Corel Corporation and its affiliated entities (collectively, “Corel“, “us“, or “we“) are committed to protecting your privacy. This Privacy Statement describes Corel’s information practices and the choices available to you regarding Corel’s use of information that can be used to identify you (“Personal Data“). If you are in the European Union (“EU“), please pay particular attention to the information for EU users in Section 5 below.
This Privacy Statement addresses Corel’s use of information collected through the Gravit Designer software available for Mac OS, Windows, Linux and Chrome OS (the “Product”) or on our corporate website at www.designer.io, www.gravit.io and associated mobile pages (the “Site”).
1. The Data We Process; Purposes of Processing
Depending on how you interact with us, we process different kinds of data and in different ways. Some data is automatically processed if you visit our Site or use our Product. Other data is only processed if you actively submit it to us (like using our web forms to get in touch with us or uploading content to our Site).
Data we process if you visit our Site:
Even if you are only a visitor to our Site, your computer or device automatically sends technical information to our web servers that we store in log files, including the following “Website Usage Data“:
- Date and time of the visit and the duration of use of the Site;
- The IP address of your device as well as your internet service provider (ISP);
- The referral/exit URL;
- The visited sub-page of the Site;
- Clickstream data; and
- Information about your device (type of device, browser type and version, as well as settings, installed plug-ins, operating system).
Data we process if you use our Product:
We request certain “Product Registration Data” during registration of our Product, including (items in bold are mandatory):
- your name, surname
- postal address, including country
- telephone number
- for certain software Product, email address and/or license key/serial number (necessary to validate your purchase)
- for Product that require set up for regional video standards, country or region (necessary because video standards are unique to country/region)
We use Product Registration Data to keep a record of your product license (that is, authenticating and periodically verifying your licensing rights in the product for anti-piracy purposes) and to enable the provision of maintenance or support services to you.
Please be aware that, unless you have objected to receiving such messages when registering, we will process your email address to provide you with regular updates and newsletters on products and services similar to the Gravit Designer. Such marketing communications will be restricted to information on the Gravit Designer or any related new Gravit products we might introduce in the future. At no point in time will we send you any marketing communications for third-party products.
We collect information about the way you use our Product after you have installed and registered them. The specific “Product Usage Data” varies depending upon which Product you are using, but may include:
- Launch data
- Hardware fingerprint
- Feature usage
- Page clicks
- Sign-in information
We process Product Usage Data so that we can facilitate, evaluate, and verify your use of our services. We will also use the Product Usage Data for our own internal statistical and analytical purposes, and to evaluate and enhance users’ experience of the Product by identifying customer preferences and analyzing crash data.
In addition, our product allows you to store, send, receive, edit, sync, share, or otherwise organize or manage files and folders (including any information or data stored in those folders) (“User Files“). We will record and store information regarding the size and name of all User Files that you make available via the Product. You can also save and sync User Files with the Gravit cloud hosted on Corel’s servers giving you the chance to access your User Files from anywhere in the world and from any device. Please note that our Product is also connected directly to cloud services such as Google Drive or Microsoft Sharepoint and you can choose to have files stored directly with these third-party providers. These services are hosted by third parties and will be subject to the specific privacy practices of each provider.
2. Sharing Personal Data with Third Parties
We treat your Personal Data with care and confidentially and will only pass it on to third parties to the extent described below and not beyond. We do not share, sell, rent, or trade Personal Data with third parties for any promotional purposes. Where our affiliates, resellers, or service providers process Personal Data, they will do so solely on our instructions and have undertaken to comply with strict contractual requirements for the security of your data (including, but not limited to, complying with this Privacy Statement).
Affiliated Companies: Corel is a global company, with subsidiaries worldwide, including in the USA, Germany, the UK, Japan, China, and Taiwan. We share data with our subsidiaries in the ordinary course of our business. For example, if one of our resellers makes contact with you on our behalf, this data will be shared with the relevant Corel subsidiary, such as Corel GmbH in Germany. For an overview of our affiliates, as well as their mailing addresses, refer to https://www.corel.com/en/contact-us/.
Service Providers: Corel transmits data to service providers that enable us to provide our Site and market, sell, and deliver our Product. This includes the parties providing our third-party cookies and tracking tools, as well as parties providing us with services to assist us in processing transactions, including credit card transactions, handling shipping and processing of orders, providing customer support, managing customer relationships (like Salesforce.com), hosting the Site (like Amazon Web Services), collecting, storing, or removing your information, or performing statistical analysis of our Site (such as Google). We occasionally also share Personal Data with independent auditors acting on our behalf, for anti-piracy or revenue accounting purposes in connection with the internal operations of our business. We sometimes need to share your information with these companies in order for them to provide the applicable services.
Document/File Hosting Providers: For user-initiated file and file link sharing and storage using email, social media, instant messaging and cloud services, login information is requested. For user-initiated file sharing via email, social media, and instant messaging optional contact information can be requested and saved so that it can be accessed for future use by the customer. This data is not shared with third parties for any purpose. This information is only stored locally, on your PC or other computing device.
Analytics/Tracking Providers: For the processing of Product Usage Data (see above) we use Google Analytics & Intercom.
Business Transactions: In the event Corel goes through a business transaction such as a merger, an acquisition by another company, or a sale of all or a portion of its assets to which this Privacy Statement relates, your information will likely be among the assets transferred and, in such case, you will be notified in advance via email and/or a prominent notice on our Site of such change in ownership or a change in the use of your Personal Data, as well as any choices you may have regarding your Personal Data (including, if applicable, your right to object to such transfer).
Public Authorities: Although we make every effort to preserve user privacy, we may need to disclose personal information when required by law, such as when we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order, or litigation or other legal process or action (whether or not initiated by Corel) to protect Corel’s, our users’ or third parties’ rights, property or safety. We will transmit data to public authorities such as law enforcement or tax authorities only in the case of a legal obligation to do so based on a request for information from the respective authority.
We process and store your Personal Data as long as necessary for the fulfillment of our contractual or legal obligations. Thus, we store the data as long as our contractual relationship with you as our customer obliges us to do so. After termination of our contract, we will store Personal Data only to the extent and for as long as applicable law requires. All other data will be deleted immediately when you, as a customer, unsubscribe from our Product or other services. If the remaining data is no longer required for the fulfillment of legal obligations, it will be regularly deleted, unless its further processing is necessary for the preservation of evidence or the prevention of legal claims from becoming time-barred.
4. Information for EU Residents:
The data controller is Corel Corporation, 1600 Carling Avenue, Ottawa ON K1Z 8R7, Canada. Our representative in the EU is Corel GmbH, Landsbergerstr. 302 80687 Munich, Germany.
You are not legally required to provide Corel with the Personal Data described in this Privacy Statement. Further, the contractual relationship that you might have entered into with us by purchasing our Product does not imply any obligation to provide your Personal Data. However, you might not be able to use our Product to the full extent, or in some cases you may not be able to use our Product at all, if you do not provide us with certain data or object to the use of this data.
Our Legal Basis for Processing
When processing your Personal Data, we rely on the General Data Protection Regulation (“GDPR“), an EU-wide legal framework for the standardization of data protection. Corel primarily processes data as a controller, for the purposes explained above. We process Product Registration Data and Product Usage Data under Article 6 (1) lit. b) GDPR as they are necessary to fulfil our contract with you. The specified purposes also represent our legitimate interests for the purposes of Article 6 (1) f) GDPR, e.g. when processing data to better understand our userbase or improve the Product. In addition, we are legally obliged to provide certain information to criminal prosecution or tax authorities in individual cases upon request. In these cases, the legal basis for the processing will be legal requirements (Article 6 (1) c) GDPR). Where we process your Personal Data with your explicit consent, pursuant to Article 6 (1) a) GDPR, this declaration of consent will be the legal basis for processing your Personal Data.
Transferring your Data outside the EU or the EEA
Corel’s principal place of business is in Canada, which is a “Third Country” under the GDPR. Third Countries are generally not considered to afford the same level of protection that you enjoy in the EU, but Corel still provides an adequate level of protection for your Personal Data – decision 2002/2/EC of the EU Commission states that Canada is deemed to provide an adequate level of data protection regarding commercial organizations such as Corel.
We have ensured that our service providers and affiliates (such as Google or Intercom) have either certified under the EU-U.S. Privacy Shield Framework and will process all Personal Data received from EU member states in reliance on the Privacy Shield Framework or that they have been subjected to strict contractual provisions in their contract with us to guarantee that an adequate level of data protection for your data is guaranteed.
We use your data for “Profiling“. This means that we use your data to make tailored offers based on your previous behavior as well as to serve you personalized ads. However, we will never process and analyze your Personal Data in the context of Profiling in a way would lead to an automated decision that has a legal effect on you or significantly impairs you in a similar way.
Your rights regarding the processing of your Personal Data
As a natural person, you have certain rights as “Data Subject“. You can assert the following rights against us under the GDPR:
Your right to information and access under Article 15 GDPR,
Your right to rectification under Article 16 GDPR,
Your right to erasure under Article 17 GDPR,
Your right to restriction of processing under Article 18 GDPR, and
Your right to data portability under Article 20 GDPR.
In addition, you have a right of objection to the competent data protection supervisory authority under Article 77 GDPR, but only with respect to the data processing we conduct on our own behalf, as a controller. In the event Corel acts as a processor of your data for a third party, you must refer to the entity acting as controller to assert this right.
Please note that, where you have granted us your consent to process certain Personal Data, you are free to withdraw this declaration of consent with future effect at any point in time. This also applies to the withdrawal of declarations of consent issued to us prior to the validity of the GDPR.
Information about your Right of Objection under Article 21 GDPR
1. Right of objection in individual cases
In addition to the rights already mentioned, you have the right, for reasons arising from your particular situation, to object at any time to the processing of Personal Data relating to you, which is processed on the basis of Article 6 (1) f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR. If you file an objection, we will no longer process your Personal Data unless we can prove compelling grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise, or defend legal claims. Please also note that, if we terminate the processing due to your objection, the Site or Product may no longer be available to you or only to a limited extent.
You also have the right to object at any time to the processing of your Personal Data for the purpose of direct marketing, including any subscription to our newsletters or personalized ads; this also applies to Profiling, insofar as it is associated with such direct marketing. If you object, we will no longer process your Personal Data in the future. You can exercise your right of objection by clicking the unsubscribe button at the end of each message or dropping us a note to firstname.lastname@example.org.
5. Collecting Information from Children
Corel’s Site are not intended for use by children under the age of 18 and we do not intentionally collect any information from users under the age of 18. If a parent or guardian becomes aware that their child has provided Corel with Personal Data or that we have otherwise inadvertently collected this information, contact us at email@example.com, so that we may delete the information from our servers.
Corel reserves the right to change this Privacy Statement. We will provide notification of the material changes to this Privacy Statement through our Site at least 30 days prior to the change taking effect.
7. Contact Information
To exercise your rights regarding Personal Data (as described above in this Privacy Statement), or if you have any questions about this Privacy Statement or our privacy practices, please complete this form or contact us at firstname.lastname@example.org.
We strongly encourage you to use the form at the link, to ensure the most efficient handling of your submission. Please do not use this form to report technical problems or to raise other issues that are not directly related to data privacy or this Privacy Statement. For technical issues, contact Corel Customer Support at https://support.gravit.io.
Last updated: October 2019