Esko.ai — operated by ZEF Ltd
ZEF Ltd respects the privacy of individuals and thereby we want to give individuals using our services information concerning our data processing activities in a transparent manner. This Privacy Policy describes how ZEF Ltd collects, uses, stores, shares and protects your information under ZEF's services and on our website esko.ai. Should you have any inquiries or questions regarding our data processing activities, please contact us at support@zef.fi.
This Privacy Policy does not apply to third parties and their actions that ZEF Oy does not control, including any third-party websites, services, and applications that you access through ZEF's service or website.
This Privacy Policy has been prepared in order to meet the requirements set out in the EU General Data Protection Regulation ("GDPR"). ZEF Oy is committed to comply with the obligations related to processing of personal data under the applicable data protection legislation.
When ZEF is providing ZEF's services, ZEF has a dual role under the applicable data protection legislation:
ZEF as a data controller — ZEF Users (survey creators): ZEF Oy acts as a data controller within the meaning of the GDPR when it processes personal data related to individuals who have used and accessed ZEF's services on behalf of ZEF's Customer.
ZEF as a data processor — Respondents: ZEF Oy acts as a data processor within the meaning of the GDPR when it processes personal data related to individuals who respond to surveys created by Users using ZEF's services. The Customer is the data controller under this processing scenario.
ZEF uses personal data to perform ZEF's services, in particular: to review, investigate, research, and analyze how to improve and develop ZEF's services; to perform statistical analysis on personal data, to understand how individuals use ZEF's services; and to test ZEF's services, for the purpose of improving security and troubleshooting.
Collection of User (Survey Creator) Data: When a User registers to ZEF's services, User provides information including email address, first name and last name, and optionally a picture, social media profiles, telephone number, organization name, and company website. Payment-related information for paid license plans may include credit card details and invoicing data.
Purposes of processing User Data: ZEF collects User Data to allow Users to access and gain full benefit of ZEF's services — to process orders, inquiries and requests; provide customer support and invoicing information; inform Users about service updates; send marketing material where consent has been given; meet contractual obligations; and comply with regulatory requirements.
Legal basis for processing User Data: Legal basis for the processing of User Data is consent from the User. Before submitting any personal data to ZEF, the User is asked to give his or her voluntary, informed, and explicit consent during the Sign-Up process. User has the right to withdraw consent at any time.
ZEF Oy collects Respondent Data only as instructed by the Customer, who acts as the data controller. Respondent Data may include name, email address, home address, phone number, age, date of birth, employment details, education and qualifications, social media accounts, and other survey-specific information provided by the respondent and determined by the Customer.
The Customer may also choose to conduct a survey without any personal data being provided by respondents. In this event, no personal data listed above will be collected or processed.
After the end of provision of services under the agreement between ZEF and the Customer, ZEF commits to either delete or return all Respondent Data to the Customer, based on Customer's choice.
ZEF Oy processes and stores Respondent Data within the European Union. However, Survey Creator (ZEF Oy user) Data may be transferred, in compliance with applicable regulations, to the United States and/or other third countries.
ZEF will not sell personal data to third parties, nor make personal data available to them for other purposes than to enable use of the Services. ZEF may utilize third party processors to perform data processing on ZEF's behalf. In this case, such third party service providers are required to comply with this ZEF's Privacy Policy and appropriate technical and organizational measures.
To learn more about the third-party data processors used by ZEF, please visit: esko.ai/data-processing-addendum#sub-processor
ZEF Oy ensures the confidentiality, integrity, and availability of personal data processed via ZEF's services. ZEF implements appropriate technical and organizational measures and procedures in such a way that ensures the protection of data subject's rights, and always in accordance with applicable data protection law.
ZEF ensures that all persons processing personal data under its authority have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
In case of a data security breach, ZEF will inform data subjects of the breach without undue delay, including a summary description of the potential impact and a recommendation on measures to mitigate the possible adverse effects.
ZEF Oy may amend this Privacy Policy from time to time. Users may be required to accept the amended Privacy Policy upon logging in to ZEF's services in order to keep using the services. ZEF will notify Users of any substantial changes to this Privacy Policy well before the effective date of the changes.
If you do not agree to such new version of this Privacy Policy, you may terminate use of ZEF's services by notifying ZEF via the service or by sending an email to support@zef.fi.