Privacy Notice
Updated May 3, 2022.General information
This Privacy Notice is issued by Chaos Czech a.s., a joint-stock company incorporated under the laws of Czech Republic, seated at Karlovo namesti 288/17, 120 00 Prague, Czech Republic (hereinafter only as “we” or “us”).
We are part of Chaos. Chaos consists of our parent company “Chaos Software” EOOD, a limited liability company incorporated under the laws of Republic of Bulgaria, seated at Sofia, Bulgaria, registration No. 131375768, and all of its subsidiaries. For more information go to: https://www.chaos.com.
We recognize the importance of protecting information collected about you and have adopted this Privacy Notice to inform you about how we process your personal data when you visit our websites and use our products or services. This Privacy Notice defines our institutional approach to personal data processing and data protection and outlines your rights and obligations related to the processing.
Some of our products or services may provide additional privacy terms that amend or expand provisions of this Privacy Notice. In such case, additional terms take precedence over this Privacy Notice.
When does this Privacy Notice apply?
This Privacy Notice is applicable in situations when we process your personal data on our own behalf. By the wording of the regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (“GDPR”), it means that we act as a “Controller” in respect to your personal data. The notion of personal data is defined by the GDPR, but basically means any information relating to an identified or identifiable natural person, for example: name, date of birth, residential address, online identifiers such as IP address.
Certain aspects of our business are handled by our parent company or other Chaos members, especially in respect to sales of our products and services, marketing, license management, or customer support. In these situations, the immediate data controller may be a subject within Chaos other than us. Please, note that as a data subject, you may exercise your rights against each and any of the data controllers; throughout Chaos, common procedures and data processing policies have been implemented to ensure data security and conformity with applicable regulations.
We may also process personal data on behalf of someone else, as a processor. This Privacy Notice does not apply in such situations.
How do we process your personal data?
We process information about you in different ways. Mainly, we obtain personal data directly from you, usually when you purchase our product or register to our service. Certain data is collected automatically, for example when you interact with our applications or websites. Additionally, we might process personal data when you participate in a survey, voting poll, or a consumer competition. In some cases, we may receive or verify information about you from third parties or public resources.
From the information you provide us, we process only personal data to the extent that is necessary for the purpose of the processing. Personal data are processed by automated means, or manually.
Apart from personal data, we collect anonymous information. We might use personal data and anonymous information to generate aggregate information. Anonymous and aggregate information do not identify you as an individual. We may share these types of information with third parties without restrictions.
What personal data do we collect about you?
We collect the following types of information:Transaction information
Provided by you when you purchase a product or a service from us or when you request such product or service, whether on our websites, through applications or via our representatives, including your identification and contact information (name, surname and your job title, when you act as a representative of a legal person, or name, surname, date of birth, ID number, residential address, country of residence, phone number, email address of a natural person). If you make a direct purchase from us, we may collect accounting data related to the transaction, such as bank account number and billing address;
Administration of licenses
Information relevant to administration of licenses that you obtain from us, such as serial license number, request key and password. If you apply for a student license or another special category license on our offer, we may require a proof of your status, such as a copy of your student ID or confirmation of enrolment;
Registration information
Provided to us when you create a user account on our websites or community forums that we administer, which may include identification information such as name, surname and/or username, country of residence, contact information and password;
Comments
Information that you post on our websites. Our websites and applications may offer chat, comments section, community environment, or other tools with non-restricted audience. Please, note that if you provide information about you when you use any of these features, that information will be publicly displayed. We do not require you to disclose your personal data publicly. We have no obligation to keep private any information that you have made available to other users or viewers. To request removal of your information from our forums or websites, please follow the rules of such forum if available, or contact us via contact details available here;
Communications
Content, communications, and other types of information you provide us when you engage with our applications, or when you communicate with us directly;
Usage and Location data
Provided when you interact with our applications and websites, such as your device identifier, IP address, user agent, websites you visited prior to coming to our website. We may use logins, Cookies, device information and IP addresses to identify you and log your use, subject to applicable laws (see more in our Cookie Notice).
What are the legal bases for the processing?
Providing your personal data is voluntary, but at the same time, without some of your personal data we would not be able to deliver you products or services that you request. When the processing is permitted directly by law, we do not ask for your consent. Nevertheless, we are obliged to disclose purposes of the processing and put forward legal bases which entitle us to process personal data if such information is not evident from the processing itself. Without your explicit consent, we process personal data when it is necessary for the performance of a contract. That is, when the personal data are needed to conclude a purchase, license, or another agreement and perform it. Furthermore, we process personal data when we are obliged to do so directly by law, for example personal data related to financial transactions and accounting, or information provided to public bodies if requested by a court order or a similar measure. When our or third parties’ legitimate interests are concerned, we process personal data in pursuance of such interests, unless they are overridden by your interests, fundamental rights, and freedoms. In our legitimate interests, we may process personal data to detect a fraud software and software piracy, to create anonymized data sets, perform product usage analytics, check your credit before ordering services, collect debts, send you a limited marketing communication if you are our customer, and in other circumstances to prevent a damage or mitigate a risk of loss to our property, tangible or intangible assets. If you do not agree with the processing that is based on legitimate interests, you have the right to object to it. Beyond these limits, we may process personal data with your consent. In such circumstances, we will explain to you the purpose and extent of the processing, so you can knowingly and willingly decide to grant us your consent or not. From time to time, we may ask you to take part in surveys, consumer competitions or voting polls. Your decision not to grant us a consent will not have any negative impact on the services that we provide you or products that you have purchased.Purposes of the processing
Our primary goals in collecting your personal data are to:Provide the requested products and services
When you order a product or a service from us, we collect your identification information and other transaction information in order to process your order and deliver the requested product or service. This may include steps prior to concluding (typically) the purchase, service, or license agreements, responding to your inquiries and providing you with billing information. Additionally, we may process usage data and location data to validate your identity as necessary, perform our contract with you, and deliver the relevant product or service online.
If you are our customer, we may send you payment notices, confirm registration to the user’s accounts, communicate changes to the products or services we provide you, resolve your complaints and for another, contract-related, purposes. As these communications are not marketing-related, but merely an integral part of our business relationship, you cannot opt-out of receiving them.
Identification and contact information are processed with provision of our product support services. Most of the software-related inquiries are managed through our online helpdesk forum, where end users may issue tickets and track their status. Whenever you submit a data file to support your issue (such as a render, scene, etc.), we will process it solely to resolve the relevant issue and improve our products or services. Without your direct consent, we do not transfer your data to third parties.
Publishing and use of works created by you
We keep a gallery of works created in our applications, such as renders, scenes, or videos representing both the authors and capabilities and features of our applications. Our Corona Renderer Gallery contains a collection of renders created in Corona Renderer. If you submit your work with us, we may offer to publish it in the gallery or promote it by other means. We may also wish to use it for presentation, marketing, or testing purposes. Subject to the foregoing, we will propose relevant license terms and conditions guiding such use of your works.
Keeping you up-to date/request feedback
If you are our customer, we are entitled to address you by email or postal address even without your explicit consent, in order to inform you about offers of our products and services which are similar or relate to the products or services that you have already purchased from us (for example, new versions of applications, plugins or software packages, webinars, seminars and events). We may ask for your feedback regarding products or services that you purchased or webinar, seminar, or another event that you attended. You are entitled to unsubscribe from this form of communication through unsubscription link provided in each such communication, by managing your preferences through a user account, or directly by contacting us using the contact details available here.
Creation of anonymized data sets
We may anonymize personal data to create anonymized data sets, which could then be used to improve our products and services or products and services of our affiliates and partners.
Detection of fraud software and software piracy
We may process usage data, location data, identification, and contact information to detect, prevent or otherwise address fraud software and software piracy. We also check the validity of the license during the term of your service. We do this not only to protect our rights, but also third parties’ and your rights and legitimate interests.
Forum registrations
Some functions on our websites (such as comments section of our community forums and weblogs) may be accessible only for registered users. Registration process requires you to fill in certain identification and contact information to create a user’s account. We process the data in order to enable and provide the services.
Apart from the mandatory personal data on the registration forms, you may be allowed to personalize your user profile by adding voluntary information to your user profile, such as profile image or additional contact information. While disclosing additional personal data on your user profile may help to improve your communication with other users or even promote your online profile, be aware that we are not liable for any misuse of your personal data in such cases. All the data not expressly required to be filled in shall be considered within this category.
Benchmark
We may offer you an opportunity to perform a benchmark test via our software, such as Corona Benchmark. Corona Benchmark is a free to use, standalone application developed by us to measure the computation speed of your computer. When you perform the test, we process data necessary in order to run benchmark, such as usage data (IP address, hardware information, application version). Additionally, you may decide to publish your results on our website alongside your username. Performing a benchmark and publishing your personal data is voluntary.
Surveys & Consumer Competitions
From time to time, we may ask you to participate in a survey, consumer competition or a voting poll. Participation in such activities is voluntary. Unless stated otherwise by terms and conditions of such activity, we will process personal data solely to the extent that is necessary to go ahead with such activity pursuant to its purpose. Certain personal data such as contact details may be required in this context to register to vote or o take part in a survey. No personal data will be disclosed to other participants or to the public unless agreed otherwise.
Newsletter
If you wish to keep up with the latest product features, be informed about new products or services, and see special offers, you are welcome to sign up to our newsletter. You may subscribe to the newsletter upon creating a user account on our website (Or if you already have one, you may sign-up by managing your preferences within your account). If you change your mind, you may easily unsubscribe at any time, by clicking to the unsubscription link contained in each newsletter or through your user account.
Product usage data
In order to support our ongoing development efforts and provide you with a better user experience we may collect IP address and non-personal technical data about the way you use our products. This is sometimes called “Product Usage Analytics”. By collecting the data we can, for example:- See what features are actively used and work on keeping and improving them in future product versions to better fit your needs;
- Evaluate and enhance user experience of our products;
- Streamline our development activities and workflow.
- System information;
- Type of our product and product version installed;
- Third-party plugins and their versions installed;
- Session length;
- A unique anonymous identifier generated per user to match multiple sessions and renders together;
- Render settings;
- Render statistics;
- Types and counts of objects, materials and shaders used in scenes.
Job applicants
If you apply for a vacancy in our company, we collect and process your personal data during the recruitment procedure. Generally, we will need to know your name, surname, gender, contact details (email address, phone number), details of your qualifications, skills, experience, and employment history. We also process additional information that you include in your CV or complementary documentation. If you are a foreigner, we may ask for information about your entitlement to work in the country. We process your personal data only in relation to the job vacancy that you applied for. We may ask for your consent with keeping your personal data in our database in order to consider you for relevant vacancies that may be opened in the future and contact you with an offer if we think that you might be interested. The consent is valid for three years, unless expressly agreed otherwise. You have a right to withdraw from the consent anytime. Unless you have agreed that we may keep your personal data for future vacancies, we will remove your personal data from our database, along with submitted documents in a reasonable time after the vacancy has been filled. Nevertheless, some personal data (such as name, surname, date of birth, state of residence/address, education, and employment history) could be integrated to the reports that have been put together during the evaluation procedure in order to choose the right candidate. We keep these reports to protect our rights and interests against any claims or administrative inspections for the limitation periods. You are always entitled to know what personal data we process about you. For more information on your rights, go here.Sharing your personal data with third parties
We will not share your personal data outside of our company except in limited circumstances, including:With your consent
In certain circumstances, we may ask for your consent with transfer of your personal data to third parties, or you may directly instruct us to share the personal data with a selected third parties. This includes situations when we wish to share your data for marketing campaigns, or when you direct us to share your personal data with third-party websites or social network platforms.Sub-processors
We use third-party service providers, who assist us in course of our business activities, especially in providing the services to you. Without these sub-processors, it might not be possible for us to provide you the services in the expected quality or quantity. Sub-processors process your personal data on our behalf, only in the scope and for the purposes determined by us or required by law. We make sure that we cooperate only with reputable sub-processors whose privacy policies meet statutory regulations and our own data protection standards, so we can ensure appropriate level of protection of your personal data irrespective of whether we use sub-processors or not. We use the following categories of sub-processors:- Accounting and billing services;
- Hosting services, such as webhosting, cloud storage and file-sharing solutions;
- Platform as a service (PaaS) providers whose platforms propel our technologies and analytics software;
- Productivity and team collaboration tools;
- E-commerce solutions;
- Product support services, such as online helpdesk tool;
- Automated email marketing tools;
- Recruitment agencies;
- Advisors and consultants, whom we may consult on certain technical or procedural issues related to our business operations.
Affiliates
The information collected about you may be accessed by or shared with members of Chaos, who may perform administration, cloud storage, product support, accounting, marketing, or similar activities on our behalf.When required by law
We may share your personal data with law enforcement officials, government agencies, or other authorities when necessary to comply with legal process or regulation or to meet national security requirements.Protection of rights and legitimate interests
We may disclose personal data when we believe it is necessary to respond to claims asserted against us, enforce or administer our agreements and terms, for fraud prevention, risk assessment, and to protect the rights, property or safety of us, our business partners, or customers.Corona Academy
Corona Academy is our online learning platform available at https://online.corona-academy.com/. To access the platform, and, ultimately, services available on the platform, you need to provide personal data through the registration form and create a user account. Only the data clearly marked as mandatory are required, however you can write in additional data for various reasons, for example to improve communication with us, or provide us with your business details for correct invoicing.
Personal data are processed mainly in order to provide you the requested services. On top of that, we may use without your direct consent your contact details for limited marketing communication that is relatable to the services that we provide on the platform and that you use (such as discount offers for our products, invitation to Q&A sessions, community forums, etc.). Each marketing communication will be clearly labelled as such, and you will be able to easily opt-out from receiving future offers. If you do not agree with the processing based on this legitimate interest, you have the right to object to it. For more information on the purposes of the processing, go here.
To maintain security and functionality of the platform and to enable provision of the services, technical and usage data are collected. The data contain your IP address, logs on your use of the platform and relevant services, such as your progress over the courses that you are enrolled in, as well as timestamps of the recorded activities.
For information on Cookie processing on the platform, see our Cookie Notice.
Resellers, distributors
We engage with resellers and distributors who sell our products and services. Resellers and distributors act as independent entities when reselling or distributing our products and services (in their own name and under their own responsibility). They may appoint other resellers or connect with ecommerce platform providers, who offer various services associated with online retail. Please, note that when you buy a product or service from a reseller or a distributor, we are not party to the purchase agreement of such a product or service. We do, however, keep all intellectual property rights to our products and services. In connection with your purchase of a product or service through a reseller or a distributor, we may receive some of your contact and identification information, especially in order to enable you access to the purchased products or services, to register and activate products or services, and to facilitate product support and after-sales service. We do not have access to payment details such as bank account numbers, credit card information and online payment details. The privacy policies of resellers and distributors govern how these parties use and protect your personal data.Third party links and services
Our websites may contain links to third-party websites and services. Please remember that when you use a link to go from our websites to other websites or you request a service from a third party, this Privacy Notice no longer applies to these third-party websites and third-party service providers unless we are acting as joint controllers in respect of your personal data with such third party. Your browsing and interaction on any other websites, or your dealings with any other service provider, is subject to that service provider’s own rules and policies. We do not monitor, control, or endorse the privacy practices of any third parties. Our websites may integrate with social networking services. You understand that we do not control such services and are not liable for the way in which they operate. While we may provide you with the ability to use such services in connection with our websites, we are doing so merely as an accommodation.How long do we keep your personal data?
We keep your personal data only for the period that is necessary in respect to the purpose of the processing. Typically, we keep personal data for the length of any contractual relationship and after the end of the relationship until the expiry of the limitation periods, in order to protect us from legal claims and administer our business. Certain personal data are kept in order to fulfil regulatory obligations, in that case, processing periods are determined by statutory obligations. When we no longer need to use personal data, we will delete them from our systems and records or take steps to anonymize the data.What are your rights?
- Right of access You have the right to obtain confirmation that we process personal data about you. If we, indeed, process personal data about you, you have the right to access the personal data, including relevant information about the processing, such as purposes and period of the processing, source of the personal data and, if we disclose the personal data to third parties, categories of the recipients.
- Right to rectification You have the right to correct and update inaccurate personal data that we hold about you. Taking into consideration the purposes of the processing, you may also ask us to have incomplete personal data about you completed.
- Right to erasure You have the right to request that we delete your personal data without undue delay in certain circumstances, such as (a) when the data is no longer necessary for the purpose for which it was originally collected, (b) when you have withdrawn your consent on which the processing is based and there is no other legal ground for the processing, (c) when you have objected to the processing based on our or third-party legitimate interest and there are no overriding legitimate grounds for the processing, or (d) generally, when there is a provision of law prohibiting us to carry on with the processing.
- Right to object You have the right to object to the processing of your personal data including profiling, which is based on our legitimate interests or legitimate interests of third parties. Unless we demonstrate in response to your objection compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims, we shall no longer process the personal data. Where we process personal data for direct marketing purposes, you have the right to object to the processing of your personal data for such purpose, including profiling based on this ground. After receiving your objection, we shall no longer process your personal data for the direct marketing purposes.
- Restriction of processing When you (a) have objected to our use of personal data, but it is necessary to verify whether we have overriding legitimate grounds to use them, or (b) when you have contested the accuracy of your personal data, for a period enabling us to verify the accuracy, or (c) the processing is unlawful but you decide to request restriction instead of erasure, or (d) when we no longer need the personal data for the purposes of processing, but you require us to keep them for the establishment, exercise or defense of your legal claims, you have the right to request restriction of the processing. Restriction of the processing means that after receiving your objection and until the restriction is lifted, we are not entitled to process your personal data for other purposes than establishment, exercise, or defense of legal claims, otherwise only with your consent.
- Data portability Right of data portability applies solely to the personal data that are processed by automated means based on your consent or on the grounds of performance of a contract. In respect to such personal data, you have the right to receive them in a structured, commonly used and machine-readable format. Where technically feasible, you shall have the right to have the personal data transmitted directly from one controller to another.
- Right to withdraw consent If the processing is based on your consent, you are entitled to withdraw your consent at any time. After we receive your withdrawal, we will cease the processing which was based on your consent. Please, be advised that sometimes we process personal data for more purposes and withdrawing your consent is without prejudice to the processing of your personal data which is not based on your consent.
Security of your personal data
In order to protect your personal data from loss, unauthorized use, access, or disclosure, we implement reasonable technical, administrative and physical measures. Access to your personal data is restricted only to employees or authorized third parties who need to know that information in order to perform their designated tasks. We have implemented internal procedures guarding data processing in our company. Third parties processing personal data on our behalf are contractually bound to protect personal data in similar ways to us and to treat them confidentially.Automated decision-making, profiling
We do not engage in automated decision-making or profiling.Children
Our websites and services are not intended to be used by children. We do not knowingly process personal data of children without appropriate parental or guardian consent. If you believe we may have collected personal data from someone under the applicable age of consent in your country without proper consent, please let us know using the contact details available here.How to contact us
If you have any questions about this Privacy Notice, any concerns or complaints regarding personal data processing or wish to report a possible breach of your privacy, please send us an email, or write us using the contact information below.
Chaos Czech a.s.
Karlovo namesti 288/17
120 00 Prague
Czech Republic
If you are based in the UK, you may also contact our UK data protection representative at: chaos@datarep.uk.
Complaints & Supervisory body
If you have any complaint or concerns regarding how we process your personal data, or if you want to report a breach of your personal data, you can contact us through the contact details available here.
We will aim to ensure that your complaint is resolved in timely and appropriate manner.
If you are not satisfied with our answer or proposed solution, you have a right to submit your complaint with our supervisory body, which is The Office for personal data protection, Pplk. Sochora 27, 170 00 Prague, Czech Republic, (www.uoou.cz).
