Privacy Notice

The last update of this Privacy Notice was made on 24 of January, 2024

This Privacy Notice describes the privacy practices for the Website checkgeo.io (hereinafter "Website", "Site") operated by FREQUENCY FIRST SOLUTIONS LLC (hereinafter "we", "us", "our", "Company") and how the Website and checkgeo.io, operated by Company, collect and use the personal data you provide to the Company, with the purpose to use checkgeo.io (hereinafter referred to as the "checkgeo.io"). It also describes the choices available to you regarding our use of your personal information and how you can access, update and delete this information.

The use of the Website is possible without any indication of personal data; however, if a user wants to use the checkgeo.io, collecting and processing of personal data could become necessary. If the processing of personal data is necessary, we generally obtain consent from the user as a data subject, except cases when personal data processing is available under other grounds (legitimate interests, contract executing, etc.).

The processing of personal data, such as the address, e-mail address, telephone number or billing information of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Company. By means of this Privacy Notice, we would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects (users) are informed, by means of this Privacy Notice, of the rights to which they are entitled.

This Privacy Notice is an integral part of the Terms of Use. As the controller, the Company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this Website. In this Privacy Notice FREQUENCY FIRST SOLUTIONS LLC (registered address: 2810 N Church St PMB 573551 Wilmington, Delaware 19802-4447 US) is identified as the Controller of personal data.

DEFINITIONS

Personal data
means any information relating to an identified or identifiable natural person ("data subject/user"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Controller
for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is the Company.
Processing
is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data subject/user
is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing; a user of the checkgeo.io.
Pseudonymization
is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject/user without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Encryption
is a security protection measure for personal data; as a form of cryptography, it is a process whereby personal data gets turned into an encoded and unintelligible version, using encryption algorithms and an encryption key, and whereby a decryption key or code enables users to decode it again.
Consent
of the data subject/user is any freely given, specific, informed and unambiguous indication of the data subject/user`s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

PERSONAL DATA COLLECTION AND USE

Anyone can access our Website without necessity to provide its personal data.

The purpose of processing your personal data by the Company and collection of information about you are as follows (the "Purpose"):

We may use your Personal data to:

  • Your intention to use checkgeo.io;
  • For the performance of a contract to which the user is a party, in accordance with Article 6.1.b of the GDPR and the collected data are necessary in order for checkgeo.io to identify and bill the user and to charge its bank card number;
  • For verifying your identity and providing customer care service and assistance;
  • Analyze your use of our Website and checkgeo.io to better understand how they are being used so we can improve our Services and the user experience, and engage and retain users.

Please be aware that you are not obliged to provide us with your personal data. However, if you do not provide us with your email address and payment information, you may not be able to create an account to log into and make a purchase of checkgeo.io.

SCOPE AND CATEGORIES OF PERSONAL DATA, LAWFUL BASIS FOR PERSONAL DATA PROCESSING AND DATA SUBJECT CATEGORIES

No.Scope and categories of personal dataData subject categoriesProcessing purposeLawful basis for personal data processing
1e-mail address and phone numbercheckgeo.io usersto provide checkgeo.io; to communicate information about our services;performance of a contract
2e-mail addresscheckgeo.io usersto send marketing communicationsconsent
3IP addresswebsite usersto provide the features of the WebsiteLegitimate interest
4location data – for statistics of user's areas involvementwebsite usersto provide the features of the WebsiteLegitimate interest
5Automatically collected data (cookies and similar technologies, device and connection data)website usersto provide the features of the Websiteconsent
6Phone numbers of target device usersTarget device user'sTo provide checkgeo.ioconsent
7Location dataTarget device user'sTo provide checkgeo.ioconsent
8IP address; Email; Browser information (Browser name, version); Device type (Web, Mob, Laptop); OS (Windows, Android, MacOS); Browser language; Device screen sizecheckgeo.io usersTo fulfill the legal obligations of the CompanyConsent; Legitimate interest

ENCRYPTED DATA

We have put in place security hardware, software and software update and network scanning procedures designed to safeguard and secure the information (including personal data) under our control and follow generally accepted industry standards. We work with third party service providers and vendors that use encryption and authentication to maintain the confidentiality of your personal data. If stored, we house personal information on systems behind firewalls that are only accessible to limited personnel, who are under DPA.

We store personal data of all our users in an encrypted way. We use asymmetric public-private key cryptosystem RSA with key size is 4096 bit (further RSA) and symmetric-key algorithm AES with key size is 256 bit (further AES).

Encryption Process:

  • Asymmetric public-private key cryptosystem RSA (key size is 4096 bit) uses public encryption key and private decryption key.
  • The public encryption key is stored in a database (DB) in an open way.
  • The private decryption key is stored in DB encrypted using AES 256 using a key which consists of the user's password and secret key.
  • User's credentials are user's login is stored in DB. User's password is not stored. We store only the hash of the password.
  • We generate public-private key pairs for cryptosystem RSA during user's sign up.
  • Login process: We use the user's password from the login form for decrypting the user's original private key.
  • Encryption data: We get opened data from devices using encrypted https protocol.
  • Decryption: We get user's decrypted private key. We decrypt user's text data using user's original private decryption key.

WHERE DATA SUBJECT'S PERSONAL DATA ARE STORED

Usually, Personal data, which are provided by users and information, which are collected from a target device, are stored on the servers in Germany and Netherlands. Personal data, which are provided by users and information, which are collected from a target device, may be stored outside the EU. In some cases, these personal data and information may be stored in Canada. We adopted all necessary security measures for protection of your Personal Data according to the best practices of security, protection and confidentiality.

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period and when we no longer need personal data, we routinely and securely delete or destroy it, as long as it is no longer necessary for the Purpose.

YOUR RIGHTS AS A DATA SUBJECT

Access

You have the right to request an explanation of the personal data we process about you. Also, you can request a copy of your personal data undergoing processing.

Data portability

You have a right to receive the personal data concerning you, which you provided to us. You can make a request to transmit this data directly to another data controller in a structured, commonly used and machine-readable format.

Restrict processing

You have the right to request us to temporarily or permanently stop processing all or some of your personal data.

Rectification

You have the right to request to rectify/correct any inaccurate data about you.

Erasure

You have a right to be forgotten which means that we will delete all personal data that you have provided to us. Note, we may retain certain information as required by law and for legitimate business purposes permitted by law.

Object processing

You can, at any time, object to the processing of your personal data on grounds relating to your particular situation. You have the right to object to your personal data being processed for direct marketing purposes.

Right to lodge complaints

You have the right to lodge complaints in relation to the data processing activities carried out by us to the competent data protection authorities.

Not to be subject to automated decision-making

You have a right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect

Right of confirmation

Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed

Right to withdraw data protection consent

Each data subject shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time.

CHILDREN'S PRIVACY

Provision of checkgeo.io generally not aimed at children. This Website is not intended for use by children under the legal age of adulthood in your country.

The Company is acting in compliance with COPPA. We do not knowingly collect information from children and minors. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Notice by instructing their children to never provide information on our Website without their permission.

TARGET DEVICE DATA PROCESSING

Target Device Data

The checkgeo.io starts collecting data from a target device, on which was sent a location link, which may include personal data relating to a target device user(s) ("User Data"). User Data are start collected and processed from the moment, when target device users allow Website to track their location via browser.

checkgeo.io Obligations

We shall:

  • implement appropriate technical and organizational measures to safeguard any Target Device Data against any unauthorized or unlawful access, loss, destruction, theft, use or disclosure;
  • limit access to Target Device Data only to those employees who need to know it to enable the Processor to perform the Services;
  • only process the Target Device Data as specified by this Privacy Notice and in accordance with your instructions, and
  • will not use the Target Device Data for any purposes other than those related to the performance of the Services or pursuant to your written instructions.

MISCELLANEOUS

We may modify this Privacy Notice at any time and post any changes to the Privacy Notice on the Website, so please review it frequently. We indicate the date of the current version of this Privacy Notice below, so you know when it was last updated.

Changes to this Privacy Notice may not affect your personal data we have previously collected from you or after such changes.

If you object to the changes, please contact us as provided below.

This Privacy Notice is governed by and construed with the laws of Delaware, United States. The Delaware courts shall have exclusive jurisdiction to settle any claim or dispute which might arise out of or in connection with this Privacy Notice.

CONTACT

If you have any questions or propositions, please, get in touch with us by e-mail: dpo@checkgeo.io.