Terms & Conditions / Privacy Policy

This Privacy Policy applies to information we collect, when you access or use any of our websites and products, when you communicate to our staff, or when you otherwise interact with us (collectively, the “Services”).

This Privacy Policy describes how iDrum collects, and processes your information, and what choices you have with respect to the information, as well as your rights relating to the collection and processing of your information.

When we refer to iDrum we refer to iDrum LLC,  and other affiliates (“iDrum” or “we” or “us”) and the iDrum.com or other iDrum websites (“Site” or “Sites”) or mobile applications.  In order to use iDrum Sites, mobile applications, Services and/or to provide any personal information to us, you must accept the practices described in this Privacy Policy. If you do not accept these practices, you must not access or use any iDrum Sites, mobile applications,  or Services or provide us with your personal information.

What Information Do We Collect?

PERSONAL INFORMATION

In describing the information we collect, the term “personal information” refers to information that tells us specifically who you are, such as your name, company name, phone number, email or postal address. In many cases we need this information to provide the products or services that you have requested. Unless necessary to provide our products and services, the amount of personal information that you choose to disclose to iDrum is completely up to you. The only way we know something about you personally is if you provide it to us. In order to process certain transactions, we may also need to collect payment information from you (e.g., credit card information) which will not be shared with anyone outside of iDrum, its affiliates and the financial institutions and vendors used to process payments. We do not intentionally collect any sensitive information, such as information concerning race, religion, health, sexual orientation or political beliefs. Please do not send any sensitive personal information to us.

VOLUNTARY INFORMATION

We receive and store any information you voluntarily communicate to us in connection with your use of our Sites or which you may voluntarily communicate to us in any other fashion. You may choose not to provide certain information we request from you. However, if you so elect, we may not be able to provide our products and services, and you might not be able to access or take full advantage of the features and functionality of the Site. Once you initiate a voluntary transaction, we will ask you for certain information depending upon the nature of the transaction in question. For example:

  • When you request our products or services, we may collect your name, job title/rank, company name, address, mobile/phone number, social media account names, and email address and any other relevant information needed to contact you.
  • When you contact us concerning downloads or with general inquiries, we ask for the information we need in order to answer your question as quickly and as accurately as we can. We ask for your email address in order to be able to reply directly or to ask for additional information necessary to respond to your question.
  • When you submit a request to receive our newsletter, we ask for your email address to deliver the newsletter.
  • We may ask for your name, job title/rank, company name, email address, social media account, phone number, address and/or country to register you to attend our webinars or conferences upon your request.
  • When you participate in chat discussions or other public forums on the Site, any information posted in these areas of the Site becomes public information, and you should exercise care when disclosing personal information.
  • We may use information collected about you to protect our rights and to investigate and prevent fraud or other illegal activities and for any other purpose disclosed to you in connection with our Services.

OTHER INFORMATION

  • Log data. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Sites or Services and record it in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Site or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, language preferences and cookie data.
  • Device information. iDrum collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this other information often depends on the type of device used and its settings.
  • Location information. We receive information from you, your customer and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer, or an IP address received from your browser or device to determine approximate location. iDrum may also collect location information from devices in accordance with the consent process provided by your device.
  • Cookie information. iDrum uses cookies and similar technologies in our Sites and Services that help us collect Other Information. The Sites and Services may also include cookies and similar tracking technologies of third parties, which may collect Other Information about you via the Sites and Services and across other websites and online services. 
  • Information from third parties. From time to time, we may also receive personal information about you from our business partners and affiliates and add it to our account information about you.

Cookies

At iDrum, we believe in being transparent about how we collect and use data. This policy provides information about how and when we use cookies for these purposes.

WHAT IS A COOKIE?

Cookies are small text files sent by us to your computer or mobile device. They are unique to your account or your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire. Web beacons are small graphic images or other web programming code which may be included in the website and any of our email messages. To find out more about cookies, visit our Cookie Policy.

How Do We Process The Information We Collect?

GENERAL

Until you initiate a voluntary transaction with us, we do not collect any personal information about you. The information we collect is used to provide you with our products and Services; enable us to communicate with you; process requests for information or otherwise as necessary to perform an agreement between you and iDrum; improve or add features, functionality and content to our Site; provide you with a more personalized experience at the Site. We may also use your Information to send you marketing offers related to our new products, services and/or special offers or updates or improvements to our existing products and Services as long as you have expressly consented to receiving these or in case we have received your information in the course of a purchase of our products and Services and we limit such marketing communication to similar iDrum products and services. You may opt-out at any time from receiving marketing information from us in the manner described below.

EMAIL AND OTHER CORRESPONDENCE

We may send you email or other forms of correspondence that are intended to notify you of our new products, services, special offers or updates or improvements to our existing products and services. You have the right to “opt-out” and prohibit use of your personal information for direct marketing purposes. If you prefer not receive any such email correspondence or marketing information concerning our products and services, please contact us at [email protected] or click “unsubscribe” as instructed in any email from us.

USING YOUR PERSONAL INFORMATION

The information that we collect from you via the Site and otherwise is an integral part of our business, and iDrum is not in the business of selling or renting your personal information to third parties.

We may share information collected about you with any member of our group of companies. This information shall be transferred in order to allow us to provide our Services to you, where other companies within our group perform components of the full Service offering. Such other services include customer support, internal audit, training and professional services.

TRANSFERRING INFORMATION INTERNATIONALLY

Our products and services may be provided using members of our group of companies and third parties acting on our behalf located in various countries around the world that may be located in countries outside of the European Economic Area (EEA), or countries deemed by the European Commission to have satisfactory data protection. These other countries may not offer the same level of protection for the information collected about you, although we will at all times continue to collect, store and use your information in accordance with this Privacy Policy and the General Data Protection Regulation (GDPR). iDrum will ensure we share data only with those organizations that satisfy an adequate level of data protection in line with applicable data protection legislation.

PARTNERS AND THIRD PARTIES

iDrum may submit personal information to the extent necessary to third parties as required or necessary to fulfill its Services and/or for performance of obligations. For example, iDrum may share personal information with its partners to enable a partner to provide support to a customer or where required to make a sale in a particular country. From time to time iDrum may employ or engage other companies and individuals to perform services on our behalf. Examples include provision of accounting, legal and financial services, fulfilling orders, shipping packages, sending postal mail and e-mail, processing credit card payments, and providing customer service. Such third parties may have access to your personal information if such is required in order to perform their service functions and may not use such information for any other purposes. iDrum maintains ownership and control of the information so used. Additionally, if you attend or sponsor a iDrum event such as a user conference, iDrum may share your personal information with other sponsors or attendees for marketing purposes. We may also share information collected about you with third parties who we partner with for advertising campaigns, contests, special offers or other events or activities in connection with our Services, unless you choose to opt out of such communications. In any case, we will always ensure that your information will only be processed in connection with the Services and in accordance with this Privacy Policy and applicable data protection legislation.

SALE OF BUSINESS

As we develop, expand and improve our lines of business, we may disclose information collected about you with third parties in connection with any merger, sale of company shares or assets, financing, acquisition, divestiture, or dissolution of all or a portion of our business. You acknowledge that any acquirer or successor of iDrum may continue to use your information as set forth in this policy.

DISCLOSURE REQUIRED BY LAW

We may also disclose information collected about you if (i) disclosure is necessary to comply with any applicable law or regulation; (ii) to enforce applicable terms and conditions or policies; (iii) to protect the security or integrity of our Services; and (iv) if we believe such disclosure is necessary to protect our rights.

DISCLOSURE WITH YOUR CONSENT

Other than as described in the foregoing, you will receive prior notice from us in the event we propose to share your personal information with third parties, and you will have a reasonable opportunity to give us such explicit consent.

“OPT OUT” AND COMPLAINT PROCEDURES

In addition to the options made available to you when we collect information (if any), you may elect to “opt out” of having your personal information shared with third parties (except for uses specifically requested by you and necessary business uses). You must submit a request (by mail, email, fax, or telephone) to us in one of the following ways:

We will update the specific records related to your request as promptly as practical. Note, however, that you may receive additional communications after you submit your request while we process the request.

Your Right to Data Access, Inquiries and Complaints

We want any information you provide to be correct so you have the right to request the correction or update of personal information that we hold about you. You have the right to direct us not to perform any of the procedures of collecting, storing or sharing of your information at any time. In such a case, you may not be able to engage in an activity on the Site or iDrum may not be able to provide its products and services to you. You also may object to the use of your personal information for marketing purposes at any time without giving reasons via email at [email protected].

GDPR affords EU data subjects with additional rights that are summarized below. In order to assert any of these rights, please contact us at [email protected] at any time.

Right of Confirmation: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed.

Right to Access Your Data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable format.

Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data or to limit our use of it.

Amend Data: You can request the correction or update of personal data that we hold about you.

Right to Erasure (Right to Be Forgotten): You can ask us to erase or delete all or some of your personal data.

Right to Individual Decision Making, Including Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling.

Right to Withdraw Consent: Where consent forms the basis for processing, you shall have the right to withdraw your consent to our further processing as described in this Privacy Policy. In such case, please note that we may no longer be able to provide you with the Services you have requested and may therefore terminate relevant agreements with you. In addition, we may be required to continue to hold your personal data to fulfill legal and regulatory obligations.

Data Portability: You have the right to transmit the data to another controller without hindrance from iDrum.

If you are not satisfied, you have the right to lodge a complaint with The Office of the Data Protection Ombudsman of Finland. iDrum will cooperate fully with any such investigation and endeavor to satisfy all queries as fully as possible.

We reserve the right to reject or remove any information or content posted on our Site at our sole discretion.

Retention

We shall retain certain records of the information collected about you for a period of five (5) years after termination of your account. Otherwise, we reserve the right to delete and destroy all of the information collected about you upon termination of your account unless you request otherwise.

Notwithstanding the above, you have the right to request the deletion of your data. Depending on the Services that we have provided to you, we may be required to hold certain data for five (5) years from the date of request of deletion of data, for legal purposes. We cannot continue to provide our Service to you if you request the deletion of your data.

You can request the deletion of your data as described above.

Security

We are committed to ensuring that the information collected about you is secure. Our Site has commercially reasonable security measures in place including administrative, technical and physical procedures, to protect your information against the loss, misuse and alteration of the information under our control. However, you should keep in mind that this Site is run on software, hardware, and networks, any component of which may, from time to time, require maintenance, experience problems or breaches of security. Should you have any particular concerns about a particular method of data processing, we may take reasonable steps to provide an alternative method. This high level of security can only be effective if you follow certain security practices yourself including never sharing your account details with anyone. If you believe that any of your account details have been exposed, you can change your password at any time through our Site, as well as contact our customer service.

What About Links to Other Websites?

Our Sites and mobile applications contain links to other websites that are not under our control. These websites have their own policies regarding privacy. We encourage our users to be aware when they are leaving the website and to read the privacy statements of any third-party website that collects personally identifiable information. We do not accept any responsibility or liability for these privacy statements.

About Children’s Privacy

Our website is intended for a general audience and is not directed to children under the age of 16. We do not knowingly collect personal information from children under the age of 16.

Governing Law

This Privacy Policy shall be governed by and construed under and in accordance with the laws of Finland.

The English language version of this Privacy Policy shall be binding. Any translation or other language version of this Privacy Policy shall be provided for convenience only. In the event of a conflict between the English version and any translation or other language version of this Privacy Policy, the English-language version shall prevail. This Privacy Policy (including, if applicable, our terms and conditions) specify the entire agreement between you and us and supersede any and all prior agreements, terms, warranties and/or representations to the fullest extent permitted by the law.

California Privacy Statement

SUMMARY OF PERSONAL INFORMATION THAT WE COLLECT ABOUT YOU

For individuals who are California residents, the California Consumer Privacy Act (CCPA) requires certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it. While we have set out the categories below as required by the California Consumer Privacy Act, you can review our Privacy Policy (above) for examples and other information that describes our data collection and use as previously disclosed to you which have not changed under this notice.

Depending on how you interact with us, we may collect the following categories of information as summarized in the table below. This Supplemental Notice also does not apply to personal information we collect from employees or job applicants in their capacity as employees or job applicants. It also does not apply to personal information we collect from employees, owners, directors, officers, or contractors of businesses in the course of our provision or receipt of business-related services.

The personal information we collect about you (as categorized below) comes from your interaction with our services.

  • Personal Identifiers (such as name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address or other similar identifiers)
  • Financial and Commercial Information (such as billing data when you make a purchase, records and history of products or services purchased or considered.)
  • Location Information (inferred from your IP address)
  • Professional/Employment Information (such as the name of your employer and your title)
  • Legally Protected Classifications (such as your correspondence salutation)
  • Other Identifying Information (such as cookies used for website performance analytics)
CATEGORIES OF BUSINESS/COMMERCIAL PURPOSES FOR OUR USE OF YOUR INFORMATION

All of the categories of personal information we collect about you (as detailed above) are used for the following purposes:

  • Providing our services (for example, account servicing and maintenance, customer service, advertising and marketing, analytics, and communication about our services)
  • For our operational purposes, and the operational purposes of our service providers and integration partners
  • Improving our existing services and developing new services (e.g., by conducting research to develop new products or features)
  • Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity
  • Bug detection, error reporting, and activities to maintain the quality or safety of our services
  • Auditing consumer interactions on our site (for example, measuring ad impressions)
  • Short-term, transient use, such as customizing content that we or our service providers display on the services 
  • Other uses that we notify you about
CALIFORNIA RIGHTS AND CHOICES

Subject to certain restrictions, as a California resident, you have the right to request that we disclose what personal information we collect about you, to delete any personal information that we collected from or maintain about you, and to opt-out of the sale of personal information about you. You also have the right to designate an agent to exercise these rights on your behalf, subject to verification of that agency relationship. This section describes how to exercise those rights and our process for handling those requests, including our means of verifying your identity. If you would like further information regarding your legal rights under applicable law or would like to exercise any of them, please contact us at [email protected]. 

ACCESSING AND DELETING YOUR PERSONAL INFORMATION

Right to request access to your personal information

California residents have the right to request that we disclose what categories of personal information that we collect, use, or sell about you. You may also request the specific pieces of personal information that we have collected about you. However, we may withhold some information where the risk to you, your personal information, or our business is too great to disclose the information.

Right to request deletion of your personal information

You may also request that we delete any personal information that we have collected from/about you. However, we may retain personal information as authorized under applicable law, such as personal information required as necessary to provide our services, protect our business and systems from fraudulent activity, to debug and identify errors that impair existing functionality, as necessary for us, or others, to exercise their free speech or other rights, comply with law enforcement requests pursuant to lawful process, for scientific or historical research, for our own internal purposes reasonably related to your relationship with us, or to comply with legal obligations. We need certain types of information so that we can provide our services. If you ask us to delete it, you may no longer be able to access or use our services.

How to exercise your access and deletion rights

California residents may exercise their California privacy rights by submitting your request via email at [email protected]. 

For security purposes, we may request additional information from you to verify your identity when you request to exercise your California privacy rights.

If you have an online account with us, logging into your account will serve to verify your identity and request, although we may request additional information if we believe your account has been compromised. If you do not have an account with us, or if we have reason to suspect that the security of your account is compromised, we will request additional information from you to match with our existing records to verify your identity, depending on the nature of the request and the sensitivity of the information sought.

Sales of Personal Information

California residents may opt out of the “sale” of their personal information. We do not “sell” your personal information as we understand that term to be defined by the California Consumer Privacy Act and its implementing regulations.

Non-Discrimination Rights

California residents have the right to not be discriminated against for exercising their rights as described in this section. We will not discriminate against you for exercising your CCPA rights.

Notification of Changes

If we decide to change our privacy policy, we will post those changes on this page, and/or provide you with notice by other methods, so that you are always aware of what information we collect, how we use it, and under what circumstances it may be disclosed. It is your responsibility to check back to this page occasionally to see these changes.

This Privacy Policy was last amended on June 14, 2023.

How to Contact Us

If you have questions or concerns regarding this privacy policy, or any feedback pertaining to your privacy that you would like us to consider, please email us at [email protected].