Privacy Policy

At DC SPORT SOFT LTD we understand that your privacy is important to you and that you care about how your personal data is used. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the applicable local legislation, the data protection legislation and the privacy and electronic communications (ec directive) regulations 2003 and the- eu regulation no. 2016/679 the general data protection regulation (collectively GDPR).

This privacy notice sets out the basis on which we may collect, use or otherwise process personal data via our website www.croplink.net (hereafter Website), downloadable software, mobile applications, desktop applications, content, features, function and/or via any other services provided by us and on which a link to this privacy notice is displayed, and/or all other communication with you through written or oral means, such as email, chat or phone (collectively the Services) when you use our services and the choices you have associated with that personal data.

Please note that this privacy notice is addressed to our prospective, current and former

clients. If you are, were or may be an employee or third party contractor your personal information will be used in connection with your agreement in accordance with a separate privacy policy.

We use your personal data to provide and improve our services. Your acceptance of this privacy notice is deemed to occur upon your first use of our website and any of the service.

Data collections and processing

We collect, process, store and transfer different kinds of personal data about you for various purposes in order to be able to provide and improve our Service to you. Depending upon your use of the Service we may collect some or all the personal data set out below as follows. Please also see the Cookies Section for more information about our use of Cookies and similar technologies.

• Identity Data
  Includes first name, last name, and patronymic (if available), date of birth gender, passport, ID, Driver’s number, and copy of photo.
• Contact Data
  Includes billing address, email address and telephone numbers.
• Financial Data
  Includes bank account and payment card details
• Technical Data
  Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in type and versions, operating system and platform, and other technologies on the devices you use to access the Website and use of cookies stored on your device.
• Usage Data Includes information about how you use the Website, products and Services and IP history.
• Data in KYC (Know your customer)
  Includes identity document information, including copies of recently dated Utility Bills, Identity Card, Passport, and/or Driver’s License, Tax Identification Numbers (TIN).
• Location Data
  Includes details on your actual location when interacting with our Website (for example, a set of parameters that determine regional settings of your interface, namely residency country, time zone, and the interface language)
• Marketing and Communications Data
  Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Audio Data
  Includes full voice recordings of calls that you receive from us or make to us.
• Aggregated Data
  Includes statistical or demographic data for any purpose. Such data can be derived from your data but may not be considered personal data in law as it will not directly or indirectly reveal your identity. An example of such Aggregated Data could be that we aggregate your Usage Data to calculate the percentage of users accessing a specific website feature and/or services/product preference. Notwithstanding the above, if the Company combines Aggregate Data with data in a way that the end result can in any way identify the data subject, the Company shall treat such combined data as data which will be treated as per the provisions herein contained.

Our Website is not intended for children and we do not knowingly collect data relating to children. As we do not allow users under the age of 18 to use our services, we may need to obtain your birth date in order to confirm the Clients’ age checks.

Personal Data

Processing of your personal data is carried out by DC SPORT SOFT LTD following the principles of lawfulness, fairness, transparency and always adhering to the intended purpose of data processing, the principle of data minimization, accuracy, limited data storage, data integrity, confidentiality and accountability. DC SPORT SOFT LTD may process your personal data for any of the following reasons:

• To perform its contract with you,
• To perform compliance checks, such as verification of your identity, and helping to detect fraudulent or malicious activity on our website or services,
• To maintain our accounts and records,
• To manage our business needs, such as monitoring, analysing, and improving the services and the Website’s performance and functionality
• To comply with all applicable laws and regulations; and/or
• For the purposes of safeguarding our legitimate interests and your interests and fundamental rights do not override those interests.

Clipboard Data Processing

As part of the Services provided by DC SPORT SOFT LTD, certain data may be automatically copied to your device’s clipboard to facilitate the use of our applications and features. This may include, but is not limited to, URLs, QR codes, and text data related to the operation of our Services.

By agreeing to our Privacy Policy and Terms of Use, you consent to the automatic copying of this data to your clipboard. This functionality is designed to improve your experience and efficiency when using our Services. We do not collect, store, or transmit any data copied to your clipboard beyond the immediate function for which it was intended.

Should you choose to withdraw your consent to this practice, please discontinue use of our Services.

Data retention

We will not keep your personal data for any longer than is necessary considering the reason(s) for which it was first collected in accordance with this Privacy Notice. To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting and other requirements.

To comply with the applicable legal, regulatory, tax, accounting requirements we keep your

personal data for a minimum period of 5 years from the date our business relationship is terminated. We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate business purposes, such as to respond to queries or complaints, fighting fraud and financial crime and responding to requests from regulators.

At the expiration of the personal data retention period the personal data is erased by irreversible destruction and we also inform all third parties, to whom the personal data was transferred, regarding such erasure and request implementation of similar actions on their part.

Data security

We protect your data by adhering to industry standard regulations on data protection by

categorizing them into data types (e.g. technical, personal data, cookie data, etc) while applying relevant protection processes and due diligence procedures. Therefore, we apply appropriate technical and organizational controls to protect your data, including secure computer systems adopting least privilege access in order to prevent unauthorized access, disclosure, modification, or destruction of personal data. Any hard copy documents are locked in a secure cabinet, and destroyed once no longer required.

Encryption of your data in transit. Encryption provides a high level of security and privacy for your personal data. When personal data is provided when using our Services, we use strong encryption technologies to protect the personal data during transmission from your devices to our servers.

For providing more trust and security we use digital EV (Extended Validation) Certificates issued by trusted Certificate Authorities such as the Internet Security Research Group (ISRG). You can see the ‘Green Bar’ in the supported browser versions which confirms that all transmitted personal data is secure.

Protection of your personal data in our infrastructure. We make it a priority to develop Services that are secure “by default”. The “default” security of our Services means that every new services and features are designed with strict security requirements in mind before we even begin development. This is the key to guaranteed protection and privacy of all personal data that our Services handle and store, once the service or new feature is released.

To secure personal data, we use the pseudonymisation which allows most of our Services to operate without using your actual data. Instead of that, our services use a system ID that can’t be traced back to identify you.

DC SPORT SOFT LTD is always vigilant about the Security of the personal data stored in our infrastructure. Because of that we locate all our equipment used for your personal data processing in secure personal data centers. Network access to this equipment is isolated from the Internet. We use network segmentation for isolation of Services which need different levels of security from each other. In addition, we restrict logical access to the personal data for our employees on a “need to know” basis. So, only personnel, who really require access to the personal data for the purpose of providing you with our best Service, will have access to it.

Threats protection. DC SPORT SOFT LTD is highly knowledgeable about modern threats to personal data security and privacy, and we are well prepared to combat them. All events that occur in our infrastructure are continuously monitored, analyzed and responded, which allows us to ensure proper protection of your personal data, keeping it safe from threats, vulnerabilities, and the effects of malware.

In the event of a failure that affects the accessibility of your personal data, we have personal data backup and recovery procedures in place that will help us to restore your personal data in a short time. For further guarantee the quick recovery we use high availability mode enabled for most critical databases which allows us to minimize downtime.

Employee awareness of data security.Our employees may handle your personal data in order to provide you with the first-class Service. To guarantee the security and confidentiality of your personal data, we monitor all employees’ actions with access to your personal data in our systems and grant access strictly on a “need to know” basis: only employees who need access will receive it. We hold regular training sessions to make sure that each  employee understands the principles that DC SPORT SOFT LTD follows to achieve robust data security and privacy.

If you choose not to give your personal information. In the context of our business relationship we may need to collect data by law, or under the terms of a contract we have with you. Without this data, we are, in principle, not in a position to close or execute a contract with you. If you choose not to give us this data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform the Services.

To what extent we carry automated decision-making and profiling.
In establishing and carrying out a business relationship, we generally do not use automated decision-making. If we use this procedure in individual cases, we will inform you of this separately. In some cases, we may proceed with profiling in order to evaluate certain personal aspects. We shall inform you accordingly in case we perform any profiling. In general, any data collection that is optional would be made clear at the point of collection.

Data collections

We use different methods to collect data from and about you including through:

Direct Interactions. You will provide to us your Identity, Contact and Financial Data online through the Website and/or by completing and filling online forms and/or by corresponding with us by emails or otherwise.

We require to collect the above data in order to that we are able to (i) provide our services efficiently, (ii) to comply with our ongoing legal and regulatory obligations, including, inter alia, (a) to prevent fraud and money laundering acts and/or (b) conduct the assessment of suitability and appropriateness test.

If you fail to provide the data when requested we may not be able to perform the contract we have or trying to enter into with you (for example, to provide you with our Services). In this case, we may have to cancel a Service you have with us but we will notify you if this is the case at the time.

It is important that the data we hold about you is accurate and current. Please keep us informed if your data changes during your relationship with us.

Automated Technologies or Interactions. When using our services, your device automatically transmits to us its technical characteristics. Locale (a set of parameters that determine regional settings of your interface, namely, residence country, time zone and the interface language) is used for the purpose of providing you with the best possible service within our platform.

Using the information about IP address, cookies files, information about browser and operating system used, the date and time of access to the site, and the requested pages addresses allows us to provide you with the optimal operation on our web application, mobile and/or desktop versions of our application and monitor your behaviour for the purpose of improving the efficiency and usability of our Services.

We use web analytics tools to track performance of our website and marketing source of users by cookies in order to optimize our marketing costs and provide users with better experience.

You may at any time request that we refrain from any such transmissions (to the degree this is possible and subject to any of our legal obligations) by sending your request to the DPO using our details in the OUR CONTACT DETAILS below using the registered email address you disclosed and registered with us. We will address your request within 30 business days.