Last update: July 19 2024
This Privacy Policy explains the types of personal data that we collect as part of our activities, and the purposes for which we collect such personal data, as well as the rights you may have regarding it.
If you have questions about our processing of your personal data, or to exercise your right you can contact our Privacy Officer and Privacy team here.
If you reside in the European Union or the United Kingdom, you can reach out to our local privacy representative at the following addresses:
| European Union | United Kingdom |
|---|---|
| art-27-rep-unito@rickert.law | art-27-rep-unito@rickert-services.uk |
| Rickert Rechtsanwaltsgesellschaft mbH EU-GDPR Representative Unito Inc. Colmantstr. 15 53 115 Bonn (Germany) |
Rickert Services Ltd UK UK-GDPR Representative Unito Inc. PO Box 1487 Peterborough PE1 9XX (United Kingdom) |
This policy also explains how we use cookies and similar technologies for digital advertising purposes, in compliance with the Digital Advertising Alliance (“DAA”) requirements. Click here to learn more about how we use interest-based advertising. We do not conduct any digital advertising as part of our commercial services, including, in the Unito Platform.
This policy applies to our collection of personal data through our website and marketing activities, including, to provide you with our newsletter, to interact with you on social media, to conduct analytics on our website, to respond to your inquiries, or when you apply for a career opportunity through our website (our “Digital Activities”).
If you are in the European Union or in the United Kingdom, we are the controller of the personal data that we collect as part of our Digital Activities.
Also, this policy applies to our platform that facilitates automated, two-way synchronization of data between various software tools used in project management, customer relationship management, customer support and other domains (the “Unito Platform”).
If you are in the European Union or in the United Kingdom, we are the processor of the personal data that we process as in the Unito Platform. Our clients decide with what integration partners and third parties they want to integrate, and how they would like their workflows to be customized, including different rules and conditions for data synchronization.
1. What personal data do we collect as part of our Digital Activities, and for what purposes?
As part of our Digital Activities, we collect personal data to process job applications, provide newsletters and content, make our website available, conduct digital advertising, and interact with you outside of the Unito Platform. We collect this personal data directly from you. However, we also rely on third parties to collect this data, such as marketing cookies and tracking pixels. Click here to jump to the part of this Privacy Policy that explains how we use tracking technologies.
When your personal data is collected based on your consent, you have the right to withdraw this consent at any time.
The table below contains a list of the purposes for which we process your personal data as part of our Digital Activities, as well as an overview of the types of personal data that we process for each purpose. If you are in the European Union or the United Kingdom, you can also consult the lawful basis pursuant to which we process personal data under laws such as the General Data Protection Regulation.
| Purposes | Types of Personal Data |
|---|---|
| To facilitate the subscription and distribution of our newsletters. Our newsletters allow subscribers to receive the latest updates, news, and promotional information from Unito.
Lawful Basis: Consent |
You must provide your email address to subscribe to our newsletter. We also collect information about how subscribers interact with the newsletters, such as open rates, click-through rates, and the types of content that are most engaging. |
| To conduct interest-based advertising by leveraging targeting cookies, including, to deliver relevant ads tailored to your interests, limit the number of times you see an ad you don’t like, and measure the effectiveness of our ads.
Lawful Basis: Consent |
Targeting cookies collect information such as browser and device information, IP address, pages visited and content viewed, clicked links and interactions with online ads, time and duration of website visits, and referring websites. Click here to read more about our use of targeting cookies for interest-based advertising. |
| To provide automated support and enhance user experience with a chatbot on our website. Our chatbot can answer common questions and collect your email to put you in touch with someone from our team. If you don’t want to use the chatbot, you can always be in touch via chat or by email!
Lawful Basis: Consent |
The data collected through the chatbot depends on the nature of the interaction, however, it can include conversation logs, attachments, messages, options, responses and selections, as well as your email if you decide to share it, such as if you want us to get back to you. Electronic data such as device information, browser type, and IP addresses, are also collected automatically. |
| To obtain feedback on our content, or our website, including, with surveys.
Lawful Basis: Consent |
From time to time, we may ask for your feedback on our content. Unless we specifically ask for your name or other identifying information, we will just collect the address IP, and the answers received. |
| To analyze performance and gather analytics on our website, including by understanding how visitors interact with our site, which pages are most popular, and where improvements can be made.
Lawful Basis: Consent |
We use cookies to collect usage and performance data on how visitors use our website, including how they navigate the website, which pages they visit, how long they stay on each page, and how engaging is our content. |
| When you refer a client to Unito, or when you request a free trial for your organization.
Lawful Basis: Consent |
We will collect business contact information about you when you inquire about our services, want to refer clients or otherwise, including, the name of the company that you represent and your business email. |
| To manage subscriptions to events, including online webinars.
Lawful Basis: Consent |
We collect business contact information of subscribers, as well as any other information you share with us. |
| When you submit your candidature for one of our career opportunities.
Lawful Basis: Consent |
We will process all the personal data that is included in your application, including your CV, cover letter, work experience, education and any data associated with a social media profile that you share with us.
Employees at Unito are required to complete a criminal record check, as it is a contractual requirement of our clients. If you are selected, you will be required to complete a background and criminal check. |
| To interact with users on social media.
Lawful Basis: Consent |
If you interact with us on social media, we may consult the information publicly available on your profile, as well as any information you share with us. |
2. How do we process your personal data in the Unito Platform?
The Unito Platform allows users to sync platforms and tools to allow data to flow from one platform to another. To do this, we temporarily access the data and transmit it to another tool, there is no further retention. We use data analytics to understand interaction with the Unito Platform and setting up workflows to help usability based on usage data. Our clients determine which data points they collect and sync, please refer to their privacy notice to understand how they process your personal data.
The table below contains a list of the purposes for which we process your personal data in the Unito Platform, as well as an overview of the types of personal data that we process for each purpose. If you are in the European Union or the United Kingdom, our clients decide the means and purposes for processing your personal data; please refer to your company policies for more information.
| Purposes | Types of Personal Data |
|---|---|
| To create and manage your account on the Unito Platform. | To create an account, we process business information such as name, email address, employer, team members, roles, and credentials. |
| To allow you to connect through partners such as Asana, Google or Trello. | Once you grant permission to connect through these third parties, we receive basic profile information, access permissions, and the information necessary for synchronization purposes, such as updates, tasks or projects. The connection is made through a secure OAuth process. We do not receive your actual credentials, only a token allowing us to get the necessary data without accessing your credentials. |
| To synchronize data between supported applications or tools. | Our clients use the Unito Platform to sync data points between two tools, such as task details, attachments, project data, activity logs, and fields. They determine alone which data is synchronized. During the synchronization, Unito accesses this data from integrated tools to update and align work items across platforms. We do not store any copy of the synchronized data, but we do access and transfer it between platforms for the short duration of the transmission. |
| To provide Unito with access to Google Sheets as part of the Unito Add-In. | If you install the Unito Add-On for Google Sheets, we need the Read & Write permission for the sheets, to sync the content with other tools, and to the user’s file metadata, excluding download URL and thumbnail. We will also obtain read permission for publicly available personal data associated with the Google account.
Unito does not store the personal data collected through Google Sheets except as part of the transmission. |
| As part of technical support activities, including to respond to your request. | To provide users with technical support, we connect all the information shared with us by mail or through our chat bot, including email address, content data, metadata, and attachments. |
| To understand how our users interact with the Unito Platform, including features which need improvements. | We collect data on user interactions with the Unito Platform, such as page views, clicks, navigation patterns, and feature usage. When interactions are recorded, any customer data is obfuscated, and the data is only used to improve interactions. |
| To ensure the performance, availability, and security of the Unito Platform. | The Unito Platform automatically collects electronic data, including details about the device used to access the Unito Platform, IP address, browser type, operating system, and device identifiers. This data is used to optimize performance and troubleshoot issues. There are also logs that are automatically generated about users, which help in diagnosing problems and improving platform stability. |
3. How do we use cookies and tracking technologies?
We do not use these technologies to share personal data with third parties that are not service providers in the Unito Platform, and we do not use any marketing cookies or tracking technologies in the Unito Platform.
As part of our Digital Activities, we leverage cookies and tracking technologies for essential features, for specific functionalities, analytics and marketing purposes, including, heatmaps, session recordings, tracking pixels and cookies.
Below is a more detailed overview of the types of cookies that are installed through our website. Session cookies, also known as transient cookies, are temporary cookies that are stored in the browser’s memory only during a user’s browsing session and deleted automatically when the browser is closed. We also use persistent cookies that are retained for up to 24 months, unless you delete them. Click here to learn how to manage your preferences regarding cookies.
If you are in the European Union or in the United Kingdom, we install tracking technologies based on your explicit consent, except for essential cookies which collect personal data automatically based on our legitimate interests to make our website available.
| Type of cookies | Description |
|---|---|
| Essential Cookies | Essential cookies are necessary to operate the core functions of our websites. These include login cookies, session ID cookies as well as security cookies. We used, for example, a CloudFlare cookie to identify the security of the website by identifying trusted web traffic. |
| Functional Cookies | Functional cookies are used to provide you with certain website functionality, and to remember website preferences, consents, and configurations. For instance, we use, when applicable, a HubSpot cookie to authenticate users. |
| Performance Cookies | Performance cookies are used to collect information about how users interact with the website, helping us improve its functionality and user experience. A Hotjar cookie tacks visitor interaction on our website to improve user experience and identify areas for optimization. |
| Targeting Cookies | Targeting cookies track your online activity to deliver personalized advertisements and measure the effectiveness of advertising campaigns. For instance, the X Conversion cookie helps monitor and optimize ads on X by tracking user interactions and engagement with the website. |
We use Google Analytics to help analyze how visitors use our website. Google Analytics uses cookies to collect standard internet log information and visitor behavior information. The information generated by the cookie about your use of our website, including your IP address, is transmitted to Google. The information is then used to evaluate your use of the website and compile statistical reports on website activity. This information is made available to us in an aggregated and anonymous form; we cannot track you directly.
4. Do we conduct interest-based advertising?
Targeting cookies, tracking pixels, heatmaps and similar tracking technologies are used to deliver advertisements relevant to you and your interests. They remember that you have visited a website, and this information is shared with other organizations, such as advertisers. These technologies track your browsing habits and are used to provide targeted advertising based on your preferences.
We do not use any targeting cookies or tracking technologies as part of the Unito Platform.
Through the Digital Services, Unito conducts interest-based advertising by using targeting cookies to collect and analyze user data, such as browsing habits and interactions with advertisements. These cookies track user behavior across Unito’s website and affiliated third-party domains. The collected data is used to deliver personalized advertisements that are relevant to users’ interests, measure the effectiveness of advertising campaigns, and improve overall user experience. Unito shares this information with advertising networks and third-party advertisers to ensure the delivery of tailored advertising content based on user preferences and interactions.
For instance, for advertising purposes, we use Google AdSense which places cookies on your device to deliver targeted advertisements based on your interests. Google may use the data collected to contextualize and personalize the ads of its own advertising network. You can opt out of personalized ads by visiting Google Ad Settings.
We use Facebook Pixel to track conversions from Facebook ads, optimize ads, build targeted audiences, and remarket to people who have interacted with our website. The pixel collects user interactions, conversion data, behavior data, IP addresses, browser types, device types, and referring webpages. When a user visits our site and takes an action, the pixel reports this to Facebook. This helps us track ad effectiveness, create custom audiences, and retarget website visitors.
5. How can you manage your cookie preferences?
You can manage or disable cookies by adjusting your browser settings. Below are links to instructions for managing cookies in popular browsers:
Please note that disabling cookies may affect your ability to use certain features of our website. You can also opt-out of targeted advertising through the following tools:
You can opt-out of Google cookies with the Google Analytics Opt-Out Browser Add-on.
6. To whom do we disclose your personal data?
We disclose personal data to service providers to obtain services, including, to provide you with the Unito Platform. These service providers are subject to contractual agreements with us that restrict their rights to use your personal data for other purposes than to provide us with the services that we requested.
| Type of Service Provider | Examples |
|---|---|
| Cloud hosting providers | We use cloud hosting companies, such as AWS, as well as Cloudflare. |
| Communication and Technical Support service providers | We use service providers such as Amplitude to understand user behaviour and optimize the Unito Platform. |
As part of the Unito Platform, we are not the controller of the personal data. We do not disclose your personal data to third parties unless we are instructed to do so by our clients. Please refer to our clients’ privacy notice for more information. Our clients generally instruct us to disclose personal data to the following third parties as part of their use of the Unito Platform, although it can differ from one client to another client.
| Type of Service Provider | Examples |
|---|---|
| Integration partners | The core of our business is allowing users to seamlessly share data across platforms. To do so, we have established partnership with organizations this solution would be useful to. You can find a complete list of the supported applications and tools here. Our clients decide alone of how they interact and synchronize with other platforms. |
As part of our Digital Activities, we disclose personal data to third parties in the circumstances described below.
| Categories | Additional information |
| Advertising networks and exchanges, third-party advertisers | As part of the Digital Services, we use targeting cookies that collect information that are shared with advertisers. Click here for more information, including LinkedIn. |
| Analytics Partners | We use service providers for certain functionalities within our Digital Services. For instance, we use Google Analytics and HubSpot to obtain performance data about our Digital Activities. |
In addition, we may also disclose your personal data in the following circumstances:
- Authorities: We may disclose personal data if required to do so by law. These circumstances include situations where it is necessary to respond to subpoenas, warrants, or court orders, or to comply with relevant laws. We may share your information in order to exercise our rights, to defend a legal claim, to investigate or take action against possible illegal activities or a violation of our policies. If this happens, we will not share more personal data than is reasonably required to fulfill that particular purpose.
- Business Transactions: If another company acquires, or plans to acquire, our company, business or assets, or if we undergo a reorganization or financing of parts of our business (including insolvency or bankruptcy), we may share information with other parties.
7. How do we keep your personal data secure?
Data security is at the core of our business. We follow industry standards to protect the data you submit to use, both during transmission and once we receive it. We maintain physical, technical, and administrative safeguards to protect your personal data against destruction, loss, unauthorized changes, disclosure, access, misuse, and other unlawful processing. Unito has a SOC 2 Type 2 attestation regarding its cybersecurity practices.
When we communicate your personal data with service providers, we require the same level of security from these entities prior to transferring your personal data. Our cloud service provider for the Unito Platform, Amazon Web Services (“AWS”), is certified under several independent organizations, including ISO 27001, ISO 27017, SOC I and SOC II.
8. How long do we retain your personal data?
If you are a user of the Unito Platform, we retain your personal data in accordance with the contract that we signed with our client who provided you access to the platform. Unless there is a law that states otherwise, we delete all user data after the subscription term, or before, if a user account is deleted, or the data is no longer necessary.
As part of our Digital Activities, we retain your personal data as long as required for the purpose, or longer, if we are required to under applicable laws.
9. Where do we process your personal data?
The Unito Platform is hosted by AWS in the United States, unless we agree otherwise with our clients. Please refer to their transparency notices for more information.
We may process your personal data outside of where you are located. As a result, you understand that your personal data may be subject to the laws of other jurisdictions than the one you are located in or where you reside, and may be available to governments, courts or law enforcement or regulatory agencies of other jurisdictions, pursuant to laws applicable in such jurisdiction.
10. How does this policy affect California residents?
If you are a resident of California, you may request that we provide you with the information that we have shared with third parties for electronic/online direct marketing purposes, if such sharing has occurred; such information can be provided to you once a year free of charge and will cover information shared during the past 12 months. Information will be provided within 30 days of your request, or we will inform you that we need additional time to fulfill your request.
The use of targeting cookies under the California Consumer Privacy Act is considered as selling personal data. To respect your right to opt-out of the sale of your personal data, we have provided an easy way to exercise this right. Click on “Do Not Sell My Personal Data” to inform us of your choice. By doing so, we will ensure that your personal data is not shared with third-party advertisers.
If you are a California resident and wish to make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California for our response. You may send your request by completing this form. Any such request must include “Your California Privacy Rights” in the message.
11. What are your rights concerning personal data?
Depending on the jurisdiction in which you are located, you may benefit from different rights over your personal data, such as:
- The right to access your personal data, and obtain information about the purposes of collection and who it is shared with.
- The right to request the rectification of your personal data if it’s incomplete, inaccurate or outdated.
- The right to request the deletion of your personal data.
- The right to obtain a copy of your personal data in a structured and interoperable format for its transfer to a third party.
- The right to restrict the use of your personal data if you are concerned about the accuracy of the data or how it is being used.
- The right to object to the processing of your personal data, in certain circumstances.
- The right to opt-out of the sale or sharing of your personal data.
- The right to know which third parties your personal data was communicated with.
- The right to request additional information concerning, and request a review of, decisions that are made on solely automated processing carried out by use, where applicable.
If you decide to exercise your rights, we may require that you confirm your identity with us. You can exercise your rights by contacting us with the contact information above.
We may take reasonable steps to authenticate your identity when processing your request. Your rights are subject to applicable legal restrictions. We will respond to your request within a reasonable timeframe, in compliance with applicable laws. If you disagree with our response, you have the right to challenge our decision or file a complaint with your local regulator. In Quebec, you can contact the Commission d’accès à l’information du Québec. In Canada, you may reach out to the Office of the Privacy Commission of Canada. If you reside in the European Union or the United Kingdom, you may contact your national data authority.
12. Can this policy change?
We may modify this privacy notice from time to time, such as to reflect new laws, or changes to how we process personal data. We will try our best to notify you, but it’s always a good idea to check the latest update date of this policy from time to time, and review its content.