Request Access - ResearchBox.ai

The controller is:

Cloud Apps SRL
Bulevardul Regina Maria 32,
Ground Floor,
Bucharest,
Sector 4

Email: cloudapps@clusterdyne.com

Data protection officer, data-protection@clusterdyne.com

HOW DO WE PROCESS PERSONAL DATA?
We save and use your personal data only to process your orders and to get in touch with you. If you
subscribe to our customer newsletter, we also use your email address to send the newsletter to you. We
will automatically send you status messages from ResearchBox-status.de if you have previously changed
your settings on our customer administration interface in which you request these messages. We also save
and process data that job applicants provide us as part of the job application process.

WHAT CATEGORIES OF DATA DO WE COLLECT?
Every time you visit our website, your IP address and other pieces of information are saved in
anonymized form. If you register an account with us, your contact information will be stored. If you
order products from us, your address and payment information will also be stored.

In particular, we save the following data from you.

REGISTRATION DATA
When you register an account with us, we collect and process certain personal data from you as your
registration data. For example, we need your name, address information, telephone number, payment
information and your email address to process your order. If you pay using a credit card, we do not
collect and store any payment information such as credit card numbers or verification codes. You
disclose this information only to the respective payment service provider. One exception with credit
card payments is what is known as the pseudo card number: in order for you not to have to enter your
credit card information for every payment, a pseudo card number is saved for your account. The pseudo
card number only enables payment for products on our website that you order using your customer account.
A pseudo card number is not identical to the credit card number. We delete all your registration data
either: within 24 months, as soon as you delete your user account with us, or once the statutory
retention period expires. You can delete your user account with us by sending an email to
data-protection@ResearchBox.com with your deletion request. The legal basis for this data processing is
Art. 6 (1) lit. b GDPR.

EMAIL ADDRESSES
If you subscribed to our newsletter, if someone invited you to a ResearchBox Cloud project, or if you
requested that you receive automated messages from status.ResearchBox.com, we also store your email
address. We will delete your email address once you delete your user account or if you unsubscribe from
our newsletter.

We use the double opt-in method to ensure that you actually want to receive the newsletter. If you go
through this process, you agree to receive the newsletter and to be added to the mailing list for it,
and then you will receive a confirmation email that will allow you to legally confirm that you have
registered for the newsletter. We will only add your name to the mailing list if you actually complete
the confirmation.

We use these data exclusively for sending information that you request including information about our
new offers.

We use Brevo as our newsletter software. So if you agree to register for the newsletter, we will send
your data to Sendinblue GmbH. Brevo is prohibited from selling your data and from using it for purposes
other than sending our newsletter. Brevo is a German certified provider whom we chose because they must
comply with the requirements of the EU's General Data Protection Regulation (GDPR) and the German
Federal Data Protection Act (BDSG).

You can revoke your consent at any time to the storage of your personal data (including your email
address) and to the use of your data. You can do this, for example, by clicking on the "Unsubscribe"
link in the newsletter. The legal basis for processing your data for the above purpose is Art. 6 (1)
lit. a or Art. 6 (1) lit. b GDPR.

SERVER LOG FILES
Whenever you visit our websites, we automatically store certain data. This includes your IP address,
type and version of the browser you use, and the time, date, and website from which you come to our
site. Your IP address is saved in an anonymized manner. You can then no longer be identified. The legal
basis for this data process is Art. 6 (1) lit. f GDPR.

FORUM
If you register for our online discussion forum, we save your username and email address. After you
delete your account in the forum, this saved data will also be deleted. The legal basis for this data
processing is Art. 6 (1) lit. a GDPR.

CAREER PORTAL
If you send us job application documents such as your resume, references and cover letter, we will save
and process these pieces of data. Application documents from job applicants that do not result in hires
are deleted after 6 months. If you wish to be considered for future job openings and you consent to a
longer storage period, your application documents will be deleted after 24 months. With applications
that result in hires, the documents are forwarded to our HR department. The legal basis for the
processing of your personal data in the job application process is Art. 6 (1) lit. b GDPR.

SWEEPSTAKES
We sometimes have sweepstakes on our websites for various occasions. If you choose to participate in the
sweepstakes, we save your first and last names, your email address and, if applicable, the country you
come from. We use the collected data only to process the sweepstakes. Once the sweepstakes end and the
winner or winners are chosen and notified, the collected data are deleted. The legal basis for this data
processing is Art. 6 (1) lit. a GDPR.

WEBSITE ANALYSIS
On our website, we use the open-source web analysis tool Matomo on our self-hosted system. Matomo uses
cookies. These are text files that are saved on your computer and which allow Matomo to analyze how you
use our website. The cookies generate information about how you use the website, and our server saves
this information.

We do not send to third parties the data that the cookies generate about how you use our website. You
can prevent the software from generating cookies by changing the settings of your internet browser.
However, if you do this, you may not be able to use all of the functions on our website.

If you do not want us to save and use your data using Matomo, you can deactivate it by clicking here:
Your internet browser will create an opt-out cookie, which will prevent the Matomo software from
creating a cookie when you visit our website.

WHO WE FORWARD YOUR DATA TO
External service providers may have access to your data while they assist us in providing our services.
In some cases, third parties such as government authorities, external consultants, or our business
partners may receive your data.

PAYMENT VIA CREDIT CARD:
If you pay via credit card, the payment is processed by an external service provider. For credit card
payments, your information is collected directly by Computop at the address Computop
Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, D-96050 Bamberg.

DEBT COLLECTION AGENCY
If you as a customer fail to pay your invoices on time, your necessary data are passed on to an external
debt collection agency.

THIRD COUNTRIES
Data is transferred to third countries in adherence to the legally regulated admissibility requirements.
We will not transfer your data to a third country if it does not serve the purpose of performing our
contract with you; if we have no consent from you; if the transfer is not necessary to assert, exercise
or defend legal claims; and if there are no other exceptions. We will only transfer your data to a third
country if there is an adequacy decision in accordance with Art. 45 GDPR or appropriate safeguards in
accordance with Art. 46 GDPR.

OTHER CATEGORIES OF RECIPIENTS
State authorities and courts

WHERE DO WE PROCESS YOUR DATA?
We process your data exclusively in our data centers in Germany and in Finland.

1. GENERAL INFORMATION

The chatbot completely automates the answers to your questions, and does so based on textual analysis
and machine learning. The answers are based entirely on information that ResearchBox has created itself,
for example, information on ResearchBox Docs.

We may need to make adjustments to the data protection policy for the chatbot as part of the continuous
process for its improvement and further development. That’s why we recommend that you review this set of
policies from time to time.

ONLINE PRESENCE ON SOCIAL MEDIA
We maintain online presence on social networks and platforms in order to communicate with our customers,
interested parties, and users and to inform them about our services. We use Facebook, Twitter, and
Instagram, among others. When visiting each of these platforms, you as a user agree to the terms and
conditions and the data processing guidelines of the corresponding operator.

Unless stated otherwise in our data privacy notice, we process user data if users communicate with us on
these social networks and platforms, e.g. publish posts on our pages or send us messages.

We at ResearchBox Online process users' data only when it is in the customer's legitimate interest for
us to do so in accordance with Art. 6, (1) lit. b GDPR. As a company, we have a legal right to obtain
general customer information to use in customer accounts. We also use customers' data for communication
purposes. If any of the providers below request users for consent for processing their data, the legal
basis for data pracessing is Art. 6 para. 1 lit. a. GDPR.

For detailed information about the data processing operations of the providers below, as well as their
opt-out options, please check the links that we have listed below.

YOUR RIGHTS AS A "DATA SUBJECT"
You have the right to information about your personal data that we process. If you do not make requests
for information in writing, please bear in mind that we might ask you to provide proof that you who you
claim to be. Furthermore, you have a right to rectification or deletion or restriction of processing, as
it is applicable to you under the law. Furthermore, in accordance with legal requirements, you have the
right to object to us processing your data. You also have the right of data portability.

RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint about the processing of your personal data by us to a
supervisory authority for data protection.

VOLUNTARY NATURE OF DATA PROVISION
There is no statutory obligation for you to provide your data to ResearchBox. However, you cannot use
some of our services if you do not provide your data to us. Your decision to provide us with your
personal data is completely voluntary.

PRIVACY POLICY