Privacy Notice

Hacken Extractor privacy notice — what personal data we collect, how we use it, your rights, and contact details for data requests. Updated 16 Mar 2023.

Hacken OÜ (“Hacken” or “we”) cares about your personal data and does everything possible to protect it. This Privacy Notice (“Privacy Notice”) is here to help you understand what happens to your personal data when you use our web application, available by the link – https://extractor.hacken.io/ (“App”).

Content

About us

About you

Personal data

• Sources of data
• Legal basis for processing
• Visitors’ data
• Beta Askers’ data
• Extractors’ user data
• Support Requesters’ data
• Data obtained from third parties

Data sharing with third parties

• Details

Data protection

Data subjects rights

Cookies

Update

About us

Data controller	Hacken OÜ
Address	Harju maakond, Tallinn, Kesklinna linnaosa, Parda tn 4, 10151
Email	[e-mail] - for any issues

About you

When you visit our App, you become our user (“User”).

Type of User	Description
Visitor.	The User who visits our App.
Beta Asker.	The User who asks Beta to try.
Extractor user.	The User who uses our Extractor App.
Support Requester.	The User who lodges a support request in Extractor App.

Personal data

Sources of data

We receive data when you visit our App and interact with it, depending on your actions on the App. We may also (although we do not necessarily do so) receive data from third parties. It depends on your settings and the features you use.

Legal basis for processing

To process your personal data, we rely on the following lawful basis:

• performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract with you;
• legitimate interest — for the processing necessary for the development of our services and reasonable for you;
• consent — for additional processing for specific purposes (read more below).

Visitors’ data

When you use our App as a Visitor, we collect some data automatically. We need technical data to operate, support, and improve the App’s functionality.

Source of data	Description	Reasons for processing	Legal basis
Necessary technical data.	Information about your visits and use of the App, including the source of the links, the time and duration of the visit, and navigation.	The smooth operation of the App.	Legitimate interest.
Necessary cookies.	Information that is necessary for the operation of the App.	Improving your experience using the App.	Performance of the contract.
Statistics cookies.	Information is used to understand how Users interact with the App by collecting and reporting information.	To monitor App performance for statistical purposes.	Consent.
Marketing cookies.	Marketing information used to match relevant advertising to you.	Marketing.	Consent.

Data storage

Data that is processed on the basis of a legitimate interest.	Stored for up to 3 years after the last use of the App.
Data is processed on the basis of your consent.	Storage periods are presented in our Cookies Policy.

Beta Askers’ data

We collect data when	Description	Reasons for processing	Legal basis
You leave the request to an Extractor.	Your answers in the poll; name; email.	To conduct a survey and list you for our program’s first beta trial.	Performance of the contract.

Data storage

Data that is processed on the basis of the performance of a contract.	Stored until completion of services + 3 years.

Extractors’ user data

We collect data when	Description	Reasons for processing	Legal basis
You complete registration.	Password.	To protect your account.	Performance of the contract.
You log in.	Email; password.	To log in you.	Performance of the contract.
You add destinations for notifications.	Other emails; nicknames in messengers.	To add other emails or nicknames to the list of notifications.	Performance of the contract.
You set up a meeting to share feedback.	Name; email; your message; time zone; preferable time and date for a meeting.	Contacting us.	Performance of the contract.
You add the smart contract.	Smart contract address; chain.	To monitor smart contract.	Performance of the contract.
You select a contract type.	Contract type.	To personalise service.	Performance of the contract.
You create your own trigger.	Trigger name; event; severity.	To personalise service.	Performance of the contract.
You create your own trigger.	Notifications.	To personalise service.	Consent.

Data storage

Data that is processed on the basis of the performance of a contract.	Stored until completion of services + 3 years.
Data that is processed on the basis of consent.	Until withdrawn.

Support Requesters’ data

Source of data	Description	Reasons for processing	Legal basis
You leave a request to support.	User ID; theme of request; your message.	To process your application.	Performance of the contract.

Data storage

Data that is processed on the basis of the performance of a contract.	Stored until completion of services + 3 years.

Data obtained from third parties

Also, we can collect some data from third parties. Our partners may provide us with it. We may receive data through our other services.

The scope of the data collected, the purposes and the legal basis for the processing is determined by the respective privacy documents of our other services:

Our services	Link to privacy documents
Calendly	Privacy Notice
HackenProof	Privacy Notice
hVpn	Privacy Notice
hPass	Privacy Notice
CER.Live	Privacy Notice
Hacken.ai	Privacy Notice
Trust Army	Privacy Notice

Please note: we can get data from third parties, but we won’t necessarily get it. It all depends on your settings and the features you use. For example, we can receive data if you communicate with us through these third parties.

Data sharing with third parties

We share your personal data with our contractors in the scope we need to provide services.

Details

We share your data on the following grounds:

1. Performance of a contract. We may transfer your data to our contractors and partners for contractual purposes.
2. Consent. We may transfer your personal data based on your explicit consent.
3. Compliance with the law. We may disclose your personal data to third parties to the extent that it is necessary:
   • to comply with a government request, court order, or applicable law;
   • to prevent unlawful use of our App or policies;
   • to protect against claims of third parties;
   • to help prevent or investigate fraud.
4. Transfer to third parties. We may transfer your personal data to third parties based on a data processing agreement, subject to applying technical and organisational measures to protect your personal data. We may share data with certain companies, consultants and contractors hired to provide certain services on our behalf.

Please note! We will ask for your consent if data transfer is not part of the contract.

Data protection

We use different organisational, physical, and security measures presented below. We are constantly improving these measures, so there may be more of them as you read them.

Storing documents in separate data storage	Encryption	Provision of access to personal data only to authorised persons
Password Policy	Licensed antivirus software	Internet, email policies
Two-factor authentication	Backuping	Other security measures

Data subjects rights

You, as a data subject, have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them:

The right	Description
Right to access.	You can request an explanation of the processing of your personal data.
Right to rectification.	You can change the data if it is inaccurate or incomplete.
Right to erasure.	You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
Right to restrict the processing.	You may partially or completely prohibit us from processing your personal data.
Right to data portability.	You can request all the data that you provided to us, as well as request to transfer data to another controller.
Right to object.	You may object to the processing of your personal data.
Right to withdraw consent.	You can withdraw your consent at any time.
Right to file a complaint.	If your request was not satisfied, you can file a complaint to the regulatory body.

To exercise your rights, contact us.

If your request was not satisfied, you can file a complaint with the regulatory body — the Data Protection Inspectorate, at [e-mail] or write a letter to 39 Tatari St., 10134 Tallinn.

Cookies

We use cookies that are needed for the App’s operation. By using cookies, we receive automatically collected data. You can read more in our Cookies Policy.

If you want to disable cookies, you can find instructions for managing your browser settings at these links:

Internet Explorer	Firefox	Chrome	Opera
Microsoft Edge	Vivaldi	Safari	Brave

Update

This Privacy Notice and the relationships falling under its effect are regulated by the Regulation (EU) 2016/679 (“GDPR”).

Existing laws and requirements for the processing of personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on our App.

If significant material changes are made that affect your privacy and confidentiality, we will notify you by displaying information on the App and ask for your consent.