Website, account, sales, support and product privacy information

This Policy explains how Getint processes personal data when acting as a controller. When Getint processes Customer Content on a customer’s behalf to provide the Software, the Getint Standard Data Processing Agreement governs that processor activity.

1. Who controls your personal data

1.1 The controller is GETINT WASIUK WIZMUR-SZYMCZAK SPÓŁKA JAWNA, Jana Heweliusza 11/811, 80-890 Gdańsk, Poland (“Getint”, “we”, “us” or “our”). Privacy enquiries and rights requests may be sent to privacy@getint.io or support@getint.io.

1.2 This Policy applies to visitors to getint.io and related Getint webpages, trial and account users, customer and prospect contacts, event or demo participants, support users, and other people who communicate with us. It applies to Shared SaaS, Dedicated SaaS and On-Premise-related controller activities. It does not replace a customer’s own privacy notice for data that customer chooses to process through Getint.

2. Personal data we collect

2.1 We may collect the following categories, depending on how you interact with Getint:

• Identity and business-contact data, including name, business email, company, job title, telephone number and account contacts.
• Account, transaction and licence data, including account identifiers, subscription, purchasing channel, billing status, invoices, tax information and licence usage. Payment-card details are handled by the relevant payment processor; Getint does not intend to store complete card details.
• Technical and usage data, including IP address, browser and device information, authentication events, timestamps, feature usage, licence measurements, diagnostic logs and security events.
• Sales, marketing and communications data, including form submissions, meeting bookings, correspondence, campaign interactions and communication preferences.
• Support data, including tickets, messages, attachments, logs and other information submitted when assistance is requested.
• Service configuration data, including connected-system URLs, user identifiers, encrypted credentials or tokens, connection definitions, mappings and configuration profiles. Customer Content processed on a customer’s behalf is governed by the DPA.
• Cookie and advertising data collected through consented analytics, advertising and similar technologies, as described in Section 8.

3. Sources

3.1 We receive personal data directly from you or your organisation; from Getint accounts and Software; from authorised Marketplaces, payment processors and resellers; from connected authentication or business systems at your direction; from support and scheduling services; automatically from browsers and devices; and from lawful business-information or marketing sources.

4. Purposes and legal bases

4.1 Contract and pre-contract steps. We use contact, account, transaction, configuration and support data to provide trials, licences, accounts, Software, support, billing and requested demonstrations.

4.2 Legitimate interests. We use relevant data to secure, administer, troubleshoot and improve Getint; manage customer and prospect relationships; prevent fraud and misuse; enforce agreements; maintain records; and conduct proportionate business-to-business marketing. We balance these interests against the rights of affected individuals.

4.3 Consent. Where required, we rely on consent for non-essential cookies, personalised advertising and particular marketing communications. Consent may be withdrawn at any time without affecting earlier lawful processing.

4.4 Legal obligations and claims. We process data to comply with tax, accounting, sanctions, security, regulatory and other legal obligations and to establish, exercise or defend legal claims.

5. Sharing and subprocessors

5.1 We may disclose relevant personal data to infrastructure and hosting providers; Marketplaces, payment processors and resellers; business productivity and communications providers; customer-support and ticketing providers; analytics, advertising, consent-management and scheduling providers; professional advisers, auditors and insurers; competent authorities where required; and a buyer or successor in a corporate transaction. Providers may change as our operations change.

5.2 Where a provider processes personal data for us, we use contractual and organisational safeguards appropriate to its role. Getint does not sell personal data for money. Use of advertising or analytics technologies may qualify as “sharing”, targeted advertising or a similar concept under some US state laws; where applicable, you may opt out through our cookie controls or by contacting us.

5.3 The current product Sub-processors used for Customer Content are identified in the DPA or the subprocessor information linked from our legal or trust pages. Website and business-operation vendors are not necessarily product Sub-processors.

6. International transfers and hosting

6.1 Getint is established in Poland and its primary SaaS hosting region is Germany unless another region or deployment is agreed. Some providers and personnel may process personal data in other countries.

6.2 Where Chapter V GDPR or equivalent transfer rules apply, we use an available lawful mechanism, such as an adequacy decision, applicable Standard Contractual Clauses or another legally recognised safeguard, and supplementary measures where required. Copies or information about applicable safeguards may be requested, subject to confidentiality and third-party restrictions.

6.3 For On-Premise deployments, Customer Content ordinarily remains in the environment controlled by the customer. Getint may process limited data if authorised support, telemetry, licensing or another contracted activity requires it, as described in the Main Agreement and DPA.

7. Retention

7.1 We retain personal data only for as long as reasonably necessary for the applicable purpose, including providing the Services, maintaining security and business records, resolving disputes and meeting legal obligations. Retention varies by data type, account configuration, purchasing channel and deployment.

• Account, contract, invoice and tax records: for the contract term and the period required by tax, accounting and limitation laws.
• Support and business correspondence: normally for the relationship and a reasonable period afterward, unless needed longer for an unresolved matter or legal requirement.
• Operational and security logs: according to the configured or published retention for the relevant deployment and ordinary backup rotation.
• Marketing records: until objection, opt-out or withdrawal of consent, plus limited suppression data needed to respect the request.
• Cookie and analytics data: according to the duration stated in the cookie interface or provider setting.

8. Cookies and similar technologies

8.1 We use strictly necessary technologies to operate and secure our websites. With consent where required, we may use analytics, advertising, attribution and personalisation technologies. The current cookie interface identifies available choices and is the most specific source for the technologies active on the page.

8.2 You can reject non-essential technologies or change your choices through the cookie settings. Browser controls may also block or delete cookies, although doing so may affect website functionality. Withdrawing consent does not affect processing completed before withdrawal.

9. Your rights

9.1 Subject to applicable law, you may request access, correction, deletion, restriction, portability or a copy of personal data; object to processing based on legitimate interests or to direct marketing; withdraw consent; and complain to a supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

9.2 We may need to verify identity and authority before acting. If Getint processes the relevant data only for a customer, we may refer the request to that customer. Rights are not absolute, and lawful exceptions may apply.

10. Security

10.1 We maintain technical and organisational measures designed to protect personal data, including access controls, encryption in transit and at rest where applicable, logging and monitoring, vulnerability management, incident response, personnel confidentiality and vendor controls. No system is completely secure, and this Policy does not create a guarantee against every incident.

10.2 Current independent assurance materials, if any, are described in Getint’s trust or security materials. A certification or report applies only to the scope and period stated in that material; this Policy does not claim an ISO certification.

11. Children and business use

11.1 Getint is a business service and is not directed to children. We do not knowingly solicit personal data directly from children. Customers must not configure the Software to process children’s data unless they have an appropriate lawful basis and the Main Agreement and DPA support that processing.

12. Changes and contact

12.1 We may update this Policy to reflect legal, operational or service changes. We will publish the revised version and effective date and provide additional notice where required by law. Material changes apply prospectively.

12.2 Contact: privacy@getint.io or support@getint.io. Postal address: GETINT WASIUK WIZMUR-SZYMCZAK SPÓŁKA JAWNA, Jana Heweliusza 11/811, 80-890 Gdańsk, Poland.