⏲ TL;DR
(go read the whole thing though, this is just a high-level
summary) We don't sell your personal data to anyone, no
matter what. Not now, not ever. Unless we're
required to do so by law, we will never share or disclose your
personal data with third parties without your consent. The
Personal Data we may collect from you and process is your name, your
email address, your city of residence, your lifestyle habits, your
usage data regarding our Sites and Services, and your browser and
device data (cookies). You have the right to ask us
whether we process your Personal Data, and if so, request a copy; to
request that we rectify or update your Personal Data; to request
that we erase your Personal Data; to request that we restrict the
use of your Personal Data; and to request that we export your
Personal Data to another company.
Before starting, let's get one thing out of the way: we
don't just comply with regulation; we actually, truly care
about your privacy. That's why we've written our Privacy
Policy in a way that a regular human being can understand—not
everyone speaks that legal lingo. So, without further ado...
Cosora Tech SL and its affiliates (collectively
"Cosora" ,
"we" , and
"us" ) offer services that enable people
to understand and offset their carbon footprint and improve their
environmental impact. This
Global Privacy Policy describes the type of
Personal Data we collect through our web app
("Services" ) and via our online presence,
which includes our main
website and social media
channels (collectively, our
"Sites" ). This Policy also
describes how we use Personal Data, with whom we share it, your
rights and choices, and how you can contact us about our privacy
practices. This policy doesn't apply to third-party websites,
products, or services, even if they link to our Services or Sites,
and you should consider the privacy practices of those third-parties
carefully. We've broken down our Privacy Policy into
different sections to make navigation easy. You can access each
section by click on the dropdown arrows below:
🤝 Personal Data We Collect
Cosora obtains Personal Data about you from various sources to
provide our Services and to manage our Sites.
“You” may be a visitor to one of our websites,
or a user of one or more of our Services (“User”
or “Cosora User” ). The Personal
Data we collect from you and the process is:
👋 Your name: So that we can call you by
your name.
📧 Your email address: So that we can send
you updates on your o, sign you up to our waitlist, reset
your credentials, or verify specific actions taken by you.
🌐 Your city of residence: So that we can
estimate your carbon footprint more accurately, mainly
because different regions have different electricity mixes
that directly influence your impact.
🌿 Your lifestyle habits: So that we can
estimate your carbon footprint more accurately. This
includes actions and facts regarding your mobility, travel,
utilities, household, spending, and diet.
🖱️ Your usage data regarding our Services and Sites: So that we can identify which parts of the experience in
our Services and Sites could use some improvement, and make
them better for you.
💻 Your browser and device data, such as IP
address, device type, operating system and Internet browser
type, screen resolution, operating system name and version,
device manufacturer and model, language, plug-ins, add-ons
and the language version of the Sites you are visiting, so
that we can tailor your experience when you use our Services
and Sites. Read more here.
We will collect data from you if you:
Contact us via post, email, or telephone, and provide any
Personal Data.
Place an order for Services on our web app.
Are prompted to share any Personal Data when using our web
app and provide such data.
Complete an online contact form in any of our Sites.
Provide your contact details to us when registering to use
our app.
Visit or browse our Sites in accordance with our Cookie
Policy.
🛠️ How We Use Personal Data
We take your privacy extremely seriously and we're
committed to never sell your data to anyone, under any
circumstance, no matter what. In addition, we will never
disclose or share your data with any third party without your
consent, unless required to do so by law. We only retain your
data for as long as is necessary and for the purposes
specified in this notice. We may contact you by
email to keep you informed about our Services through a
newsletter and after placing an order as part of our
contractual service. Processing for any purpose other than
those specified in this policy is only done with your consent,
which you are free to withdraw at any time. The
purposes and reasons for collecting, storing, and processing
your personal data are detailed below:
To provide you with our Services in the performance of a
contract
To give you updates about our Services
To answer your queries
To meet our legal obligation for business accounting and tax
purposes
To contact you for feedback on your use of our Services or
Sites
To send important notices, such as changes to our terms,
conditions and policies.
To complete payment transactions
💬 How We Disclose Personal Data
We don't share or disclose any of your Personal Data
without your consent, other than for the purposes specified in
this notice, where there is a legal requirement or to enforce
our terms and conditions. We utilise the below
processors/controllers who act on our behalf to provide the
below business functions and services. They act in accordance
with instructions from us and comply fully with this and their
own privacy notice, the data protection laws and any other
appropriate confidentiality and security measures. The
third-party processors/controllers that we work with are:
Stripe Payments Europe Ltd 1 Grand
Canal Street Lower
Grand Canal Dock
Dublin
Ireland
stripe.com/privacy Stripe helps us process any payments you make when using
our Services.
The Rocket Science Group LLC 675
Ponce de Leon Avenue Northeast
Suite 5000 Atlanta
GA
30308, U.S.A
mailchimp.com/legal/privacy/ Mailchimp helps us manage our newsletters and
communications.
🔐 Your Rights and Choices
You have choices regarding our use and disclosure of your
Personal Data: 1️⃣
Opting out of receiving electronic communications from
us.
If you no longer want to receive marketing-related emails from
us, you may opt-out via the unsubscribe link included in such
emails. We will try to comply with your request(s) as soon as
possible. Please note that if you opt out of receiving
marketing-related emails from us, we may still send you
important administrative messages that are required to provide
you with our Services. 2️⃣
How you can see or change your account Personal Data. If you would like to review, correct, or update Personal Data
that you have previously disclosed to us, you may do so by
signing in to your Cosora account or by
contacting us . 3️⃣
Your data protection rights. Depending on
your location and subject to applicable law, you may have the
following rights with regard to the Personal Data we control
about you:
The right to
request confirmation of whether Cosora processes Personal
Data relating to you , and if so, to request a copy of that
Personal Data;
The right to
request that Cosora rectifies or updates your Personal
Data that is inaccurate, incomplete or outdated;
The right to
request that Cosora erase your Personal Data in certain circumstances provided by law;
The right to
request that Cosora restrict the use of your Personal
Data in certain circumstances, such as while Cosora considers
another request that you have submitted (including a request
that Cosora make an update to your Personal Data); and
The right to
request that we export to another company ,
where technically feasible,
your Personal Data that we hold in order to
provide Services to you.
Where the processing of your Personal Data is based on
your previously given consent, you have the right to withdraw
your consent at any time. You may also have the right to
object to the processing of your Personal Data on grounds
relating to your particular situation. 4️⃣
Process for exercising data protection rights. In order to exercise your data
protection rights, you may contact Cosora as described in the
Contact Us section below. We take each
request seriously. We will comply with your request to the
extent required by applicable law. We will not be able to
respond to a request if we no longer hold your Personal Data.
If you feel that you have not received a satisfactory response
from us, you may consult with the data protection authority in
your country. For your protection, we may need to
verify your identity before responding to your request, such
as verifying that the email address from which you send the
request matches your email address that we have on file. If we
no longer need to process Personal Data about you in order to
provide our Services or our Sites, we will not maintain,
acquire or process additional information in order to identify
you for the purpose of responding to your request.
⚙️ Security and Retention
We take every reasonable measure and precaution to protect and
secure your personal data. We work hard to protect you and
your information from unauthorised access, alteration,
disclosure or destruction and have several layers of security
measures in place. To protect your data, we use the
following systems:
Laptop and desktop anti-malware: Kaspersky,
Full licence
Cloud-hosted email spam, malware and content filtering: Google Suite
Email archiving and continuity: Google
Suite
Cloud based solutions for protecting passwords, account
data:
AWS Cognito
🌐 International Data Transfers
We may transfer and store the data we collect from you
somewhere outside the European Economic Area (‘EEA’). People
who work for us or our suppliers outside the EEA might also
process your data. We may share data with organisations and
countries that:
The European Commission say have adequate data protection.
We've agreed standard data protection clauses with.
We do not collect any information from anyone under 13 years
of age, and we request that they not provide Personal Data
through the Services. Our Sites and Services are all directed
to people who are at least 13 years old or older.
📰 Updates to this Privacy Policy
We may change this Privacy Policy from time to time to reflect
new services, changes in our Personal Data practices or
relevant laws. The “Last updated” legend at the top
of this Privacy Policy indicates when this Privacy Policy was
last revised. Any changes are effective when we post the
revised Privacy Policy on the Services. We may
provide you with disclosures and alerts regarding the Privacy
Policy or Personal Data collected by posting them on our
website and by contacting you through your Cosora app and/or
email address.
➰ Links to Other Websites
The Services may provide the ability to connect to other
websites. These websites may operate independently from us and
may have their own privacy notices or policies, which we
strongly suggest you review. If any linked website is not
owned or controlled by us, we are not responsible for its
content, any use of the website or the privacy practices of
the operator of the website.
Read our
Cookie Policy for more
info on what cookies are and how we use them.
If you have any questions or complaints about this Privacy
Policy, please
contact us
electronically or send physical mail to:
Cosora Tech SL Can Pere Riera, S/N 08402,
Granollers Barcelona, Spain