PRIVACY NOTICE

Last updated Feb 23, 2025

Introduction

This Privacy Policy (“Policy”) explains how your information is processed by spot-nik Ltd. (“Company” or “we”, “us”, “our”) when you download and use our monday.com supplementary applications ("Applications") or when you browse our website, available at www.spot-nik.com ("Website"). Our Applications and Website will be referred to collectively hereinafter as the "Services". The Services are developed, owned and operated by us.

The Services are not directed at users under the age of 16 and we do not knowingly collect information or data from children under the age of 16 or knowingly allow minors under the age of 18 to use the Services.

This Policy may be amended from time to time. We will post any change to this Policy on our Services at a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you or your employer (where relevant) by email of the changes if we have your email address.

Contact us

If you have any questions, comments or concerns regarding this Policy or our processing of your personal information, please contact us at support@spot-nik.com.

What we collect and why

When you browse our Website

Scenario: Requesting a demo

Purposes: Providing you with the demo you requested, contacting you regarding administrative issues related to our Services, our business development.
Categories of information processed: Your name, email address, and the content of your message. Please use discretion when deciding which information to share with us.

Scenario: Use of cookies on the Website

Purposes: Facilitating features of the Website you requested, analyzing the Website usage to evaluate and improve its performance, improving and personalizing user experience on the Website
Categories of information processed: IP address from which you access the Website, time and date of access, type of device and browser used, language used, links clicked via a mouse or a touch screen, actions taken while using the Website, etc.

When you download and use our Applications

Scenario: Downloading our Applications from the monday.com marketplace

Purposes: providing you with the Applications and their functionality, contacting you regarding administrative matters related to the Applications, this Policy or our ToU, providing you with support and maintenance.
Categories of information processed: When you download any of our Applications, we receive the following data from monday.com: your email address, full name, and mondayID number. When you start using our Applications we also receive the unique token assigned to you.

Scenario: Uploading or sharing content through the Applications

Purposes: providing you with the functionality of our Applications you requested
Categories of information processed: Any content or data you upload through the Service on monday.com’s platform by the user. We refer to this as ''User Content''.We do not retain any User Content except for configuration data (monday.com ID and the interface settings set out by Customer and its users).Please use discretion when providing User Content that includes your personal information or others’.
YOU ARE SOLELY LIABLE FOR PROTECTING THIRD PARTIES’ AND YOUR OWN PRIVACY, AND FOR OBTAINING THE PRIOR CONSENT OF INDIVIDUALS’ WHOSE PERSONAL INFORMATION IS INCLUDED IN THE USER CONTENT. WE WILL NOT BEAR LIABILITY FOR ANY DAMAGES THAT MIGHT INCUR TO YOU OR TO THIRD PARTIES AS A RESULT OF THE SHARING PERSONAL INFORMATION.

Scenario: Providing you with marketing materials

Purposes: Providing you with marketing materials concerning our Services, our business development
Categories of information processed: Your email address and name. We will only provide you with marketing materials if you are an active user of our Applications or if you consent to receiving marketing materials. You may opt-out of receiving marketing materials at any time in the manner stipulated in the marketing materials you receive from us.

Scenario: Contacting us with inquiries through email or our online contact form

Purposes: Responding to your inquiries, our business development
Categories of information processed: Your Email address, your name, the subject and content of your inquiry (including any attachments).

Scenario: Providing us with your feedback and reviews

Purposes: Responding to your feedback and reviews, our business development
Categories of information processed: Email address, the subject and content of your feedback or review (including any attachments).

Scenario: Use of third party analytics tools

Purposes: Analyzing the Services usage to evaluate and improve their performance, our business development
Categories of information processed: IP address from which you access the Applications, time and date of access, type of device and browser used, language used, links clicked via a mouse or a touch screen, and actions taken while using the Applications.

You are not legally obligated to provide us with your personal information, but if you do not, we may not be able to provide you with certain features of our Services you requested, or handle and respond to your inquiries and requests.

Methods and sources for collecting your personal information

We collect the personal information from several sources:

Directly from you
From your third party provider, monday.com, when you download and use our Applications
From our service providers helping us to operate our Services
Through the device you use to access our Services, including through third party cookies and analytics tools, such as MixPanel

Sharing your personal information

We will not share your information with third parties, except in the events listed below or when you provide us your explicit and informed consent.

Scenario: We will share your pseudonymized information with our service providers who assist us with the internal operations of the Services. These companies are authorized to use your pseudonymized personal information in this context only as necessary to provide these services to us and not for their own promotional purposes

Purposes: Operating the Services and our business
Categories of information processed: MixPanel, Google Cloud Platform, monday.com

Scenario: If you abused your rights to use the Services or violated any applicable law while doing business with us

Purposes: Responding to, handling, and mitigating suspected violations of law in connection with our business
Categories of information processed: Competent authorities, legal counsels, and advisors.

Scenario: If a judicial, governmental, or regulatory authority requires us to disclose your information

Purposes: Complying with a binding request from a competent authority
Categories of information processed: Competent authorities.

Scenario: If the operation of the Services or our business is organized within a different framework, or through another legal structure or entity.

Purposes: Enabling a structural change in the operation of the Services and our business
Categories of information processed: The target entity of the merger or acquisition, legal counsels, and advisors.

International data transfers

To facilitate processing your information through the Services and by our third-party service providers, we may transfer your information to countries which may be outside your jurisdiction, such as the USA and Israel. We will do so under the safeguards set out by applicable law, such as an adequacy decision or standard data protection contract clauses with adequate safeguards determined by the EU Commission and UK Information Commissioner’s Office.

Data retention and security

We retain your information for as long as is needed to operate the Services, and thereafter as needed for record-keeping matters.

We will retain your information for as long as is needed to operate the Services. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements.

In the event you or your company uninstall, unsubscribe, delete or otherwise remove the Application(s), we will permanently delete your personal information collected and processed in relation to your use of these Applications, within ten (10) days from the date we cease providing our services to you. Notwithstanding the foregoing, we may retain the data if we deem it necessary for complying with our legal obligations, resolving disputes, establishing and defending legal claims and enforcing our agreements, for the period necessary to fulfill these purposes.

We implement measures to secure your information.

We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information, such as HTTPS, TLS 1.2, and encryption in rest. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be immune from information security risks.

Your rights and how to exercise them

As a user of our Services, you have the following rights:

Right to Access your personal data that we process and receive a copy of it, subject to the restrictions specified in the law.
Right to Rectify or delete inaccurate personal data we have regarding you and to have incomplete personal data completed.
Right to be Forgotten (Right to Have Personal Data Deleted), under certain circumstances, such as when the information is no longer necessary for the purposes the information was collected. However, we may decline your request under the circumstances stipulated by law. We may also take measures to anonymize the data instead of erasing it. We will inform you accordingly in writing.

If you wish to exercise any of these rights, you may contact us by email at support@spot-nik.com. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with the information that you have asked for, we will explain the reason for this.

Additional information for individuals in the EU or UK

Controller and Processor

The data controller of your personal data that is processed through our Applications is your employer or organization, who is our customer. Spot-nik is the data processor of the personal data that is processed through the Applications.

Spot-nik Ltd. is the data controller of the personal information that is processed through the Website.

Legal basis for processing your personal data

Purposes of Scenario: Requesting a demo
Legal Basis: Our legitimate interest in providing you with the demo you requested, and in our business development.

Purposes of Scenario: Use of essential cookies on the Website
Legal Basis: Our legitimate interest in facilitating features of the Website you requested, and in improving the Website and enhancing its performance.

Purposes of Scenario: Use of non-essential cookies on the Website
Legal Basis: Your consent.

Purposes of Scenario: Downloading our Applications from the monday.com marketplace
Legal Basis: The performance of our Terms of Use agreement with you. Our legitimate interests in providing you with the Services.

Purposes of Scenario: Uploading or sharing content through the Applications
Legal Basis: The performance of our Terms of Use agreement with you. Our legitimate interests in providing you with the Services.

Purposes of Scenario: Providing you with marketing materials
Legal Basis: Your consent; orIf you are an active user of the Applications, our Legitimate interest in providing our active users with marketing materials to maintain our commercial business with them and expand our business. You may opt-out of receiving marketing materials at any time in the manner stipulated in the marketing materials you receive from us.

Purposes of Scenario: Contacting us with inquiries through email or our online contact form
Legal Basis: Our legitimate interest in responding to your inquiries.

Purposes of Scenario: Providing us with your feedback and reviews
Legal Basis: Our legitimate interest in developing and enhancing our business and the Services, and in responding to your feedback or reviews.

Purposes of Scenario: Use of third party analytics tools
Legal Basis: Our legitimate interest in improving the Applications and enhancing their performance.

Purposes of Scenario: Responding to, handling, and mitigating suspected violations of law in connection with our business
Legal Basis: Our legitimate interest in improving the Applications and enhancing their performance.

Purposes of Scenario: Complying with a binding request from a competent authority
Legal Basis: Our legitimate interests in complying with mandatory legal requirements imposed on us.

Purposes of Scenario: Enabling a structural change in the operation of the Services and our business
Legal Basis: Our legitimate interests in our business continuity.

Data subject rights

Data subject rights. If you are in the EEA or the UK, you have the following rights:

Right to Access and receive a copy of your personal information that we process.
Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.
Right to Data Portability, that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate.
Right to withdraw your consent to processing your personal information, easily and at any time, if the basis for our processing is your consent. We may continue to process personal information with respect to which your consent is not necessary. Withdrawing your consent will not affect the lawfulness of the processing we carried out based on your consent before such withdrawal.
Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims.
Right to Restrict us from processing your personal information (except for storing it): (a) if you contest the accuracy of the personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring the deletion of such data by us; (c) if we no longer need the personal information for the purposes outlined in this Policy, but you require the personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).
Right to be Forgotten, under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing. However, notwithstanding such a request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Policy.

When you contact us with a request, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. If we are not able to provide you with the information that you have asked for, we will explain the reason.

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work, or place of an alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.

If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.