Privacy Policy

This policy was last updated on January 21, 2025.

TL;DR (Too Long; Didn’t Read)

Welcome to Animo! Here’s a quick summary of the Animo Privacy Policy:

  1. Who’s Responsible?
    Animo (Three Letter Company BV, Netherlands) processes your personal data when you use their services or website. We act as either the data controller (when you’re our direct customer) or data processor (when handling data on your behalf).
  2. Why Collect Data?
    • To fulfill contracts: Provide services like form creation and event analytics.
    • With your consent: For newsletters, analytics, profiling, or data enrichment.
    • Legal obligations: Tax or anti-money laundering compliance.
    • Legitimate interests: Fraud prevention, user experience improvements, or securing the platform.
  3. What Data Is Collected?
    • Information you provide when signing up, using the site, or interacting with forms.
    • Data from third-party platforms (like Google or Microsoft) if used for account creation.
  4. Sharing Data
    • Shared with service providers (e.g., hosting, analytics, billing) under strict confidentiality.
    • May also be shared with legal authorities or when required by law.
  5. Your Rights
    • Access, correct, delete, or restrict your data.
    • Withdraw consent at any time.
    • California residents have additional rights under the CCPA.
  6. Data Transfers
    • Your data may be processed globally, but we use safeguards like EU Standard Contractual Clauses to protect it.
  7. Cookies & Analytics
    • Cookies are used for analytics and personalization, subject to your consent.
  8. Contact Info
    For privacy concerns, reach out via [email protected].
  9. Policy Updates
    We’ll notify you of significant updates, and continued use implies acceptance.
  10. Hallo

For the longer version, keep reading below.

General

This Privacy Policy describes how we collect, use, store, share and protect your personal information in connection with your use of both the platform accessible through https://animo.co (the “Site”) and the services offered by us consisting in the creation of forms and any other services that may be offered by us from time to time (indistinctly referred to as the “Services”).

We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Our Terms and Conditions (“Terms”) govern all use of our Service and together with the Privacy Policy constitutes your agreement with us (“agreement”).

Customers

How are we processing respondents’ personal data on your behalf? Animo as data processor.

If you are using our Services and you are interested in learning how we are processing any personal data that we collect on your behalf, please check our Data Processing Agreement. Please note that in this case you are the Data Controller and we are the Data Processor as further elaborated within the DPA.

How are we processing your data as our Customer? Animo as data controller.

As mentioned above, if you use our Services or Site because you have created an Account with us, this Privacy Policy sets forth how we are processing your personal data. You are not required to provide any personal information when using the Site, unless you choose to access features that require such information (as, by way of example, subscribing to any newsletter). The use of the Services, however, requires that you sign up and create an account as described in more detail in the Service Terms and Conditions.

Personal information you provide us when using the Site and/or the Services is subject to this Privacy Policy, and you will be prompted to read and accept it. In addition, if you are a California resident, please see Addendum 1 and refer to the ‘CCPA Notice’ section for additional California-specific privacy disclosures that address the collection, use, disclosure and other processing of personal information that supplement this Privacy Policy and may fall outside its scope. 

Who processes personal information? (who is the ‘Data controller’)

Your personal information is processed by us, an entity incorporated in accordance with the laws of The Netherlands with the following contact details:

Three Letter Company BV
Singel 542, Amsterdam, The Netherlands

Contact email and form:
https://animo.co/contact

Contact details for our Data Protection Officer: [email protected]

What are we processing your data for and why are we processing it? (‘Purposes of data processing’, ‘legal basis of the data processing’ and ‘storage periods’)

Based on our contract or future contract with you: we will process your data when we have to perform a contract, and we will be processing your data as long as the contractual relationship with you is in force and during the five years following the end of said relationship. This results in us having to process your data for purposes of (i) providing you with both the Services, as well as to (ii) perform our obligations under the Services Terms and Conditions.

Based on your consent: subject to obtaining your consent, and as long as you do not withdraw any such consent, we may also process your data for the following purposes:

a) To send you electronic commercial communications (if you subscribe to a newsletter) or to answer the requests you may address us when contacting us;

b) For profiling and analytics purposes based on your behavior and how you browse the Site and use the Services, which pages you have visited, and to build audiences by means of cookies, as described in detail in the Cookie Policy, and subject to the terms set forth therein. In those cases, your acceptance of the installation and use of cookies results in a data processing for profiling purposes, as described in this paragraph.

c) If you opt to sign in by means of a third party social media platform, we may obtain ID confirmation and other information from that third party, as mentioned in each case. For further information on what personal data we receive from third parties, see below;

d) We may enrich the data we have about you by obtaining information from a select third party for data enrichment purposes, provided that you have given us prior permission. Enriching data allows us to analyze a deeper subset of data from which we may present personalized content.

Based on a legal obligation: When we have to comply with a legal obligation applicable to us from time to time, such as those set forth in tax and anti-money laundering laws and regulations. In any such cases, the data will be processed only during the periods set forth by the law, being deleted thereafter.

Based on our legitimate interest: Finally, we may also process your data to protect our legitimate interests, as long as said data is strictly necessary to review and monitor your activity for purposes of investigating and analyzing how to improve the Services and/or the Site, as well as to keep our Services and the Site secure and operational and prevent abusive activity (e.g. fraud, spam, phishing activities, etc.). This may include sending you forms to assess any problems you may have experienced in the service or know how to improve your user experience. The interests at stake are ensuring a correct and safe environment for both other users and us, taking those interests prevalence over your legitimate interests (we need to create and maintain an environment which is in accordance with the law, the legitimate interests of other parties, what other users may expect from our end, and to protect other users’ security when accessing the Site and using the Services).

To which extent do we require to have access to your personal data?

We need to process your personal data to perform the legal and contractual obligations mentioned above. Otherwise, we are not able to provide you with the Services and/or access to the Site. On the other hand, for data processing which depends on your consent or on our legitimate interests, the data processing is not legally required.

Which companies or entities will have access to your personal information?

We share your information with our service providers who help us to provide the Services to you, in which case those third parties are required to comply with our internal standards, policies, and technical and organizational measures that ensure that your data is protected and kept confidential at all times, and only in accordance with and to the extent authorized by this Privacy Policy.

We share your profile information with other users to permit and facilitate that you collaborate with them, and work across multiple workspaces and organizations. This information includes your name, account email, as well as things like the forms that you have created or removed, the time they were edited, or usage activity. As a result, the administrator of the organization or workspace where you collaborate may be able to access or export logs of your activity.

When you authorize us to do so, we may also share your data with other companies so that they can process the data for other purposes, as explained more in detail when we request your prior consent. In addition, if you provide consent for the installation of cookies, your data may be processed by third companies for the purposes and in the territories mentioned in the Cookie Policy.

We may also share your information with competent courts and authorities, when we are legally required to do so (for instance, to allow such bodies to investigate, prevent, or take action against illegal activities), or we have to take action to protect our rights or any third party rights.

The categories of recipients of personal data are: (i) hosting and infrastructure providers; (ii) providers of audience analytics tools; (iii) providers of product and user experience analytics tools; (iv) providers of security of our systems; (v) providers of subscription, accounting and billing management; (vi) auditing and consulting services providers; (vii) providers of marketing campaign management; (viii) providers of electronic communication management; (ix) providers that supports customer relationship management; (x) providers of SSO services; and (xi) our affiliates. A detailed and up-to-date description of the companies we may share data with could be found here.

Finally, please note that you may opt for creating a form and share publicly the results that are displayed not in an aggregated manner but by providing the particular responses provided by respondents. In those cases, if you opt to create a form having this functionality, the said results will be shared with those third parties you opt to share them with. Please bear in mind that, depending on what you intend to do with your data, you may be required to inform or comply with further legal requirements vis-à-vis respondents.

In which territories may your personal information be processed?

Your data may be transferred, processed, and stored in countries that do not have data protection laws as protective as those in your jurisdiction. Your agreement to the terms of this Privacy Policy, followed by your submission of information in connection with the Service, represents your agreement to this international transfer of personal data.

For clarification purposes, we will process information from the European Economic Area. In some cases, data may also be processed from other countries, including the UK, in which case we will implement the security measures required by law. In particular, we will be signing Standard Contractual Clauses to ensure that the information is protected at all times and applying additional technical and organizational measures to ensure that the information is protected at all times.

For further information on the security measures we apply at Animo, please check our help center.

A detailed and up-to-date description of the companies we may share data with could be found here. You will observe a clear description on the territories of those companies and the measures implemented to keep your data safe.

What other information we may be processing from you that has not been obtained directly from you?

When you create an Account helped by your existing accounts with the third parties detailed below, we will be using your contact details (i.e. name, email address, language preference and profile picture) as you consent to be shared with us to ease the creation of your Account and the sign-up process.

Microsoft Corporation, dba. Microsoft - for further information, see their Privacy Policy.

Google Ireland Limited, dba. Google - for further information, see their Privacy Policy.

In the event you leverage your account with these third parties to create an account with us, the rest of the provisions of this Privacy Policy will apply to you as if you have created on your own.

When you expressly consent to data enrichment, we will be using the information collected from you to customize your experience and our services so they are adapted to what is more relevant to you.

Miscellanea. Updating your information

You can update any information we may have from you by means of the account settings area. Please remember that it is your duty to keep information updated so we can correctly provide you with the Services, and you undertake to verify the information you have handed us from time to time to make sure that it is accurate.

Commercial communications: as explained in this policy, you are entitled to ask us, now or at any moment, not to send you any kind of emails or commercial communications. To that extent, you can change the communication preferences in your account settings page. Note that this will not prevent the sending of emails or other communications related to the Services (i.e transactional messages), as those communications are necessary to perform the contractual relationship we have with you.

This is the case, for instance, of messages concerning new features that we may roll out, or bugs impacting the availability of our services.

Our analytics: Upon anonymizing your data - this means that such data will no longer be possible to be associated to you or to any other person - we may perform statistical and other analysis on such information (technical and metadata) to analyze and measure aggregated user behavior and trends, to understand how people use our services, in order to improve and optimize our performance of such services, and to publish any findings.

Your rights

You have the right to withdraw your consent at any time. You also have the right to request access to, and rectification of, or erasure of your personal data, or restriction of processing, or to object to processing, as well as the right to data portability. Please note that if you choose to cancel your data as a customer, your account will be deleted and all data in your account will be permanently deleted from our systems. In some cases, we may refuse to delete all the data if we are not allowed under the laws or for purposes of the establishment, exercise or defense of legal claims. In such latter cases your data will be processed on a restricted basis, and only as long and to the extent required by law.

You can always lodge a complaint at any time with the Dutch Data Protection Agency.

You can exercise the above-mentioned rights at any time by sending an email to [email protected]

Changes to the Privacy Policy

We may amend this Privacy Policy from time to time. We may also notify you of material changes to this Privacy Policy, before the effective date of the changes, by sending an email, through in-app notices or otherwise. If you do not agree to any substantial change to this Privacy Policy, you should stop using and eliminating your Account.

How to contact us

If you have any questions about this Privacy Policy, please contact us at [email protected].

Animo.co is part of Three Letter Company BV, based out of The Netherlands. All rights reserved.

Addendum 1

Your Data Protection Rights under the California Consumer Privacy Act (CCPA)

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data and not to sell (share) it. To exercise your data protection rights, you can make certain requests and ask us:

What personal information we have about you. If you make this request, we will return to you:

  • The categories of personal information we have collected about you.
  • The categories of sources from which we collect your personal information.
  • The business or commercial purpose for collecting or selling your personal information.
  • The categories of third parties with whom we share personal information.
  • The specific pieces of personal information we have collected about you.
  • A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.

A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.

Please note, you are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months.

To delete your personal information. If you make this request, we will delete the personal information we hold about you as of the date of your request from our records and direct any service providers to do the same. In some cases, deletion may be accomplished through de-identification of the information. If you choose to delete your personal information, you may not be able to use certain functions that require your personal information to operate.

To stop selling your personal information. We don’t sell or rent your personal information to any third parties for any purpose. You are the only owner of your Personal Data and can request disclosure or deletion at any time.

Please note, if you ask us to delete or stop selling your data, it may impact your experience with us, and you may not be able to participate in certain programs or membership services which require the usage of your personal information to function. But in no circumstances, we will discriminate against you for exercising your rights.

To exercise your California data protection rights described above, please send your request(s) by one of the following means:

By email: [email protected]

Your data protection rights, described above, are covered by the CCPA, short for the California Consumer Privacy Act. To find out more, visit the official California Legislative Information website. The CCPA took effect on 01/01/2020.