Privacy Policy

TT-CRM PRIVACY POLICY

General Provisions

TT-CRM refers to the tools designed for structuring work to improve its results (thence referred to as "TT-CRM", "We", "Us", "Our", "Software", "Operator").

This Privacy Policy ("Policy") explains the procedures for receiving, recording, processing, accumulating, storing, refining, using, disseminating, transferring, anonymizing, and blocking information and documents containing confidential information from Users and/or other third parties, including their personal data.

This Policy, as well as amendments made to it, are available at the following address: https://www.tutam.llc

This Policy is an integral part of the TT-CRM Terms of Use and is available at the following address: https://www.tutam.llc

Definitions

"User" ("You") refers to an individual who uses the Service.

"Data Items" refers to various types of files and formats uploaded by Users to the Service, as well as elements that can be created within the Software's interface (such as tasks, tags, or comments).

Application of the Policy

The Operator processes confidential information placed in Work Groups, including personal data, following the legislation of the Republic of Serbia.

With the Operator's permission, the User ensures the process of information handling aligns with the purposes, tasks, and means they have defined, as well as the requirements of the TT-CRM.

The Operator provides the User with the technical capabilities to modify, delete, or perform other actions with confidential information. When processing personal data of individuals in TT-CRM, the User must ensure the legality of the procedure. This includes obtaining consent for processing when it is necessary.

What Data Do We Collect?

During user registration in the Software, we use a form to collect contact information (including personal data such as names and phone numbers), which the User needs for registration. If the User represents a legal entity and intends to enter into a contract on behalf of this entity, data exchange takes place for contract conclusion with the legal entity.

The Operator collects and uses information provided by the User for communication on changes to the Software's functionality and special offers, which, in the Operator's opinion, may be of interest to the User. Users can opt out of receiving such messages by changing their account settings.

The Software processes Users' data, while the Operator receives and stores all information Users post in TT-CRM, as well as details about their actions within TT-CRM (such as uploading files, task-related activities, leaving comments on contact information, etc.). This information only becomes available to other users upon direct consent from the User uploading the information. The Operator exclusively uses this information for the lawful purpose of importing data into TT-CRM.

The Operator only processes publicly available data that it has lawfully obtained. When information comes from third parties (including Software Users who may comment on or tag a specific data), the Operator processes it only if there is a legal basis for its transfer. The Operator does not take responsibility for the actions of any third party that shares information without a proper basis.

The Operator may also automatically collect certain information when the User visits the Service's web page (i.e. cookies, cookie files).

Cookie files allow for device identification when visiting the website pages. Cookie files can also remember the device owner's preferences, improve interaction with TT-CRM, and tailor the displayed advertisements in the most advantageous way for the User.

Processing of Confidential Information, Including Personal Data

The Operator processes personal data for the following purposes:
- providing access to the Software as per the Terms of Use agreed with the User, ensuring the functionality of the Software, including protection from spam, fraud, or any illegal or unfair actions by an indefinite range of persons
- maintaining feedback between the Operator and the User, including contacting the Software Administration
- conducting audience analytics and their preferences, ease of use of the Software.

We do not process biometric personal data without your consent for such processing. We do not use your data in any form, including photos, audio, or video recordings, to identify you.

We do not process the personal data of users who are under 14 years old without their legal representatives' consent.

The terms for processing confidential information, including personal data, are determined considering:
- the established purposes of processing personal data
- the duration of contracts with subjects owning confidential information, including personal data subjects, and/or consents of personal data subjects for the processing of their personal data.

In any case, we cease the processing of the User's personal data upon the occurrence of any of the following events:
- if a User independently deletes their profile in the Software, we cease personal data processing within 30 days
- if a User revokes their consent for us to process personal data or sends us a request for its deletion, we cease processing within 30 days.
- if a User or a third party provides information confirming that their personal data was unlawfully obtained or is not necessary for the stated processing purpose, we cease processing within 7 business days from the date of providing such information
- upon detecting unlawful personal data processing, we cease processing within 10 business days
- if the personal data storage period expires, we cease processing within 30 days
- if we reach the goals of processing or if the need to achieve these goals no longer exists, we cease processing within 30 days.

In cases where a User deletes their profile from the Software, revokes their consent, or demands personal data destruction, we destroy the User's personal data, provided there are no legal grounds for further data processing as per the stated processing objectives.

We process personal data lawfully and fairly, with the consent of the personal data subject. When receiving information from third parties, the Operator complies with the legislation of the Republic of Serbia and ensures third parties confirm their compliance with the law during such transfers. The legality of the information received from third parties and uploaded by the User is guaranteed by the User. The Operator guarantees the confidentiality of the information posted in TT-CRM, regardless of the specific legal regime of such information, and the Operator does not verify this legal regime (information protected by law, personal data, business secrets, etc.).

The User gives consent for their personal data processing by checking a box during the registration in the Software.

When processing Personal Data, we ensure its accuracy, sufficiency, and relevance in relation to the purposes of personal data processing.

We process personal data using automation tools. During this process, we fulfill the requirements for automated personal data processing as provided by the law and the regulatory legal acts enacted in accordance with it.

The safety of the personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures necessary for fully complying with the current legislation on personal data protection.

We do not disclose personal data to third parties and do not distribute it, except in the following cases:
- the subject of personal data has given prior consent to such disclosure
- the transfer is necessary for the performance of a contract, of which the subject of personal data is a party, beneficiary, or guarantor, and for the conclusion of a contract at the initiative of the subject of personal data or a contract where they will be the beneficiary or guarantor
- the transfer is necessary to protect the rights and legitimate interests of the Software owner or third parties
- the transfer is initiated by the subject of personal data and is necessary for the execution of justice, the execution of a court order, an act of another body or official, subject to execution following the legislation of the Republic of Serbia on enforcement proceedings, or other cases provided by the current legislation of the Republic of Serbia.

Personal data and other information that the User voluntarily provides to TT-CRM may be disclosed to other TT-CRM Users if the appropriate consent was obtained upon registration as a User of the Software.

Rights of personal data subjects

The right to obtain information concerning the processing of their personal data. To do this, the personal data subject must submit a written request via the feedback form. The Operator commits to provide the requested information or a reasoned refusal within 10 business days. This period may be extended after notifying the User, but not more than 5 business days.

The right to clarify, block, or destroy data if the personal data is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the stated purpose of processing.

The right to revoke previously granted consent to the processing of personal data. To withdraw consent, the personal data subject must send a corresponding notification via the feedback form. The termination of personal data processing may make further use of the Software impossible.

The Operator is obligated to:
- use the information received solely for the purposes indicated in this Privacy Policy.
- ensure the confidentiality of the information, not to engage in the sale, exchange, publication, or disclosure in any other possible way of personal data provided, except in cases specified in this Policy.
- take precautionary measures to protect the confidentiality of information according to the procedure typically used to protect such information in existing business transactions.
- block personal data from the moment of request or appeal by the User, or their legal representative or an authorized body for the protection of the rights of personal data subjects, for the period of inspection, in case of detecting false personal data or unlawful actions.
- inform the competent authorities in the event of an unlawful or accidental transmission of personal data that has led to the violation of the rights of personal data subjects, within 24 hours from the incident, and perform other obligations legally assigned to operators of personal data in case of data leakage.

Cookies

By visiting the TT-CRM website, you agree that the Software uses certain monitoring and tracking technologies to provide, maintain and improve the Software, optimize our offers and marketing activities, as well as to enhance the overall effectiveness of the Software.

Some functionalities of the Software depend on the use of cookies. If you decide to block cookies, you will not be able to log in or use functions and settings that depend on use of cookies.

Final provisions

The Policy can be changed unilaterally by us by posting a new version at TT-CRM website.

The Operator undertakes neither introduce substantial changes, nor impose additional burdens or restrictions on the rights of Users established by this Policy, without prior notice.

The new version of the Policy comes into force from the moment of its publishing, unless otherwise provided by the new version of the Policy. The current version is always available on the websites.

You can get any clarifications on questions of interest related to the processing of confidential information, including personal data, by contacting the Operator via the feedback form.