Privacy Notice
This privacy notice for 52 hertz Ltd, a company registered in Bulgaria, UIC 205315895 (“Celestical”, “we”, or “us”), describes how and why we might collect, store, use, and process personal data.
Here are a few terms you'll find throughout this policy:
- Website or Services refers to the Celestical website at celestical.me, including all information and software made available to you.
- Users (also referred to as “Customers”) are people or businesses who have registered an account.
- Schedulers are people who have booked a meeting with a User, but may not have registered for an account of their own.
- Viewers (also referred to as “Visitors”) are people who visit the Website, but may not be a User or Scheduler.
Any terms defined in the Terms of Use, Data Processing Addendum and not otherwise defined in this Privacy Notice are hereby adopted by reference in this Privacy Notice.
How We Collect Your Information
We collect information that you voluntarily provide to us when you:
- Register as a User,
- Use our services as a Scheduler,
- Express interest in obtaining information about us, or
- Otherwise contact us.
The personal information we collect may include the following:
- Names
- Email addresses
- Passwords
- Profile information
- Contact preferences
We do not process any sensitive information (as per the GDPR Article 9). However, free-text fields, such as booking comments, meeting-location instructions, or support emails, can incidentally contain such information if a Scheduler chooses to share it.
We do not process any sensitive information (per GDPR Article 9) for our own purposes. Such data may be submitted through a User’s use of the Services — for example, into free-text intake fields — in which case we process it on the User’s behalf, and our Data Processing Addendum governs.
As a User, you may connect your calendars, video conferencing providers, and other third-party applications to your Celestical account. When you connect a calendar, we only query events from calendars of your choosing to determine when you are busy. We do not store any details about your calendar events. When you connect a video conferencing provider, we may create meeting rooms on your behalf and attach information for joining the conferencing session to Celestical events.
Legal Basis For Processing
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
- Performance of a contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time by contacting us.
- Legitimate interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.
- Legal obligations. We may process personal data when we are legally required to. For example, to respond to a lawful request from a public authority, or to comply with tax and accounting law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
How We Process Your Information
We process personal data for a variety of reasons, depending on how you interact with Celestical.
- To facilitate registering for a Celestical account. When you sign up for Celestical, we collect your name, email address, and password to create an account.
- To deliver and facilitate delivery of services to you. We may process your information to provide you with the Celestical service, including: facilitating scheduling, managing your account, and responding to your inquiries.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To request feedback. We may process your information when necessary to request feedback and to contact you about your use of Celestical.
- To save or protect your rights and interests. We may process your information when necessary to save or protect and individual’s vital interest, such as to prevent harm.
- To comply with with legal obligations. We may process your information to comply with applicable legal or regulatory obligations, including complying with requests from law enforcement or other governmental authorities, or in legal proceedings involving Celestical.
We do not carry out any automated decision-making or profiling.
How We Share Your Information
We may share your information with trusted parties in order to deliver our products and services to you. These parties include:
- Data processors (see our Data Processors page for the full list)
- Professional advisers (such as accountants and lawyers, when necessary, under confidentiality obligations)
- Public authorities (when we are legally required to, such as in response to a valid court order or regulatory request)
We require these parties to agree to take reasonable steps to keep the Personal Data that we provide to them secure. We do not authorize them to use or disclose your Personal Data except in connection with providing their services.
We do not sell your information to any third parties or disclose it in exchange for money or other valuable consideration. We do not share your Personal Data with others except as indicated within this Notice, or when we inform you and give you an opportunity to opt-out of having your Personal Data shared.
In the event of a merger, acquisition, financing, or sale of assets, your information may be transferred to the acquiring entity.
Transfer Of Data Internationally
Our application and database servers are hosted in the European Union. Some of our data processors are established outside the European Economic Area, primarily in the United States.
Where personal data is transferred to a non-EEA data processor, we rely on a recognized safeguard under Chapter V GDPR. Typically this is the European Commission's Standard Contractual Clauses (SCCs) or, where the recipient is certified, the EU-US Data Privacy Framework. The mechanism applicable to each data processor is identified on our Data Processors page.
You can request a copy of the safeguards we rely on by contacting us.
Your Privacy Rights
You have the right to:
- Request access and obtain a copy of your personal data,
- Request rectification or erasure,
- Restrict the processing of your personal data,
- In certain circumstances, transfer your data to you or another organization,
- In certain circumstances, object to the processing of your personal data, and
- Where consent is the legal basis, withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Depending on where you live, you may have additional rights under local data protection laws. We will consider any request you make in accordance with the laws that apply to you.
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. We encourage you to reach out to us first so we can work to resolve the matter with you.
Your Account
In order to keep your Personal Data accurate and complete, you can log in to review and update your account information, including contact information, via your account settings page. We will do our best to honor your requests subject to any legal and contractual obligations. If you would like to make a request, cancel your account or request we delete or no longer use your account information to provide you our Website, contact us.
Cookies
You may also refrain from providing or may withdraw your consent for Cookies via your browser settings. Your browser’s help function should contain instructions on how to set your computer to accept all Cookies, to notify you when a Cookie is issued, or to not receive Cookies at any time. Please keep in mind that Cookies are required to authenticate Celestical Users as well as perform some actions within Celestical, so in order to use the Website, some Cookies are often required. For further information, see our Cookie Policy.
Security Measures
We use appropriate and reasonable technical and organizational measures to protect personal data, including TLS in transit, encryption at rest for our database, application-level encryption for sensitive fields, strict access controls, and audit logging.
Policy Regarding Minors
You must be of legal age in your jurisdiction to register an account or use our Services as a Scheduler. We do not knowingly market our Services to minors. If you submit information about a third party through the Services — for example, when you arrange a service that concerns your child — the User is the Controller of that information, and is responsible for ensuring it has a lawful basis to process it. Refer to the User’s own privacy notice for details. If you believe we have collected personal data directly from a minor, please contact us at email:hello and we will take appropriate steps.
Dispute Resolution
Details regarding Celestical’s dispute resolution process are available in our Terms of Use.
Changes to this Notice
We may update this privacy notice from time to time. The updated version will be indicated by a revised “Last updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information. If you continue to use Celestical after those changes are in effect, you agree to the revised Notice.
Contacting Us
If you have any questions about this policy, or if you would like to exercise any of your rights, please email us at [email protected] or write to:
52 hertz Ltd
ul. "Knyaginya Evdokia" 33
4230 Asenovgrad
Bulgaria