Privacy Notice
Hacken.io (“Hacken” or “we”) cares about your personal data and does everything possible to protect it. This Privacy Notice (“Privacy Notice”) is here to help you understand what happens to your personal data when you use our website, available by the link – https://hacken.io/ (“Website”).
About us
| Data controller. | Hacken OÜ. |
| Address. | Harju maakond, Tallinn, Kesklinna linnaosa, Parda tn 4, 10151. |
| Email. | support@hacken.io – for any issues. |
About you
When you visit our Website, you become our user (“User”).
| Type of User | Description |
| Visitor | The User who visits our Website. |
| Potential Client. | The User who requests our services. |
| News Subscriber. | The User who subscribes to our news. |
| Contactor. | The User. who leaves data to contact them. |
| Potential Partner. | The User, who leaves data to become our partner. |
| Job Applicant. | The User who leaves a CV in our Career section. |
Personal data
Sources of data
We receive data when you visit our Website and interact with it, depending on your actions on the Website.
We may also (although we do not necessarily do so) receive data from third parties. It depends on your settings and the features you use.
Legal basis for processing
To process your personal data, we rely on the following lawful basis:
- performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract with you;
- legitimate interest — for the processing necessary for the development of our services and reasonable for you;
consent — for additional processing for specific purposes (read more below).
Visitor’s data
When you use our Website as a Visitor, we collect some data automatically. We need technical data to operate, support, and improve the Website’s functionality.
| Source of data | Description | Reasons for processing | Legal basis |
| Necessary technical data. | Information about your visits and use of the Website, including the source of the links, the time and duration of the visit, and navigation. | The smooth operation of the Website. | Legitimate interest. |
| Necessary cookies. | Information that is necessary for the operation of the Website. | Improving your experience using the Website. | Performance of the contract. |
| Preferences cookies. | Help to remember your settings on the Website. | To improve your experience during visiting our Website. | Consent. |
| Statistics cookies. | Information is used to understand how Users interact with the Website by collecting and reportinginformation. | To monitor Website performance for statistical purposes. | Consent. |
| Marketing cookies. | Marketing information used to match relevant advertising to you. | Marketing. | Consent. |
Data storage
| Data that are processed on the basis of a legitimate interest. | Stored for up to 3 years after the last use of the Website. |
| Data is processed on the basis of your consent. | Storage periods are presented in our Cookies Policy. |
Potential Clients’ data
| We collect data when | Description | Reasons for processing | Legal basis |
| You click “Request a quote’, “Reach our team”, or “Request audit”. | Name;nickname in messenger you choose;type of service you are interested in;company name;corporate email;corporate website;any other details or message. | To contact and help you. | Performance of the contract. |
| You click “Request a quote’, “Reach our team”, or “Request audit”. | Email. | Marketing. | Consent. |
| You book a meeting with Hacken | Name;company name;work mail;stage of the product;your message. | To contact and help you. | Performance of the contract. |
Data storage
| Data that is processed on the basis of the performance of a contract. | Stored until completion of services + 3 years. |
| Data is processed on the basis of your consent. | Stored until you unsubscribe from the mailing. |
News Subsribers’ data
| Source of data | Description | Reasons for processing | Legal basis |
| Newsletter form. | Email. | Marketing. | Consent. |
Data storage
| Data is processed on the basis of your consent. | Stored until you unsubscribe from the mailing. |
Contactors’ data
| We collect data when | Description | Reasons for processing | Legal basis |
| You click “Invite speakers”, “Co-host retreat”, or “Contact for moderation”. | Full name;email;name of media or event;link to media or event;your message. | To decide whether we are interested in taking participation in your event. | Legitimate interest. |
Data storage
| Data that is processed on the basis of legitimate interest. | Stored for 1 year after the last communication. |
Potential Partners’ data
| We collect data when | Description | Reasons for processing | Legal basis |
| You click “Become Partner” or “Apply for the partnership”. | Name;work mail;company name;business domain;corporate website;your message. | To decide whether you are a suitable candidate for the partnership program. | Legitimate interest. |
| You click “Become Partner” or “Apply for the partnership”. | Email. | Marketing. | Consent. |
Data storage
| Data that is processed on the basis of legitimate interest. | Stored for 1 year after the last communication.Our internal policies and applicable legislation regulate storage periods for other data provided by partners. |
| Data is processed on the basis of your consent. | Stored until you unsubscribe from the mailing. |
Job Applicants’ data
| We collect data when | Description | Reasons for processing | Legal basis |
| You apply for an open position | Full name;email;phone number;cover letter;CV and information in it. | To decide whether you are a suitable candidate for an open position. | Legitimate interest. |
Data storage
| Data that is processed on the basis of legitimate interest. | Stored for 1 year after the position is closed.Our internal policies and applicable legislation regulate storage periods for candidates that join our team. |
Data obtained from third parties
Also, we can collect some data from third parties. Our partners may provide us with it. We may receive data through our other services.
The scope of the data collected, the purposes and the legal basis for the processing is determined by the respective privacy documents of our other services:
Please note: we can get data from third parties, but we won’t necessarily get it. It all depends on your settings and the features you use. For example, we can receive data if you communicate with us through these third parties.
Data sharing with third parties
We share your personal data with our contractors in the scope we need to provide services.
Details
We share your data on the following grounds:
- Performance of a contract. We may transfer your data to our contractors and partners for contractual purposes.
- Consent. We may transfer your personal data based on your explicit consent.
- Compliance with the law. We may disclose your personal data to third parties to the extent that it is necessary:
- to comply with a government request, court order, or applicable law;
- to prevent unlawful use of our Website or policies;
- to protect against claims of third parties;
- to help prevent or investigate fraud.
Transfer to third parties. We may transfer your personal data to third parties based on a data processing agreement, subject to applying technical and organisational measures to protect your personal data. We may share data with certain companies, consultants and contractors hired to provide certain services on our behalf.
Please note! We will ask for your consent if data transfer is not part of the contract.
Data protection
We use different organisational, physical, and security measures presented below. We are constantly improving these measures, so there may be more of them as you read them.
| Storing documents in separate data storage | Encryption | Provision of access to personal data only to authorised persons |
| Password Policy | Licensed antivirus software | Internet, email policies |
| Two-factor authentication | Backuping | Other security measures |
Data subjects rights
You, as a data subject, have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them:
| The right | Description |
| Right to access. | You can request an explanation of the processing of your personal data. |
| Right to rectification. | You can change the data if it is inaccurate or incomplete. |
| Right to erasure. | You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law. |
| Right to restrict the processing. | You may partially or completely prohibit us from processing your personal data. |
| Right to data portability. | You can request all the data that you provided to us, as well as request to transfer data to another controller. |
| Right to object. | You may object to the processing of your personal data. |
| Right to withdraw consent. | You can withdraw your consent at any time. |
| Right to file a complaint. | If your request was not satisfied, you can file a complaint to the regulatory body. |
Note: To exercise your rights contact us.
If your request was not satisfied, you can file a complaint with the regulatory body — the Data Protection Inspectorate, at info@aki.ee or write a letter to 39 Tatari St., 10134 Tallinn.
Cookies
We use cookies that are needed for the Website’s operation. By using cookies, we receive automatically collected data. You can read more in our Cookies Policy.
If you want to disable cookies, you can find instructions for managing your browser settings at these links:
Update
This Privacy Notice and the relationships falling under its effect are regulated by the Regulation (EU) 2016/679 (“GDPR”).
Existing laws and requirements for the processing of personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on our Website.
If significant material changes are made that affect your privacy and confidentiality, we will notify you by displaying information on the Website and ask for your consent.
