Privacy Policy

1. Information We Collect

We collect various types of data to provide our services effectively. This includes but is not limited to:

Occupancy and activity data:Information about the presence and movements of individuals within monitored areas.

Air quality data: Measurements of environmental factors such as air pollutants and humidity.

Temperature data: Data related to ambient temperature within monitored spaces.

When you engage in various activities such as completing our web form on the DIREK® website, requesting a demonstration of our Services, responding to advertisements, subscribing to our newsletter, or registering for webinars, you have the opportunity to furnish us with details about yourself. Throughout these interactions, we might gather personal information. This information could encompass your name, company name, the state where your company is headquartered, employee and subcontractor counts, address, email, phone number, job position, title, and any queries you wish to pose to us.

Children's Data: The company does not collect children's data.

2. How We Use Your Information

The sensor data we collect is used to provide the occupancy, activity level, air quality, temperature, and other environmental analytics to clients through our dashboard portal. We also use the collected data for the following purposes:

Providing and improving our services: We utilize the collected information to offer AI-driven insights and real-time dashboards to enhance your understanding of the monitored spaces.

Analysis and research: We may anonymize and aggregate data for research, statistical, and analytical purposes to improve our services and contribute to industry knowledge.

We do not sell or rent this information to any third parties. The data is accessible only to authorized users at the client company through their dashboard login credentials.

3. Data Sharing

We may share your information in the following circumstances:

Third-party service providers: We may share data with trusted third-party providers who assist us in delivering our services.

Compliance with legal obligations: We may disclose data in response to valid legal requests, such as court orders or subpoenas.

4. Data Security

We employ industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. We take precautions to protect facility usage and environmental data from loss, theft, misuse, unauthorized access or disclosure, alteration, or destruction. We use encryption, firewalls, access controls, and other tools to safeguard data. Analytics dashboards and data access are restricted to authorized client users only. We train our staff on data privacy and security protocols.

5. Data Retention and Deletion

Sensor data will be retained as long as the client keeps their DIREK® service active. When a client ends their service, the collected sensor data will be deleted from our storage servers within 30 days. Aggregated analytics may be retained in an anonymous form but will not be associated with the client in any way.

6. International Data Transfers

Personal data may be processed and stored on servers located outside the European Economic Area (EEA) / United Kingdom. Where this occurs, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum, or by transferring to jurisdictions recognized as providing adequate protection.

Our application is currently hosted in the following cloud region(s): Google Cloud Platform (GCP), europe-west2, London, United Kingdom.

7. Cookies and Tracking Technologies

Our website and product use a cookie consent banner. When you first visit, you will be asked to accept, reject, or customize non-essential cookies before they are set. You can change your preferences at any time via the cookie settings link in the footer.

We currently use only strictly necessary cookies, the minimum required for our website and product to function correctly (for example, maintaining your session and keeping the site secure). We do not currently use analytics, advertising, or third-party tracking cookies, and we do not use cookies or similar technologies to profile visitors, track behavior across other websites, or serve targeted advertising.

Should this change in the future, for example, if we introduce analytics or marketing cookies, we will update this Policy and our cookie banner accordingly, and any such non-essential cookies will only be set with your consent.

8. Your Cookie Choices

You have the right to control and manage your cookie preferences. You can do this by:

Adjusting your cookie preferences via our cookie consent banner or preference center.

Adjusting your browser settings to block or delete cookies at any time.

9. Your Rights & Preferences as a Data Subject

Subject to the GDPR and applicable law's limitations, the rights afforded to you as a data subject are:

RIGHT TO BE INFORMED: You have a right to be informed about the manner in which any of your personal data is collected or used, which we have endeavored to do by way of this Policy.

RIGHT OF ACCESS: You have a right to access the personal data you have provided by requesting us to provide you with the same.

RIGHT TO RECTIFICATION: You have a right to request us to amend or update your personal data if it is inaccurate or incomplete.

RIGHT TO ERASURE: You have a right to request us to delete your personal data.

RIGHT TO RESTRICT: You have a right to request us to temporarily or permanently stop processing all or some of your personal data.

RIGHT TO OBJECT: You have a right, at any time, to object to our processing of your personal data under certain circumstances. You have an absolute right to object to us processing your personal data for the purposes of direct marketing.

RIGHT TO DATA PORTABILITY: You have a right to request us to provide you with a copy of your personal data in electronic format and you can transmit that personal data for use with another third-party's product/service.

RIGHT NOT TO BE SUBJECT TO AUTOMATED DECISION-MAKING: You have a right to not be subject to a decision based solely on automated decision-making, including profiling.

To exercise any of these rights, please contact us using the details in Section 14 (Contact Us) below.

10. Data Processing Agreement

A copy of our Data Processing Agreement (DPA), governing the processing of personal data on behalf of our clients, is available at direk.io/policies/data-processing-agreement (to be published) or upon request by contacting us at the details below.

11. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection obligations. You can contact our DPO as follows:

Name: Sepideh Razeghi

Designation: Head of Delivery

Email: sepideh@direk.io

12. EU Representative

DIREK® Company does not offer goods or services to, or monitor the behavior of, data subjects located in the European Union, and has therefore not appointed an EU Representative under Article 27 of the GDPR.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. Any such changes will be communicated to you through our website.

14. Contact Us

If you have questions or concerns about our Privacy Policy or data practices, including to exercise your data subject rights, please contact us at info@direk.io, or our DPO at the details in Section 11 above.