Privacy policy
Last updated: [DATE OF PUBLICATION]
This policy explains what personal data The Integration Desk collects through theintegrationdesk.com, why, how long we keep it, and what rights you have. We collect as little as we can.
Products with their own website have their own privacy policy. For Deal2Invoice, seedeal2invoice.com/privacy.
Who is responsible for your data
The data controller is the business that runs The Integration Desk. Its registered name, address and tax numbers are listed in section 1 of the terms of service.
For anything about your data, email support@theintegrationdesk.com. We have not appointed a data protection officer.
What we collect and why
Contact form messages
- Data: your name, email address, company name (optional) and your message.
- Purpose: to reply, and if you ask, to scope and quote a project.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), and our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
- Kept: [X MONTHS] after our last exchange, or longer if it leads to a contract (for as long as the law requires us to keep contract records).
When you send a message, a copy is emailed to us so we can reply. It is then also stored in our mailbox.
Server logs
- Data: IP address, date and time, the page requested, browser type (user agent), the referring page and the response status.
- Purpose: keeping the site secure and working, and investigating abuse or errors.
- Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
- Kept: 14 days, then deleted automatically.
Spam protection
To stop automated spam, the forms check how quickly they were filled in and limit how many submissions come from one IP address. This check happens in memory: we do not store your IP address with your submission. We use no CAPTCHA and no third-party anti-spam service.
EU VAT Check (when it launches)
This section applies once EU VAT Check is live. When you check a VAT number, we send it to VIES, the European Commission's VAT information exchange system, and show you the result. For sole traders, the name and address VIES returns can be personal data. We cache results for [X DAYS] (cache of results from VIES) to reduce load on VIES and answer repeat checks faster. Legal basis: our legitimate interest in providing the tool (Article 6(1)(f) GDPR). [DETAILS TO CONFIRM BEFORE LAUNCH: whether lookups are logged, whether accounts or API keys exist.]
Cookies and analytics
This site uses no tracking cookies, no analytics, no advertising and no third-party scripts, fonts or embeds. Your browser does not contact anyone but us when you visit.
The only cookie is a login cookie for the site administrator's private admin page. It is strictly necessary for that page to work and is never set for visitors.
Who else sees your data
We do not sell your data or share it for marketing. We use these service providers (processors), who handle data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Germany (EU) |
| [EMAIL PROVIDER] | Delivering contact form notifications to our mailbox | [LOCATION] |
| Namecheap, Inc. | Forwarding email sent to our address to our inbox | USA |
| Google (Gmail) | Our email inbox, where messages and replies are stored | USA and other countries |
We may disclose data where the law requires it, for example to a court or public authority.
Email you send us, and contact form notifications, are handled by Namecheap and Google in the USA. Google LLC is certified under the EU–US Data Privacy Framework. [CONFIRM the safeguard Namecheap uses for transfers, e.g. Standard Contractual Clauses, from its privacy policy.]
Your rights
Under the GDPR you have the right to:
- access the data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use it;
- receive data you gave us in a machine-readable format (portability);
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, email support@theintegrationdesk.com. We reply within one month. We may ask you to confirm the request comes from the email address in question.
Complaints
If you think we handle your data unlawfully, you can complain to the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in the EU country where you live or work. We'd appreciate the chance to fix it first, so please email us too.
Other things you should know
- Giving us data is voluntary, but we can't reply without an email address.
- We make no automated decisions about you and do no profiling.
- If we change this policy, we'll publish the new version here with a new date.