This Privacy Statement describes how Krumware (“Krumware”, “we”, “us” and “our”) collects and uses personal data when you visit our website and/or use our services. “Personal Data” refers to all data which relates to you personally or with which you can be identified personally, e.g. name, address, e-mail address or user behaviour. At Krumware, we believe that the Personal Data you provide to us must be kept confidential and used in a legally compliant manner.

1. Personal Data Processed When You Use Our Website or Services Without Registration

When you are simply visiting our website for information, without registering or logging in, we may nonetheless collect data which may include Personal Data from you, through your browser, such as:

• IP address and corresponding network location
• Exact time (including timezone) of your request
• Metadata and contents of your request
• Details of your browser and operating system

Use of Cookies

Our website uses cookies. Cookies are data that are assigned to you and are stored by your browser. You can block our cookies at any time by changing the appropriate setting in your browser. Cookies that have already been stored can be deleted by you at any time. Please note that when you block or delete cookies, you may not be able to make full use of all functions on our website. The legal basis for our use of cookies is Art 6(1)(f) and Art 6(1)(a) of the GDPR, which allows the processing of data that is technically required to ensure a stable, secure and functioning website and to provide you with a personalised experience on our website (e.g. through marketing relevant analytics).

2. Personal Data Processing for Krumware Candidates

​​​​Purposes of Processing

We use your Personal Data to decide whether to establish an employment relationship and to contact you. If the employment relationship does not materialise, we use your Personal Data to send you a rejection, typically using the same method you used to send us your application documents. Should you choose to participate in the Krumware Talent Community (our pool of interested candidates), we will process your Personal Data in order to maintain a pool of candidates who wish to be considered and contacted with respect to future job offers. You can also opt to receive a newsletter as part of the Krumware Talent Community, which provides you with updates on Krumware job opportunities, company news, and events. You can use the unsubscribe link in the individual newsletter emails to remove yourself from further mailings.

Recipients of Personal Data

Your application as well as any Personal Data you enter to join the Krumware Talent Community will be received and will be reviewed by Krumware’s hiring and talent managers and will be made available to the department leads and anyone else with a need to access the Personal Data to process and/or approve the job application (whereby this group of recipients will be kept to the minimum necessary).

3. Personal Data Processing for Krumware’s Customer Surveys

Purpose of Processing

We need to process your Personal Data in order to better understand your information technology environment, market trends that are impacting your IT strategy, and consumption in order to improve our products. Where necessary, we may need to use the Personal Data processed to contact you with respect to new products and solutions that would be relevant to you.

Categories of Personal Data Processed

We expect to process Personal Data such as your first and last name, your email, your company affiliation and role (if applicable), your location (country, postal code), as well as any information you share with us through or relating to a customer survey.

Recipients of Personal Data

The Personal Data will be processed by those Krumware employees who are responsible for the day-to-day running of the product and marketing organization.

4. Personal Data Processing When You Contact Us Directly

When you contact Krumware directly (e.g. via email), we process your personal data such as name, surname, email address, or company details in order to respond to your questions or requests (e.g. when you report a security vulnerability). We process your data within Krumware, and your data is stored in our systems, such as Google Workspace.

5. Krumware Customer Support

In the course of providing customer support, we may request some Personal Data from you to enable us to provide the high-quality support that you expect from us. Such Personal Data can include your contact details (e.g. name, email, telephone, address) and account creation and maintenance details (e.g. username, password, security questions). We use this Personal Data in order to create and maintain your account on our Customer Relationship Management (“CRM”) systems, to allow you to file and track support incidents (e.g. through our web interface or through our live support tools), to upload error and telemetry data associated with your support incidents and to statistically evaluate the effectiveness of the support that we provide to our customers.

6. Newsletter

You can subscribe to our newsletter, through which we inform you about our products, services, and offers. We rely on your consent to subscribe and fulfill your newsletter request. We use a “double opt-in” procedure to subscribe you to our newsletter. After your initial subscription, we send an email to the email address you subscribed with, requesting your confirmation (e.g. by replying to the email or clicking a link therein). If you don’t confirm the subscription within the relevant time period, your subscription request will be automatically deleted. We also store the IP address you used and the time of registration and confirmation to enable us to verify your subscription and to prevent misuse.

Your email address is mandatory and necessary both to enable verification of your subscription request and actual sending of newsletter emails to you. Any other data you send us is entirely voluntary. After your confirmation, we store your email address to send you the newsletter. You can perform the revocation by clicking on the link provided in each email or by modifying your preferences accordingly on our website.

We may evaluate your user behaviour when we send you the newsletter, using “web beacons” (also known as Internet tags, pixel tags or clear GIFs). These web beacons allow us to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page and the information in cookies set by the third party. We may link the information collected from you above with that obtained from web beacons in newsletters to:

• Understand which email messages we sent may have been opened by you;

• Understand how you use and interact with our products and services;

• Improve our products and services;

• Optimise your HTML email experience;

• Provide you more relevant content; and

• Stop contacting you if, over time, we can see that you are no longer opening our email messages.

If you wish to prevent the use of web beacons, you may be able to prevent the use of some web beacons by setting your email application or software to display HTML emails as text only.

7. Personal Data Processing in Other Systems

Depending on the situation (whether you are our customer, potential customer or website visitor), we might process your personal data in various systems provided by third parties. Examples of such systems are mentioned below, and they might change from time to time:

Salesforce

We use Salesforce Inc’s cloud platform to manage our customer and potential customer portfolio. In order to do so, we must collect and process certain Personal Data from you. Such Personal Data can include your contact details (e.g. name, email), account creation details (e.g. username, password, security questions), as well as details about your relationship with us (interest in products and services, previous purchase history).

Feature Requests Tools

We use the feature requests tools (such as Jira) for filing and tracking features for our products and services. If you wish to use our interface, we will need to collect and process Personal Data from you. Such Personal Data can include your contact details (e.g. name, email) and account creation and maintenance details (e.g. username, password, security questions) as well as any Personal Data that you voluntarily transfer in the course of using the interface.

Google Analytics

This website uses the web service Google Analytics to analyse your visits. We deploy this service for marketing, advertising, and site requirements evaluation purposes. In order to carry out this evaluation, Google Analytics stores cookies in your browser. While Google may process certain information that could be used to identify you, our configuration ensures through e.g. IP masking and obfuscation, that only general information will be processed. You may reject the collection and processing of data at any time by changing your browser setting to prevent the storage of cookies. See our Cookie Policy for further details about cookies in general and about Google Analytics cookies specifically.

Call Recording Tools

We use call recording tools (such as Fathom, Loom, etc) for call recording and transcription. This service empowers our team to orient towards a data-driven approach and improves our communication strategies with you. The Personal Data we collect includes: Name, Email Address, Phone Number, and the contents of the email/call communication. Fathom will also process other customer data from Salesforce.

Integration of YouTube Videos

We may integrate YouTube videos into our website. These videos are stored on http://www.youtube.com and can be played directly from our website. The videos are all integrated in “enhanced data protection mode”, meaning that no data regarding you as a user is transmitted to YouTube if you do not play the videos. The data is transmitted only when you play the videos. We have no influence over this data transmission.

Through the visit to the website, YouTube receives the information that you have accessed the relevant page on our website. In addition, the data will be transmitted. This takes place irrespective of whether you have a user account with YouTube that you are logged into, or whether no user account exists. If you are logged in on Google, your data will be linked directly to your account. If you do not want your data to be linked to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for advertising and market research purposes, and/or for ensuring that its website is designed in accordance with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users on the social network about your activities on our website. You have a right to object to the creation of these user profiles. To assert this right, you must contact YouTube.

Further information on the purpose and scope of the collection and processing of data by YouTube is available in the privacy policy. Here, you can also find further information on your rights and setting options for protecting your privacy: https://www.google.com/intl/en/policies/privacy.

8. Your Consent

You consent to Krumware using your personal data created at, for, during or related to your interaction with a Krumware webform, offline channel, or person, for the purpose of offering products and services, including without limitation: conducting business, pursuing business relationships, developing products and services, and operating our various web presences, communities, and communication channels.

9. Your Rights as Data Subject

You have the following rights as a Data Subject:

• Right to information

• Right to rectification or erasure of Personal Data

• Right to restriction of processing

• Right of objection to the processing

• Right to data portability

• Right to complain to a data protection supervisory authority about our processing of your Personal Data

If you have consented to the processing of your data, you can always revoke this consent at any time. After you have expressed such a revocation to us, it will influence the permissibility of processing your personal data and may impact the services that we can provide to you.

Provided that we are basing the processing of your personal data on the need to balance interests, you can raise an objection to this processing of your data. This is the case if the processing is not required (in particular to) fulfill a contract with you, a fact which we endeavour to outline in the subsequent description of the respective functions. When exercising such a right of objection, we request that you outline the reasons why we should not process your personal data in the manner we have described. If you present to us your reasons, we shall check the circumstances and either stop and/or adjust the processing of the data, or present compelling counterarguments for continuing with the data processing.

You can, of course, object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to the use of your data for advertising through the contact details given at the top of this Privacy Policy.

10. Your California Privacy Rights

California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please e-mail us or write to us at the addresses below.
Moreover, we are required by the California Privacy Rights Act of 2020 (“CPRA”) to provide this CPRA Notice to California residents to explain how we collect, use and share their personal information, and the rights and choices we offer California residents regarding our handling of their personal information, which the CPRA currently defines as “information that identifies, relates to, or could reasonably be linked, directly or indirectly, with a particular consumer or household.”

1. Personal Information Collection, Use, and Disclosure: We describe the sources through which we collect personal information, the types of personal information collected, the purposes for which we use and share this information in this Privacy Policy.

2. California Privacy Rights: To the extent provided for by law and subject to applicable exceptions, California residents have the following privacy rights in relation to the personal information we collect:

   1. Right to request access to information about categories of personal information Krumware has collected about you, specific pieces of personal information Krumware has collected about you, categories of sources from which the personal information is collected, business or commercial purpose for collecting personal information, and categories of third parties with whom the business shares personal information.
   2. Right to request deletion of any personal information collected about you by us.
   3. Right to opt-out of the sale of personal information or the sharing or personal information for cross-context behavioral advertising purposes. Please note that we do not sell personal information we collect from you nor do we share it for cross-context behavioral advertising purposes, in accordance with the applicable definitions in the CPRA and its supplemental regulations.
   4. Right against discrimination because you exercised the rights available to you.
   5. Right to protection against waiver of rights.
   6. Right to correct any inaccurate personal information.
   7. Right to restrict sensitive personal information processing.

You can exercise the rights described above, by sending an email to operations@krum.io. You may exercise these rights by yourself or via an authorized agent who meets the agency requirements of CPRA. Once you exercise your rights, you agree to receive communication from us seeking information from you in order to verify your identity as the consumer from whom we have collected the personal information and such other information as reasonably required to enable us to fulfill your request. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify that you are the consumer from whom we collected personal information, as well as sufficient details necessary to help us handle the request.