SIA Jumis Pro General Privacy Policy

The Privacy Statement of Jumis Pro, as a company belonging to the Visma Group (hereinafter — Jumis Pro), helps you understand what personal data we collect and why, as well as how we use, protect, store, transfer, and delete it.

Personal data is information that allows you to be identified as an individual, such as an email address, street address, phone number, etc.

What personal data we process

The types of personal data that Jumis Pro may process:

• Basic information, such as name, address, phone number, email address, and demographic information;
• User and web usage information, such as login ID, username, and IP address;
• Financial information, such as details related to invoices;
• Content you upload or provide, such as photos and comments;
• Information provided in response to job advertisements.

Jumis Pro does not process your special category (sensitive) personal data for the purposes specified in the section "Why we process personal data".

How do we collect your personal data?

Primarily, Jumis Pro obtains personal data directly from you or other individuals associated with our Client. If the Client you work for purchases Jumis Pro products or services through a Jumis Pro partner company, we may collect information about you from that partner company.

We use cookies and other tracking technologies when you use Jumis Pro websites or communicate with us via email to optimize your experience on our websites and in your interactions with Jumis Pro. More information is available in the Visma Group cookie policy.

In some cases, we may also collect information about you from other sources. These sources may include third-party data aggregators, Jumis Pro marketing partners, public sources, or third-party social networks.

Why we process personal data

This privacy notice applies to instances where Jumis Pro processes your personal data for various purposes when you interact with us, such as:

Purchasing and delivery

• Facilitating the processing of customer orders, contracts, and payments;
• Offering specialized services tailored to you, such as e-learning, webinars, etc.;
• Providing customers with requested product and service offers;
• Creating and facilitating user accounts for our service users.

Support and improvement

• Improving and developing the quality, functionality, and user experience of our products, services, and Jumis Pro websites;
• Providing customer support for our products and services

Security

• Identifying, mitigating, and preventing security threats and misuse, as well as performing maintenance and debugging.

Marketing

• Managing and sending marketing content based on user preferences;
• Creating interest profiles to promote relevant products and services (profiling).

Information regarding how personal data is processed within any of our various services is outlined in the respective data processing agreement for that service. In such cases, Jumis Pro acts as a data processor and processes data on behalf of the Client and in accordance with their instructions. For further information, please contact the customer support team for the specific service.

Legal basis for processing your personal data

We process data based on several possible legal grounds.

Agreement with you

We process your personal data based on a legally binding agreement with you. This typically occurs when you apply for a job at Jumis Pro. The processing of your personal data, such as your CV, application, and references, is necessary for Jumis Pro to process job applicant requests prior to entering into an agreement.

Your consent

Jumis Pro may process your personal data based on consent. In accordance with the law, we ask for your consent, for example, to send you marketing emails. You may withdraw your consent at any time.

Legitimate interests

Jumis Pro has legitimate interests when we process your data for marketing, security, support, and improvement purposes, or when you act as a contact person for our existing and potential clients. Your personal data is processed from a business perspective in a way that we believe does not conflict with your privacy rights or freedoms.

Additionally, Jumis Pro processes data based on legitimate interests when you register for a webinar, submit a suggestion, or request technical or sales support. Legitimate interests include providing you with relevant content, hosting webinars, conducting marketing, and administering your requests (see the section on marketing below).

How we share your personal data

Jumis Pro within the Visma Group

As Jumis Pro is part of the Visma Group, which consists of many affiliated companies, it is important for us to provide you with the best possible service and user experience. To ensure a complete overview and detailed information, Jumis Pro may share your personal data among Visma Group companies.

Outside the Visma Group

Jumis Pro may also share your personal data with external third parties in the following cases:

Business partners

Jumis Pro may share your personal data with our partners if it is legitimate from a business perspective and in accordance with applicable privacy laws.

Public authorities

Police and other authorities may request that Jumis Pro disclose your personal information. In such cases, Jumis Pro will only disclose data if the request is supported by a court order or similar documentation.

When do we use sub-processors?

Jumis Pro uses subcontractors to process personal data. These subcontractors are typically providers of cloud services or other IT hosting services.

When using subcontractors, Jumis Pro will enter into data processing agreements with them to protect your privacy rights. If subcontractors are located outside the EU, Jumis Pro ensures the legal basis for such international transfers on your behalf, based on EU Model Clauses.

For information about the sub-processors used to provide any of the Jumis Pro or Visma Group services, please visit our Visma Trust Center.

You are always welcome to request an overview and more detailed information about Jumis Pro and Visma Group sub-processors, as well as documentation regarding the legal basis for the aforementioned international transfers. To learn how to contact Jumis Pro and the Visma Group, please see the final section of this notice.

How long we store your personal data

Jumis Pro will store your personal data only for as long as is necessary to fulfill our contractual obligations. When processing your personal data on other legal grounds, such as legitimate interests, the data is stored for as long as necessary to achieve the purpose of the processing.

Consequently, your personal data may be subject to different retention policies based on the type of data and the purpose for which it was collected. Here are some examples:

• During recruitment, Jumis Pro will delete your personal information, such as your CV, application, and other documents, once the recruitment process is closed, typically no later than 6 months after the application deadline, unless otherwise agreed with you.
• Another example is contact information stored for marketing purposes, including for potential clients or leads. Such personal data will be deleted no later than 36 months after the last recorded activity.

For more information regarding deletion, please contact Jumis Pro (see the last section of this notice for contact information).

Processing of other data stored in the service

If the client provides consent at the time of registration, SIA Jumis Pro has the right to perform anonymized processing of data stored in the Jumis Pro service to improve service quality, for example, to develop machine learning, artificial intelligence, or other data analysis-based systems.

What are your rights

Fundamental rights

You have the right to access your personal data by requesting an overview of the personal data we process about you, and you may have the right to data portability. You also have the right to request that Jumis Pro correct any inaccuracies in your personal data. If you have a "Mans Jumis" account, you will find information about your consents in the "Contracts and Consents" section. (If you have a Visma account valid on a Visma website, this can usually be done via the "Your Account" or "Your Profile" sections on the relevant Visma website or service).

Furthermore, you have the right to request the deletion of your personal data, as well as to restrict or object to the processing of your personal data in accordance with this Privacy Notice or other specific terms of service.

Please use privacy@visma.com to submit the requests mentioned in this section, or address them to Jumis Pro at atbalsts@mansjumis.lv

Finally, you also have the right to lodge a complaint with data protection authorities regarding the processing of your personal data.

Right to opt out of marketing communications

When you interact with Jumis Pro, for example, by visiting websites, downloading content, attending webinars, or using services, Jumis Pro will process your personal data based on legitimate interests. The purpose is to provide you with relevant marketing content regarding Jumis Pro services.

Jumis Pro provides you with relevant content through direct marketing on social media platforms, websites, or within the Jumis Pro service, based on your preferences. The personal data processed includes aggregated information about you, such as your IP address, interests (where you have clicked, etc.), username, and device. This is done using technologies such as cookies and is referred to as profiling.

Jumis Pro uses email for marketing purposes, but only if you have consented, in accordance with national legislation regarding marketing. If you have consented, you will always have the option to opt out as described below or upon receiving a marketing email.

You have the right to opt out of receiving marketing communications from Jumis Pro. You can do this in the following ways:

1. By following the instructions for opting out of the relevant marketing communication;
2. By sending an email to privacy@visma.com or atbalsts@mansjumis.lv.

By using our cookie banner, you will always have the option to opt in or opt out of cookies on the specific webpage.

Please note that even if you opt out of receiving marketing communications, you will still receive administrative messages from Jumis Pro, such as order confirmations and notifications necessary to manage your account or the services provided to customers.

Changes

We recommend that you review this policy regularly. If we make significant changes to our privacy policy that substantially alter our practices, we may also notify you through other means, such as by sending an email or posting a notice on our corporate website and/or social media pages before the changes take effect.

The privacy policy is reviewed at least once a year, and changes are approved by the Jumis Pro Privacy Board. Last updated: 01.01.2021.

How to contact us

Jumis Pro is a Visma Group company, a European corporation with legal entities, business processes, management structures, and technical systems that span borders. Visma provides software and services to private and public sector organizations in Europe. Visma's head office is located in Oslo.

All major decisions regarding privacy at Visma at the corporate level are made by the Visma Data Protection Board, which is overseen and led by the Data Protection Officer (DPO). The controller responsible for the processing of your personal data is

Visma Group and affiliates
Head Office: Karenslyst allé 56, 0277 Oslo, Norway.
Telephone number: +47 46 40 40 00

Jumis Pro correspondence address: Sporta iela 11, Riga, Latvia, LV-1013.
Telephone number: +371 67 605 757.

Your opinion is important to us. If you have comments or questions regarding our privacy policy, any concerns about privacy or data usage that we have not addressed sufficiently, or doubts regarding a potential breach of your privacy, please send them to privacy@visma.com or address them directly to Jumis Pro at atbalsts@mansjumis.lv

Your requests and complaints will be handled confidentially. A representative will contact you to discuss your concerns and outline potential solutions. Our goal is to ensure the timely and appropriate resolution of all complaints.