RoomRaiser Ltd. Privacy Policy

Purpose of data processing:

• Data processing necessary for establishing, maintaining customer relationships, concluding contracts, and fulfilling contractual obligations.

Description of data processing purpose:

• Data processing necessary for establishing contact with the Data Controller (e.g., requesting quotes, providing offers, concluding contracts), maintaining contact, and fulfilling contractual obligations.

Categories of personal data processed:

• Email address, phone number, name.
• Other personal data provided by the data subject during contact.

Legal basis for data processing:

• The Data Subject's name, phone number, and email address are processed under GDPR Article 6(1)(f) - the Data Controller's legitimate interest.
• Other personal data provided by the Data Subject during contact is processed under GDPR Article 6(1)(a) - the Data Subject's voluntary consent.

Consequences of not providing data:

• Contact with the Data Controller will not be possible.

Data retention period:

• 2 weeks following the end of the data processing purpose

Data subjects:

Any person who wishes to establish contact with the Data Controller through the https://roomraiser.com/ website, as well as contact persons named in contracts concluded by the Data Controller, other persons participating in contract fulfillment (e.g., managers, etc.). Data subjects can request the legitimate interest assessment test by contacting info@roomraiser.com.

Source of personal data:

The Data Subject's personal data is provided by the legal entity or natural person establishing contact, maintaining contact, concluding contracts, or fulfilling contracts with the Data Controller, or directly by the Data Subject themselves.

Is the Data Subject obliged to provide personal data?

• Providing name, position, phone number, and email address is mandatory; providing other personal data is voluntary.

Does profiling or automated decision-making occur within the data processing activity?

• No

Description of data security measures:

The Data Processor undertakes to implement appropriate technical and organizational measures throughout the full scope of its data processing activities, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of processing, and the risk of varying likelihood and severity for the rights and freedoms of natural persons, and to assist the Data Controller to the fullest extent possible in fulfilling its obligations to data subjects regarding the exercise of their self-determination rights.

The Data Processor protects data with appropriate measures, particularly against unauthorized or unlawful access, alteration, transmission, public disclosure, loss, deletion or destruction, as well as accidental destruction, alteration and damage, and inaccessibility due to changes in the applied technology.

Data security measures implemented by the Data Processor:

• Measures to ensure the ongoing confidentiality, integrity, availability and resilience of systems and services used for processing personal data.
• Physical security measures regarding the location of personal data processing.
• Measures to restrict access to personal data.
• Measures to protect data during transmission of personal data.
• Where applicable, measures for pseudonymisation and encryption of personal data.
• Measures to ensure that access to personal data and data availability can be restored in a timely manner in case of a security/data protection incident.
• Procedures/measures for regular testing, assessment and evaluation of the effectiveness of technical and organizational measures implemented to ensure the security of data processing.

Persons with access to personal data:

• The Data Controller's executive officers and employees.

Transfer of personal data to third countries or international organizations:

• The Data Controller does not transfer the above-mentioned personal data of data subjects to third countries outside the European Union territory or to international organizations.