PRIVACY POLICY

Last updated: 29.05.2018

Way2enjoy respects your privacy rights and recognizes the importance of protecting the Personal Information (as defined below) provided by you to us. This Privacy Policy describes how the Way2enjoy collects, stores, and uses the Personal Information you provide to us through the Way2enjoy's web sites and through telephone or e-mail communications you may have with us. This Privacy Policy also describes the choices available to you regarding the Way2enjoy's use of the Personal Information you provide to us, and the actions you can take to access this information and request the correction or deletion of such personal information.

CONSENT
By using the Way2enjoy's web sites, you acknowledge that you have read this Privacy Policy and that you consent to the practices described herein with respect to the Way2enjoy's collection, use and disclosure of the Personal Information provided by you to us. This is the Way2enjoy's entire and exclusive Privacy Policy and it supersedes any earlier version. We reserve the right to change this Privacy Policy in accordance with the terms herein at any time, which is why we encourage you to visit this page often, review this Privacy Policy frequently, and remain informed about any changes to it.
If, after review, you still have questions about any portion of this Privacy Policy, please contact the Way2enjoy using the contact information provided at the bottom of this Privacy Policy.

GENERAL DATA PROTECTION REGULATION (GDPR)
The GDPR law is the European law that regulates the privacy rights of users from the European Economic Area (EEA). Our Declaration of Conformity can be found here.

GDPR’s main principle is that users own their personal data, and the companies have the obligation to make the right steps to facilitate the users’ rights:
to know what personal data companies collect, how they store this info and for how long
to know if the personal data is shared with third parties
to get the personal data (data portability)
to delete the personal data
to correct the personal data

TERMS USED IN THIS DOCUMENT: WE, USERS, THIRD PARTIES.
Way2enjoy is the provider of the service, referred sometimes as we.
By users we understand all the users of our tools and service, and also, the visitors of our site that compresses images through our online image compressor.
Visitors are those who browse the web pages of Way2enjoy. The logged in visitors are users of our service because they previously signed-up for a Way2enjoy account.
Customers are the users that purchased paid plans.
Third parties are other companies and the services they provide us.

1. WHAT PERSONAL DATA WE COLLECT AND HOW WE COLLECT IT

From the users of our WordPress plugin and from those who use our API tools, we directly collect the following data: IPs, emails (from the users that sign-up for our service using the WP plugin), user’s API key, number of images and PDF files, names of images and PDF files, WordPress CMS version, PHP version, optimization details (date, file size, size improvement percent).

We use a feature called Tawk for helping the users of our Way2enjoy plugin for WordPress. This feature is made by Tawk, a third party service we use for customer support. Through this feature we gather the following personal data: IPs, API key, WordPress CMS version. The feature delivers help articles and a contact us form.

We also added the Tawk feature to our site (Way2enjoy.com and sub-domains). It collects: page visits, IP, browser, consulted help articles. This info helps us understand the issues of our users.

From the unlogged visitors of our site http://Way2enjoy.com, we collect the following data: IPs, location, browser type, visited pages.

When the visitors of our site sign-up for a Way2enjoy account, we collect their emails and store the new generated API keys.

When images are optimized via our online compressor, we store them for two hours, together with the optimization details. After that, we delete the images, but we keep the info for 1 days.

We also keep the personal data used in the financial transactions. The invoice details as payment email, amount of money, name of the customer, company, and payment system, are not completely under the GDPR law, but due to the fiscal policy we need to store them for 10 years. Our customers cannot ask us to delete the payment details as we don’t have the right to do so.

2. WHAT WE DO WITH THE COLLECTED PERSONAL DATA

CUSTOMER SUPPORT
In order to help our customers we need to use their personal data:
Personal data needed for user identification: the email address used for registration, the API key, IP.
Personal data needed for debugging reasons: the domain from where the images are, optimization parameters (file name and size, the time of the optimization).
Personal data needed to communicate with the clients that need assistance: their email addresses.

RUNNING THE SERVICE
For the proper running of our image optimization service we keep: IPs, country of origin, API key, Browser, number of images and PDF files, the names of the images and PDF files, the URLs of the images and PDF files, URIs (domains), PHP version. We need this info to connect our servers to our clients’ servers, where the images needing compression are hosted. The info is also needed for maintenance and for building appropriate tools for our clients.

INFORMATION CAMPAIGNS
We send emails to inform our users about new features, service changes (including Terms and Conditions & Privacy Policy updates), interruptions of our service, possible errors or bugs. These messages are an important part of our communication with our users.

MARKETING CAMPAIGNS
We send newsletters to our users about deals and promotions. Our marketing campaigns could promote other services as well, if we believe that they are compatible with our service, and that they could be useful for our users. We try to keep these types of messages at a maximum of two emails per user/ each month.

3. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The details of the files processed by our service (names, URLs, optimization parameters, file size, processing date) are stored for 40 days. Each user can access these records from their Way2enjoy account, and they can also download a spreadsheet document called an optimization report.

IPs, email addresses, API keys, and usage data are stored indefinitely. Users have the right to ask us to delete their private data, even if this could mean the termination of the service we provide them due to technical reasons.

4. WHAT DO WE SHARE, WITH WHOM, AND UNDER WHAT CONDITIONS?
Our users’ data is shared with third parties that help us run the service. Please check below a list of the services that have full or partial access to our users’ data, and their privacy and data policies.

We will tell our users if we intend to share their info with other third parties. We don’t sell personal data.

5. IMPORTANT RIGHTS OF OUR USERS REGARDING THE PERSONAL DATA
Portability: You own your data. Please contact us if you want to receive the information we store about you and about your history with our service.

Personal data deletion and account removal: Users that want their personal data to be deleted can send a request at help at Way2enjoy.com, specifying if they want the deletion of all their personal information or just a partial removal. Furthermore, the users can request that their data won’t be handed over or used in some of the ways mentioned in this document. The deletion of personal information can lead to the termination of the service we provide due to technical reasons.

Please contact us if you wish to have your personal data removed or if you wish to terminate your account.

Personal data errors: You have the right to correct your personal data. Use our contact form or write us at help at Way2enjoy.com if you want to correct your data.

The right to fill a complaint: For us, your personal data is important, and we try to take all the necessary steps to protect your personal data and to respect your rights. You have the right to fill a complaint at the National Authority for the Supervision of Personal Data Processing (Romanian: Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal), also known as ANSPDCP.

6. THIRD PARTIES THAT HAVE ACCESS TO YOUR PERSONAL DATA

HELP SCOUT - HELPSCOUT.NET
This is a customer and ticketing service. It helps us manage and track the complaints of our clients. Help Scout has access to the following personal data: IPs, API key, WordPress CMS version. The feature delivers help articles and a contact us form.

The Help Scout company declared its compliance with GDPR, the EU law regarding the personal data protection. Read more about this here: https://www.helpscout.net/company/legal/dpa/

Help Scout promises to securely store the personal data needed for running their service and they will not use the personal data for other purposes.

SENDGRID - SENDGRID.COM
SendGrid is a customer communication platform for transactional and marketing emails. We use this service for our transactional and marketing campaigns. SendGrid has access to our users’ email addresses, and it’s taking all the necessary steps to comply with the General Data Protection Regulation.

SendGrid is documenting their process towards the GDPR compliance in this document. We strongly recommend you read it: https://sendgrid.com/resource/general-data-protection-regulation/

ZOHO - ZOHO.COM
Zoho is an email service provider. Our business emails associated with Way2enjoy.com are stored and sent using this service. Zoho can access all the personal data our users share with us via email communication.

What Zoho does in order to comply with the GDPR law is documented here: https://www.zoho.eu/gdpr.html

PAYPAL - PAYPAL.COM
PayPal is an electronic payment service. We don’t keep any Credit Card data, and we don’t have access to the PayPal accounts of our users.

If you want to know how PayPal uses your personal data, please read their Privacy Policy document: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

As we mentioned above, we keep the payment details as we are obligated by the fiscal law.

WORDPRESS - WORDPRESS.ORG
WordPress.org is the foundation that manages the WordPress content management system, WordPress themes, WordPress plugins. WordPress is used by many of our users to develop and run websites. Our WordPress plugin is a piece of software that connects the sites built with WordPress to our servers, where we optimize the images of our users.

WordPress aggregates data about the active plugin installs and about the total number of downloads.

WordPress.org is developing a tool to help plugin creators (like us) to comply with the GDPR law. This tool is not ready as we speak. We will implement it as soon as it becomes available to the general public.

Here you can read more about WordPress’ efforts to align with GDPR guidelines: https://wordpress.org/news/2018/04/gdpr-compliance-tools-in-wordpress/
WordPress’ Privacy Policy: https://wordpress.org/about/privacy/

DISQUS - DISQUS.COM
Disqus is a blogging comment hosting service. The visitors of our blog (http://blog.Way2enjoy.com) can comment on our articles using the Disqus platform. Here is the Discus’s position on GDPR:
https://blog.disqus.com/update-on-privacy-and-gdpr-compliance

GOOGLE ANALYTICS - ANALYTICS.GOOGLE.COM
We use the Google Analytics service to obtain statistics about our site’s visitor number, origin and behaviour. We took the necessary steps to ensure that the information we gather through Google Analytics is anonymized and that we cannot identify a particular visitor.

EMBEDDED VIDEOS
We use Wistia and Youtube for video hosting, and we embed the videos stored on these platforms in our articles. We don’t track personal data, but we get statistics like number of views. These companies have their own methods to track users and obtain personal information. We don’t know the impact of these practices on our visitors’ rights, and we are considering to remove these videos from our blog. Until we decide if these services are GDPR compliant or not, we strongly advise you to read their privacy policy documents, and also research what data they might collect.
Wistia - GDPR compliance document:
https://wistia.com/support/account/gdpr

Youtube Privacy Policy: https://support.google.com/youtube/answer/7671399?hl=en-GB

We are sure that Wistia and Youtube don’t access the information pertinent to your relation with Way2enjoy, like registered user email, API key, payment details, number and names of the optimized images.

PROMOTIONS, CONTESTS AND SWEEPSTAKES
From time-to-time, the Company may provide you the opportunity to participate in promotions, contests or sweepstakes on its web site(s). Such promotions, contests and sweepstakes will also be governed by the rules and regulations posted with such promotions, contests and sweepstakes. If you participate, you will be required to register with the Company, which will require you to provide certain Personal Information. Participation in these promotions, contests and sweepstakes is completely voluntary and you therefore have a choice whether or not to register and provide your Personal Information. The requested information typically includes contact information, such as name, shipping address, e-mail address, and telephone number. We will use this information to notify winners and award prizes. Additionally, during your registration process you may opt-in to receiving additional related communications from us. If you decide to opt-in, we will use the information provided to send you communications described throughout this Privacy Policy.

NEWSLETTERS
If you wish to subscribe to the Company's newsletter(s), we will use your name and e-mail address to send the newsletters to you.

OTHER INFORMATION COLLECTED
Some information may be collected automatically every time you visit the Company's web sites, such as cookies and computer information. In addition, information may be collected from other independent, third-party sources. We also collect information about which pages you visit within this site. This site visitation data is identified only by a unique URL.

COOKIES
The Company uses both session ID cookies and persistent cookies as part of its interaction with your browser. A cookie is an alphanumeric identifier (a file) that the Company's web sites transfer to your computer's hard drive through a web browser to enable its systems to recognize your browser for record-keeping purposes. A session ID cookie expires when you close your browser, while a persistent cookie remains on your hard drive for an extended period of time.

We use session ID cookies to make it easier for you to navigate our web sites. We use persistent cookies to identify and track which sections of its web site you most often visit. We also use persistent cookies in areas of its web site where you must register, and where you are able to customize the information you see, so that you don't have to enter your preferences more than once.

The Company uses Google Analytics, an ad tracking technology that is provided by Google. For more information about Google Analytics, please visit https://www.google.com/analytics/

By configuring the options in your browser, you may control how cookies are processed by your system. However, if you decline the use of cookies, you may not be able to use certain features on this site and you may be required to reenter the information necessary complete an order during new or interrupted browser sessions.

Some of the Company's business partners (e.g., advertisers) use cookies on the site. We have no access to or control over these cookies (see "Third Party Advertising" and "Third Party Cookies" below). Accordingly, this Privacy Policy covers the use of cookies by the Company only and does not cover the use of cookies by any advertisers.

LOG FILES
As it is true of most web sites, the Company gathers certain information automatically and stores it in log files. This information includes internet protocol (IP) addresses, browser type, internet services provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. The Company uses this information to analyze trends, to screen for fraud, to administer the Company's sites, to track users' movements around the web sites and to gather demographic information about the Company's user base as a whole.

CLEAR GIFS (WEB BEACONS/WEB BUGS)
The Company employs a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that helps it better manage content on its web sites by informing the Company what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user's computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. The Company uses clear gifs in its HTML-based e-mails to inform itself of which e-mails have been opened by you. This allows the Company to gauge the effectiveness of certain communications and the effectiveness of the Company's marketing campaigns. If you would like to opt-out of these e-mails, please see the "Choice and Opt-Out" section of this Privacy Policy.

INFORMATION FROM THIRD PARTY SOURCES
To improve services and enhance personalization, the Company may periodically obtain information about you from other independent third party sources and add it to our account information. For example, when you visit a site on which the Company advertises, and click through such advertisement, the Company may place cookies on your computer.

USE OF INFORMATION
VERIFICATION, BILLING, AND ORDER STATUS
The Company collects Personal Information to verify the accuracy of your name, billing address, shipping address, credit card number, and credit card expiration date provided, to screen for fraud, to bill you for the products and services purchased and to pay you for the products and services sold. The Company uses your e-mail address(es) to contact you regarding the status of your order when necessary and to send you a Receipt Purchase/Sale Confirmation and Order Shipping Notification.

SPECIAL OFFERS AND UPDATES
The Company collects information about which sections of its web site you visit most often, so that it can send you our newsletter and the information about the offers, promotions, contests, and sweepstakes which may interest you.

Accordingly, the Company will occasionally send you information on products, services, special deals, promotions and sweepstakes.

SERVICE-RELATED ANNOUNCEMENTS
The Company may, but is not obligated, to send you strictly service-related announcements on rare occasions, when it is necessary to do so. For example, if our service is temporarily suspended for maintenance, we might send you an e-mail. Generally, you may not opt-out of these communications since they are not promotional in nature. If you do not wish to receive them, you may have the option to deactivate your account.

RESEARCH
We also collect information for research purposes and to provide anonymous reporting for internal and external clients. The Company uses the information collected for its own internal marketing and demographic studies, to improve customer service and product offerings.

CUSTOMER SERVICE
We will communicate with you in response to your inquiries, to provide the products and services you request, and to manage your account. We will communicate with you by e-mail, live chat or telephone, in accordance with your wishes.

PREFERENCES
The Company stores information that it collects through cookies, log files, and third party sources, to create a profile of your preferences, in order to improve the content of the Company's web site for you.

INFORMATION SHARING AND DISCLOSURE
The Company does not sell or rent any of the information collected to third parties for any purposes, but it shares information with third parties as described below.

SERVICE PROVIDERS
The Company discloses the information collected to external service providers, necessary to facilitate the following outsourced operations: address verification, credit card processing, fraud screening and order shipping.

COMPLIANCE WITH LEGAL AUTHORITIES
As required by law, and to enforce customers' or the Company's legal rights, and to comply with local, state, federal and international law, the Company may disclose information to law enforcement agencies.

CHOICE AND OPT-OUT
If you no longer wish to receive the Company's promotional communications, you may "opt-out" of receiving them by following the instructions included in each communication.

LINKS TO OTHER WEB SITES
There are several places throughout the Company's web sites that may link you to other web sites that do not operate under this Privacy Policy. When you click through these web sites, this Privacy Policy no longer applies. The Company recommends that you examine the privacy statements for all third party web sites, to understand their procedures for collecting, using, and disclosing your Personal Information.

STORAGE AND SECURITY OF PERSONAL INFORMATION
The Company stores the information it collects on computers located in a controlled, secure facility, protected from physical or electronic unauthorized access, use, or disclosure.

SECURITY
The Company protects the privacy and integrity of the information it collects by employing appropriate administrative protocols, technical safeguards, and physical security controls, designed to limit access, detect and prevent the unauthorized access, improper disclosure, alteration, or destruction of the information under its control. The Company transmits the information used by its external service providers for the specific outsourced operations listed above, across public and private networks via recognized encryption technologies, such as by using Secure Sockets Layer (SSL) software, which encrypts the information you input.

Although the Company follows the procedures set forth above to protect the Personal Information submitted to the Company, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Thus, while the Company strives to use commercially acceptable means to protect your Personal Information, the Company cannot guarantee its absolute security.

If you have any questions about the Company's security on its web sites, please feel free to contact us using the contact page on the site.

INTERNET FRAUD

The Company has a ZERO TOLERANCE policy for Internet fraud or any attempt to access or acquire customer or other information on its web sites via illegal or surreptitious means. The Company works with local, national, and international fraud investigation agencies and employs a variety of electronic and other means to discourage, detect, and intercept fraudulent activities. The Company aggressively prosecutes, to the fullest extent of the law, those perpetrators apprehended conducting fraudulent activities on its web site.

The Agencies with which the Company cooperates are: state and local police authorities, the United States Federal Bureau of Investigation, US and International Customs Agencies, and Interpol.

INTERNATIONAL TRANSFER
Personal Information collected by the Company may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities, and by using the Company's web sites, you consent to any such transfer of Personal Information outside of your country.

CHILDREN
The Company's sites are not intended for or directed to persons under the age of 16. The Company does not buy or sell products or services from or to children. Any person who provides their information to the Company through the Company's web sites attests that they are 16 years of age or older.

CHANGES TO THIS STATEMENT
The Company will, from time-to-time, update this Privacy Policy, each time revising the last updated date at the top of the Privacy Policy and indicate the nature of the revisions within the statement. The Company will notify customers of material changes to this statement by e-mail or by placing prominent notice on its web site.

CONTACT INFORMATION
You may contact the Company by using the contact form on the site.