Jakamo as a data controller

Besides providing Jakamo Service as a Data Processor on customers’ behalf, Jakamo Limited also collects and uses personal data on its own purposes like customer service, service development and marketing. These purposes constitute separate registers of personal data. In this section we want to give you a clear description what these purposes are and how we collect, use and process the information and what are your rights as an individual person.

Purpose of the processing of Personal Data

The purposes of the processing of Personal Data are:

Customer service

  • Purpose for the processing: To serve the customer in providing Jakamo service and to reply all the service requests made by any individual working for the customer
  • The legal basis for the processing: Your consent or legitimate interests of your employer (Jakamo customer), collected from you when you are in contact with us
  • The source of personal information collected: From Jakamo feedback function, email to support@thejakamo.com or to any Jakamo personnel, a phone call or a chat request through any tool
  • The collected personal information: Name, email, phone number
  • The data subjects: Only the persons who contact us regarding customer support
  • The time personal data is stored: Until the case is solved
  • The tools used for storing data, including personal data: Jakamo
  • The location of the data: Microsoft Azure data centers in Europe (Ireland and Netherlands)
  • The compliance with regulations: See Jakamo Privacy Policy

End user communication

  • Purpose for the processing: Certain issues, like major changes in procedures how personal data is processed or any regulatory changes, Jakamo needs to inform the end users of these matters directly
  • The legal basis for the processing: Your consent, legitimate interests of your employer (Jakamo customer) or compliance of with a legal obligation
  • The source of personal information collected: From the list of registered users in Jakamo Service
  • The collected personal information: Email
  • The data subjects: Jakamo end users
  • The time personal data is stored: 60 days from the communication
  • The tools used for storing data, including personal data: Minutemailer
  • The location of the data: Sweden, Stockholm and Karlskrona
  • The compliance with regulations: See Minutemailer Privacy and GDPR

Billing

  • Purpose for the processing: To invoice Jakamo customers
  • The legal basis for the processing: Your consent collected from you when the invoicing starts and legitimate interests of the controller
  • The source of personal information collected: From the Jakamo user profile and you directly
  • The collected personal information: Name, email, phone number, position
  • The data subjects: Only the persons who are the contact persons for invoicing in our customer companies
  • The time personal data is stored: As a long as your company is being invoiced and in invoicing history as long as laws and regulations require
  • The tools used for storing data, including personal data: Visma Netvisor
  • The location of the data: Elisa Appelsiini data centers in Finland
  • The compliance with regulations: See Visma Trust Center

Customer Relationship Management

  • Purpose for the processing: To manage the sales processes of Jakamo
  • The legal basis for the processing: Your consent when we contact you for the first time
  • The source of personal information collected: Prospects from public sources like internet or any printed medias, our communications with you, selected registered users in Jakamo service
  • The collected personal information: Name, email, phone number, position
  • The data subjects: Only the persons we recognize as decision makers in our potential customer companies
  • The time personal data is stored: Until there is an ongoing sales case or customer relationship
  • The tools used for storing data, including personal data: Pipedrive CRM
  • The location of the data: Pipedrive’s EU customers’ databases are hosted in Pipedrive’s EU datacenter located in Frankfurt, Germany
  • The compliance with regulations: See Pipedrive Privacy Policy

Direct marketing

  • Purpose for the processing: Jakamo is being developed all the time and new features are marketed to Jakamo end users and potential customers
  • The legal basis for the processing: Your consent collected from you when you register to Jakamo Service or during our communications with you
  • The source of personal information collected: From the list of registered users in Jakamo Service and you directly
  • The collected personal information: Name and email
  • The data subjects: Selected Jakamo end users and all other persons subscribed to our newsletter
  • The time personal data is stored: Until you unsubscribe from our newsletter
  • The tools used for storing data, including personal data: Minutemailer
  • The location of the data: Sweden, Stockholm and Karlskrona
  • The compliance with regulations: See Minutemailer Privacy and GDPR

Product and service development

  • Purpose for the processing: To develop the Jakamo Service based on user behavior and feedback
  • The legal basis for the processing: Your consent collected from you when you register to Jakamo Service or when you are in contact with us
  • The source of personal information collected: From log information, Jakamo feedback function, email to support@thejakamo.com or to any Jakamo personnel, a phone call or a chat through any tool
  • The collected personal information: Name, email, phone number
  • The data subjects: Jakamo end users and persons who contact us regarding service development
  • The time personal data is stored: Maximum 60 days
  • The tools used for storing data, including personal data: Jakamo
  • The location of the data: Microsoft Azure data centers in Europe (Ireland and Netherlands)
  • The compliance with regulations: See Jakamo Privacy Policy

Inquiries and research activities

  • Purpose for the processing: To conduct inquiries and any other research activities regarding Jakamo service or process development or marketing
  • The legal basis for the processing: Your consent collected from you when you register to Jakamo Service or when you are in contact with us
  • The source of personal information collected: From the list of registered users in Jakamo Service and you directly
  • The collected personal information: Name, email, phone number
  • The data subjects: Jakamo end users and persons who contact us regarding service development
  • The time personal data is stored: Maximum 60 days
  • The tools used for storing data, including personal data: Microsoft Office 365 Drive
  • The location of the data: Microsoft Azure data centers in U.S and in Europe
  • The compliance with regulations: See Office 365 security statement
  • Other: Microsoft is Active participant of Privacy Shield Framework between EU and U.S.

Besides the purposes of the processing of Personal Data mentioned above, Jakamo Limited may process yor personal data on the basis of compliance with our legal obligations, dispute resolution and enforcement of our agreements. You are always informed in these types of cases and the legal basis for the processing is confirmed before processing your data.

Risk assessments, including privacy impact assessments

For each of the registers mentioned above, Jakamo Limited has made a risk assessment, including privacy impact assessments. The assessments are reviewed yearly.

Credit Card payments

For credit card payments, Jakamo Limited utilizes Stripe as a service provider. However, Jakamo Limited is not processing nor controlling the credit card data or personal data attached. The data is provided by the user directly to Stripe through user interface. Therefore it is important that you as a user are familiar with Stripe Privacy Policy. Stripe is an Active participant of Privacy Shield Framework between EU and U.S.

Data subject rights and Subject Access Requests (SAR)

As a data subject, you receive a set of new rights under GDPR. These rights include e.g. data portability, the right to be forgotten, the right to prevent profiling, the right to object of processing, the right to rectification and erasure and right to conduct subject access requests.

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.

If you want to exercise your rights concerning the registers listed above, please feel free to contact support@thejakamo.com. We reply to you within two business days.

For more information about Jakamo as a data controller, please contact support@thejakamo.com or your assigned account manager in Jakamo Limited.