Privacy policy & GDPR Statement

Privacy Policy

Effective Date: June 19, 2023

This Privacy Policy outlines how Oniic ("we," "us," or "our") may collect, use, disclose, and protect your personal information when you interact with our website, services, and applications. By accessing or using our services, you agree to the terms and conditions of this Privacy Policy.

1. Information We Collect:

1.1 Personal Information: We may collect personal information that you provide to us directly or indirectly when you interact with our website or use our services. This information may include your name, email address, contact details, billing information, and any other information you voluntarily provide.

1.2 Usage and Log Data: When you access or use our services, we may automatically collect information about your interactions, such as your IP address, device information, browser type, operating system, and usage patterns. This data helps us analyze trends, administer the website, track user movements, and improve our services.

1.3 Cookies and Tracking Technologies: We may use cookies, beacons, and similar technologies to enhance your experience on our website and services. These technologies help us collect information about your browsing activities, preferences, and session data. You have the option to disable cookies through your browser settings, but it may impact the functionality and user experience of our services.

2. How We Use Your Information:

2.1 Provision of Services: We use the collected information to provide, maintain, and improve our services, respond to your inquiries, fulfill your requests, and process transactions. This includes delivering relevant content, customizing your experience, and communicating with you about our services.

2.2 Analytics and Aggregated Data: We may use your information for analytical purposes, such as monitoring website usage, analyzing trends, and improving our services. Aggregated and anonymized data may be used for statistical analysis, research, and reporting without personally identifying you.

2.3 Marketing and Communications: With your consent, we may send you promotional emails, newsletters, or other communications about our products, services, and events. You can opt-out of these communications at any time by following the unsubscribe instructions provided in the email or contacting us directly.

3. Information Sharing and Disclosure:

3.1 Service Providers: We may engage third-party service providers, including Salesforce.com, to assist us in delivering our services, such as hosting, payment processing, analytics, and customer support. These providers have access to your information solely for the purpose of performing their services on our behalf and are obligated to maintain its confidentiality.

3.2 Legal Requirements: We may disclose your personal information if required by law, regulation, legal process, or governmental request. We may also disclose your information to protect our rights, property, or safety, or that of others, or to investigate fraud or security breaches.

3.3 Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity or third party involved. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4. Data Security:

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no data transmission over the internet or storage system can be guaranteed as 100% secure. Therefore, while we strive to protect your information, we cannot guarantee its absolute security.

5. Your Choices and Rights:

5.1 Access and Correction: You have the right to access and update your personal information. If you would like to review or modify any personal information we hold about you, please contact us using the information provided at the end of this Privacy Policy.

GDPR Statement

At Oniic, we are committed to protecting the privacy and rights of individuals in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This GDPR Policy Statement outlines how we handle personal data and demonstrates our commitment to data protection.

1. Lawful Basis for Processing Personal Data:

We ensure that all processing of personal data is based on a lawful basis as defined in the GDPR. This includes processing personal data with the individual's consent, when necessary for the performance of a contract, compliance with legal obligations, protection of vital interests, or legitimate interests pursued by Oniic or a third party.

2. Transparent Data Processing:

We are transparent in our data processing activities and provide individuals with clear and concise information regarding the collection, use, and retention of their personal data. We outline the purposes for processing personal data and provide information on the individual's rights, how to exercise those rights, and how to contact us.

3. Purpose Limitation:

We only collect and process personal data for specified, explicit, and legitimate purposes. Personal data is not further processed in a manner that is incompatible with these purposes. We ensure that personal data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

4. Data Minimization:

We take measures to minimize the amount of personal data we collect and store. We only retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.

5. Individual Rights:

We respect and facilitate the exercise of individual rights as outlined in the GDPR. Individuals have the right to access, rectify, erase, restrict processing, object to processing, data portability, and not be subject to automated decision-making. We provide appropriate mechanisms to respond to such requests within the legally required timeframes.

6. Data Security:

We implement appropriate technical and organizational measures to ensure the security of personal data and protect it against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures are regularly reviewed and updated to maintain the confidentiality, integrity, and availability of personal data.

7. International Data Transfers:

In the event that personal data is transferred to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect the data in accordance with the GDPR requirements. This may include the use of standard contractual clauses, binding corporate rules, or relying on the EU-US Privacy Shield framework.

8. Data Breach Notification:

In the event of a personal data breach, we have procedures in place to promptly assess the risk to individuals' rights and freedoms and, if necessary, report the breach to the relevant supervisory authority and affected individuals in accordance with GDPR requirements.

9. Compliance and Accountability:

We regularly review our data protection practices and policies to ensure ongoing compliance with the GDPR. We maintain documentation of our data processing activities, including records of data processing activities, data protection impact assessments, and other necessary documentation to demonstrate our accountability.

If you have any questions or concerns regarding our GDPR compliance or data protection practices, please contact us at info@oniic.io.

AMENDMENTS

Oniic reserves the right to change, modify, add or remove portions of this privacy policy and/or GDPR statement from time to time and in its sole discretion but will update the public that changes have been made by indicating on this page the date it was last updated.