Kanbanoo Data Privacy Policy
The Kanban add-on for M-Files

Data Privacy Policy


Last updated: 29.04.2024
We comply with the European General Data Protection Regulation (GDPR) as a controller of personal data and are committed to protecting and respecting your privacy. These privacy notices and statements describe what personal data we collect from you when you interact with us and how we use that data in each instance.

I. Name and contact information


The controller and data protection officer
(hereafter "we") according to the General Data Protection Regulation (GDPR) is:

Dr. Martin Lisowski
Spillbrunnenweg 28
21337 Lüneburg
Germany


E-Mail: martin.lisowski@kanbanoo.com
Website: www.kanbanoo.com

II. General remarks about data processing


Description and scope of data processing


The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes mentioned below and on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services and only if you provide data voluntarily.

III. Serving of the website and recording of log files


Description and scope of data collected


This website is hosted on servers of our hosting provider
who acts as data processor and is listed in the chapter List of Data Processors. The data center is located in Germany.
The server collects data and information about the computer used by the user automatically and with every visit on our website.
The following data are collected:
  1. Information regarding the type and version of internet browser used to access the website
  2. Operating system and screen size
  3. IP address
  4. Date and time of each access
  5. The web page accessed on our website
  6. Web page from which the user was redirected to our page

This data is also recorded in log files on our server. A merger of data with other personal data sources or disclosure to third parties other than our hosting provider is precluded.

Legal basis


Legal basis for the temporary storage of data and log files is Article 6 (1) lett. f GDPR.

Purpose


The collection of the data is necessary for the technical delivery of the web content.
The recording of log files is needed to ensure availability of the web site and to detect fault conditions like missing files or links. The data is also used to improve the web site and for security reasons to ensure the stability and integrity of our systems.

Storage period


The data mentioned above are saved for a maximum time period of 1 year.

Right of revocation and right of deletion


The collection and recording of the above data is necessary to serve the web site to the user therefore a revocation or deletion is not possible.

IV. Usage of Cookies


Description and scope of data collected


Cookies are small pieces of information that are stored by the browser on the device that users use to browse websites. Before storing cookies on your device this website will show a popup window that lets you chose to accept or decline the storage of cookies. If you accept the website will generate and store cookies on your device with the following information:
  1. A randomly generated user ID
  2. A randomly generated session ID
  3. Your decision about accepting or declining cookies
If you decline the use of cookies by selecting "Decline" in the cookie popup window, the user and session ID will not be stored on your device and the information about you declining will be stored in SessionStorage for the duration of your visit and then automatically deleted by your browser. If you have turned on the Do Not Track setting in your browser the website will automatically refrain grom storing cookies and in that case no popup window will be shown.
Please note that due to technical reasons this information is dealt with on a per device and per browser basis.

Legal basis


Legal basis for storing cookies is Article 6 (1) lett. a GDPR.

Purpose


The collection of the above data is used to optimize this website's layout and structure to improve its performance and the user experience.

Storage period


The user and session ID cookies will expire within one year. The "cookie declining" cookie will be stored
for the duration of your visit and then automatically deleted by your browser.

Right of revocation and right of deletion


You have the possibility to revoke your agreement to process your personal data or to exercise their right of correction or deletion at any time by sending an email detailing your request to the email address listed in
chapter I of this policy.
You may also delete the cookies yourself from your device using your browser's integrated cookie management function (typically found in the "settings" menu under "data privacy" or similar section): to selectively delete cookies from this website search for our domain name "kanbanoo.com" and delete those cookies.

V. Newsletter


Description and scope of data collected


The website offers the possibility to subscribe to an email newsletter. When you subscribe the following data are collected and recorded:
  1. Email address
  2. Agreement to this privacy policy
  3. The date and time of your sign-up, confirmation and unsubscribe actions

We use your email address only to manage and send the newsletter using software hosted on our hosting provider's server in Germany, listed in
List of Data Processors.
The email address which you provided will not be made available to third parties.

Legal basis


Legal basis for sending you a newsletter is Article 6 (1) lett. a GDPR.

Purpose


The collection of the data is required to send the newsletter and manage the list of subscribers.

Storage period


The data will be deleted when you unsubscribe from the newsletter.

Right of revocation and right of deletion


Each newsletter contains a reference on how to unsubscribe from the newsletter. The unsubscribe process implements the revocation and deletion of the data as far as the newsletter is concerned.

VI. Contact form and contact by email


Description and scope of data collected


If you fill out a contact form, send us an email or another form of electronic message, the following data are collected and recorded:
  1. The name of the user
  2. Email address
  3. Company
  4. Job title
  5. Date and time of the submission

In addition to this, every submission of the contact form will also lead to collection and recording of the data described in
chapter III of this policy.
If you contact us by email we will collect and record the personal data transmitted by email.
The data which you provided will be stored on the servers of our hosting provider listed in
List of Data Processors. The data center is located in Germany.

Legal basis


Legal basis for the processing of your inquiry is Article 6 (1) lett. a or b or f GDPR.

Purpose


The data will be used to process your inquiry and possible further questions you might have and for marketing purposes if you express interest in our products or services.

Storage period


We will delete your personal data 30 days after completing your inquiry if you do not express interest in our products or services or 1 year after the last contact if you did express interest.

Right of revocation and right of deletion


You have the possibility to revoke your agreement to process your personal data or to exercise your right of correction or deletion at any time by sending an email detailing your request to the email address listed in
chapter I of this policy.

VII. Web site analytics


Description and scope of data collected


We use the software Matomo to analyze web site traffic. Matomo is an open source web analytics platform and is hosted on our hosting provider's web server in Germany. A web analytics platform is used by a website owner to measure, collect, analyse and report visitors data for purposes of understanding and optimizing their website. Matomo is processing the following personal data:
  1. Type and version of internet browser used to access the website
  2. Date and time of each access
  3. User's operating system and version
  4. IP address
  5. Type of device, device brand and screen resolution
  6. Location and URL of user clicks

The data will be stored on the servers of our hosting provider listed in
List of Data Processors. The data center is located in Germany.
Matomo may also generate cookies as described in
chapter IV of this policy.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services/features and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the
Microsoft Privacy Statement.

We partner with LinkedIn to capture how users who come to our website from LinkedIn interact with our website. The data captured includes the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. LinkedIn does not share the personal data of its members with us - they only provide reports and alerts (which do not identify members) about our website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling us to show personalized ads by using this data, but without identifying the member. LinkedIn members can control the use of their personal data for advertising purposes through their
LinkedIn account settings.

Legal basis


Legal basis is Article 6 (1) lett. a and f GDPR.

Purpose


The collection of analytics is used to determine the popularity of products/services/features and optimize this website's layout and structure to improve its performance and the user experience, detect fault conditions like missing files or links and security issues, and optimize ads that we may run on third-party websites to attrackt visitors to our website.

Storage period


The data mentioned above are saved for a maximum time period of 1 year.

Right of revocation and right of deletion


You have the possibility to revoke your agreement to process your personal data or to exercise your right of correction or deletion at any time by sending an email detailing your request to the email address listed in
chapter I of this policy.

VIII. Product Feedback


Description and scope of data collected


The product includes a feedback submission form that allows end users to share their satisfaction with the software and optionally send a text message to us - for example to ask a question, point out issues, suggest improvements or request features. The submitted data is saved in a data base that is hosted on our hosting provider's server in Germany. We are processing the following personal data:
  1. Your feedback satisfaction rating (numeric)
  2. Date and time of each access
  3. Version of the Kanbanoo software
  4. IP address
  5. Your M-Files User ID and the Vault GUID
  6. Optionally, a message text you may enter in the message box
  7. Optionally, an email address you may enter in the respective field

The data will be stored on the servers of our hosting provider listed in
List of Data Processors. The data center is located in Germany. If you submitted an email address with our feedback we may reply to you via email to ask for additional information or answer your question. Please note that we cannot contact you unless you provide that email address.

Legal basis


Legal basis is Article 6 (1) lett. a and f GDPR.

Purpose


The collection of feedback and analytics is used to identify problems and improve the product and the user experience.

Storage period


The data mentioned above are saved for a maximum time period of 1 year.

Right of revocation and right of deletion


You have the possibility to revoke your agreement to process your personal data or to exercise your right of correction or deletion at any time by sending an email detailing your request to the email address listed in
chapter I of this policy or by using the product's integrated feedback mechanism and indicating your desire to revoke the agreement or delete your data in the message box.

Your rights (rights of the persons affected)


You have the right to request information about any of your personal data we process. In particular, you have the right to request information about the purpose of the processing, the categories of personal data, the categories of recipients who will have access or were disclosed with your data, the duration periods for saving the personal data, whether there is a right to adjust/correct, erase, restrict or object, transmission of data, the source of your data if not collected through us and if we use automatic decision-making technologies including profiling.

Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.

If you wish to exercise the aforementioned rights, contact us via email using the contact details provided in
chapter I of this policy.

If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws you have the right and possibility to lodge a complaint with the Data Protection Authority of your country of residence or the country of your business or the state of Lower Saxony in Germany which can be reached via
https://www.lfd.niedersachsen.de/.

List of Data Processors


Processor Name and Address
Processing Activity
ALL-INKL.COM - Neue Medien Münnich, Inhaber: René Münnich, Hauptstraße 68, D-02742 Friedersdorf, Germany
Hosting of website and email and data bases