HouseStyle

Privacy Policy
Effective as of 21 June 2023

1              Introduction

This privacy policy (the “Privacy Policy”) describes how information about you is collected, used, and disclosed by where iz AB (“WERZ”) when interacting with the app, website or when you otherwise interact with us.

We at WERZ know you care about how your personal data is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy.

By installing or using our apps, products, services, campaigns, or website (collectively our "Services"), you agree to our manner and acknowledge acceptance of the practices and policies outlined in this Privacy Policy (“Policies”) and hereby consent to that we will collect, use and share your personal data as is set out in this Privacy Policy. Most of our Services include some kind of interaction with communities and their admins (“Communities” or a “Community”).

We collect personal data on our own behalf and on behalf of Communities who uses our Services to e.g., manage and promote events or content creation. These Policies apply only to our Services and do not apply to other websites or services of the Communities or another third party and their services.

At any time, WERZ may revise these Policies at our sole discretion. If we make changes, we will post the revised Policies and update the revision date above. We may, but are not required to, notify you by sending an email notification to the address associated with your account or providing notice through our Services. Revisions are effective and binding when posted on the Services. Any continued use of any of the Services following any revision means you agree to the revisions.

This Privacy Policy covers our treatment of personal data that we gather when you are accessing or using our Services, but not to the practices of companies we don’t own or control, or people that we don’t manage. We gather various types of personal data from our users, as explained in more detail below, and we use this personal data internally in connection with our Services, including to personalize, provide, and improve the Services, to allow you to set up a user account and profile, to contact you and allow other users to contact you, to fulfil your requests for certain products and services and to analyze how you use the Services. In certain cases, we may also share some personal data with third parties, but only as described below.

2              Personal data that we collection

2.1          Personal data that you provide to us

2.1.1        We receive and store any personal data that you knowingly provide to us. For example, when you create an account and thus get access to the Services, you will be asked to choose a username and to provide your phone number and when you contact our customer service or make an inquiry, you then provide us with the content of that communication. We may send verification codes and login details and, upon your consent, send marketing communication to your phone number. We will not display your phone number in the Services and if you do not want to receive marketing communications from us, please get in touch with us and we will unsubscribe you from that distribution list.

Where you join a Community and register for paid events, you will be providing financial information like credit card details and billing address and some of which may constitute personal data.

Moreover, Communities can ask for collection of or receive information from you through the Services by contacting you directly. We have no control over any such personal data so collected and all personal data collected by us on behalf of Communities is made available to the Communities in accordance with these Policies (please see below “6 With whom we share your personal data”).

2.1.2        When creating an account, you will provide, and we will collect your date of birth username, full name and profile picture (all of which will also be visible in your profile). The details will not be used other than for displaying to the Communities you join and in accordance with this Privacy Policy.

2.1.3        We may also collect and store certain details of your access to and use of the Services in order to provide more relevant services to you in the future.

2.1.4        We may communicate with you if you’ve provided us the means to do so or we see it being necessary. For example, if you’ve given us your email address, we may send email about your use of the Services. Also, we may receive confirmation when you open an email from us. This confirmation helps us make our communications with you more interesting and improve our services. If you do not want to receive communications from us, please get in touch with us and we will unsubscribe you from our distribution list.

2.2          Personal data that you may provide to us

You may also choose to synch your phone book contacts that are stored on your phone. Syncing your contacts means that you for instance can directly invite your contacts to your Communities or send items such as tickets to your contacts. We never store the phone book contacts data on our servers, it will be kept on your phone and read each time you use a specific feature that needs that data.

2.3          Personal data that you may provide to us as a Community

For us to provide the Services and facilitate payments to Communities for purchase of tickets to events or otherwise, we collect necessary personal data (e.g. bank account details) directly from the Communities and collect personal data from other third-party sources such as other websites, payment processing partners, Communities’ bank etc.

2.4          User content

We collect the content, communications and other information (including personal data) you provide when you use our Services, including when you create or share content, and message or communicate with others. For example, we review the text and/or image content of your posts, replies, chat messages, and collect metadata regarding such messages that may collect the identity of you and others with whom you communicate. All posts of contents and replies are public within the relevant Communities (for deletion of content, please see below “10 Account deletion”). User content may be viewed, shared and modified by our users, us and others for commercial or personal purposes (consistent with the rights and licenses in our Terms of Service). Please keep in mind that if you include information that could identify you in any content you share, upload, sync or post, people who see it may determine your identity. WERZ does not post messages and other content publicly but, as with any message that you send via any service, the recipient might do so.

2.5          Your Transactions

If you make any purchases or engage in any other financial transaction through our Services, we collect information necessary (including personal data) to process the transaction. This includes payment information, such as your credit card or payment account information, authentication information and billing, shipping and contact details.

2.6          Personal data that we automatically collect

We use various technologies to collect information from your device and about your activities whenever you interact with the Services. This information includes:

·               your mobile device’s geographic location;

·               IP addresses for security purposes (though we will never use your IP address to track you or your use of the Services);

·               other technical information about your mobile device (such as type of device, web browser or operating system);

·               how long you used the Services and which services and features you used; and

·               online or offline status of the Services.

The data that we collect may help us understand your location.

2.7          Purpose

We collect your personal data in response to your request for Services and the collection of your personal data is based on your consent. However, you have no obligation to provide your personal data but will not be offered nor have access to the Services unless you provide relevant personal data. Some of the data collection by us is not necessary to provide the Services but is related to provision of the Services and the basis for such collection and processing is a legitimate interest such as to assess and improve the Services.

3              Cookies

“Cookies” are identifiers we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third party website or service, a third party may also transmit cookies to you. Again, this Privacy Policy does not cover the use of cookies by any third parties, and we aren’t responsible for their privacy policies and practices. Please be aware that cookies placed by third parties may continue to track your activities online even after you have left our Services, and those third parties may not honor “Do Not Track” requests you have set using your browser or device.

4              How we use your personal data and the reasons therefore

We use the information (including personal data) we collect from and about you and your use of the Services for:

·               use by you of the Services and for us to deliver and improve the Services, including customizing the Services, researching and understanding how people use the Services and functionality for you, and diagnosing and fixing problems;

·               marketing communication where we may, following your consent, use your personal data to contact you for marketing and advertising purposes, such as letting you know about upcoming events, sharing promotional materials with you or displaying promotional content on the Services;

·               specific purposes such as contacting you about the Services and related items, which you agree we can do when you provide us with your contact information; and

·               other services to perform functions or services as otherwise described to you at the time of collection.

5              Use of your geo-location information

Whenever you open and use or interact with our Services on your device we may collect and use your location data from your device so that we can tailor the Services to your current location.

In all circumstances, we may perform these functions directly or use a third-party vendor to perform these functions on our behalf who will be obligated to use your personal data only to perform services for us.

6              With whom we share your personal data

We only share your personal data with others as indicated in this Privacy Policy or when we inform you and give you an opportunity to opt out of having your personal data shared. You understand and agree that we may share your personal data and/or non-personal data as follows.

6.1          Service providers

WERZ may share your personal data with third-party service providers who process personal data on behalf of WERZ to perform certain business-related functions. These companies include our marketing agencies, database service providers, email service providers.

If we engage another company to perform such functions, we may provide them with information, including personal data, that is necessary for them to perform the functions.

6.2          Communities

When you choose to opt into a Community you will be automatically sharing information with the Communities, such as full name, username, date of birth, picture, the date on which you signed up to the Services and your activity on the Services, Communities may request you to share your phone number and email with them, but you have the option not to do so (the information will not automatically be shared).

You may opt-out from a Community by sending us a request, in which case we delete your personal data from the relevant Communities admin interface on the Services.

Communities may appoint a third-party to fulfil certain activities on the behalf of them (i.e. create the event, volunteer or engage in other ways), in which case WERZ may provide your personal data to the third-party on behalf of the Communities. In no event is WERZ responsible for the treatment of your personal data by these Communities or their third-party.

Where Communities have engaged a third-party, WERZ encourages you to review applicable policies of the Communities and/or their third-party before providing personal data or other information.

6.3          Platform partners

We may share non-personal and anonymously aggregated information, with our partners. Our platform partners will use your information to enhance the services.

6.4          Legal demand

We may share your personal data in response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency or body or to establish or exercise our legal rights or to defend against legal claims or as otherwise required by law or for us to preserve and protect our rights or to assess and prevent fraud, technical or security issued. In such cases, we may raise or waive any legal objection or right available to us.

6.5          Analytics companies

We allow analytics companies to use tracking technologies to collect information (including personal data) about our users’ activities and devices. These companies analyze this information to help us understand how our Services are being used and provide us with information regarding your behavior on our Services.

7              Your choices

Your choices about collection and use of your information:

·               You can choose not to provide us with certain information (including personal data), but that may result in you being unable to use certain features of the Services because such information may be required in order for you to take advantage of certain features.

·               WERZ may also deliver notifications to your phone or mobile device. You can disable these notifications, including location services, by changing the settings on your mobile device.

·               You have the ability to review and update your personal data within your WERZ profile. The information you can view, update, and delete may change as the Services change. If you have any questions about viewing or updating information we have on file about you, please contact us by using the address ok@werz.at. When you update information, however, we may maintain a copy of the unrevised information in our records.

8              Certain communication

Certain communication from WERZ will be responsive to your request, such as WERZ emailing tickets to you in response to your purchase through the Services, resetting password or if we see any issues with your account. These types of communication between WERZ and you will occur although you may have opt-out of certain other features.

9              Security

We take measures to help safeguard your personal data from unauthorized access and disclosure but cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of your personal data at any time. However, we will make reasonable efforts to safeguard your personal data from misuse, unauthorized access, modification or disclosure outside the context of the Services unless otherwise stated in this Privacy Policy.

We store certain personal data in order to make available critical features of the Services such as secure SMS-based login. Your personal data is secured and encrypted during transit. When your data is stored by WERZ, we use computer systems with highly limited access housed in facilities with physical security measures (as provided by Amazon Web Services).

We may need to share some personal data with third party providers; as an example, we will share your phone number with SMS provider(s) to send you SMS login codes. Whenever we share personal data with third parties, your information is always encrypted in transit. We only try to share the minimum amount of information required for these third parties to perform their services. We review each of these third parties to ensure that they are receiving and handling any personal data in the most secure manner, consistent with our own internal policies.

Access to any personal data is highly restricted in WERZ and only used in order to debug issues or handle support requests upon a direct request from you. Any access to personal data is reviewed regularly and monitored to ensure no malicious or unwarranted access.

10           Account deletion

If you wish to delete your account, you may do so by visiting your user settings or by contacting us by using the address ok@werz.at. When your account has been deleted, all personal data related to your account will be deleted. Anonymized information will remain with us even after deletion, such as messages exchanges with other users on the basis that users who have not deleted their accounts are entitled to their own private conversation history. However, as long as your account is active, you will have the right to delete any of your posted messages (though, not to confuse posted messages with private messages exchanged with other users).

You should note that your deleted or anonymised personal data (although deleted from the Communities admin interface on the Services) may have been manually downloaded without permission by Communities. WERZ explicitly asks Communities to respect your request for deletion, but the Communities might not follow that request. You are therefore encouraged to contact relevant Communities directly with any request for deletion of personal data.

11           Your responsibility for your personal data etc.

You understand and accept that you are always responsible for your login information (i.e. username, password, security questions and answers etc.). This responsibility applies even if you change your login information. Your login information must be kept confidential at all times and must not be shared with or disclosed to others. If your login information is revealed or if you suspect that someone else has learned or obtained it, you are responsible for taking all necessary measures to ensure compliance with the terms and conditions to which you agreed when you created your login information. You must also immediately advise WERZ.

12           Data retention

Unless you have asked us to delete your personal data, we will retain personal data about you for a period of time consistent with the original purpose of collection. We may also retain your personal data for as long as you have an open account with us, or as otherwise necessary to provide you the Services, and for a reasonable period of time afterward. We may retain personal data for longer, if doing so is necessary to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes or collect fees owed, enforce our agreements, or as otherwise permitted or required by applicable law, rule or regulation.

13           Changes to this Privacy Policy

The Services and nature of WERZ business may change from time to time. As a result, WERZ might find it necessary to update or modify this Privacy Policy and reserves its right to do so at any time. WERZ may, but are not required to, provide you with additional notice of such updates via email or notifications on the Services.

You are encouraged to periodically review this Privacy Policy, especially before providing any personal data to WERZ. Continued use of the Services following any updates or changes to this Privacy Policy counts as acceptance of these changes.

If you find such changes to the Privacy Policy unacceptable, then you should cease using the Services whatsoever.

14           Personal data you provide to others

These Policies does not apply to any personal data that you may provide to another user through the Services or other websites or services of the Communities, or another third party and their services.

15           Correction of data

Different jurisdictions have their own set of privacy laws and depending on your jurisdiction of residence, you may have right to access and correct your personal data. Please submit a request for further information by using the address ok@werz.at in which case you may need to provide some personal data in order for us to verify your identity and the nature of your request.

16           Transfer of personal data to a third country

We may transfer your personal data to countries other than the country in which you are resident. Our website servers are mainly located in the EU. However, our third-party service providers and partners operate in a number of countries, including the US. This means that when we collect your personal data, we may process it in any of these countries.

We implement appropriate safeguards to protect your personal data in those countries in accordance with this Privacy Policy by securing, in our contracts with suppliers and others, that the level of protection is according to GDPR.

17           Children’s privacy

We do not knowingly collect or solicit personal data from anyone under the age of 16. If you are under 16, please do not attempt to register for the Services or send any personal data about yourself to us. If we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us personal data, please contact us by using the address ok@werz.at.

18           Contact and support

If you have any questions or concern about this Privacy Policy (including collection, use or disclose of personal data in compliance with privacy laws), or wish to contact our support, please contact us by email by using the address ok@werz.at. Any personal data shared by you for questions about this Privacy Policy or receiving support, will be used only for assessing the question or the issue and then in return contracting you about the question or issue raised. The personal data will not be used for any other purpose or with any third party.

You may contact or make a complaint with the data privacy authority in your country if you are not satisfied with our response to your contact or support in relation to data privacy matters.