Outsized Ltd. Privacy Policy for Clients

Effective as of June 12, 2024

At Outsized Ltd. (“Outsized”), your privacy is important to us. This Privacy Policy explains the information we collect through the Outsized platform and services provided by Outsized (collectively the “Outsized Platform Services”). By using the Outsized Platform Services, you acknowledge that you have read and understood our Privacy Policy.

1. What Information We Collect

Information You Provide

Account and Profile Information: When you or someone acting on your behalf creates an account on the Outsized Platform Services, we will collect information provided, including but not limited to your first name, last name, email address, and location. We also collect any information provided in your profile, such as your employment history, educational history, certifications, licenses, profile photo, and any other information included in your profile.

2. How We Use Information We Collect

We use the information we collect for the following purposes:

Sharing with Third Parties:
We may share information with third parties to provide and enhance our services. This includes sharing project updates, deliverables, and other relevant data necessary for the successful completion and improvement of our projects.

User Experience Improvements:
We analyze collected information to improve the user experience of our products and services. This may involve testing new features, optimizing existing functionalities, and personalizing user interfaces to better meet the needs of our users.

Internal Data Analysis:
Collected information is used for internal data analysis to understand usage patterns, identify trends, and improve our internal processes. This helps us make informed business decisions and enhance the efficiency and effectiveness of our services.

3. How We Share Information We Collect with Third Parties

We may share the information we collect with the following third-party services, each of which is committed to maintaining GDPR compliance:

Google Analytics

At Outsized, we have integrated the component Google Analytics (with anonymisation function) on our website.

Google Analytics is a web analytics service. Web analysis is the gathering, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website a data subject has come to a website from, which subpages of the website were accessed or how often and for which period of time a subpage was viewed. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google might transfer the personal information collected via this technical procedure to third parties. As IP anonymization is activated on our website, your IP address will be shortened by Google within Member States of the European Union or other states in agreement with the European Economic Area, Only in exceptional cases, the full IP address is sent to and shortened by a Google server in the USA. On behalf of the operator of the website, Google will use this information to evaluate your use of the website, compile reports on website activity and to provide further services related to website and internet use to us. The IP address transferred through our browser to Google Analytics will not be combined with other data held by Google.

In addition, this website uses the Analytics feature UseriD to track interaction data. This User ID will be additionally anonymized and encrypted and will not be linked with other data.

You can prevent the storage of cookies by a corresponding setting of your browser software: however, please note that if you do this. You may not be able to use all the features of this website to the fullest extent.

In addition, you may prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

This browser add-on informs google Analytics via JavaScript that no data and information about website visits may be transmitted to google Analytics.

In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs Further information and Google’s applicable privacy regulations can be found at https://policies.google.com/privacy?hl=en and https://marketingplatform.google.com/about/

Information Sharing with Circle.so

To provide a seamless community experience on our website, we utilize the services of Circle.so. By choosing to use our service, we share the following information:

Location: This includes the geographical area from which users access our website.
First Name: Users’ given names.
Last Name: Users’ family names.
Title: Any professional or social titles provided by users.
Image: Profile pictures or other images uploaded by users.

Circle.so uses this information to enhance user interactions within our community, ensuring a personalized and engaging experience. The data shared is used solely for the purpose of improving community services and is protected under Circle.so’s stringent privacy and security policies.

By using our website, you consent to the sharing of this information with Circle.so. If you have any concerns or require further information about how your data is handled, please contact us at info@outsized.com.

Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision by the European Commission (including US companies that are not EU-U.S. DPF certified), we have other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be found at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914 .

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

HubSpot API

Type and scope of processing

We use HubSpot, Inc. HubSpot API, Cambridge, Massachusetts, US to access additional services and data from HubSpot, Inc. Your IP address will be transmitted to HubSpot, Inc. Please note that a single section of this Privacy Policy is for each additional service we use from HubSpot, Inc.

Purpose and legal basis

The use of HubSpot API is based on our legitimate interests, i.e. interest in optimising our online offer in accordance with Art. 6 sec. 1 lit. f. GDPR.

Storage time

The actual storage time of the processed data is not influenced by us, but is determined by HubSpot, Inc.. For more information, see the privacy policy for HubSpot API: https://legal.hubspot.com/privacy-policy

HubSpot Analytics

Type and scope of processing

We use HubSpot Analytics from HubSpot, Inc., Cambridge, Massachusetts, US, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of visits to our online offer, subpages visited and the length of stay of visitors.

HubSpot Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of HubSpot Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision by the European Commission (including US companies that are not EU-U.S. DPF certified), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be found at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914.

In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. DSGVO, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc.. Further information can be found in the privacy policy for HubSpot Analytics: https://legal.hubspot.com/privacy-policy.

HubSpot CDN

Type and scope of processing

We use HubSpot CDN to properly provide the content of our website. HubSpot CDN is a HubSpot, Inc. service that acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other HubSpot, Inc. services. For these services, you will find a separate section of this Privacy Policy. This section is only about using the CDN.

A CDN helps to deliver content from our online offering, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you connect to HubSpot, Inc. servers, Cambridge, Massachusetts, US, transmitting your IP address and, if applicable, browser data such as your user agent. This data will be processed exclusively for the above purposes and for the maintenance of the security and functionality of HubSpot CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 sec. 1 lit. f. GDPR.

Storage time

The actual storage time of the processed data is not influenced by us, but is determined by HubSpot, Inc.. For more information, see the privacy policy for HubSpot CDN: https://legal.hubspot.com/privacy-policy

HubSpot Chat

Type and scope of processing

We have integrated components of the customer communication platform HubSpot Chat on our website. HubSpot Chat is a service of the HubSpot, Inc. and offers us the opportunity to communicate with visitors to our website via chat and to provide targeted help with questions. HubSpot Chat uses cookies and other browser technologies to evaluate user behavior and recognize users. Furthermore, HubSpot Chat is used to store and transmit data entered in chats using cookies, including your IP address. In this case, your data will be passed on to the operator of HubSpot Chat, which HubSpot, Inc., Cambridge, Massachusetts, US.

Purpose and legal basis

The use of HubSpot Chat is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage period

HubSpot Cookie Banner

Type and scope of processing

We have integrated HubSpot Cookie Banner on our website. HubSpot Cookie Banner is a consent solution of the HubSpot, Inc., Cambridge, Massachusetts, US, with which consent to the storage of cookies can be obtained and documented. HubSpot Cookie Banner uses cookies or other web technologies to recognize users and to store the consent given or revoked.

Purpose and legal basis

The use of the service is based on the legally required consent to receive the use of cookies in accordance with Art. 6 sec. 1 lit.c. GDPR.

Storage time

The actual storage time of the processed data is not influenced by us, but is determined by HubSpot, Inc.. For more information, see the privacy policy for HubSpot Cookie Banner: https://legal.hubspot.com/privacy-policy.

HubSpot Forms

Type and scope of processing

We have integrated HubSpot Forms on our website. HubSpot Forms is a HubSpot, Inc. service that provides marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing, and web analytics.

HubSpot Forms is used to store data entered in forms, e.B. when contacting them via contact form. The specified data can be stored in our Customer Relationship Management System (CRM System).

In this case, your data will be passed on to the operator of HubSpot Forms that HubSpot, Inc. Cambridge, Massachusetts, US.

Purpose and legal basis

We process your data with the help of HubSpot Forms for the purpose of processing the contact request and processing it in accordance with Art. 6 sec. 1 lit.b. GDPR.

The use of HubSpot Forms and the integrated services is subject to our legitimate interest under Art. f. GDPR, optimizing our marketing activities and improving our service quality on the website.

Storage time

The actual storage time of the processed data is not influenced by us, but is determined by HubSpot, Inc.. For more information, see the privacy policy for HubSpot Forms: https://legal.hubspot.com/privacy-policy.

MailChimp

We use a third party service, MailChimp, to manage and send our newsletters and other communication messages. If you sign up for our newsletter mailing list, MailChimp stores the email and the optional name you provide. You may unsubscribe from our newsletter at any time or CONTACT US directly to remove your data from MailChimp. For more information, please see MailChimp’s privacy policy.

4. How We Secure Information

We take appropriate technical and organizational measures to protect your personal information from and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and access.

5. Data Retention

We retain personal information about you where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes, and enforce our agreements). When we have no ongoing legitimate business need to process your personal information, we securely delete the information or anonymize it, or if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible.

6. Your Rights to Your Personal Information

If Outsized is processing your personal information in the context of a customer’s use of the Outsized platform to manage its projects, then the customer is the controller, and Outsized is a processor for the purposes of the General Data Protection Regulation (“GDPR”) (or UK equivalent). In those circumstances, you should contact the customer about any queries relating to how your personal information is used on the Outsized Platform Services, including any requests to exercise your data protection rights.

For all other users of the Outsized Platform Services located in the EEA or the UK, Outsized shall serve as the data controller for your personal information, and you have the following rights:

7. How We Transfer Information Internationally

We store all information in the United Kingdom. When we receive or share information of individuals in the EEA, UK, or Switzerland, we put in place appropriate safeguards such as the European Commission-approved standard contractual data protection clauses or by transferring the data to countries which have been approved by the European Commission as having adequate data protection laws.

8. Other Important Privacy Information

Complaints: In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at [contact email] and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the country in which you live or work.

Links to Other Sites: The Outsized Platform Services may contain links to third-party websites and services. However, we are not responsible for the privacy practices employed by those websites or services, nor are we responsible for the information or content they contain.