Who controls and processes your data
The Corporate Challenges website, iOS and Android apps are a commercial product and service operated by Wellington Consulting S.R.L., a company incorporated in România with company registration number RO34646201, J40/7158/2015. Wellington Consulting S.R.L. processes your data on behalf of our customer, the controller.
Our contact details
- Website: https://corporatechallenges.ro
- Company Name: Wellington Consulting S.R.L.
- Registered Address: Str. Traian Vasile Nr. 67, camera 1, etaj 2, ap 3, sector 1, Bucharest, România
- Data Protection Officer: privacy@corporatechallenges.ro
What we may collect
We may collect and process the following data about you through our website and mobile apps:
- Information you put into forms and input fields.
- A record of any correspondence between us.
- Details of transactions you carry out through our site, as an organiser.
- Information about your device (e.g. IP address, web browser, operating system) for system administration, debugging and aggregate reporting.
Lawful bases for processing
We process personal data lawfully, fairly and transparently, under one or more of the following bases:
- Your consent for one or more specific purposes.
- Contract: processing is necessary for the performance of a contract or steps prior to entering into a contract.
- Legal obligation to which we are subject.
- Vital interests of you or another person.
- Public task or exercise of official authority (as applicable to the controller).
- Legitimate interests pursued by us or a third party (e.g., payment processors), except where overridden by your rights and freedoms. Our legitimate interests are mainly to provide the service to you and our customers.
- Where we act as processor on behalf of your challenge organiser (the controller), it is the organiser’s responsibility to have an appropriate lawful basis.
Invites
Registered team leaders may invite you by email. We do not store a human-readable version of your email address if it is used for an invitation, and we do not process or share this information for any other purpose. Invitation links automatically expire and only one email per team invite will be sent. All invitation emails to non-registered users include a global unsubscribe link, allowing you to reject all future invite emails from the organisation's challenge.
How we use the data we collect
- Present site content effectively to you.
- Carry out our service with your challenge organiser.
- Facilitate communications between your challenge organiser and you (e.g., to receive challenge information and updates).
- Invite you to join a team on behalf of a registered user.
- Contact you about errors, bugs or system issues or if the challenge organiser has asked us to contact you.
- Allow your challenge organiser to send you updates via email/notifications during the challenge (unless you unsubscribe).
If you don't want to be contacted with updates, please adjust your settings accordingly. You may also request that we do not use your personal data for any of the other reasons set out in this policy by contacting us at privacy@corporatechallenges.ro. Note this may limit our ability to provide services.
In some cases, the collection of personal data may be a statutory or contractual requirement; we may be limited in the services we can provide if you don’t provide your personal data in these cases.
Your personal information, including name, email address and other profile information, will be passed to the data controller / challenge organiser (the organisation, business or group which purchased the licence for your use of Corporate Challenges). We are not liable for the organiser’s use of your data outside of our system.
Where we store your data & retention
We store collected data on servers within România and the European Economic Area (EEA). Your data will not be transferred and processed outside of RO/EEA to countries not governed by data protection. We make every reasonable effort to keep your data secure and adopt appropriate safeguards so your rights are upheld.
We only keep your personal data for as long as needed to provide our services and/or for as long as we have your permission to keep it.
For users on Corporate Challenges, we retain user data until termination of our agreement with the challenge organisation to which the user relates. After termination, we delete – or at least render anonymous – the user data (we may delete sooner upon request).
When we disclose your information & third parties
- If our company is purchased, we will disclose your information to the buyer.
- We disclose and present your information to the challenge organiser.
- We may disclose information if we have a legal obligation to do so, or to protect property, safety or rights.
- We may exchange information with others to protect against fraud or criminal activity.
We contract trusted third parties to supply certain services in order to provide Corporate Challenges to you (e.g., payment processing, search index tools, reporting, email delivery, accounting). Some third parties may require access to some of your data. Where any data is required for such a purpose, we take all reasonable steps to ensure your data is handled safely, securely and in accordance with GDPR and applicable laws.
Third parties we use which may have access to some of your information include:
- Data Storage, Hosting + Backups: H88 Web Hosting S.R.L.
- Email Delivery: Sendinblue (Sendinblue.com)
Your rights
Under the EU GDPR, you have the right to:
- Request access to, deletion of, or correction of your personal data held by us at no cost to you.
- Request that your personal data be transferred to another person (data portability).
- Be informed of what data processing is taking place.
- Restrict processing.
- Object to processing of your personal data.
- Complain to the relevant supervisory authority.
To enforce any of the foregoing rights or for questions about this policy, contact us at privacy@corporatechallenges.ro.
Links to other sites
Please note that our terms and conditions and our policies will not apply to other websites that you visit via a link from our site, nor to websites which link to our service. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.