Privacy Policy for Parliament Connect (Veedoo Mobility OU):
Section 1: Introduction and Data Controller
The Data Controller
The data controller responsible for your personal data is Veedoo Mobility OU, a private limited company with its registered address at Sepapaja tn 6, 15551, Tallinn, ESTONIA. Veedoo Mobility OU is the owner and developer of the Parliament Connect platform.
Contact Details
If you have any questions about this Privacy Policy or our data protection practices, please contact our Data Protection Officer (DPO), Ian Bearder, at ian@parliamentconnect.com.
Section 2: Personal Data Collected and Source
We collect information in the following ways: directly from you and automatically as you use the Parliament Connect platform.
Data You Provide Directly
We collect the following personal data that you voluntarily provide to us when you register for an account, communicate with us, or use our services:
Identity Data: Full Name.
Contact Data: Email Address.
Professional Data: Role (Job Title/Position).
Data Collected Automatically
When you access and use the Parliament Connect platform, we may automatically collect the following information:
Technical Data: IP Address, browser type, device information, and operating system.
Usage Data: Metrics and information about how you use the platform (e.g., pages viewed, time spent on the platform, features used).
Tracking Data: Data from cookies and similar tracking technologies. For more details, please refer to our separate Cookie Policy (which you will also need to create).
Data from Third Parties (Facebook)
Parliament Connect offers the option to connect your account with your Facebook profile. When you choose to use this feature, we retrieve and process your Facebook App ID to enable the connection.
Crucially, we do not store, retain, or process any other data (such as profile details, photos, friend lists, etc.) from your Facebook account.
Section 3: Legal Basis and Purpose of Processing
We will only use your personal data when we have a lawful basis to do so under the General Data Protection Regulation (GDPR). The following table outlines the different ways we plan to use your personal data, and the corresponding legal basis for that processing.
Data Category | Purpose of Processing | Legal Basis for Processing |
|---|---|---|
Identity, Contact, and Professional Data (Name, Email, Role) | To create and manage your account, provide platform access, and send essential service-related communications. | Contract (The processing is necessary to fulfil the terms of the service contract we have with you.) |
Technical and Usage Data (IP Address, browser type, usage metrics) | To ensure the platform works correctly, for network security, for fraud prevention, and to analyse user behaviour to continuously improve the service. | Legitimate Interests (Our legitimate interests are to keep the platform secure and to improve our product for our users.) |
Tracking Data (Facebook App ID) | To enable user login and seamless integration with your linked social media account (Facebook). | Consent (You actively choose to link your account, providing your explicit consent for this specific processing.) |
Section 4: Data Sharing and Third Parties
We may share your personal data with third-party service providers (Data Processors) to help us operate, provide, and improve the Parliament Connect platform.
The categories of third-party service providers we use include:
Cloud Hosting Provider: We use Hetzner to host our application and store data securely.
Payment Processor: We use Stripe to process payments for any services that require financial transactions.
Email Marketing and Communication: We use Mailjet for sending essential service updates and, where you have provided consent, for marketing communications.
Analytics Service: We use PostHog to understand how our platform is used so we can improve our service.
Sharing with Facebook
We do not share any personal data with Facebook for advertising, analytics, or any other commercial purpose. The only interaction is the optional user-initiated retrieval of the Facebook App ID as described in Section 2.
International Data Transfers
While most of our processing takes place within the EEA, some of our third-party service providers may process your data outside the European Economic Area (EEA) and the UK. Our Analytics Service, PostHog, may involve data processing outside the EEA. When this occurs, we ensure a high level of protection by implementing the necessary safeguards required by GDPR, such as relying on a European Commission adequacy decision or by implementing Standard Contractual Clauses (SCCs).
Section 5: Data Retention and Security
Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Account Data (Identity, Contact, Professional): Your account data will be retained for the entire duration of your relationship with us and for up to one (1) year after your account becomes inactive or you request its deletion, unless a longer period is required by law.
Usage and Technical Data: This data is typically retained for a period necessary for analysis, platform improvement, and security logging, and is usually anonymized or aggregated after this period.
Data Security
We have implemented appropriate technical and organisational security measures designed to protect your personal data. These measures include:
Encryption in Transit: We use encryption technologies such as SSL/TLS to protect your data as it moves between your device and our servers.
Encryption at Rest: Your data is also encrypted while stored on our systems.
Access Control: Access to our systems is strictly limited and secured, including the use of Two-factor authentication for administrators.
Auditing: We perform Regular security audits to identify and fix potential vulnerabilities.
Section 6: Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include:
The right to access: You have the right to request a copy of the personal data we hold about you.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure ('Right to be Forgotten'): You have the right to request the deletion or removal of your personal data where there is no good reason for us to continue processing it.
The right to restrict processing: You have the right to request that we suspend the processing of your personal data in certain scenarios.
The right to object to processing: You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party).
The right to data portability: You have the right to request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
The right to withdraw consent: Where we are relying on consent to process your personal data (such as for the Facebook App ID), you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact our Data Protection Officer, Ian Bearder, at ian@parliamentconnect.com. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.