3. Purposes and Legal Bases
We process personal data for the following purposes:
|
Purpose |
Legal Basis |
|
Responding to enquiries or demo requests |
Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) legitimate interest |
|
Processing purchases |
Art. 6(1)(b) GDPR (contract) |
|
Sending marketing communications |
Consent where required by law; otherwise legitimate interest |
|
Website analytics and performance measurement |
Consent where required by law; otherwise legitimate interest |
|
Ensuring Website security and preventing fraud |
Art. 6(1)(f) legitimate interest |
Where we rely on legitimate interests, we have conducted an assessment to ensure that our interests are not overridden by your rights and freedoms.
You have the right to object to processing based on legitimate interests at any time.
4. Cookies and Tracking Technologies
We use cookies and similar technologies to operate, secure, and improve the Website.
Where required by applicable law (including in the European Economic Area and the United Kingdom), we obtain your consent before placing non-essential cookies such as analytics and marketing cookies.
In other jurisdictions, cookies may be placed based on our legitimate interests or as otherwise permitted under applicable law.
You may manage or withdraw your cookie preferences via the “Cookie Settings” link where available.
5. Third-Party Recipients
We share personal data with service providers acting on our behalf:
|
Service Provider |
Role |
Location |
|
Typeform S.L. |
Demo bookings |
EU |
|
Stripe Payments Europe, Ltd. |
Payment processing |
EU & US |
|
Beehiiv Inc. |
Newsletter subscription |
US |
|
Google Ireland Limited |
Analytics and marketing |
EU |
|
Meta Platforms Ireland Ltd. |
Analytics and marketing |
EU & US |
|
Dealfront Finland Oy |
Analytics and marketing |
EU |
|
HubSpot Ireland Limited |
Consent management; newsletter subscription; hosting |
EU |
|
LinkedIn Ireland Unlimited Company |
Marketing |
EU & US |
|
Groove Networks Holding, Inc. |
Support and requests |
US |
|
Appsflyer Ltd. |
Marketing |
EU |
|
Microsoft Ireland Operations Ltd. |
Marketing |
EU & US |
|
TikTok Technology Limited |
Marketing |
EU & US |
We enter into appropriate contractual arrangements with our processors in accordance with Article 28 GDPR where applicable.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy and may be extended where required by law or to establish, exercise, or defend legal claims.
8. Your Rights
If you are located in the European Economic Area or the United Kingdom, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase personal data
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
You may contact us at support@covve.com to exercise your rights.
If you are located in other jurisdictions, you may have additional rights under applicable local law.
9. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
10. Security Measures
We implement appropriate technical and organisational measures designed to protect personal data, including:
- Encryption in transit (HTTPS)
- Access controls and role-based permissions
- Data minimisation practices
- Contractual safeguards with service providers
However, no internet-based system can be guaranteed to be fully secure.
11. Children
Our Website is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children.
12. Updates
We may update this Privacy Policy from time to time. The most recent version will always be available on this page with an updated effective date.