The Heyadoo.com platform belongs to S.C. HEYADOO GLOBAL SERVICES S.R.L., Romanian legal entity, with registered office in Bucharest, 130, Traian Popovici Street, bl. B4, Entrance A, 5th floor, Sector 3, registered with the Trade Registry under no. J40/1402/2018, CUI (unique registration number) 38788470, a company that has the status of personal data operator.
For the purposes of this policy, the following terms have the meanings given below:
Personal data: any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data subject: any identified or identifiable natural person whose data are processed in the conduct of the activity of the controller/processor/its employees/agents (users of the Heyadoo platform);
Controller: S.C. HEYADOO GLOBAL SERVICES S.R.L. has the capacity of controller, establishing the purpose and means of the personal data processing;
Personal data processing: any operation which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Consent: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
Special personal data: by special data we understand, on the grounds of Article 9 paragraph (1) of (EU) Regulation 679/2016, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation;
Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
The purpose of data processing is to grant access to and provide services on our platform, conclude the contract with the users and carry out such contract in accordance with the clauses included in the Terms and Conditions of the platform, to improve the services offered on the platform and to promote them.
Granting access means: creating an account to benefit from the services offered on the Heyadoo platform and to conclude and carry out the user agreement.
A. To create an account by entering personal data directly on the platform, the following data is required:
- Email address;
B. If you register on our platform using your Facebook account, the data to be collected is as follows:
- Email address;
C. If you register on our platform using your Google+ account, the data to be collected is as follows:
- Email address;
D. After registration, your account can be completed with the following personal data:
- Full name;
- Date of birth;
- Phone number;
- Known languages;
-Other detailed information on the user, his or her preferences or hobbies.
E. Data that is automatically collected when accessing the heyadoo.com platform is as follows:
- Authentication data, if you are a user of the website;
Automatic collection of authentication data is done through Cookies, and the IP is automatically stored at log in and at each request (logs).
To send an invitation to someone else to register on Heyadoo, you must provide a third-party email address.
The person invited to use the Heyadoo platform will be duly informed of the username of the person who sent the invitation.
The platform is intended for users over the age of 16, so no data of underage persons will be collected, and by registering on the platform you declare that you fulfil this condition.
If, after registration, it is found that a user under the age of 16 has created an account on the platform, it will be deleted without any prior notice, the controller reserving this right.
Please keep in mind that the data you provide will be accessible to other users of the platform while maintaining your account active, if you choose to do so.
No additional data will be required from the data subjects when services can be provided without processing such data.
At the time of registration, your consent will be required for the promotion and marketing activities of the platform as well as for the automatic processing of your data, including profiling.
Promotion and marketing do not mean the actual activity carried out through the services offered by the platform, but those newsletters or other similar activities by which the controller directly contacts you to inform you of its services or offers.
The consent given at the time of registration regarding these activities can be withdrawn at any time by accessing your profile in the Menu and unchecking the consent box/by using the Unsubscribe option in each email.
A. Duration of the processing:
The data you provide through the registration will be stored on our servers while you use our platform as a user through your active account.
B. Processing operations:
Most of the times, data will be processed automatically by score-matching between the profile optionally created for an AD by an advertiser and the user profile of each account holder.
Data can also be processed manually by the controller's representatives/employees/processors/agents to efficiently deliver the services we offer, carry out contracts or conclude them, improve the platform, and promote our services.
Personal data will be processed and stored in the manner established by the controller through the implementation of technical and organizational measures to ensure their security.
No person unauthorized by the controller will have access to the data in any way.
C. Recipients of your data:
Your data may be disclosed to recipients such as:
- Controller's employees/processors/agents for the purpose of achieving the goals set out in Article 3;
- Service providers (storage services, maintenance, analysis and marketing services, etc.);
- State authorities, under a statutory obligation imposed on the controller;
- Lawyers, notaries, public institutions to exercise and carry out the rights of the controller.
D. Erasure of personal data:
Data stored in connection with a user will be deleted at the time of closing his or her account for any reason.
However, data required to be processed by applicable legal provisions, including but not limited to financial accounting and archiving related provisions, will be processed even after closing for any reason your account on our platform, for the period required by law.
i. Information requests:
The data subjects have the right to request information about the data processed by the controller and the actions taken in connection with them.
ii. Data access requests:
If data is processed on the data subject, and this requires access to personal data, the processing will be confirmed and he or she will be provided with a copy of the data being processed as well as information on:
1. The purposes of the processing;
2. The categories of personal data concerned;
3. The envisaged period for which the personal data will be stored, or the criteria used to determine that period;
4. The right of the data subject to request rectification, erasure or restriction of personal data or the right to object to the processing;
5. The right to lodge a complaint with the National Supervisory Authority for the Processing of Personal Data;
6. The source of the personal data, where the data are not collected from the data subject;
The copy shall be communicated in the format established by the controller and shall be communicated by electronic means or, when the data subject has not provided the necessary information/or expressly requests another method of communication, it shall be sent by post, with acknowledgement of receipt.
iii. Data rectification requests:
Where the data are inaccurate or incomplete and the data subject requests their rectification, they shall be amended as requested by the data subject.
The request for rectification of personal data will be notified to each recipient to whom the data have been disclosed, whenever possible.
iv. Data erasure requests:
At the request of the data subject, his or her personal data will be permanently erased from the records/registers/archive of the controller without undue delay, unless they are necessary for the establishment, exercise or defence of legal claims.
If his or her data have been made public, steps will be taken to inform the controllers which are processing such data that the data subject has requested their erasure. To the extent possible, any links to, or copies or replications of those personal data will be erased/will be requested to be erased.
The request for erasure of personal data will be notified to each recipient to whom the data has been disclosed, whenever possible.
v. Processing restriction request:
When the data subject requests restriction of processing, the data will only be stored until the application is resolved, unless the data are necessary for the establishment, exercise or defence of legal claims.
The request for restriction of personal data will be notified to each recipient to whom the personal data have been disclosed, whenever possible.
vi. Data portability:
If the data subject requests the transmission of the data he or she has provided to the controller, the data will be communicated to him or her in the format established by the controller and will be communicated by electronic means or, when the data subject did not provide the required information/or expressly requests another method of communication, it will be sent by post, with acknowledgement of receipt.
When the data subject requests the transmission of personal data directly to another controller, the communication is made to the latter on the basis of the information provided by the data subject.
vii. Objection to processing and automated individual decision-making, including profiling:
The data subject may object to the processing of his or her personal data for any purpose, including with regard to automated decision-making, including profiling. In this case, his or her data will no longer be processed with respect to the purposes for which the objection has been filed, unless the data are necessary for the establishment, exercise or defence of legal claims.
viii. The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing:
When the data subject considers that his or her personal data processing rights have been infringed, he or she has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.