Important! If you do not understand any of the languages in which this document is currently available, we strongly request you not to agree and not accept the agreement and, consequently, not to continue to use the Services. In case of any differences between a translation and the English version, the English version prevails. By continuing to use our Services, you agree and acknowledge that you understood the terms of this document in one of the languages in which they are currently available.
Last version edited on: 29/September/2026
!!! If you are an individual, you must have, according to the applicable legislation, at least the minimum legal age to use the Services, but not less than 16 years old.
SOCIALHOUND DATA PROCESSING POLICY
1. The identity and the contact data of the Controller and of the data protection officer
1.1. Identity and contact data of the Controller: Company Code Path S.R.L., having its headquarters in Bucharest, Unirii Boulevard, no. 73, Bl. G3, Sc. 3, 4th floor, Ap. 55, District 3, registered with the Trade Registry under No. J40/10861/2016, sole registration code 36426318 (referred to in this data processing policy as the “Controller” or “Code Path”), operating the Socialhound platform, whose contact data is [email protected] as well as the website www.socialhound.io.
1.2. Contact data of the data protection officer: [email protected], as long as a data protection officer was (necessary to be) appointed.
2. What Socialhound is and what it is not
2.1. Socialhound is a social media performance analytics and benchmarking platform built for public safety communications teams (including police departments, sheriff's offices, fire departments, transit authorities and other public agencies). It analyzes the content that public agency profiles publish on public social media platforms (currently Facebook, Instagram and X) and the aggregated engagement that such content receives.
2.2. Socialhound is not a surveillance, monitoring or investigative tool. The Controller does not use the Services, and does not allow the Services to be used, to identify, profile, track or monitor individual members of the public, and does not provide any functionality intended for such purposes.
3. Purposes of the processing; data subjects; personal data
3.1. The Controller shall process the personal data [referred to in this data processing policy as the “(personal) data”] of any individual (potential) customer [referred to as the “Customer” or the “data subject” or “you”], provided directly and/or indirectly in relation with: i) any of the services (that may be) provided by Code Path through Socialhound [referred to as the “Services” or the “Socialhound Services”], as such Services are defined in the Terms of Service agreement available at https://www.socialhound.io/tos or in any (other) similar agreement between the Customer and Code Path (the “agreement”); and/or ii) any agreement(s), as and if the case may be, - for the purposes of performing any agreement(s) between you and Code Path and/or taking steps in order to conclude any agreement(s) and/or for any compatible, related and correlated purposes, including without limitation the processing of payment(s).
3.2. The Controller shall also process the personal data of any individual connected with any (potential) customer of Code Path - individual or any (legal) entity, including public agencies and departments - [referred to as the “Authorized Person” or the “data subject” or “you”], provided directly and/or indirectly in relation with any use of/access to the Services and/or any agreement(s), for the purposes of performing any agreement(s) between such customer and Code Path (including accessing and/or using the Services), taking steps in order to conclude any agreement(s) and/or for any compatible, related and correlated purposes.
3.3. The Controller shall also process the personal data of any individual authorized user [referred to as the “Authorized User” or the “data subject” or “you”], provided directly and/or indirectly in relation with any use of/access to the Services, mainly in connection with the access and use of the Services by such Authorized Users (for example, public information officers, social media managers or communications directors of a customer) and/or for any compatible, related and correlated purposes.
3.4. The Controller shall also process the personal data of visitors of the website www.socialhound.io, including of individuals who request a demo, download a sample report, subscribe to our newsletter or otherwise contact us [referred to as the “Visitor” or the “data subject” or “you”], for the purposes of answering their requests, scheduling and holding demos, sending the requested materials and, where applicable, direct marketing.
3.5. Publicly available social media data. In order to provide the Services, the Controller collects, through the official APIs and/or other lawful means made available by the social media platforms, publicly available data regarding the public social media profiles added to Socialhound by the customers (mainly the profiles of public agencies and departments), such as profile name, handle, profile picture, follower count, published posts and their content, publication date and aggregated engagement metrics (reactions, comments, shares, views). Such data refers mainly to organizations and not to individuals. Where such public content incidentally includes personal data (for example, the name of a spokesperson featured in a post), the data is processed only to the extent necessary to compute and display the performance analytics and benchmarks. The Controller does not build profiles of individual members of the public who interact with such content and does not use such data to identify, track or monitor them.
3.6. Your electronic contact details provided in the context of selling a product or a service may be used for direct marketing (unsolicited communications) regarding similar products or services. You can always withdraw your consent/object by accessing the unsubscribe link provided in each communication.
3.7. Without affecting the generality of the foregoing, your (electronic contact) data may be used by the Controller in order to send you direct marketing communications for products or services that are not similar to those in the context of which you provided your data, as long as you gave your consent for such purpose. You can always withdraw your consent by accessing the unsubscribe link provided in each communication.
3.8. The Controller will also process the personal data in any cases when the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
3.9. The Controller will also process your personal data for any other purposes for which you expressed your unambiguous consent.
3.10. The Controller will process, in each specific case, only personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
3.11. The personal data shall be collected, recorded, organized, structured, stored, consulted, used and disclosed by transmission, as described in this data processing policy.
3.12. The Controller will also process the personal data for any compatible, related and correlated purposes with the ones mentioned above.
3.13. The personal data of the Customers, Authorized Persons, Authorized Users and Visitors that will be processed are:
(a) Identification and contact data: name, first name, last name, email, business email address, phone, title, job position, agency/department or company name, business address, business phone/fax number;
(b) Account data: username, links to the social media profiles added to the account, selected benchmarks and peer departments, timezone, language, currency, date signed up, date first seen, date last seen, log in/log out times;
(c) Billing and payment data: invoices, refunds, VAT number, tax identification number, payment preference, payment method, payment status, last four digits of credit card number, bank account number, IBAN, payments platform email, date of purchase, purchase order details;
(d) Technical and usage data: IP address, device ID, device OS, device settings, hardware/software, browser, browser version, browser language, application version, log information, URL requested, pages visited, clicking behaviour, time of usage, web sessions, usage data, other system activity, referral URL, information about how the user entered the website (e.g. Google Ads, affiliate site);
(e) Communication and marketing data: electronic communications (e.g. email) received, demo requests and meeting details, marketing preferences, newsletter preferences, date last contacted, date last heard from, date last opened email, date last clicked on link in email, unsubscribed from emails, marked email as spam, has hard bounced;
(f) Cookies data: technical cookies, analytical cookies, marketing cookies (as detailed in section 23).
4. Legal basis of the processing
The legal basis of the processing are article 6 paragraph (1) letters (a), (b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (referred to as the “Regulation” or “GDPR”), namely:
(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes (e.g. non-essential cookies, newsletter);
(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (e.g. account creation, demos, providing the Services);
(c) processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g. accounting and tax obligations);
(f) processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party (e.g. processing of publicly available social media data in order to provide analytics and benchmarks, security of the Services, direct marketing towards existing customers, improvement of the Services).
5. Recipients or categories of recipients of the personal data
5.1. The personal data will be disclosed to all persons to whom such data must be sent in order to process it for the above-mentioned purposes, including without limitation the employees, representatives, professional advisors, (sub)contractors and collaborators of the Controller, on a need-to-know basis.
5.2. Information regarding accounts and/or payment cards will be transmitted to the parties processing the payments, in order to process such payments, if and as the case may be.
5.3. The data of the Authorized Users (such as name, email and account activity) may be made available to the customer (agency/department) that granted them access to the Services, in their capacity of account administrator.
5.4. Additionally, the following categories of recipients will receive personal data, for the following purposes:
5.4.1. Hosting, storage and infrastructure providers (Hetzner Online GmbH, DigitalOcean, LLC, Amazon Web Services EMEA SARL) - identification, contact, account, technical and usage data - for hosting, storage, retrieval, logging, backup and app improvement purposes;
5.4.2. Website and content management provider (Ghost Foundation) - identification and contact data, newsletter preferences, technical and usage data - for operating the website www.socialhound.io, the blog and newsletter subscriptions;
5.4.3. Email and communication providers (Twilio Inc. or Twilio Ireland Limited; Intercom R&D Unlimited Company, Intercom, Inc. and Intercom's group companies) - identification, contact, account, communication and marketing data - in order to send transactional emails, newsletters and other electronic notifications and to provide a medium of communication (email or in-app messages) for supporting users;
5.4.4. Meeting scheduling provider (Calendly LLC) - identification and contact data, timezone, meeting details - in order to facilitate demos and meetings between prospective clients or clients and our team;
5.4.5. Analytics and quality providers (Google Ireland Limited; Hotjar Ltd; Functional Software, Inc. dba Sentry) - technical and usage data, cookies data - in order to track and examine the use of the website and the Services, perform session recording and heat mapping, gather crash reports and improve the quality of the Services;
5.4.6. Advertising networks (Google Ireland Limited; Meta Platforms Ireland Limited; LinkedIn Ireland Unlimited Company) - email, technical and usage data, marketing cookies - only on the basis of your consent, in order to measure the success of our ads and to build target groups for ads;
5.4.7. Payment and banking providers (PayPro Global Inc; ING Bank N.V. Amsterdam - Bucharest Branch; Revolut Payments UAB) - identification, contact and billing and payment data - in order to process payments, subscriptions and other banking activities;
5.4.8. Accounting provider (GROUP EXPERT CONSULTING 2000 S.R.L.) - identification, contact and billing and payment data - for accounting purposes;
5.4.9. Internal tooling providers (Discord, Inc) - technical and usage data, account data - for logging, app improvement and debugging purposes.
5.5. The Controller does not sell personal data and does not share personal data of members of the public with customers, law enforcement agencies or any other third party for identification, investigation or monitoring purposes. Personal data may be disclosed to public authorities only where the Controller is legally obliged to do so.
6. Transfers of personal data to third countries or international organizations
6.1. A transfer or a set of transfers of personal data to a third country or an international organisation shall take place only on one of the following conditions:
(a) the data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;
(b) the transfer is necessary for the performance of a contract between the data subject and the Controller or the implementation of pre-contractual measures taken at the data subject's request;
(c) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the Controller and another natural or legal person;
(d) the transfer is necessary for important reasons of public interest;
(e) the transfer is necessary for the establishment, exercise or defence of legal claims;
(f) the transfer is necessary in order to protect the vital interests of the data subject or of other people, where the data subject is physically or legally incapable of giving consent;
(g) the existence of an adequacy decision in accordance with the Regulation (including the EU-U.S. Data Privacy Framework, for certified recipients);
(h) the existence of appropriate safeguards, including standard contractual clauses or binding corporate rules, in accordance with the Regulation.
6.2. Considering that the Services are mainly addressed to public safety agencies in the United States, the personal data listed in section 3.13 may be transferred to the United States in order to: send emails, newsletters and notifications (Twilio); provide support communications (Intercom); schedule demos and meetings (Calendly); gather crash reports (Sentry); host, log and improve the Services (DigitalOcean); process payments and subscriptions (PayPro Global); operate the website and newsletter (Ghost); perform logging and debugging (Discord); and, based on your consent, measure and target advertising (Google, Meta, LinkedIn).
7. The period for which the personal data will be stored / criteria used to determine that period
The personal data of the Customers will be stored for the entire period that they are customers of the Services, at least for the period that the agreement(s) with the Controller is/are valid and until the expiration of any prescription period, but not less than the period provided by the legal regulations in force.
The personal data of potential Customers and Visitors that didn't become Customers will be stored for the entire period that they and Code Path take steps/communicate in order to conclude any agreement(s) and for 6 months after the last step/communication, but not less than the period provided by the legal regulations in force.
The personal data of the Authorized Persons will be stored for the entire period that the agreement between the corresponding customer and the Controller is valid, but not less than the period provided by the legal regulations in force.
The personal data of the Authorized Users will be stored for the entire period that they are users of the Services, for the period that the agreement between the corresponding customer and the Controller is valid, and until the corresponding customer deletes/requests the deletion of the respective Authorized Users, but not less than the period provided by the legal regulations in force.
Publicly available social media data is stored for as long as the corresponding profile is tracked in at least one active customer account and is necessary for historical analytics and benchmarks; content deleted from the original platform is removed or anonymized in accordance with the terms of the respective platform.
The personal data will mainly be stored in order to conclude/execute the agreements and for fiscal and/or legal purposes; additionally, the email address and phone number (as the case may be) will be stored for direct marketing purposes, until you object or withdraw your consent.
8. Obligation to provide the personal data and possible consequences of failure to provide such data
The provision of personal data is a requirement for concluding and/or performing the agreements and/or for using the Services, if and as the case may be. The data subjects are obliged to provide the personal data if they want to conclude and/or perform the agreements and/or use the Services (including with reference to Authorized Persons and/or Authorized Users).
The refusal to provide (certain) personal data will lead to the impossibility of concluding and/or performing the agreements and/or (fully) using the Services or certain functionalities of the Services, the Controller being entitled to limit access to such functionalities accordingly.
9. Right of access by the data subject
9.1. The data subject has the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, any available information as to their source;
(h) the existence of automated decision-making, including profiling, referred to in the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
9.2. Where personal data are transferred to a third country or to an international organisation, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.
9.3. The Controller provides a copy of the personal data undergoing processing. For any further copies requested by the data subject, the Controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested, the information is provided in a commonly used electronic form.
9.4. The right to obtain a copy referred to in paragraph 9.3 shall not adversely affect the rights and freedoms of others.
10. Right to rectification
The data subject has the right to obtain from the Controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
11. Right to erasure (‘right to be forgotten’)
11.1. The data subject has the right to obtain from the Controller the erasure of personal data concerning him or her without undue delay, and the Controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
(c) the data subject objects to the processing in accordance with the Regulation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing for direct marketing purposes;
(d) the personal data have been unlawfully processed;
(e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject;
(f) the personal data have been collected in relation to the offer of information society services to a child, in accordance with the Regulation.
11.2. Where the Controller has made the personal data public and is obliged pursuant to paragraph 11.1 to erase the personal data, the Controller, taking account of available technology and the cost of implementation, takes reasonable measures, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure of any links to, or copy or replication of, those personal data.
11.3. Paragraphs 11.1 and 11.2 do not apply to the extent that processing is necessary:
(a) for exercising the right of freedom of expression and information;
(b) for compliance with a legal obligation which requires processing by Union or Member State law to which the Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
(c) for reasons of public interest in the area of public health in accordance with the Regulation;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with the Regulation, in so far as the right referred to in paragraph 11.1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(e) for the establishment, exercise or defence of legal claims.
12. Right to restriction of processing
12.1. The data subject has the right to obtain from the Controller restriction of processing where one of the following applies:
(a) the data subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data;
(b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
(c) the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
(d) the data subject has objected to processing in accordance with the Regulation, pending the verification whether the legitimate grounds of the Controller override those of the data subject.
12.2. Where processing has been restricted under paragraph 12.1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
12.3. A data subject who has obtained restriction of processing pursuant to paragraph 12.1 is informed by the Controller before the restriction of processing is lifted.
13. Notification obligation regarding rectification or erasure of personal data or restriction of processing
The Controller communicates any rectification or erasure of personal data or restriction of processing carried out in accordance with sections 10, 11.1 and 12 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Controller informs the data subject about those recipients if the data subject requests it.
14. Right to data portability
14.1. The data subject has the right to receive the personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance, where: (a) the processing is based on consent or on a contract; and (b) the processing is carried out by automated means.
14.2. In exercising the right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.
14.3. The exercise of this right is without prejudice to the right to erasure. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, and shall not adversely affect the rights and freedoms of others.
15. Right to object
15.1. At any time, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her based on the legitimate interests pursued by the Controller or a third party, including profiling based on those provisions. The Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
15.2. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such purpose, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects, the personal data shall no longer be processed for such purposes.
15.3. At the latest at the time of the first communication with the data subject, the right referred to in paragraphs 15.1 and 15.2 is explicitly brought to the attention of the data subject and presented clearly and separately from any other information.
15.4. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
15.5. Where personal data are processed for scientific or historical research purposes or statistical purposes (including aggregated, anonymized benchmarks and industry reports) in accordance with the Regulation, the data subject, on grounds relating to his or her particular situation, has the right to object, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
16. Automated individual decision-making, including profiling
16.1. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The Controller does not take such decisions in connection with the Services. Automated classification performed by Socialhound (e.g. assigning posts to content pillars such as community events, crime prevention, recruiting or crisis updates) applies to published content of organizations, not to individuals.
16.2. Paragraph 16.1 does not apply if the decision: (a) is necessary for entering into, or performance of, a contract between the data subject and a data controller; (b) is authorised by Union or Member State law to which the Controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or (c) is based on the data subject's explicit consent. In cases (a) and (c), the Controller shall implement suitable measures to safeguard the data subject's rights, at least the right to obtain human intervention, to express his or her point of view and to contest the decision.
17. Right to lodge a complaint with a supervisory authority
17.1. Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the Regulation. The lead supervisory authority of the Controller is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
17.2. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to section 18.
18. Right to an effective judicial remedy against a supervisory authority
18.1. Without prejudice to any other administrative or non-judicial remedy, each natural or legal person has the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them.
18.2. Each data subject has the right to an effective judicial remedy where the competent supervisory authority does not handle a complaint or does not inform the data subject within three months on the progress or outcome of the complaint lodged pursuant to section 17.
18.3. Proceedings against a supervisory authority are brought before the courts of the Member State where the supervisory authority is established.
19. Right to an effective judicial remedy against a controller or processor
19.1. Without prejudice to any available administrative or non-judicial remedy, each data subject has the right to an effective judicial remedy where he or she considers that his or her rights under the Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with the Regulation.
19.2. Proceedings against a controller or a processor are brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.
20. Representation of data subjects
The data subject has the right to mandate a not-for-profit body, organisation or association properly constituted in accordance with the law of a Member State, having statutory objectives in the public interest and active in the field of the protection of personal data, to lodge a complaint on his or her behalf, to exercise the rights referred to in sections 17, 18 and 19 and to exercise the right to receive compensation on his or her behalf, where provided for by Member State law.
21. Right to compensation and liability
21.1. Any person who has suffered material or non-material damage as a result of an infringement of the Regulation has the right to receive compensation from the controller or processor for the damage suffered.
21.2. Any controller involved in processing is liable for the damage caused by processing which infringes the Regulation. A processor is liable only where it has not complied with obligations of the Regulation specifically directed to processors or where it has acted outside or contrary to lawful instructions of the controller.
21.3. A controller or processor shall be exempt from liability if it proves that it is not in any way responsible for the event giving rise to the damage.
21.4. Court proceedings for exercising the right to receive compensation are brought before the courts competent under section 19.2.
22. Withdrawal of consent
Where the processing is based on the consent of the data subject, the data subject has the right to withdraw the consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. For the sake of clarity, the withdrawal of consent shall not affect the processing of personal data based on other legal grounds.
23. Cookie Policy
The Controller's website and Services may use “cookies”. Cookies are text files containing small amounts of information which are downloaded to your device when you use the Services and are sent back to the originating URL on each subsequent visit, or to another URL that recognises that cookie. You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.eu.
You may set and/or adjust your browser settings and cookie preferences at any time, and you may disable cookies. Disabling them may prevent you from using certain parts/functionalities of the Services. Non-essential cookies are only placed with your consent. We use the following categories:
Category 1 - Strictly Necessary Cookies. These cookies are essential for the website and app functionality (including user log in and security). Socialhound cookies: session and authentication cookies; Ghost cookies: ghost-members-ssr*, ghost-admin-api-session.
Category 2 - Performance Cookies. These cookies collect information about website and app usage in order to optimize the user experience. Google Analytics cookies: _ga*, _gid*, _gat_gtag*. Hotjar cookies: _hj*. Hotjar honors generic “Do Not Track” headers.
Category 3 - Functionality Cookies. These cookies allow non-essential functionality such as scheduling a demo or chatting with the support team using a website widget. Calendly cookies: OptanonConsent, OptanonAlertBoxClosed. Intercom cookies: intercom*.
Category 4 - Targeting or Advertising Cookies. These cookies enable marketing and advertising activities. Facebook cookies: _fbp*, fr, datr, sb. Google Ads cookies: _gcl*. LinkedIn Insight cookies: li_*, lidc, bcookie.
24. Notice for users in the United States
24.1. Where applicable US state privacy laws (such as the California Consumer Privacy Act, as amended) apply, you may have the right to know what personal information we collect, use and disclose, to request access to, correction or deletion of your personal information, to opt out of targeted advertising, and not to be discriminated against for exercising these rights. The Controller does not sell personal information and does not share it for cross-context behavioral advertising without your consent.
24.2. The categories of personal information collected, their sources, purposes and recipients are described in sections 3 and 5. You may exercise your rights by emailing [email protected]. We may need to verify your identity before responding. You may also use an authorized agent, subject to verification.
24.3. Where a customer is a public agency subject to public records laws, information provided by such agency to the Controller may be subject to disclosure under such laws; the agency remains responsible for compliance with its own public records and retention obligations.
25. Security
The Controller implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, including encryption in transit, access controls on a need-to-know basis and regular backups. In case of a personal data breach likely to result in a risk to your rights and freedoms, the Controller will notify the competent supervisory authority and, where required, the affected data subjects.
26. Social media platforms API usage
Socialhound uses the APIs and data made available by Meta Platforms (Facebook, Instagram) and X Corp. The use of such data is subject to the terms and policies of the respective platforms. Where you connect a social media account to Socialhound, you can revoke our access at any time from the settings of the respective platform, and for questions or complaints about our privacy practices you can contact us at [email protected].
27. Miscellaneous
27.1. You have all the rights mentioned in the present data processing policy as well as any other rights provided by the mandatory legal regulations in force regarding personal data processing.
27.2. Your rights can be exercised in accordance with the Regulation and any other applicable legal regulations in force.
27.3. Any requests sent by you to the Controller for exercising any of your rights may be made in writing, by registered letter sent to the headquarters of the Controller and/or by email at [email protected] (also the contact email of the DPO, if such DPO exists), and/or by any other means of communication provided by the legal regulations in force.
27.4. The data subject may request and obtain, free of charge, in particular, access to and rectification or erasure of personal data, restriction of processing, data portability, the exercise of the right to object and the right not to be subject to a decision based solely on automated processing, including profiling, as well as information in relation with any security breach of personal data.
27.5. The terms used in the present data processing policy have the meaning defined in the Regulation and in the agreement(s), unless the context otherwise requires or it is otherwise provided herein.
27.6. Except as otherwise required by the mandatory legal regulations in force, the Controller reserves the right to update and change this data processing policy from time to time. Material changes will be notified to registered users by email or in-app notice. You agree that it is your responsibility to check the data processing policy each time you use the Services.