Backbox Software Ltd.
This Privacy Notice sets out information about our privacy practices and your rights.
We may amend this Privacy Notice at any time and for any reason. The updated version will be available by on our website. By logging in and using our Website for the first time following change, you consent to the updated Policy.
Controller contact details
The controller for the processing of personal data under this Privacy Notice is Backbox Software Inc., 14135 Midway Road, Greenhill Towers, Suite G250,
Addison, TX 75001. Any enquiries about this Policy may be mailed by post to the address listed above or alternatively sent by email to email@example.com. “BackBox” shall include BackBox’s affiliates and related companies worldwide.
We may collect personal data from partners, clients and officers, employees or contractors of clients which are organizations.
Types of personal data we collect
To engage and serve you or your organization as a partner, distributor or client, we may need to collect personal data about your organization, including name of organization, names of officers, address, contact details and business details. We may also collect data on the industry in which your organization operates and your business and personal interests. We also collect certain technical information when accessing the website via “cookies” and other tracking technologies. The Website stores cookies on your computer. These cookies are used to collect information about how you interact with our Website and allow us to remember you. We use this information to improve and customize our browsing experience and for analytics and metrics about our visitors both on the website and other media.
In the course of your matter, we may collect other personal data about you that is relevant to the matter – see section below for further information about this. We use the technical information as set out above to help us monitor and improve our Services. We also use this information for other general business purposes, such as for (i) creating records and reports for internal use; (ii) customizing our Services to suit your interests; and (iii) providing aggregated information to third parties on how visitors use the Website, such as “traffic statistics” and “response rates”; (iv) for analytical purposes, and to research, develop and improve our Services; (v) to prevent fraud, protecting the security of our Services, and addressing any problems with our Services; (vi) as required or permitted by any applicable law, for example, to comply with audit and other legal requirements.
Generally, we will obtain this personal data directly from you. Sometimes, we may obtain personal data about you from third parties (for example, end users who sign end user license agreements) or public sources.
Purposes of processing
We will process your personal data for the purpose of marketing and selling BackBox’s products to you and/or for distribution to customers and other uses for other purposes related to that purpose (for example, to comply with anti-money laundering and terrorism financing laws, and to send you invoices).
We may also use your contact details and interests to manage and develop our relationship with you and to send you communications about our products, services and company.
Some of the processing is necessary to comply with applicable laws (for example, anti-money laundering and terrorism financing laws).
Legal basis for processing
The processing described above is necessary for the purposes of BackBox’ s legitimate interests as a software sales company to its customers and in developing and growing our business. These legitimate interests include providing products and services to our customers, facilitating marketing and distribution of our products, ancillary services (such as sales management, exportation of products and processing) and complying with all regulations which apply to the provision of those services; developing and growing our business and its relationships, understanding the needs of our partners, customers and prospective customers, and managing partner relationships.
BackBox will only rely on those legitimate interests to process personal data where the processing is necessary for the purposes of those legitimate interests and such legitimate interests are not overridden by the data subject’s interests or fundamental rights and freedoms.
Personal information will only be processed with your consent, which may be withdrawn by you at any time by emailing us. For the avoidance of doubt, the withdrawal of your consent will not affect our right to continue processing any information which you consented to prior to the withdrawal, or other data processing that is being done on other lawful grounds.
Recipients or categories of recipients
We may disclose your personal data to our affiliates, subsidiaries, local sales and support representatives and other third parties who provide administrative, storage, telecommunications, information technology and other services to us in support of our business (collectively: “Affiliates”). However, we will ensure that all such parties are subject to obligations not to use or disclose that data.
For the purposes of your matter, we may disclose your personal data to third parties who provide services which assist us with your matter and to third parties who are involved in the matter – see below for further information about this.
In some countries, we may be required by law to provide your personal data to government authorities.
In exceptional circumstances, we may be required or permitted by law to disclose personal data, for example to law enforcement authorities or to prevent a serious threat to public safety.
We may transfer your personal data overseas.
The information systems of BackBox are hosted on central servers located in Israel, in the US, in Europe and other locations. Any personal data that we store on our systems will be transferred to one of those locations.
BackBox’s – information systems, including electronic matter files, partner or customer information and finance systems are accessible by BackBox’s offices around the world. This means your personal data may be accessed by BackBox’s personnel, and Affiliates, and if we do, we will ensure that these third parties will be subject to the same level of privacy and data protection as set forth in this Policy.
When a matter involves obtaining assistance from our offices in another country, we may need to transfer details about the matter, including your personal data, to a BackBox office or third party in that country. BackBox will always make such transfers in accordance with the requirements of the data privacy laws of your home country and will require that any overseas third party to which it discloses your personal data to: (a) only uses that personal data for the purposes for which it was disclosed; (b) uses all technical and organizational measures which are reasonable in the circumstances to secure that personal data; (c) deletes that personal data when it is no longer required; and (d) treats that personal data in accordance with this Privacy Notice and their local data privacy law. By providing your personal information to us, you agree to this transfer, storing and processing.
Change of control
We may transfer Information in the event of a business transaction, such as if we or one of our business units or our relevant assets are acquired by, sold to, or merged with another company or as part of a bankruptcy proceeding or a business reorganization. We will ensure that such transferred information be subject to the same level of privacy and date protection as set forth in this policy.
BackBox will only retain personal data for as long as it has a legitimate purpose to do so. BackBox will need to retain personal data for commercial and legal purposes. How long it will need to retain personal data for these purposes will depend on the specific personal data.
BackBox generally retains partner and customer documentation and files for at least 7 years after the end of the matter, in case a dispute arises in relation to the matter.
BackBox is required to retain certain client and matter information for a specified period by corporate and tax laws, industry regulations or by insurance providers.
Once BackBox has no legal or commercial reasons to retain personal data, it will be securely deleted, anonymized or destroyed.
Return or Deletion of Data at your Request
You may request at any time for us to return to you, anonymize or delete, any personal data we are retaining. This may affect the products or services you are receiving from BackBox.
Requirement to provide personal data
As a partner, it is mandatory to provide us with basic personal data such as your name and contact details. If you do not provide this data, we will not be able to transact with you.
It is optional to provide most other personal data. However, in many cases, if you do not provide that data, the services we can provide to you may be limited or may not take into account your particular circumstances.
Third Party Links
We may provide additional links on our Website that we believe may be useful to you. These links will lead you to third party websites (“Sites) that are not affiliated with BackBox and may operate under different privacy practices. You are responsible for reviewing the privacy policies of all such other websites, as we have no control over information that is submitted to other sites.
Our Services are not directed at children (persons under the age of 13, or another age if required by applicable law), and we do not knowingly collect personal information directly from children. If you are a parent or guardian of a child and have become aware that your child’s personal information has been collected without your knowledge and consent, please email us at firstname.lastname@example.org so that we can delete this information.
We have put in place reasonable controls designed to help safeguard the personal information we collect via the Sites. However, no security measures are perfect, and we cannot assure you that personal information that we collect will never be accessed or used in an unauthorized way.
You may have certain rights in relation to the personal information that has been collected from you. Please note that these rights may be limited by applicable laws and subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking. In addition, we specifically mention the General Data Protection Regulation (“GDPR”), a European Union (EU) wide legal framework for the standardization of data protection. If you are a citizen of the EU and the European Economic Area (EEA), you should consult the GDPR for more information in relation to your rights.
If you wish to issue a request to exercise your rights where applicable by law, please email us, providing your name and contact information along with your request. We may request additional personal information from you in order to validate your identity. We will also advise you regarding the actions we intend to take pursuant to your request, without undue delay. Please note that such requests are subject to applicable legal obligations imposed on us by law.
If you no longer wish to receive our emails, please inform us by sending email to email@example.com.