processing of Personal Data is to meet our contractual obligations to the individuals to whom the Personal Data relate, or to take steps at their request in anticipation of entering into a contract with them. For example, when an individual purchases admission to a Wrike event, we may Process their payment information on this basis.

Consent: Where required by law, and in some other cases, we handle Personal Data on the basis of consent. For example, some of our direct marketing activities happen on the basis of opt-in consent, such as sending marketing emails to individuals who have requested them.

Legitimate interests: In many cases, we handle Personal Data on the ground that it furthers our legitimate interests in commercial activities, such as the following, in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals: Customer support; Marketing, including, in some cases, direct marketing such as via email; Protecting our Customers, Users, personnel and property; Analyzing and improving our business and Service Offerings; and Managing legal issues. We may also Process Personal Data for the same legitimate interests of our Customers and business partners.

Legal compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations.

7. Cookies and Automated Data Collection

In our websites, apps and emails, we and third parties may collect certain information by automated means such as cookies, Web beacons, JavaScript, mobile device functionality, browser-based or plugin-based local storage such as HTML5 storage or Flash-based storage, and other similar techniques and technologies.

This information includes unique browser identifiers, unique device identifiers such as the Apple Advertising Identifier or Android Advertising ID, IP address, browser and operating system information, geolocation, other device information, Internet connection information, as well as details about individuals’ interactions with our apps, websites and emails. Such details include, for example, the URL of the third-party website from which you came, the pages that you visit on our websites, and the links you click on in our websites.

As part of this, we and third parties may use automated means to read or write information on your device, such as in various types of cookies and other local storage. Cookies and local storage are files that can contain data, such as unique identifiers or other information, that we or a third party may transfer to or read from a user’s device for the purposes described in this Privacy Policy.

The cookies and other technologies described here fall into four basic categories:

Essential: These are strictly necessary to provide you with our online presence, such as access to secure areas that require registration. Users cannot refuse them without impacting functionality.
Functional: These allow Users to browse or benefit from some of its features, such as setting language preferences. Similar to the essential technology described above, if these are disabled, it could impact your experience to use some functionality.
Analytics: These allow us or our third-party analytics providers to collect statistics on the use of our Service Offerings and website.
Advertising: These cookies and other technologies, administered primarily by our third-party advertising partners, track users’ online activities over time and use this information to show users ads that are tailored to their individual interests or characteristics and/or based on prior visits to certain sites or apps, or other information we or they know, infer or have collected from the users. For example, we and these providers may use different types of cookies, other automated technology, and data to (i) recognize users and their devices; (ii) inform, optimize and serve ads; and (iii) to report on our ad impressions, other uses of ad services, and interactions with these ad impressions and ad services, including how they are related to visits to specific sites or apps.

To learn more about interest-based advertising, including how to opt out from the targeting of interest-based ads by some of our current ad service partners, visit aboutads.info/choices or youronlinechoices.eu from each of your browsers on each of your devices. You can opt out of Google Analytics and customize the Google Display Network ads by visiting the Google Ads Settings page and installing the Google Analytics Opt-out Browser Add-on from each browser on each device. If you replace, change or upgrade your browser, or delete your cookies, you may need to use these opt-out tools again. We do not respond to browser-based do-not-track signals. Please visit your mobile device manufacturer's website, or the website for its operating system, for instructions on any additional privacy controls in your mobile operating system, such as privacy settings for device identifiers and geolocation.

You may be able to set your web browser to refuse certain types of cookies, or to alert you when certain types of cookies are being sent. Some browsers offer similar settings for HTML5 local storage, and Flash storage can be managed as described here.

8. Personal Data Rights and Choices (Including Direct Marketing Opt-Out)

All Users can:

Review and update certain User information by logging in to the relevant portions of the Platform.
Deactivate their accounts by contacting us at support at help.weeek.net, subject to any contractual provisions between WEEEK and the Customer responsible for the account. Except when the Customer has requested closure of all its User accounts, information in a deactivated User account may be available to the Customer for some time.
Deactivate data collection by our browser extension by uninstalling it.

Controls related to cookies and other automated data collection are described in the “Cookies and Automated Data Collection” section above. Anybody can unsubscribe from marketing emails by clicking the unsubscribe link they contain.

Residents of the European Economic Area, the UK and many other jurisdictions have certain legal rights to do the following with Personal Data we control:

Obtain confirmation of whether we hold Personal Data about them, and to receive information about its Processing;
Obtain a copy of the Personal Data, and in some cases, receive it in a structured, commonly used and machine-readable format, or have it transmitted to a third party in such form;
Update, correct or delete the information;
Object to the Processing of the information;
Withdraw consent previously provided for the Processing of the information;

For example, those individuals have a right to opt out of Week processing of their Personal Data for direct marketing purposes.

Residents of the European Economic Area, the UK and Switzerland also have certain rights under the Privacy Shield, as described in the “International Data Transfers” section below.

To exercise any of those rights with respect to the Personal Data week controls individuals should contact us as described at the end of this Privacy Policy.

To exercise any rights relating to Service Data, Users should contact the relevant administrator for the Workspace associated with the Service Data, not Weeek. Many of the rights described above are subject to significant limitations and exceptions under applicable law. For example, objections to the Processing of Personal Data, and withdrawals of consent, typically will not have retroactive effect.

Every individual also has a right to lodge a complaint with the relevant supervisory authority.

9. Security

To provide security for Service Data within the Platform, we maintain physical, organizational and technical safeguards, which are subject to periodic changes. The specific Platform security options available to Customers depend on their Platform Plan. Customers’ use of available safeguards will impact the level of protection available for the Service Data. Communications with WEEEK through other methods such as email or phone are not subject to those protections. Third-party software and services integrated into our Service Offerings, such Google Drive, Box, Dropbox and other integrations, are handled by such third parties subject to their own privacy and security procedures, which we do not control.

We use different safeguards to help secure the other Personal Data we handle.

No security method is perfect, and we cannot guarantee that any data will remain secure.

10. Data Retention

We hold Personal Data for as long as necessary to fulfill the purposes set forth in this Privacy Policy. Information may persist in copies made for backup and business continuity purposes for additional time.

11. International Data Transfers

We are headquartered in the Russian and recipients of the data disclosures described in this Privacy Policy are located in the Russian and elsewhere in the world, including where privacy laws may not provide as much protection as those of your country of residence. Eligible Customers can arrange to have their Workspaces stored in our data center located in Europe.

12. Notification of Changes

WEEEK may change this Privacy Policy to reflect changes in the law, our data handling practices or the features of our business. The updated Privacy Policy will be posted on weeek.net.

13. Contact Information

If you have questions, requests or complaints relating to a Customer’s handling of your Service Data, please contact the relevant Customer. If you have questions regarding our practices or this Privacy Policy, or to send us requests or complaints relating to Personal Data, please contact us:

admin@weeek.net

If you have questions about the processing of personal data, you can contact the Operator using the following contact information:

sending a letter by email info@weeek.net

sending a message via https://help.weeek.net