Data Privacy Notice

We are pleased about your visit and your interest in our services. The protection of your personal data is important to us. We would therefore like to inform you below about how personal data is processed at Flable.ai (hereinafter referred to as “Flable”).

a. How we treat your data?

Personal data is data that enables the direct or indirect identification of a person. It does not matter whether the determination can be made on the basis of a single piece of information or several pieces of information. The more information and data can be combined, the more precisely the person can be determined. Personal data includes, for example, the name, address, age or e-mail address, but also indirect data such as an IP address or social security number.

Controller

The responsible party for the processing and protection of your personal data is Flable. If you have any questions regarding data protection or questions relating to the processing of your personal data or the exercise of your rights, please contact us by either using the contact form at the bottom of this page or at the following office address telephone number or email address:

Office Address: Flat no. D-5/102, Bramha Suncity, Pune, 411014, India.
Email address: info@flable.ai
Phone Number: +91 7769975889

b. Data categories and recipients of the data

1. What categories of data we use?

• Contact information: name, address, telephone, email.
• Professional information: company name, address, position.
• Location or preference data.
• Product and service data: purchases, assignments, etc.

2. Recipients of personal data

To the extent necessary, departments within Flable will have access to personal data that require it to fulfill their duties.In addition, your personal data may be disclosed to business partners (other service providers) to provide services to us or to you on our behalf. These are carefully selected partners who provide services for Flable. These service providers handle your personal data as so-called processors on our behalf and according to our instructions. Each business partner or service partner is expected to use reasonable security measures appropriate to the nature of the information involved to protect your Personal Information from unauthorized access, use, or disclosure. Service providers are prohibited from using Personal Information that we provide to them other than as specified by us.

Categories of service provider that we may transfer your data to include:

• Suppliers of IT and other specific service vendors
• Our professional advisers, such as lawyers, accountants, and auditors.
• Regulatory authorities, public authorities, law enforcement agencies and courts
• Affiliates consist of our determined business enterprise and some other subsidiaries, joint assignment partners, or different companies that we control or that can be under commonplace management with us.
• Third party providers

We do not sell your data or share it with third parties unless otherwise specified in the subsequent sections describing the purposes of the processing of personal data.

3. Transfer to third countries or international organizations

When forwarding data within Flable (if permitted), transmitting data abroad and processing data with external partners, We observe the applicable data protection laws and safeguards these activities. A transfer to countries outside the US ("third countries") only takes place to the extent necessary for the respective purpose. Before any transfer of personal data to processors or third parties in third countries, we ensure that a transfer mechanism exists in accordance with applicable law. We have implemented appropriate technical and organizational measures to help protect your information.

A transfer to countries outside the European Union or the European Economic Area ("third countries") only takes place to the extent necessary for the respective purpose. Before any transfer of personal data to processors or third parties in third countries, we ensure that a transfer mechanism exists in accordance with the EU GDPR:

• If it's a safe third country, the data transfer is covered by an adequacy decision.
• If data is transferred to a so-called insecure third country, this data transfer is covered by standard contractual clauses.

c. Your rights as a data subject

You retain control over all personal data that you provide to us when visiting our website or using our services. You have the following rights, which you can exercise free of charge.

• Right of access:
  You have the right to obtain information about your personal data stored by us at any time. You have the right to know for what purposes your personal data is processed, how long it is processed and to whom it is disclosed. Please understand that we must first verify the identity of the requesting person before we can provide information.
• Right of revocation/objection:
  If you have given us consent for a certain processing of your data, you have the right to revoke this consent at any time with effect for the future.If we process your personal data within the framework of a balancing of interests due to our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future.
• Right to data portability:
  You have the right to request a transfer of your personal data from us to another entity.
• Right to rectification, erasure or restriction:
  You have the right to have your data rectified and/or supplemented by means of an additional declaration, you also have the right to have your data deleted for the purposes for which they were collected or to limit the processing of your data.
• Right of complaint:
  You have the right to complain to a supervisory authority or our data protection officer, insofar as you should have a reason to complain. To claim rights against our company, please contact the contact person listed at the beginning of this data protection notice.

d. How is your data secured?

We apply strong technical and organizational measures, and adhere to privacy by design principles.

e. Duration of Storage

We take the protection of personal data seriously and have implemented suitable technical and organizational measures in accordance with legal requirements to ensure the safeguarding of natural persons' rights and freedoms. We take into account the state of the art, implementation costs, as well as the nature, scope, and purposes of the processing to ensure a protection level that is appropriate to the risk. This includes measures to restrict the access to and disclosure of data.We also adhere to the principles of privacy by design and default. This means that we consider the protection of personal data as early as the development or selection of hardware, software, and processes.Furthermore, we have procedures in place to guarantee the exercise of data subjects' rights, such as the right to access, rectify, and delete personal data. We also have processes in place to respond to data breaches or compromises to ensure timely and appropriate actions are taken.

You may replace, amend, or delete your data at any time by signing in to your account, if you have one, and visiting the account settings section that allows you to control your private data. You could additionally contact us to request entry to, correct, or delete any private facts that you have supplied to us.

In addition, your data will be stored until the expiry of the statutory limitation periods, usually 3 years, insofar as this is necessary for the assertion, exercise or defense of legal claims. After that, the corresponding data will be routinely deleted if it is no longer required to achieve the necessary purposes.

f. Automated decision making incl. profiling

Personal data that we collect, for example, on our websites and that help us to understand your interests may be used for personalization purposes in order to provide you with content and information that is relevant to you. Automated decision-making based on this collected data does not take place.An informal objection to this type of use is possible without giving reasons at any time for the future.

g. Children (Under the age of 13)

We do not deal with anyone under the age of thirteen. We do not knowingly gather personally identifiable information from anyone under the age of thirteen. If you are a parent or guardian and you are aware that your child has supplied us with personal data, please contact us. If we become aware that we have gathered personal data from anyone under the age of thirteen without verification of parental consent, we will take steps to remove that information from our servers.

If we want to depend on consent as a criminal basis for processing your information and your country requires consent from a parent, we may require your parent’s consent before we accumulate and use that data.

h. Purpose of Processing data

The following list shows the various processing purposes for personal data here at Flable. Each entry contains a brief description of the respective purpose together with the corresponding legal basis for the processing.

We only collect and processes your personal data if you have given your consent or if it is permitted or required by other legal regulations. We generally obtain this data in two ways: either you have provided us with the data or our registered provider has obtain your data through :

• Apps: We collect data from the apps you use, the legal basis of data processing is your consent pursuant of Art.6 a GDPR.

  Our registered providers provide us with the data from the various apps for mobile devices (iOS and/or Android) that can collect personal data. This personal data is required for the function of the respective app. Apps on mobile devices can gain access to functions of the end device if required and with the consent of the user. Each app that our provider offers will ask you for consent to use the required functions.

• Websites: Cookies and functional data under GDPR.

  As a rule, you can use theses websites without providing any personal information. Exceptions are so-called technically necessary cookies, which are required to provide certain functionalities such as secure login or cookie management. For some functionalities offered on the websites, they will request personal information from you to be able to process the respective service quickly and in a user-friendly manner or to be able to offer the service at all. Some data is already collected automatically and for technical reasons when you visit these website. The data processing is based on Art. 6 (1) lit a or f of GDPR. You have the right to revoke your consent at any time with effect for the future.

• Newsletter: We would like to send you information about our products and services that may be of interest to you. For this we gather and process your data in different ways.

  The legal basis of the data processing is your consent pursuant to Art. 6 (1) lit. a GDPR. You have the right to revoke your consent at any time with effect for the future. You will find unsubscribe instructions in the footer of each newsletter.

• Marketing Platforms / AI Platforms / CDP: We will receive your data from our registered providers of purchasing or using products or services from various platforms such Marketing, CDP or AI platforms which later will be used for direct marketing measures to draw attention and updates about purchased or related products or services or study your behavior over these products and services.

  The legal basis for data processing is the safeguarding of the legitimate interests of Flable in accordance with Article 6 (1) lit. f GDPR. Our overriding legitimate interest follows from our interest in being able to send you news and improvements to the products or services you have purchased or related products or services. You can object to the processing of your personal data for these purposes at any time with effect for the future. The objection can be made easily via the request form provided at the bottom of this page.

• Google Analytics: The legal basis of the data processing is your consent according to Art. 6 para. 1 lit.a. You have the right to revoke your consent at any time with effect for the future.

  Google Analytics is a web analytics service provided by Google, Inc. This service allows us as a website operator to track and analyze the interactions of visitors with our website. Google Analytics allows us to obtain information about the origin of visitors, the actions performed on the website and the conversion rate of visitors. This information can be used to improve website performance and optimize the user experience for visitors.

• Social Media Platforms: We offer options using social media on the basis of Art. 6 (1) lit. f GDPR. These social media services may independently collect personal data, e.g. via your created profile. If you are already logged in to a social network of your choice, this takes place without another window. Since this transmission is direct, we do not obtain knowledge of the transmitted data. What is transmitted is the fact that you have called up the corresponding page. If you are logged into Facebook & Co. at the same time, this information is assigned to your social media account and is thus associated with your person. For more information about the further use and storage of your personal data by Facebook and Twitter, please contact these social media companies directly.

Third Party Cookies and Consents

Various third-party providers use our websites to compile usage statistics, provide additional functions and personalize content. If you give your consent in the cookie banner, the software of these third-party providers may place cookies. The following table lists the third-party providers and the respective processing purposes of the cookies placed .Please click on the link of the third-party provider to be redirected to the corresponding privacy statement.