Last revised 15 February 2023
Welliba® designs tools that empower and inspire you to improve your experience at work and at home. Living a life that is Well and In Balance requires people to fully see their lives as they really are.
At Welliba we are all about enabling you to improve your present experience in ways that work for you. The better we understand you, the better we can enable you. We appreciate this means you have to trust us with information that is important to you, and we want to be transparent about how we use it.
This Privacy Notice (“Notice”) provides you with relevant information as to what personal data is collected, how we process your personal data, with whom we share it, how long we keep it when you visit our website (https://www.welliba.com). This Notice also provides details of how to contact us if you have any queries or concerns about our use of your personal data. Please note that some information is only applicable where the EU General Data Protection Regulation (“GDPR”) applies to you. This Notice does not apply to your use of Welliba Lounge and Welliba Companion App (the “Welliba Service”). Any data (including personal data) that is collected through the Welliba Service is processed in accordance with its separate data protection policies.
2. Controller & Welliba Data Protection Officer
The below stated entity is the controller for your personal data. You can also use these details to contact our Data Protection Officer:
WELLIBA IRELAND LTD.
Block 3 Harcourt Centre,
3. Purpose and Legal Basis
Below you will find information about how we process your personal data, the purpose for our processing, and the legal basis according to the GDPR if applicable:
3.1. WEBSITE USERS
3.1.1 Use of website
The purpose of our processing is:
(i) Technical provision & optimisation of our site;
(ii) Understand your interests;
(iii) Provide information, products and services.
Certain technical data is always processed by us when you visit our site such as IP-Address, Session ID, and information concerning your systems browser and device when you visit our website (https://www.welliba.com). This ensures that we can provide you with the best possible service, that it is secure and functions correctly.
The legal basis for our processing is our legitimate interest (Article 6(1)(f) GDPR), our legitimate interests being the successful technical provision of our website, IT security, understanding user interests and providing information on our products and services in line with our business goals.
The purpose of our processing is:
(i) Allow you to use our contact form;
(ii) Allow you to contact us directly via a provided email address.
The legal basis for our processing is our legitimate interests (Article 6(1)(f) GDPR), our legitimate interests being to make contact with you and respond to your requests/provide requested information.
3.3. CUSTOMERS, PARTNERS & PUBLIC
3.3.1 Managing contractual relationship
The purpose of our processing is:
(i) Manage relationship;
(ii) Facilitate the performance of the contractual relationship and fulfilment of contractual rights and obligations;
(iii) Facilitate communications.
The legal basis for our processing where there is a direct contractual relationship is the carrying out of such contract (Article 6(1)(b) GDPR). Where there is no direct contractual relationship, our legal basis for the processing is our legitimate interests (Article 6(1)(f) GDPR). Our legitimate interests in the processing are managing contact persons for communication and customer care and carrying out of the contractual relationship and related rights and obligations in relation to our business.
The purpose of our processing is:
(i) Send you marketing material such as emails and/or newsletters;
(ii) Allow you to participate in webinars or other promotional/informational offers;
(iii) Send you technical information and/or legal updates.
Where you have consented to us processing your personal data for marketing purposes, our processing is based on this consent (Article 6(1)(a) GDPR). Where you have purchased goods or services from us in the past, we may send you similar promotional material based on our legitimate interests (Article 6(1)(f) GDPR) – our legitimate interest being the promotion of our products.
4. General Information
4.1. RECIPIENTS OF YOUR PERSONAL DATA
Here you will find information about recipients of your personal data. We only share your personal data where it is necessary. We will never share your personal data without a valid reason or interest connected to the above stated purposes in section 3 of this Notice.
4.1.1 Internal & Affiliates of Welliba
We will share your personal data internally and possibly also with our affiliates where required. We only do this where we have a defined reason for doing so.
4.1.2 Unaffiliated third parties
1. We may share your session related personal data with unaffiliated third parties who perform administrative, business, marketing, professional, payment or technological support functions.
2. Where we engage external service providers to support us in promotional and/or advertising activities, your personal data will be shared with them to the extent necessary such as HubSpot.
3. If we are obliged to share your personal data due to legal requirements, we will do so to the extent necessary in line with our legal obligations. We reserve the right to contact appropriate authorities when activities that are illegal or violate our policies occur on our website.
4.2. TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS
If you are located in the European Union, personal data collected may be processed in a country where the adequacy of that countries data protection laws have not been approved by an adequacy decision of the European Commission. Some service providers, for example, may be based outside the EU. Where we transfer personal data in this manner, we will take all steps reasonably necessary to ensure that your personal data is protected to an acceptable EU standard. The safeguards in place with regard to the transfer of your personal data outside of the EEA to third parties shall include (but shall not be limited to) the entry by us into appropriate contracts with all transferees of such and the carrying out of risk assessments and adoption of supplementary and/or mitigating measures to ensure compliance with GDPR.
If you would like more information as to how we protect your personal data in these circumstances, please contact the Data Protection Officer with the contact details we provided above or contact us at email@example.com
4.3. STORAGE OF YOUR PERSONAL DATA
We only store your personal data for a period reasonable for our purposes of processing and/or for a period of time that is required of us by applicable laws. This may include retaining your personal data as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our website.
We will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks that are presented by the processing of your personal data. In particular, we will consider the risks presented by accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your personal data transmitted, stored or otherwise processed.
We do not process your data any longer than we need to. If you would like more information about our retention periods, please contact our Data Protection Officer with the contact details that we provided above.
4.4 YOUR RIGHTS
You can use the contact information provided above to - based on your specific situation and subject to our review to exercise the following rights set out in the table below. We will respond to any rights that you exercise within one (1) month of receiving your request, unless the request is particularly complex in which case, we will respond within three (3) months (we will inform you within the first month if it will take longer than one (1) month for us to respond.
|RIGHT OF ACCESS (ARTICLE 15 GDPR)
You have the right to request a copy of the personal data held by us about you.
|RIGHT OF RECTIFICATION (ARTICLE 16 GDPR)
You have the right to request that we amend any inaccurate or incomplete personal data that we have about you.
|RIGHT TO OBJECT (ARTICLE 21 GDPR)
You have the right to ask us to stop using your personal information, and we will comply unless there is a legal basis for us to continue using it, which we will explain to you.
|RIGHT TO ERASURE (ARTICLE 17 GDPR)
You have the right to ask us to erase your personal data where:
|RIGHT TO RESTRICTION OF PROCESSING (ARTICLE 18 GDPR)
You have the right to ask us to restrict processing your personal data in the following situations:
We may not further process the data unless you consent or the processing is necessary in relation to a legal claim or to protect the rights of another person or for reason of important public interest.
|RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR)
You have rights to obtain and reuse your personal data for your own purposes across different services. You can request that we transfer information we hold about you to you or a third party in electronic form, where this is technically feasible.
|RIGHT TO BE INFORMED
You have the right to clear, transparent and easily understandable information about how we use your information and your rights.
|RIGHT TO WITHDRAW CONSENT
|Where processing is based on your consent, you have the right to withdraw your consent at any time with future effect by contacting firstname.lastname@example.org or by adjusting the cookie settings in our cookie layer on our website (https://www.welliba.com).
However, if you do withdraw your consent we may not be able to continue to provide the service we offer to you.
You may submit a complaint regarding your personal information to a supervisory authority regarding our processing of your personal data.
4.6. PROVISION OF PERSONAL DATA
You are not legally required to share your personal data with us. However, where our processing of your personal data is based on Article 6(1) (a), we cannot carry out the processing without your consent. Where our processing of your personal data is based on Article 6(1)(b) of the GDPR, we cannot carry out the contractual relationship without your personal data. Where our processing is based on another legal basis, it will often not be possible to fulfil the intended purpose without your personal data, or at least such fulfilment would be restricted without the provision of such personal data.