GDPR (General Data Protection Regulation)

Here, at Fyrebox Quizzes, we take your privacy and the processing of your personal data very seriously. Therefore, we describe in this Privacy Notice our contact details, information regarding what personal data we process and what rights you have towards us and how you may defend them. Always feel free to contact our customer support if you have any questions about our processing of personal data or this Privacy Notice.

Contact Details to the Controller

  • Name of the company: Fyrebox Quizzes
  • National company registration number: 411 592 958 24
  • Country of operation: Australia
  • E-mail address: [email protected]
  • Postal address: U372 585 Little Collins St, Melbourne, VIC 3000, AUSTRALIA
  • E-mail address to customer support: [email protected]
  • Contact details for the Controller’s representative or Data Protection Officer:
  • Name: Cyril Gaillard
  • Title: Data Protection Officer
  • E-mail address: [email protected]

What is personal data?

“Personal data” is any information relating to an identifiable or identified person (you as a user). An identifiable person is someone who can be identified, directly or indirectly, for example by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.

Personal data which we handle

Your personal data is only processed by us with your given consent. As we provide a quiz creation service for lead generation, we receive and process several types of personal data, which our users gather from others at their sole discretion. The personal data that we may process, the specific purposes for the processing and the legal ground for the processing are described below. The personal data indicated below may also be shared with a third-party CRM, email providers, and/or integration software (Zapier).

We may collect a user’s name to display on his/her invoices. We also collect your email address to enable login to the website, and to make it possible for you to receive important notifications. We can process these data based on your consent.

The categories of personal data listed below may be collected on behalf of the quiz creators, i.e. the users of our service, at their own discretion. All such personal data are deemed to be given by you free-willingly to the users and are processed with your consent as the legal ground. The purpose of the collection is further marketing purposes. The collected categories of data in question are the ones below:

  • Name
  • Email address
  • Phone number
  • Home address
  • Date of birth
  • Professional detail
  • Profile details, Race/ethnicity
  • Political opinion,
  • Religious/philosophical belief
  • Trade union membership
  • Sex life
  • Sexual orientation
  • Criminal convictions and offences

Summary of your rights towards us:

  • Right to be forgotten
  • Right to withdraw consent
  • Right to access
  • Right to rectification
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to lodge a complaint with a supervisory authority

The rights listed here above are described more closely below.

Right to be forgotten

You have the right to request that we delete any personal data that we about you. We will then proceed with deleting the data as soon as possible, but at the latest within one month’s time. If the personal data is needed for fulfillment of our contractual duties towards you or to preserve it with legal ground, we will however not delete the information until the data is no longer needed. This may also include time periods relating to statues of limitations. We will also, without your explicit demand, delete such personal data that we have collected but do not longer have a lawful right to process. We will inform you about this, if it would occur.

All personal data is deleted 5 weeks after the deletion of a user’s account, or automatically after the account has been inactive for 1 year.

Right to withdraw consent

You have the right to withdraw your given consent at any time. If you do so, we will erase such personal data which is not subject to any other legal ground than your previously given consent. The erasure shall in that case be carried out as soon as possible. Please note that your withdrawal of consent does not oblige us to erase personal data which is processed based on a contractual relationship or any other legal ground.

Right of access

You have, at any time, the right to receive confirmation from us as to whether personal data concerning you are being processed, and to access that personal data and to receive the following information:

  • a) The purposes of the processing
  • b) The categories of personal data concerned
  • c) The recipients or categories of recipients to whom personal data have been or will be disclosed
  • d) The envisaged period for which the personal data will be stored or the criteria used to determine that period
  • e) The existence of automated decision-making and profiling

Right to rectification

You have, at any time, the right to obtain rectification (correction) of inaccurate personal data without undue delay, at the latest within a month. You have also the right to complete incomplete personal data, taking into account our purposes of the processing, by the means of providing a supplementary statement.

Right to restriction of processing

You have, instead of obtaining erasure, the right to obtain restriction of our processing of your personal data. This may be achieved if

  • a) You have reason to believe that the accuracy of the personal data is not correct, and the restriction shall be in place during a period that allows us to verify the accuracy of the personal data
  • b) The processing is unlawful but you oppose the erasure of the personal data
  • c) We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims
  • d) You have objected to processing concerning profiling or automated decision-making, whereby a restriction shall be obtained during the period when we assess whether our legitimate ground for the processing override your legitimate ground.

Data portability

You have the right to receive the personal data concerning you that you have provided to us. The personal data is obtainable in a structured, commonly used and computer-readable format. You also have the right to transmit such personal data to another controller if the personal data is collected with your consent as its legal ground or if the processing of the personal data is carried out by automated means. If we deem it technically feasible, you have the right to us transmitting the personal data to another controller.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This can be done when the personal data is processed as part of automated decision-making, including profiling, and direct marketing, if such processing would be carried out (see “Personal data that we process” above).

Right to lodge a complaint with a supervisory authority

You have, at any time, the right to lodge a complaint with a supervisory authority regarding our processing of your personal data. Regardless of where we carry out our business, even if it would not be in the member state which is your country of residence, you have the right to lodge your complaint to your national supervisory authority. Please follow to the link below to find the contact details to your national supervisory authority:

http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

About this Privacy Notice

With regards to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we must disclose what personal data we collect and process about you, and for what purposes. In this Privacy Notice, you find all such information that we are obliged to inform you. The Regulation in its entirety in your language, may be accessed by following this link:

http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=O

Would you like to defend your rights, which are listed in this Privacy Notice, you may contact us using the contact information listed above.