Privacy Notice

Last updated: 8 April, 2024

Intro

Bashta (“Company” or “we”) welcomes you. This Privacy Notice (“Privacy Notice”) applies to our website (“Website”).

The Privacy Notice describes which of your personal data Website, how stores, processes, and uses it, and what happens when you use the Website.

About us

We are the controller of your personal data processed through the Website / App. This means that we determine the purposes and means of personal data processing.

About you

When you visit the Website, you become our user (“User”). 

We divide the Users into categories so you can easily find details about the processing of your personal data. Pay attention that you can fall into several categories depending on your actions.

Personal data

Sources of data

We receive your data when you visit the Website and interact with it, depending on your actions on the Website. 

You can change your personal data by exercising your right to rectification or by the Website functionality. Please note that the same lawful basis and storage terms apply to the changed data.

We may also (although we do not necessarily do so) receive data from third parties. It depends on your settings and the features you use.

Lawful bases for processing

To process your personal data, we rely on the following lawful bases:

• performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract (mainly, the Terms of Use) with you;
• legitimate interest — for the processing necessary for the development of our services, taking into consideration your interests, rights, and expectations;
• legal obligation — for the processing as required by applicable laws (for example, to comply with tax or KYC/AML regulations) or if requested by a law enforcement agency, court, supervisory authority, or another state-authorised public body;
• consent — for additional specific purposes.

If we collect personal data on the basis of legitimate interest or performance of the contract, we can use it for another purpose after checking that the new purpose is compatible with the original purpose.

When your data processing is based on a legal obligation or performance of the contract, you are obliged to provide your personal data. We need this data to comply with legal requirements or to properly provide you with our services. The failure to provide such data may have negative consequences, such as tax liability, inability to enter into a contract or provide services to you, etc.

Users’ data

When you visit the Website, we collect some data automatically. We collect some technical data about the Users to optimise performance, debug issues, and enhance features while ensuring security and privacy to improve the overall user experience.

Most of the technical data we collect are anonymous, but some data is associated with your IP address and device ID. Please read about personal technical data below.

We also need cookies to operate, support, and improve the Website’s functionality.

Potential Clients’ data

When we collect the personal data:

Support Requester’ data

When we collect the personal data:

Marketing data

When we collect the personal data:

Data sharing with third parties

We can share your personal data with third parties without any harm to you and in full compliance with applicable law. In addition, we have implemented organisational and technical measures to ensure the security of personal data during data transfer to third-party.

To share your data, we rely on the following lawful bases, depending on the case: consent, compliance with the law, and performance of a contract.

Data sharing outside the European Economic Area

The personal data we collect is stored in ______.

We may share personal data with the recipients of other countries, including non-EEA ones, ensuring that your data is protected and processed in accordance with the General Data Protection Regulation.

To share the data outside the EEA, we rely on the adequacy decision by the European Commission or the Data Privacy Framework participation of the recipient. 

If the recipient does not participate in the Data Privacy Framework and its country is not deemed to provide an adequate level of protection for your personal data, we adopt Standard Contractual Clauses based on legislation assessments for data protection during transfer and storage.

You can read more detailed measures to protect your personal data here.

Data protection

We are regularly certified by ISO 27001 Standard. 

We apply a variety of security measures appropriate to the possible risks.

Data subjects rights

You, as a data subject (individual), have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them depending on your residency.

European Economic Area and United Kingdom residents

UAE residents

Cookies

We use cookies that are needed for the Website’s operation. By using cookies, we receive automatically collected data. You can read more in the Cookie Policy.

If you want to turn off cookies, you can find instructions for managing your browser settings at these links:

Privacy Notice updates

This Privacy Notice is developed according to the General Data Protection Regulation, other applicable privacy laws, and best privacy practices.

Existing laws and requirements for the processing of personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on the Website / App.

If there are material changes to the Privacy Notice or the Website  that affect your data privacy rights, we will notify you by displaying information on the Website and, if necessary, ask for your consent.