Last Updated: May 17, 2018
Here at BookSteam, we take your privacy and the processing of your personal data very seriously. Dencom Media Inc. owns and supplies software and services that assist in scheduling, reserving, and/or managing appointments and schedules online in connection with the BookSteam.com website (collectively, the “Service,” the “Services,” or the “Website”). In this Policy, Dencom Media Inc. may also be referred to as “BookSteam,” “us,” or “we.” Any individual or organization using and Subscribing to the Website for the purpose of making or managing online appointments or reservations on behalf of themselves or an organization shall be referred to as a “service provider." Any end consumer using the Website or any other part of the Website in order to reserve time in order to receive services from any BookSteam Service provider shall be referred to as a “Consumer." Both BookSteam Service providers and Consumers shall be referred to as “you." Using the services or any portion of the website, signifies your acceptance of the terms herein.
2. What is personal data?
“Personal data” is any information relating to an identifiable or identified person (you as a user). An identifiable person is someone who can be identified, directly or indirectly, for example by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
The processing of special categories of data, defined as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and data concerning health or sex life, is prohibited, subject to certain exceptions.
We will not share your scheduling information with any party, except to the extent necessary to allow Consumers to browse, schedule and manage appointments.
3. Personal data which we handle
Your personal data may only be processed by us with your given consent, when it is necessary for the performance of a contract to which you are a party, or when it is necessary for our compliance with a legal obligation. The processing of the personal data, the specific purposes for the processing, the legal basis for the processing, and for how long we store your personal data, is described below. Our processing of data may often be for legal persons, but our processing may concern you as a natural person if your business is conducted through a sole proprietorship or similar.
To generate unique accounts for registered businesses, we may process your name. Such processing is based on your consent and your name will be kept securely with us until the account is fully deleted by us.
Your email address may be processed by us in order to create an identity for your account and for you to create an account. The processing is based on your consent and your email address will be kept with us until the account is fully deleted by us.
To register your account, your business name will be processed based on your consent. Your business name will be kept securely with us until the account is fully deleted by us.
To cater the account for the registrar, your phone number will be processed based on your consent. Your phone number will be kept securely with us until your account is fully deleted by us.
To cater the account for the registrar, we will collect and process your address for your booking page. Such processing is based on your consent and the address will be kept until your account fully deleted by us.
To cater the account for the registrar, we may process your professional details, as it is necessary for our performance of a contract where you are a party. Your professional details will be stored securely with us until your account fully deleted by us.
Photos and images
We may, when you set up your account, process photos and images. Uploading photos and images is voluntary and our processing is based on your consent. These personal data will be kept until your account fully deleted by us.
In order to charge for your subscription with us, your payment details will be processed by us, as it is necessary for our performance of a contract where you are a party. Your payment details will be kept with us until your account fully deleted by us.
4. Summary of your rights towards us
The Regulation in its entirety in your language, may be accessed by following this link:
You as a user have the possibility to claim several rights towards us. Such rights are listed here and thereafter described in detail below:
- Right to be forgotten
- Right to withdraw consent
- Right to access
- Right to rectification
- Right to restriction of processing
- Right to data portability
- Right to object
4.1 Right to be forgotten
You have the right to request that we delete any personal data that we process about you. We will delete the data as soon as possible, but at least within one month’s time. If the personal data is needed for fulfillment of our contractual duties towards you or to preserve it with legal ground, we will however not delete the information until the data is no longer needed. We will also, without your explicit demand, delete such personal data that we have collected but do not longer have a lawful right to process. We will inform you about this, if it would occur.
4.2 Right to withdraw consent
You have the right to withdraw your given consent at any time. If you do so, we will erase such personal data which is not subject to any other legal ground than your given consent. The erasure will be done as soon as possible. Please note that your withdrawal of consent does not oblige us to erase personal data which is processed based on a contractual relationship or any other legal ground.
4.3 Right of access
You have, at any time, the right to receive confirmation from us as to whether personal data concerning you are being processed. You have also the right to access that personal data and to receive the following information:
a) The purposes of the processing
b) The categories of personal data concerned
c) The recipients or categories of recipients to whom personal data have been or will be disclosed
d) The envisaged period for which the personal data will be stored or the criteria used to determine that period
e) The existence of automated decision-making and profiling
4.4 Right to rectification
You have, at any time, the right to demand us to correct any inaccurate personal data within a month’s time. You have also the right to complete incomplete personal data, taking into account our purposes of the processing, by the means of providing a supplementary statement.
4.5 Right to restriction of processing
You have, instead of demanding us to delete any data, the right to demand us to restrict our processing of your personal data. This may be achieved if
a) You have reason to believe that the accuracy of the personal data is not correct, and the restriction shall be in place during a period that allows us to verify the accuracy of the personal data
b) The processing is unlawful but you don’t want us to delete the personal data
c) We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims
d) You have objected to processing concerning profiling or automated decision-making, whereby a restriction shall be obtained during the period when we assess whether our legitimate ground for the processing override your legitimate ground.
4.6 Data portability
You have the right to retrieve the personal data which we process about you and that you have provided to us. You have also the right to demand that we transmit such personal data to another data controller if the personal data is collected based on your consent or if the processing of the personal data is carried out by automated means by us, if we deem it technically feasible.
4.7 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This can be done when the personal data is processed as part of automated decision-making, including profiling, and direct marketing, if such processing would be carried out (see “Personal data that we process” above).
Always feel free to contact us if you have any questions regarding GDPR regulations.
You may schedule an appointment with a Service Provider whether or not you register with us. You will be required to enter your name, email address (which will function as your user name) and password, your phone number, address, and other personal information. BookSteam and the Service Provider with whom you schedule an appointment use this information to send you appointment confirmations and reminders, to otherwise communicate with you about such services, and to inform you about the services in which you have expressed interest.
BookSteam shares personally identifiable information with the businesses where you schedule reservations.
BookSteam may also use this information to customize your experience on the Website and to present Website users with web advertisements of interest to you based on your scheduling activities.
5.2 Service Providers
In order to use the Services, you must first complete the registration process and create a user name and password. During registration you are required to give contact information including, but not limited to, business name, owner, address, phone number and email address. We use this information to to cater the account for the registrar. We may ask you to provide a valid credit card number and billing address so that we can process any payments for use of the Services. You may terminate the payments by deactivating your account, or modify your payments by changing your package pricing, inside your account or by contacting us.
6. Collected Non-Personal Information and its' Use
We may use the non-personal information to generate user statistics that we may provide to prospective advertisers or partners. If we provide any such information to others, we will provide such information in the general terms only and will not include any personal information about any individual users. We may also use the non-personal information to generate statistics that we may provide to you and to other businesses using the Services. We also may provide non-personal information to contractors so that they can perform services for us.
Consumers implicitly consent to receive communications via email, text and voice message when entering their phone number(s), mobile carrier(s), and email address(es). If you choose to opt-out of the communications, you must terminate the use of full BookSteam services.
8. Third-party Links to Other Web Sites
9. Log Files
As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information, which does not identify individual users, to analyze trends, to administer the Services, to track users’ movements around the Services and to gather demographic information about our user base as a whole. We do not link this automatically-collected data to personally identifiable information. We use a third-party tracking service called Google Analytics that uses log files to track non-personally identifiable information about visitors to our site in the aggregate, such as usage and volume statistics, which we use to improve and enhance the Services.
If a user of the Services has chosen to identify himself/herself to BookSteam, the Company uses session cookies containing encrypted information to allow the Company to uniquely identify such users. Each time such user logs into the Services, a session cookie containing an encrypted, unique identifier that is tied to the user’s account is placed on that user’s browser. These session cookies allow the Company to uniquely identify you when the user is logged into the Services and to process online data transactions and requests. Session cookies are required to use the Services.
We post customer testimonials on our website which may contain personally identifiable information. Customer implicitly consents to their name and testimonial being published, by providing a testimonial.
12. Children's privacy issues
BookSteam’s primary audience are business professionals and service providers that offer appointment scheduling for adults. Therefore, persons under the age of 16 are not permitted to use our Services. If we believe that an account in use is from an individual under the age of 16, their use of Services will be terminated and all account information will be deleted. In the event that a child under the age of 16 years of age uses the BookSteam website, the child must be supervised by a parent and/or guardian.
13. Social Media Features
BookSteam uses Secure Socket Layer (SSL) to encrypt and protect sensitive information. We strictly follow the industry standards to protect your personal information. However, we cannot guarantee that the method of transmission and storage over the Internet and through the use of our Website, will not be compromised.
16. Information Sharing
In the event of an illegal activity or non-compliance with our Legal Terms, BookSteam holds the right to release any information that is required by law enforcement agencies. Possible acquisition or merger of BookSteam with another company/organization may result in direct transferring or compiling data with/to such organization.