Privacy & Data Protection Policy

Who We Are

Project Open Business Solutions, S.L. (also referred to as ]project-open[, ]po[, "we" or "us") produces project management software and provides services related to this software. We are incorporated as limited company under Spanish law in Barcelona, Spain.

About This Policy

This Policy describes the information we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us. If you see a capitalized word, it’s defined in our General Terms and Conditions or in the GDPR .

A separate Cookie Policy describes our use of cookies and similar technologies.

By using the Services offered by ]project-open[, you acknowledge that you have agreed to our General Terms and Conditions and that you have read and understood this Privacy Policy and our Cookie Policy.

Responsible Manager

Frank Bergmann
C/Aprestadora 19, 12o 2a
08902 Barcelona, Spain
frank.bergmann@project-open.com

What We Collect and Receive

In order for you to create an account on ]project-open[ and use our Services, we need to collect and process certain information. Depending on your use of the Services, that may include:

Information you provide by completing forms on ]project-open[ — your name, email and postal addresses, telephone number, country of residence, login, and password details. We may ask for this information if you register as a user of the Services, subscribe to our newsletters, report bugs and issues, upload or submit content, or if you contact us;
Details of any requests or transactions you make through the Services. ]project-open[ partners with other companies (such as PayPal) for payment processing, and the payment information you submit is collected and used by them in accordance with their privacy policies. ]project-open[ doesn’t store your payment information apart from the last four digits of your credit card or bank account (as applicable), expiration date, and country, which we require for tax, government regulatory, and security purposes;
Information about your activity on and interaction with ]project-open[, including use of our mobile apps (such as your IP address, the type of device or browser you use, and your actions on the Site);
Information about your ]project-open[ product if you choose to use our ASUS Automatic Software Update Service, including your product version, the version of the product infrastructure (operating system and database);
Information about the ways people visit and interact with our Site, in the form of traffic analytics. You can opt out of being included in Google Analytics here. For more information about our use of data analytics to protect and improve our Services, see our Cookie Policy;
Communications you send to us (for example, when you ask for support, send us questions or comments, or report a problem); and
Information that you submit on or to ]project-open[ in the form of comments, contributions to discussions, or messages to other users.

You may decline to provide us with your information. However, this will limit your ability to register for an account or use our Services. You may review, change or remove your information through the "My Settings" tab after you log in to our https://www.project-open.net server.

How We Use This Information

We use the information we collect for the following purposes:

To keep your account secure and protect our Services (including to verify the identities of creators and prevent fraud and abuse);
To enable us to provide you with our Services, and to improve and promote our Services;
To create and administer your account, contact you, and customize your experience on ]project-open[ (for example, to show you information that we think may interest you based on your previous transactions); and
To track and analyze use of the Services so that we can improve how ]project-open[ is performing and provide users with the best experience possible.

Lawful Basis

Data protection law in Europe requires a “lawful basis” for collecting and retaining personal information from citizens or residents of the European Economic Area. Our lawful bases include:

Performing the contract we have with you: In certain circumstances, we need your personal data to comply with our contractual obligation to deliver the Services.
Legal compliance: Sometimes the law says we need to collect and use your data. For example, tax laws require us to retain records of payments made through our Services.
Legitimate interests: This is a technical term in data protection law which essentially means we have a good and fair reason to use your data and we do so in ways which do not hurt your interests and rights. We sometimes require your data to pursue our legitimate interests in a way that might reasonably be expected as part of running our business and that does not materially impact your rights, freedom or interests.

For example, we use identity, device, and location information to prevent fraud and abuse and to keep the Services secure. We may also send you promotional communications about our Services, subject to your right to control whether we do so.

We collect the information about the version of your ]project-open[ installation and compare them with our database of security issues in order to provide you with security warnings.

We analyze how users interact with our Site so we can understand better what elements of the design are working well and which are not working so well. This allows us to improve and develop the quality of the online experience we offer all our users.

How This Information Is Shared

Information that is shared publicly

When posting comments or messages, your first- and last name are shown publicly on our Web site publicly.

Information that isn’t shared at all

The following data will not be publicly displayed or revealed to other users:

Any payment information you provide;
Your password details;
Your IP address;
Your phone number;
Communications you send to us (for example, when you ask for support, send us questions or comments, or report a problem).

Information that is shared with trusted third-party services

We may share your information with certain trusted third-party services to help us provide, improve, promote, or protect ]project-open[ Services (like when we partner with payment processors, or use services that help us manage ads for you on our sites). When we share data with third-party services that support our delivery of ]project-open[ Services, we require that they use your information only for the purposes we’ve authorized, and that they protect your personal information at least to the same standards we do. We may also share information that is aggregated and anonymized in a way that it doesn’t directly identify you.

Information that is shared to protect ]project-open[ and comply with the law

We do reserve the right to disclose personal information when we believe that doing so is reasonably necessary to comply with the law or law enforcement, to prevent fraud or abuse, or to protect ]project-open[ legal rights, property, or the safety of ]project-open[, its employees, users, or others.

Links to other websites and services

Our Site may include links to other websites or services whose privacy practices may differ from ours. When you use a link to an external site or service, the privacy policy and data processing disclosures for that site or service governs.

Retention

We will retain your information as long as your account is active, as necessary to provide you with the Services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect ]project-open[ legal rights.

We also collect and maintain aggregated, anonymized or pseudonymized information which we may retain indefinitely to protect the safety and security of our Site, improve our Services or comply with legal obligations.

Data Transfers

]project-open[ is a European entity and all data processing is based in Europe, unless explicitly stated otherwise.

Your Rights

You have the right to access, correct, and request deletion of your personal information. You can manage your personal information in the "My Settings" tab on our services as further described below.

You can request a downloadable copy of your personal data from ]project-open[ from your "My Settings" page. To modify or delete the personal information you’ve provided to us, please log in and update your profile. You may also delete your account from your account settings page. We may retain certain information as required by law or as necessary for our legitimate business purposes.

Email and Mobile Notifications

We want to communicate with you only if you want to hear from us. We try to keep emails to a minimum and give you the ability to opt in to any marketing communications we send.

We will send you email relating to your transactions on ]project-open[ with notification preferences available in "My Settings".

Security

We take security seriously, and the security of your personal data is important to us. We follow industry-standard practices to protect the data we collect and maintain. No method of transmission over the internet or electronic storage is completely secure, so ]po[ cannot guarantee its absolute security. Your account information is protected by a password, which you should choose carefully and keep secure.

We have a Security Incident Response Team (SIRT) and protocol in place in the event of a data breach. We encourage the responsible disclosure of vulnerabilities of our Services by emailing support@project-open.com with the keyword "Security" in the subject, and we will invite valid disclosures to our bug bounty program.

Data Protection Officer

Frank Bergmann is our Data Protection Officer. Please email to support@project-open.com with the keyword "Data Protection" in the subject in order to reach Frank.

You can contact us in writing at:

DPO (Frank Bergmann)
Project Open Business Solutions, S.L.
C/Aprestadora 19, 12o 2a
E-08902 Barcelona, Spain

Data Protection Authority

Subject to applicable law, you also have the right to (i) object to the ]project-open[ use of your personal information and (ii) lodge a complaint with your local data protection authority or the Spanish AEPD (Agencia Española de Protección de Datos), which is the lead supervisory authority in the European Union for ]project-open[.

Agencia Española de Protección de Datos
C/Jorge Juan, 6
28011 Madrid, Spain
Telephone: +34 91 266 3517
Web: http://www.agpd.es