Last updated June 20th, 2018
Crescat is committed to safeguarding the confidentiality and privacy of information entrusted to us while ensuring a best-possible experience of using our Products. This Privacy Policy (this “Policy”) explains what information Crescat AS, a Norwegian company, and its subsidiaries and other affiliates (together, “Crescat” or “we” and sometimes “us”) collect about you and why, what we may do with that information and how we handle your personal information and User Content.
This Policy is incorporated into Crescat’s Terms of Service located at crescat.no/terms (the “Terms of Service”), and applies to the information obtained by us through your use of the web pages available at www.crescat.no, www.crescat.io and all subdomains thereof (collectively, the “Site”), the Services, the Software (together, “Products”) and other Crescat products and services, as well as any future Software or Services provided by Crescat. This includes, without limitation, our applications, support, mobile applications and billing information.
As Crescat evolves, we may need to update this Policy to keep pace with changes in our Products, our business and laws applicable to us and you. We will, however, always maintain our commitment to respect your privacy. We will email you any revisions to this Policy, along with their effective date, on your last given email address. Changes will also be made available on www.crescat.no/privacy-policy. We will ask for your consent to such changes.
Please note that the continuation of your Crescat account after any change means that you agree with, and consent to be bound by, the new Policy. If you disagree with any changes in this Policy and do not wish your information to be subject to the revised Policy, you will need to close your Crescat account immediately. This can be done by emailing contact @crescat.no.
We collect very little personal information about our users, and you can opt out of most of it. A list of the “Personal Information” Crescat may collect, and why we collect it, follows:
Your name and email address - required. This lets us create your account, provides you with access to your account and if needed, support. This information also helps us communicate with you about your use of our Products, product announcements and software updates, as well as respond to your requests for assistance (including providing account verification support if you’re having difficulty accessing your account). In addition, we may use your Personal Information to send you direct marketing emails and special offers. For more information, please see the section below entitled, “Will Crescat Send Me Emails?”
Date of birth, Phone number, job title, address, picture and a small bio about yourself - optional. This lets you easily share who you are with other users so that they can contact you. This information will be shared with other users on the platform like someone you connect with trough (1) a group, (2) a venue or (3) an event. Other than this it will not be utilised by anyone.
Group-affiliations, venue-affiliations and event-affiliations - mandatory, generate on via the Product.
When you connect to groups, venues or events, we store this connection so that you can access these entities. If special privileges are given, this will be stored as well.
For paying users, your payment information required to complete a commercial transaction on the Site. We use this information to enable and fulfil your Payment.
The Crescat products and services you use. This information helps us deliver and support our Products and respond to your requests for assistance. We also collect this information to improve our understanding of how our users use our Products.
Any User Content you, or others, add to the platform. We use this information to provide the Services, make sure it is available to you when you use our Products and improve our algorithms underlying our Products. We store it as an audit log as well, with a complete overview on who changed what where for quality control and to ensure the data safety of our Users.
The Site and the Software also collect and receive information from your computer or mobile device, including the activities you perform within your account, the type of hardware and software you are using (for example, your operating system and browser type), IP-address and information obtained from cookies. When you access the Software, that application will request access to specific information on your computing device.
Finally, if you use a connected subcontractor or partner of ours, the privacy policy of this subcontractor or partner will apply to the information you provide to them. This goes for documents using UploadCare and messaging using CBox.ws.
Crescat uses cookies to keep track of your sessions and log-in onto the Products and preferences and profile information. Cookies are also used to collect general usage and volume statistical information that does not include personal information.
From time to time, we may want to contact you with information about product announcements, software updates and special offers. We also may wish to contact you with information about products and services from our business partners. We consider your acceptance of this Policy as your acceptance of our offer to send you these emails. You may opt-out of such communications at any time by clicking the “unsubscribe” link found within Crescat email updates and changing your contact preferences. You will continue to receive essential account-related information, even if you unsubscribe from promotional emails.
Crescat does not knowingly collect personal information from children under the age of 16. If you are under the age of 16, please do not submit any personal information through the Site, Service or Software. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Site, Service or Software without their permission.
Crescat is not in the business of selling or renting user information, and we only disclose information when:
We have your explicit consent to share the information. We need to share your information with affiliated and unaffiliated service providers to fulfill your product or service requests.
We believe it is necessary to investigate potential violations of the Terms of Service, to enforce those Terms of Service or where we believe it is necessary to investigate, prevent or take action regarding suspected illegal activities.
We need to do so in connection with the sale or reorganization of all or part of our business, as permitted by applicable law.
Some third-party applications and services that work with our Products may ask for permission to access your User Content or other information about your account. Those applications will provide you with notice and request your consent in order to obtain such access or information. Please consider your selection of such applications and services, and your permissions, carefully.
We do not share your information with third parties for the purpose of enabling them to deliver their advertisements to you.
As a rule, Crescat employees do not monitor or view your Personal Information or User Content stored in or transferred through our Products, but it may be viewed if we believe the Terms of Service have been violated and confirmation is required, if we need to do so in order to respond to your requests for user support, if we otherwise determine that we have an obligation to review it as described in the Terms of Service, or to improve our algorithms and Products.
No, except as otherwise described in this Policy.
When you use our Products, User Content you transmit will be stored on the servers our Server Provider Digital Ocean in the EU. When you use the Software on your computing device, User Content you save will be stored locally on that device and sync with our servers.
Please be aware that Personal Information and User Content submitted to Crescat will be transferred to a data centre in the EU under GDPR regulations. If you post or transfer any information to or through our Products, you are confirming your consent to such information, including Personal Information and User Content, being hosted and accessed in the EU.
Data privacy laws or regulations in your home country may differ from those in the EU, but Crescat complies with the applicable law regarding the collection, use and retention of Personal Information collected from all our users, hereunder the GDPR.
Crescat is committed to protecting the security of your information and takes reasonable precautions to protect it. However, Internet data transmissions, whether wired or wireless, cannot be guaranteed to be 100% secure, and as a result, we cannot ensure the security of information you transmit to us, including Personal Information and User Content; accordingly, you acknowledge that you do so at your own risk.
Once we receive your data, we protect it on our servers using a combination of security safeguards. We use industry-standard encryption to protect your data in transit, commonly referred to as secure socket layer (“SSL”) technology. The security of the information stored locally in any of our Products installed or used on your computing device(s) requires that you make use of the security features of your device(s). We recommend that you take the appropriate steps to secure all computing devices that you use with our applications and service.
If Crescat learns of a security system breach, we may attempt to notify you and provide information on protective steps, if available, through the email address that you have provided to us or by posting a notice on the Site. Depending on where you live, you may have a legal right to receive such notices in writing. All dealings with breaches will go through the Chief Data Privacy Officer (CDPO) of Crescat - Matteo. He can be found at contact @crescat.no.
Crescat utilizes the services of other companies in the work we do, both to deliver the Products, but also for other parts of our business, as following up on customer requests, billing and such. Personal Information on Users will never be shared with third-parties unless otherwise agreed upon with the User, or is in the nature of the service (e.g. sharing account information with the payment service or emails with the newsletter-distributor). If files are ever sent outside the EU area, services are certified according to GDPR regulations.
We use the following subcontractors
You can stop using our Products at any time. Residual copies of your Personal Information and deleted User Content may continue to exist on Crescat’s back-up and archiving systems for up to one year due to the nature of those systems’ operations.
If Crescat closes your account due to your violation of the Terms of Service, then you may contact Crescat to request deletion of your data, and Crescat will evaluate such requests on a case by case basis, pursuant to our legal obligations.
You may contact us with any questions relating to this Privacy Policy by submitting a help request to contact@crescat.no or by postal mail at:
Crescat AS,