Privacy policy

Shake Ltd., Radnicka 47, Zagreb, Croatia (further: “Shake”, “company”, “we”, “us”, or “our”) respects and protects the privacy and personal data of users of our services, business partners and any other persons whose personal data we might collect and process during our everyday business activities.
 

This Privacy policy explains who we are, the purpose and basis for that processing, whether you have to provide the data to us, how long we store your data, whether we share your personal data with anybody or intend to transfer it to another country, how we secure your personal data and which rights you have regarding the processing of your data, as provided under the European Union’s General Data Protection Regulation (GDPR).
 

This Privacy policy applies to all personal data which we collect, use or in any other way process if you are a user of our services, visitor of our website or if you otherwise communicate. For the purpose of this Privacy policy, and in accordance with the GDPR:
 

Shake helps developers get unreal data to fix real issues in their mobile apps.
 

Within the meaning of the GDPR, we act as the controller for the processing of your personal data specified in this Privacy policy.
 

If you are a user of our services, we collect and process your personal data in order to provide the service to you. The scope of personal data that we process is strictly limited to personal data necessary to serve your needs (for example, to process your crash reports and communications with us) or to meet legal and regulatory requirements.
 

Your information which we process may be collected either when you provide services to end users or directly from you, when you input it into our system.
 

We may also use your personal data to send you news and other relevant information about our service or in order to improve the quality of the service, to solve problems detected within the service and to develop better features.
 

Please be aware that third parties (our users) may use Shake SDK to collect their end users’ personal data. In such scenarios, we do not operate as data controllers, instead we serve solely as data processors while our users control the SDK and its behavior. This Privacy policy primarily applies to instances where we are the data controller and outlines how we process personal data in that capacity.
 

We may collect your personal data if you are a visitor to our website. While this information does not necessarily reveal your specific identity (your name or contact details), it may include personally identifiable information, which is primarily needed to maintain the security and operation of our website and for our internal analytics and reporting purposes.
 

Additionally, we also process your personal data if you contact us through the contact form available on our website or if you send us a direct message by other means.
 

Through our website, you can also apply for a startup discount. For this purpose, a contact form is available. In order to reply to your query, we collect personal data which you decide to disclose.
 

Similarly, we collect the personal data which you send when directly contacting us by other means, e.g. by sending us an email.
 

Like many businesses, we may also collect information through cookies and similar technologies, which help us to improve our website, to better understand our visitors and their behavior. Cookies are small text files placed on a visitor’s device to collect internet log information. They are widely used by website owners in order to make their websites work, or work more efficiently, as well as to provide reporting information.
 

If you are registering as a user of the Shake Dashboard, we need to collect some information about you so that we can create your account. We need this information to:
 

When you subscribe to our newsletter you will provide certain personal data which will only be used for that specific purpose. If you were a previous user of our services or have shown interest in our services or starting a career in Shake, we may send you a newsletter as well.
 

We have an official account on Slack, LinkedIn and Twitter. This means we will have access to some of your personal data if you are our social media contact, but this is limited to such data which you decide to make available by sending us a message or otherwise connecting with us. We use your personal data collected through our social media accounts, for example, to solve your requests when you send us a direct message or to notify you about recent developments regarding our business activities.
 

We collect your personal data required to provide you our services (such as information needed to set up your user account) and information provided in the course of your use of our service. The personal data we collect may be categorized as follows:
 

We do not control the data our servers receive this way. The scope of personal data we process results from the nature of the service provided by our users to you as their end user. It may include:
 

If you are visiting our website, it is usually the case that we are not aware of your specific identity. We only collect information of a technical nature, which your browser will automatically transfer to our server while you are browsing through our website.
 

The data which we collect in this process includes the following:
 

Further, if you apply for a startup discount through our contact form or by directly contacting us by other means, we will collect your name, email address and personal data which you disclose in the message you send us.
 

We use cookies to:
 

If you access Shake through your browser, you can manage your cookie settings there but if you disable some cookies you may not be able to use Shake.
 

In addition, we use third parties like Google Analytics (opt out) and FullStory (opt out) for website analytics and customer support. We do not currently recognize or respond to browser-initiated Do Not Track signals as there is no consistent industry standard for compliance.
 

If you wish to create an account to access the Shake Dashboard, you will be asked to provide your name, email address which you will use as your username and information on your corporate affiliation (i.e., our user on whose behalf you will be using our products).
 

You will also be asked to set up a password to access your account. Please make sure to use your password in accordance with any applicable Terms of service. In particular, do not disclose your password to anyone else and notify us immediately if you become aware of unauthorized use of your account.
 

When you subscribe to our newsletter, we only collect your personal contact details necessary for this purpose, such as your name and email.
 

If you are one of our social media contacts, we collect and process personal information which you publish or otherwise make available to us through these accounts such as your first and last name, comments, likes or other reactions and membership in certain groups.
 

If you send us a direct message through one of our social media accounts, we will collect your contact details (such as your first and last name) and other personal data which you disclose in the message you send us.
 

If you are a user of our services, your personal data is necessary so that we can provide the service to you.
 

The scope of personal data which we process results from the nature of the service you provide to your end users, so that they can be identified in Shake.
 

We undertake our best efforts to ensure that the scope of processing is limited to what is necessary for the performance of the contract between you as user and Shake as your service provider. In this sense, you are required to provide us the requested information if you would like to use our service.
 

Occasionally, we may also contact you with information about our service or process personal data in order to improve the quality of the service, to solve problems detected within the service and to develop better features. We base this processing on our legitimate interest to keep you informed about our service and to regularly improve it.
 

Our users may use Shake SDK to collect their end users’ personal data so that they can provide the service to them, improve the quality of their app, solve problems detected within the app, develop better features, or whatever their legitimate interest is.
 

The information you disclose through our contact form or by directly contacting us by other means, and the information we collect about you while you are browsing through our website is processed for the purpose of our legitimate interests, i.e. providing a website for information and use, its maintenance and improvement.
 

We also store analytics and customization cookies, which help us understand how our website is being used or how effective our marketing campaigns are or to help us customize our website for you.
 

However, depending on the nature of a query, other legal bases might also apply e.g. processing of the information may also be needed prior to entering into a contract with you.
 

When you create an account to access the Shake Dashboard, we collect limited information about you. This is necessary to provide the agreed service to our user, on whose behalf you are accessing the Shake Dashboard.
 

We consider that Shake has a legitimate interest in processing this information, as we need to be able to identify those accessing and using the Shake Dashboard and to track usage in order to apply the correct subscription. Collecting such data is also necessary to meet standard security procedures and ensure reliability and operability of our services.
 

When you subscribe to our newsletter, the basis for the processing is your consent.
 

However, we may also send you a newsletter if you were a previous user of our services or if you have shown interest in our services or starting a career in Shake. In that case, the processing is based on our legitimate interest.
 

You may withdraw your consent or object to the processing based on our legitimate interest at any time by simply unsubscribing at the bottom of the newsletter email or by sending us an email to friends@shakebugs.com.
 

If your personal data is public or sent to us directly through social media accounts, you consent to our processing of your personal data for the purpose of connecting with us or responding to a request or query. You may withdraw consent at any time by contacting us or using the options available in your social media account, as applicable.
 

We keep the information we collect about you for as long as you use our services or as necessary to fulfill the purposes for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.
 

We do not sell your personal data to third parties in any circumstances whatsoever.
 

However, we may share your personal data in the following cases:
 

We may also disclose your personal data to the following sub-processors which assist us in providing our services:
 

In certain circumstances, we may also share your personal data with public authorities. It is also possible that public authorities (e.g. courts) will require us to disclose personal data. In such a case, we will have a legal obligation to do so.
 

Besides that, we may share your personal data with other third parties as necessary to enforce our Terms of service, user agreements or other policies. Such disclosure may be carried out to enforce a legal claim or resolve a dispute regarding the use of our services, as well as to protect Shake’s other rights and properties.
 

We do not usually share your personal data with any third parties located outside the EU/EEA. However, some of our service providers might operate in countries outside this territory. When such service providers provide services to us, we may need to transfer some personal data outside the EU/EEA. Nevertheless, in these cases, our service providers have committed themselves to safeguards that are required by European data protection laws to provide adequate level of data protection (such as, for example, by applying standard contractual clauses for processors in third countries).
 

We use a variety of technical and organizational measures to protect your personal data from unauthorized access or disclosure, alteration, loss, theft and any other breach. These measures, among others, include:
 

Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We do not accept liability for unintentional disclosure.
 

Under the GDPR you, as an individual, have certain rights, depending on our reason for processing of your personal data:
 

You have the right to request from us a confirmation whether we process any of your data, and where that is the case, you can access that data and the information regarding the purpose of the processing, the categories of personal data concerned and rest of the information concerning that processing. Based on this right, you have the right to ask us for copies of your personal data.
 

If you notice that we have some incomplete or incorrect data, you can request from us to complete or correct it. This right always applies.
 

However, if you are a user of our product, you may be able to login to your account and complete/correct it yourself. If this option is available, we strongly advise you to keep your personal data accurate at all times. However, if this option is not available to you, you can request from us to complete or correct it by contacting us. You can find our contact details in the section “How can you contact us” below.
 

Under certain circumstances you have the right to ask us to erase your personal data. For example, if you think that we no longer need your data for the original reason we collected or used it for, or you initially consented to us using your data, but have now withdrawn your consent, or you have objected to the use of your data for direct marketing purposes, or if you think that we have a legal obligation to erase your data.
 

However, please bear in mind that this is not an absolute right and that sometimes we will not be able to comply with your request. For example, if we have an overriding legitimate interest for the processing or where due to legal obligations, we must keep your data for a certain period.
 

Under certain circumstances, if you are concerned about the accuracy of the data or how it is being used you have the right to ask us to restrict the processing of your information.
 

You have a right to object to the processing of your personal data which is based on our legitimate interest (for example, such as the processing for the purpose of promotion or sales, or for statistical purposes).
 

When the processing is based on your consent or required for the performance of a contract and when the processing is automated you have the right to ask that we transfer your data to another organization in a structured, commonly used and machine-readable format.
 

This only applies to the personal data you manually provided to us.
 

If the processing of personal data is based on your consent, you may at any time withdraw your consent and, in that case, we will no longer process your personal data for this purpose. However, withdrawal of consent will not affect the legality of the consent-based processing prior to its withdrawal.
 

Lastly, if you think that the processing of personal data carried out by us is not compliant with GDPR, you have the right to file a complaint to the competent supervisory authority – in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
 

In Croatia, the supervisory authority is the Croatian Personal Data Protection Agency, whose website may be found at https://azop.hr/naslovna-english/.
 

However, without prejudice to your right to file a complaint to a supervisory authority, in case you are unsatisfied with our processing, we encourage you to first contact us to see if we may mutually resolve the issue. You can find our contact details in the section “How can you contact us?”
 

If you have any questions regarding this Privacy policy or if you wish to exercise one of your GDPR rights stated above in section “What are your rights?”, feel free to contact us by sending an email to friends@shakebugs.com or by post to:
 

Shake Ltd.
Radnicka 47
Zagreb, Croatia
 

When you contact us to exercise one of your GDPR rights, we might ask for additional information from you for the purpose of a reliable identification. If we cannot reliably identify you, please bear in mind that we can decline any request you make.
 

We will try to provide you the information you request within fifteen days of the receipt of your request.
 

Please note that this Privacy policy primarily covers data processing in cases where we act as data controllers. Due to the nature of our services, we also act as data processors for third-parties (our clients) as data controllers. In such cases, we are generally required to refrain from addressing your privacy requests except as instructed by the data controllers. Nevertheless, should you direct your query to us, we will immediately notify your data controller and provide all necessary assistance in responding.
 

Our services are not intended to be used by children under 13 years of age (and in certain jurisdictions under the age of 16) and children will not be given a profile or password by us. If we learn that we have collected any information (including personal data) pertaining to a child under 13 years of age (and in certain jurisdictions under the age of 16), we will promptly take steps to delete that information.
 

To the extent permitted by GDPR, Croatian law applies to this Privacy policy and all related matters. You agree to exclusive jurisdiction of Croatian courts for any disputes which may arise regarding our use of your personal data.
 

Shake Ltd. reserves the right to change or update this Privacy policy at any time and, in particular, when we find it appropriate or necessary to remain compliant with relevant laws.
 

If there is a substantive change to the Privacy policy, we will try to notify you of it by various means – for example by using a pop-up, or send you an email, so you can review it and decide whether you perhaps want to object to it.
 

Also, if we want to further process your data for a different purpose and the processing is based on your consent, we will first notify you and ask for your consent again for that new purpose.
 

Last updated and effective as of: 7 November 2023