2. Collection and Use of Personally Identifiable Information

Information 2.1 We may obtain some of your personal information in order to provide our Services. The information we collect is necessary to provide our services, and we will not collect information that is not required by the nature of our services. We may collect some of the following personal data:

Email addressIP addressProfession / positionPersonal imageFirst name, prefix, last nameGenderDate of birthAddressPhone numbersLocationFacebook admin pagesInstagram pagesPinterest profileAccount number (we do not store passwords for payment information such as credit card info)

E-mail address

2.2 We collect your email address based on your consent and in the interest of providing our Services. We collect your email address in the following cases:

- If you register an account with us. We collect your email address to create and facilitate an account for you and to send you notifications about your account, such as when you forget your password, we change our privacy policy or if there is a data breach. An account is required to access some of our Services and if you do not provide us with your email address, you will not be able to access these Services. During your registration you give your consent to allow us to collect, store and process your email address in accordance with this privacy policy.

- When you subscribe to receive notifications. We collect your email address when you sign up to receive notifications from us. We will only use your email address to send you information about upcoming promotions or other matters related to the PrismaNote Services. It is possible to unsubscribe from these notifications at any time.

- When you contact us. We will collect your email address when you contact us via our email ending with @prismanote.com. Whenever we collect your email address in this way, we will only use it to respond to your inquiry.

IP address

2.3 We integrate security systems into our site to prevent malicious attempts and exploits of the site. We scan IP addresses and ban IP addresses that show malicious signals, such as too many password errors, looking for exploits, and the like. We process this information in the interest of protecting the integrity of the site and of the databases connected to it, including the database of information obtained from users. We also use your IP address on the basis of a legitimate interest to provide an invoice for our Services.

Personal information during registration

2.4 PrismaNote may collect Personal Information from Retailers or Retailer Employees used in the use of our Services. Personal information includes occupation/job title, personal picture, first name, prefix, last name, gender, date of birth, address, phone numbers, location, Facebook account, Facebook admin pages/other Facebook info such as tokens, Pinterest profile, account number (we do not store passwords for payment information such as credit card information). Such information is collected to fulfill our contractual obligations as defined in our Terms of Service.

PrismaNote as Processor

2.5 PrismaNote may receive personal information about data subjects who are not our direct users. Such information is provided to us by merchants or brands in order to process such information on their behalf. Processing is handled in accordance with the written instruction of retailers and brands, as well as in accordance with our Data Processing Agreement. Information we may process on behalf of merchants and brands includes email addresses, dates of birth, gender, first name, prefix, last name, address, IP address and transactions.

General

2.6 Some Services will not be available to you if you do not provide the requested information. We may keep track of any questions, complaints or compliments submitted by you and any response. Whenever you contact us, we will collect any information you choose to provide. We will only store and use this information to respond to your inquiries. The information in the request, free of personally identifiable information, is stored on our servers for the purpose of improving our Services and providing the best possible customer support.

2.7 We do not sell or rent personal information to third parties. We use the information collected for our internal and marketing purposes, as necessary by the nature of the services, and only in accordance with this privacy policy. In some cases, we are required to comply with court orders and government requests and provide information or portions thereof to appropriate authorities. Some personal data is transferred to our IT partners. This information will not be sold or rented.

2.8 We have implemented security procedures and measures to ensure appropriate protection of the information we process against misuse, unauthorized access, disclosure or alteration. We will delete all information about you at your request no later than twenty-four (48) hours after the request is made.

2.9 We recognize that the security of your information is one of the highest priorities and therefore only authorized processors have access to your information. While we take all appropriate steps to keep your information secure, please understand that no data security measure in the world can provide 100% protection. If we ever discover or suspect a personal data breach, we will without delay, within seventy-two (72) hours of becoming aware of it, notify the competent supervisory authority of the breach and, if necessary, the Users.

2.10 The processing of the information is done automatically, without human intervention. However, when you contact us via email, the information in the email is handled and processed by a human to provide you with the response to the email.

2.11 Users may request access to, modification and deletion of personal information and to exercise the right to object. Such requests are submitted to info@prismanote.com.