Privacy Policy - PingPuffin

1. Data Controller

The data controller for the processing of your personal data is:

2. What Data We Collect

When you use PingPuffin, we may collect the following personal data:

• Account information: Name, email address, and password when you create an account.
• Payment information: Payment card details are processed securely by our payment provider (Stripe). We do not store your full card details.
• Usage data: Information about how you use our service, including monitored websites, notification preferences, and feature usage.
• Technical data: IP address, browser type, device information, and cookies for service functionality and analytics.
• Communication data: Any information you provide when contacting our support.

3. How We Use Your Data

We process your personal data for the following purposes:

• Service delivery: To provide uptime monitoring, send alerts, and manage your account.
• Payment processing: To process subscription payments and manage billing.
• Communication: To send service-related notifications, including downtime alerts, weekly reports, and important service updates.
• Service improvement: To analyze usage patterns and improve our service.
• Legal compliance: To comply with applicable laws and regulations.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the service you have subscribed to.
• Legitimate interest (Art. 6(1)(f)): Processing for service improvement and security purposes.
• Consent (Art. 6(1)(a)): Where you have given consent, such as for marketing communications.
• Legal obligation (Art. 6(1)(c)): Processing required by law, such as bookkeeping requirements.

5. Data Sharing

We may share your personal data with the following categories of recipients:

• Payment processors: Stripe for handling payments securely.
• Hosting providers: For hosting our service infrastructure.
• Communication services: For delivering notifications via email, SMS, Slack, and WhatsApp.

We do not sell your personal data to third parties. We only share data as necessary to provide our service and as described in this policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our service. After account deletion, we may retain certain data for up to 5 years to comply with legal obligations (such as Danish bookkeeping laws). Monitoring data and logs are retained according to your subscription plan.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of your personal data.
• Right to rectification: You can request correction of inaccurate data.
• Right to erasure: You can request deletion of your personal data.
• Right to restriction: You can request restriction of processing.
• Right to data portability: You can request your data in a machine-readable format.
• Right to object: You can object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at contact@pingpuffin.com.

8. Cookies

We use cookies and similar technologies to provide and improve our service. Essential cookies are required for the service to function. Analytics cookies help us understand how visitors interact with our website. You can manage your cookie preferences through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated to users via email or through the service interface. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Complaints

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

12. Contact Information