Privacy Policy
This notice explains how DEVIATIC handles the personal data it collects through this website, the Request Service form and the messages you send us.
It also covers people who sign in to the client cabinet: we use your name, work email and sign-in records to give you access and keep the cabinet secure (Article 6(1)(f) GDPR). It does not cover the data our clients place in the DEVIATIC service to use it: we process that data on each client's behalf under our agreement with them, and the client's own privacy notice applies.
Who is responsible
DEVIATIC is the controller of the personal data described here. For any question about your data, or to use your rights, write to info@deviatic.com.
What we collect and why
- Request Service form
- Your name, work email and company and, if you add them, your phone number, the package you are interested in, the number of wallets and your message. We use them to answer your request and contact you about it. We also open a closed account for your company in our client cabinet straight away: it stays closed unless we agree terms, and then we use your details to prepare the contract and your access. To protect the form from abuse, we keep a one-way fingerprint of your email address and, where our network passes it to us, of your IP address.
- Messages to us
- Your email address, your name and what you write, to answer you.
- Visits to this website
- Your IP address, browser details and the pages you request. Our hosting and network providers process them to deliver the pages and to protect the site and the form from abuse. We use no analytics or advertising tools.
Legal basis
- Our legitimate interest in answering business enquiries, preparing contracts with the companies that send them and keeping this website secure (Article 6(1)(f) GDPR).
- Steps you ask for before a contract, where you contact us on your own behalf (Article 6(1)(b) GDPR).
- Our legitimate interest in keeping the records that the law of the country where DEVIATIC is established requires, for example accounting records once a contract is signed (Article 6(1)(f) GDPR).
You do not have to give us your details, but without your name, work email and company we cannot answer a request.
Who receives it
The people at DEVIATIC who handle your request, and the service providers that work for us on our instructions: hosting and database, network and security, and email delivery and mailboxes. We disclose data to authorities only where the law requires it. We do not sell personal data or share it for advertising.
Transfers outside the EEA and the UK
DEVIATIC is established outside the European Economic Area and the United Kingdom; your details reach us directly when you send them. Our servers, database and mailboxes are in the European Union. Our hosting, network and email delivery providers are companies based in the United States: for them we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, with its UK Extension, or on standard contractual clauses approved by the European Commission, with the UK Addendum where UK law applies. You can ask us for a copy of these safeguards at info@deviatic.com.
How long we keep it
- Requests and messages
- Until your request is closed, and after that only as long as the law requires. If a contract follows, for the term of the contract and then as long as the law requires.
- Visits to this website
- Only as long as needed to deliver the pages and protect the site.
Your rights
You can ask us for access to your data, to correct or erase it, to restrict its use, and to receive it in a portable format where that right applies. Write to info@deviatic.com: we answer within one month.
Your right to object
Where we rely on our legitimate interest, you can object at any time on grounds relating to your particular situation. We will then stop using your data unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims.
Complaints
You can also complain to a data protection supervisory authority, in particular in the country where you live or work or where you believe the law was broken. In the United Kingdom this is the Information Commissioner's Office.
Automated decisions
We make no decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects for you.
If we change this notice, we publish the new version on this page with a new date.