GDPR Privacy Policy
Last updated: March 8, 2024
This Privacy Policy describes how Tunova Labs ("we," "us," or "our") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). By using our platform and services, you acknowledge that you have read and understood this policy.
1. Data Controller
Tunova Labs acts as the data controller for personal data collected through our platform. If you have questions or concerns about how your data is handled, you may contact us at:
Email: support@tunovalabs.com
Address: Vinnytska St, 11, Zhytomyr, Zhytomyr Oblast, Ukraine, 10001
Phone: +380673106631
2. Personal Data We Collect
We collect personal data that you provide directly to us, as well as data collected automatically when you use our services.
2.1 Data You Provide
This includes your name, email address, billing information, account credentials, profile details, and any communications you send to us through contact forms or support channels.
2.2 Data Collected Automatically
When you access our platform, we may automatically collect technical data such as IP addresses, browser type, operating system, device identifiers, pages visited, session duration, and referring URLs. This data is collected through cookies, log files, and similar tracking technologies.
2.3 Data from Third Parties
We may receive limited personal data from third-party services such as payment processors or authentication providers, only to the extent necessary to deliver our services.
3. Legal Basis for Processing
We process your personal data only where we have a valid legal basis to do so under the GDPR:
Contractual necessity: Processing required to fulfil our obligations under a contract with you, including account registration and service delivery.
Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, security monitoring, and service improvement, provided these interests are not overridden by your rights.
Legal obligation: Processing required to comply with applicable law.
Consent: Where we rely on your consent, such as for optional marketing communications or non-essential cookies, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. How We Use Your Data
We use collected personal data to:
— Create and manage your account and deliver our educational services
— Process payments and manage billing
— Provide customer support and respond to your inquiries
— Send transactional messages such as account confirmations and service updates
— Send marketing communications where you have given consent or where permitted under applicable law
— Analyse usage patterns to improve platform performance and content quality
— Detect and prevent fraudulent activity, abuse, or security threats
— Comply with legal obligations and enforce our terms
5. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our platform. Cookies may be strictly necessary for site functionality, or they may be used for analytics and marketing purposes.
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our services. Where required by law, we obtain your consent before placing non-essential cookies.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with trusted third parties only in the following circumstances:
6.1 Service Providers
We engage third-party companies to perform functions on our behalf, including payment processing, hosting, analytics, email delivery, and customer support. These parties are contractually bound to process data only on our instructions and in accordance with GDPR requirements.
6.2 Legal Requirements
We may disclose personal data if required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you in advance if your data becomes subject to a different privacy policy.
7. International Data Transfers
As a transnational platform, we may transfer your personal data to countries outside the European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms, to ensure your data receives an equivalent level of protection.
8. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.
Account data is generally retained for the duration of your account and for a reasonable period thereafter, unless you request earlier deletion or unless we are required by law to retain it longer.
9. Your Rights Under GDPR
If you are located in the European Economic Area or a jurisdiction with equivalent data protection laws, you have the following rights regarding your personal data:
9.1 Right of Access
You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
9.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
9.3 Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies.
9.4 Right to Restriction of Processing
You have the right to request that we limit the processing of your data in certain circumstances, such as while a dispute about its accuracy is resolved.
9.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
9.6 Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose without delay.
9.7 Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce significant effects, unless such processing is necessary for a contract or you have given explicit consent.
9.8 How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at support@tunovalabs.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit, access controls, secure data storage practices, and regular security reviews.
Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability and will notify you of any breach as required by applicable law.
11. Children's Privacy
Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data without appropriate parental consent, we will take steps to delete that data promptly. If you believe a child has provided us with data, please contact us at support@tunovalabs.com.
12. Third-Party Links
Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices of third parties and encourage you to review their respective privacy policies before providing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account.
Your continued use of our services after any changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Tunova Labs
Vinnytska St, 11, Zhytomyr, Zhytomyr Oblast, Ukraine, 10001
Email: support@tunovalabs.com
Phone: +380673106631
Website: tunovalabs.com