Introduction
Integrella (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website and interact with our services. By using our website, you agree to the collection and use of information in accordance with this policy.
Scope
This Privacy Policy applies to all personal data processed by Integrella in relation to our clients, customers, partners, and any other individuals whose personal information we handle while providing consulting, development, and support services.
This policy does not include the processing of Employee and Contractor personal data.
Definitions
Personal Data: Any information relating to an identified or identifiable natural person (data subject), such as name, contact details, identification numbers, or other identifiers.
Processing: Any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organization, storage, adaptation, retrieval, disclosure, or destruction.
Controller: The organization or individual that determines the purposes and means of processing personal data.
Processor: The organization or individual that processes personal data on behalf of the controller.
Data Subject: The individual to whom the personal data relates.
Data Collection
We collect and process personal data in the following circumstances:
- When engaging with clients and customers for consulting, system integration, and application development projects.
- When providing support services
- During communications via email, phone, or other channels.
- In compliance with legal or regulatory requirements.
- When using our websites and browsing our services.
Types of Personal Data Collected
The personal data we may collect includes but is not limited to:
Client and Customer Information: Name, job title, company name, email address, phone number, physical address, and other contact details.
System Information: Data related to system configurations, usage logs, user credentials, IP addresses, and other technical details for the integration and development of applications.
Purpose of Data Collection
We process personal data for the following purposes:
Service Delivery: To provide consulting, system integration, and application development services, and to offer ongoing support to our clients.
Communication: To communicate with clients and partners regarding ongoing projects, updates, and support issues.
Legal Compliance: To comply with legal, regulatory, and contractual obligations.
Security and Monitoring: To ensure the security of systems, detect and prevent unauthorized access or misuse, and ensure the stability and performance of customer environments.
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
Contractual Necessity: Processing is necessary for the performance of a contract with the data subject or controller or to take steps prior to entering into a contract.
Legitimate Interest: Processing is necessary for our legitimate interests, such as improving services, ensuring security, or fulfilling contractual obligations to our clients.
Consent: Where applicable, we process personal data based on the consent of the data subject.
Legal Obligations: Processing is necessary for compliance with legal obligations to which we are subject.
Data Processing on Behalf of the Controller
When processing personal data on behalf of our clients (the data controllers), we act solely in accordance with their instructions as, outlined in contractual agreements
Where we believe an instruction infringes applicable data protection or privacy legislation, we will inform the relevant customer without undue delay unless prohibited from doing so by law.
Restricted Use: We will not use personal data for any purpose other than those specified by the controller.
Exclusion of Marketing Purposes: We do not use or process personal data for our own marketing or promotional purposes.
Confidentiality: Our employees and subcontractors are bound by confidentiality agreements and are trained to handle personal data in line with the controller’s requirements and data protection regulations.
Data Protection Agreements: Where applicable, we enter into Data Protection Agreements (DPAs) with controllers to ensure transparency, accountability, and compliance with data protection obligations.
Data Sharing & Marketing
We may share personal data with third parties in the following cases:
Service Providers: We may engage third-party service providers for hosting, IT support, and other services necessary to deliver our consulting, development, and support services.
Where third parties are engaged to process personal data on behalf of customers, such arrangements may be agreed with the relevant data controller through applicable Statements of Work and/or individual contractual agreements
Legal and Regulatory Requirements: We may disclose personal data if required by law, court order, or in response to regulatory requests.
Where we process personal data on behalf of customers, notifications relating to legally binding requests for disclosure may be handled in accordance with applicable legal requirements and agreements with the relevant data controller.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity.
We ensure that all third parties processing personal data on our behalf adhere to data protection principles and that adequate safeguards are in place.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations.
- Return, Transfer and Disposal of Personal Data
Where we process personal data on behalf of customers, arrangements relating to the return, transfer, retention and secure disposal of personal data are agreed with data controllers and may be documented in applicable Statements of Work and/or individual contractual agreements
Data Security
We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data. These measures include, but are not limited to:
- Access control and authentication mechanisms
- Encryption of data in transit and at rest
- Regular security audits and vulnerability assessments
- Incident response protocols
Data Subject Rights
Data subjects have the following rights regarding their personal data:
Right to Access: To request access to the personal data we hold about them.
Right to Rectification: To request correction of inaccurate or incomplete personal data.
Right to Erasure: To request the deletion of personal data, subject to certain conditions.
Right to Restrict Processing: To request restrictions on processing in certain circumstances.
Right to Data Portability: To request a copy of personal data in a structured, machine-readable format.
Right to Object: To object to processing in certain circumstances, including direct marketing.
Data subjects can exercise these rights by contacting us at dpo@localhost We will respond to requests within the timeframes specified by applicable law.
International Data Transfers / Processing
If personal data is transferred outside of the European Economic Area (EEA) or other jurisdictions with equivalent data protection laws, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other lawful mechanisms, are in place to protect the transferred data.
Personal data may be processed by our global offices located outside the European Economic Area (EEA), when accessing data through our cloud-based systems. Although no data is transferred to these offices, processing activities are conducted in compliance with data protection regulations. We ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other lawful mechanisms, are in place to protect the rights of data subjects.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. Users are advised to read the privacy policies of any third-party sites they visit.
Privacy Policy Updates
We may update this Privacy Policy from time to time to reflect changes in legal or regulatory requirements or in our data processing practices. Any updates will be communicated through appropriate channels, and the updated policy will be posted on our website.
Contact Information
For privacy-related inquiries or requests, please contact us at dpo@integrella.com
For any other communications, please contact info@integrella.com