Last Updated: May 25, 2018

This Privacy Policy describes how we collect, use, process, and disclose your information, including personal information, in connection with your access to and use of the Storefront Platform. If you see an undefined term in this Privacy Policy (such as “Listing” or “Storefront Platform”), it has the same definition as in our Terms of Service.

When this policy mentions “Storefront,” “we,” “us,” or “our,” it refers to Popup Immo (DBA Storefront), the company that is responsible for your information under this Privacy Policy (the “Data Controller”).

1. INFORMATION WE COLLECT

There are three general categories of information we collect.

1.1 Information You Give to Us.

1.1.1 Information that is necessary for the use of the Storefront Platform.

We ask for and collect certain personal information about you when you use the Storefront Platform. This information is necessary for the adequate performance of the contract between you and Storefront and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all of the requested services.

• Account Information. When you sign up for a Storefront Account, we require certain information such as your name, company name, email address, and phone number.
• Profile and Listing Information. To use certain features of the Storefront Platform (such as booking or creating a Listing), we may ask you to provide additional information, such as your address or phone number.
• Identity Verification Information. To create and maintain a trusted environment, we may collect identity verification information or other authentication information, such as your date of birth.
• Communications with Storefront and other users. When you communicate with Storefront or use the Storefront Platform to communicate with others, we collect information about your communication and any information you choose to provide.
• Payment Information. To use certain features of the Storefront Platform (such as booking or creating a Listing), we may require you to provide certain financial information (like your bank account or credit card information) in order to facilitate the processing of payments and to comply with applicable law (such as anti-money laundering regulations). Without it, you may not be able to use the Platform to book or rent out space.

1.1.2 Information you choose to give us.

You may choose to provide us with additional personal information in order to obtain a better user experience when using Storefront Platform. This additional information will be processed based on your consent.

• Additional Profile Information. You may choose to provide additional information as part of your Storefront profile (such as preferred language(s) or descriptions of your brand and/or space).
• Other Information. You may otherwise choose to provide us information when you fill in a form, conduct a search, update or add information to your Storefront Account, respond to surveys, or use other features of the Storefront Platform.

1.2 Information We Automatically Collect from Your Use of the Storefront Platform.

When you use the Storefront Platform, we automatically collect information, including personal information, about the services you use and how you use them. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and pursuant to our legitimate interest in being able to provide and improve the functionalities of the Storefront Platform.

• Usage Information. We collect information about your interactions with the Storefront Platform such as the pages or content you view, your searches for Listings, bookings you have made, and other actions on the Storefront Platform.
• Log Data and Device Information. We automatically collect log data and device information when you access and use the Storefront Platform, even if you have not created a Storefront Account or logged in. That information includes, among other things: details about how you’ve used the Storefront Platform (including if you clicked on links to third party applications), IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with before or after using the Storefront Platform.
• Cookies and Similar Technologies. We use cookies and other similar technologies, such as web beacons, pixels, and mobile identifiers. We may also allow our business partners to use these tracking technologies on the Storefront Platform, or engage others to track your behavior on our behalf. While you may disable the usage of cookies through your browser settings, it may affect your ability to log in to your account and use the Site. The Storefront Platform currently does not respond to a “Do Not Track” signal in the HTTP header from your browser or mobile application due to lack of standardization regarding how that signal should be interpreted.

1.3 Information We Collect from Third Parties.

Storefront may collect information, including personal information, that others provide about you when they use the Storefront Platform, or obtain information from other sources and combine that with information we collect through the Storefront Platform and the Payment Services. We do not control, supervise or respond for how the third parties providing your information process your personal data, and any information request regarding the disclosure of your personal information to us should be directed to such third parties.

• Social Sign In. If you link, connect, or login to your Storefront Account with a social networking site such as Facebook, Facebook may send us information such as your registration and profile information from that service. This information varies and is controlled by that Facebook and/or as authorized by you via your privacy settings with Facebook.
• Other Sources. To the extent permitted by applicable law, we may receive additional information about you, such as demographic data or fraud detection information, from third party service providers and/or partners, and combine it with information we have about you. For example, we may receive background check results (with your consent where required) or fraud warnings from service providers like identity verification services for our fraud prevention and risk assessment efforts. We may receive information about you and your activities on and off the Storefront Platform through partnerships, or about your experiences and interactions from our partner ad networks.

2. HOW WE USE INFORMATION WE COLLECT

We store, use, and process information, including personal information, about you (1) to develop, understand, and improve the Storefront Platform; (2) to create and maintain a safe and trusted marketplace; and (3) to comply with our legal obligations.

2.1 Provide, Improve, and Develop the Storefront Platform.  

• Enable you to use and enjoy the Storefront Platform.
• Enable you to communicate with other users.
• Operate, protect, improve, and optimize the Storefront Platform and experience, such as by performing analytics and conducting research.
• Provide customer service.
• Send you service or support messages, updates, security alerts, and account notifications.

We process this information given our legitimate interest in improving the Storefront Platform and our users’ experience with it, and where it is necessary for the adequate performance of the contract with you.

2.2 Create and Maintain a Safe and Trusted Marketplace

• Conduct security investigations and risk assessments.
• Detect and prevent fraud, spam, abuse, security incidents, and other harmful activity.
• Verify or authenticate information or identifications provided by you (such as to verify your Accommodation address or compare your identification photo to another photo you provide).
• Conduct checks against databases and other information sources, including background or police checks, to the extent permitted by applicable laws and with your consent where required.
• Comply with legal obligations (such as anti-money laundering regulations).
• Resolve any disputes with any of our users and enforce our agreements with third parties.
• Enforce our Terms of Service and other policies.

We process this information given our legitimate interest in protecting the Storefront Platform, to measure the adequate performance of our contract with you, and to comply with applicable laws.

2.3 Provide, Personalize, Measure, and Improve our Advertising and Marketing.

• Send you promotional messages, marketing and other information that may be of interest to you (including information about Storefront or partner campaigns and services) and social media advertising through social media platforms such as Facebook or Google).
• Personalize, measure, and improve our advertising.

We will process your personal information for the purposes listed in this section given our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest. You can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications or changing your notification settings within your Storefront Account.

3. SHARING & DISCLOSURE

3.1 With Your Consent.

Where you have provided consent, we share your information, including personal information, as described at the time of consent.

3.2 Sharing between users.

To help facilitate bookings or other interactions between users, we may need to share certain information, including personal information, with other users, as it is necessary for the adequate performance of the contract between you and us, as follows:   

• When you as a Renter submit a booking request, certain information about you is shared with the Listing Owner, including your name and the name of your company. We may share additional information to coordinate a site visit or to complete your booking.
• When you as a Listing Owner have a booking request, certain information may be shared with potential renters to coordinate a site visit or address any questions.  

We don’t share your billing and payout information with other users without your express permission.

3.3 Listings, and other Public Information.

To a limited extent, Storefront Platform lets you publish information, including personal information, that is visible to the general public. Specifically, Listing pages are publicly visible and include information including the name of the Listing Owner and any information they may have shared about themself in the Listing descriptions.  

Based on our legitimate interest to promote the Storefront Platform we may display parts of the Storefront Platform (e.g., your Listing page) on sites operated by Storefront’s business partners, using technologies such as widgets or APIs. If your Listings are displayed on a partner’s site, information from your public profile page may also be displayed.

3.4 Additional Services by Listing Owners.

Listing Owners may need to use third party services available through the Storefront Platform to assist with their event, such as cartage services, furniture rental, or catering providers. Listing Owners may use features on the Storefront Platform to share information about the Guest with such third party service providers for the purposes of coordinating the event and providing related services.

3.5 Compliance with Law, Responding to Legal Requests, Preventing Harm and Protection of our Rights.

Storefront may disclose your information, including personal information, to courts, law enforcement or governmental authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary: (i) comply with our legal obligations, (ii) to comply with legal process and to respond to claims asserted against Storefront, (iii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability, (iv) to enforce and administer our Terms of Service or other agreements with users, or (v) to protect the rights, property or personal safety of Storefront, its employees, its users, or members of the public.

Where appropriate, we may notify users about legal requests unless: (i) providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law, or (ii) we believe that providing notice would be futile, ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon Storefront’s property, its users and the Storefront Platform. In instances where we comply with legal requests without notice for these reasons, we will attempt to notify that Member about the request after the fact where appropriate and where we determine in good faith that we are no longer prevented from doing so.

3.6 Service Providers.

Storefront uses a variety of third party service providers to help us provide services related to the Storefront Platform and the Payment Services. Service providers may be located inside or outside of the European Economic Area (“EEA”).

For example, service providers may help us: (i) verify your identity or authenticate your identification documents, (ii) check information against public databases, (iii) conduct background or police checks, fraud prevention, and risk assessment, (iv) perform product development, maintenance and debugging, (v) allow the provision of the Storefront Services through third party platforms and software tools (e.g. through the integration with our APIs), or (vi) provide customer service, advertising, or payments services. These providers have limited access to your information to perform these tasks on our behalf, and are contractually bound to protect and to use it only for the purposes for which it was disclosed and consistent with this Privacy Policy.

Storefront will need to share your information, including personal information, in order to ensure the adequate performance of our contract with you.

3.7 Social Media Platforms.

Where permissible according to applicable law we may use certain limited personal information about you, such as your email address, to hash it and to share it with social media platforms, such as Facebook, Google or LinkedIn, to generate leads, drive traffic to our websites or otherwise promote our products and services or the Storefront Platform. These processing activities are based on our legitimate interest in undertaking marketing activities to offer you products or services that may be if your interest.

The social media platforms with which we may share your personal data are not controlled or supervised by Storefront. Therefore, any questions regarding how your social media platform service provider processes your personal data should be directed to such provider.

Please note that you may, at any time ask Storefront to cease processing your data for these direct marketing purposes by sending an e-mail to privacy@thestorefront.com.

3.8 Business Transfers.

If Storefront is involved in any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets, including your information in connection with such transaction or in contemplation of such transaction (e.g., due diligence).

3.9 Aggregated Data.

We may also share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.

4. Your Communications

We review, scan, or analyze your communications on the Storefront Platform for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, and customer support purposes. We will not review, scan, or analyze your communications for marketing or profiling purposes, and we will not sell these communications or analysis of them.

These activities are carried out based on Storefront's legitimate interest in ensuring compliance with applicable laws and our Terms, preventing fraud, and improving and ensuring the adequate performance of our services.

5. THIRD PARTY PARTNERS & INTEGRATIONS

The Storefront Platform may contain links to third party websites or services, such as third party integrations, co-branded services, or third party-branded services (“Third Party Partners”). Storefront doesn’t own or control these Third Party Partners and when you interact with them, you may be providing information directly to the Third Party Partner, Storefront, or both. These Third Party Partners will have their own rules about the collection, use, and disclosure of information. We encourage you to review the privacy policies of the other websites you visit.

6. YOUR RIGHTS

You may exercise any of the rights described in this section by sending an email to privacy@thestorefront.com. Please note that we may ask you to verify your identity before taking further action on your request.

6.1 Managing Your Information.

You may access and update some of your information through your Account settings. If you have chosen to connect your Storefront Account to a third-party application, like Facebook or Google, you can change your settings and remove permission for the app by changing your Account settings. You are responsible for keeping your personal information up-to-date.

6.2 Rectification of Inaccurate or Incomplete Information.

You have the right to ask us to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your Storefront Account).

6.3 Data Access and Portability.

In some jurisdictions, applicable law may entitle you to request copies of your personal information held by us. You may also be entitled to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

6.4 Data Retention and Erasure.

We generally retain your personal information for as long as is necessary for the performance of the contract between you and us and to comply with our legal obligations. If you no longer want us to use your information to provide the Storefront Platform to you, you can request that we erase your personal information and close your Storefront Account. Please note that if you request the erasure of your personal information:

• We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend a Storefront Account for fraud or safety reasons, we may retain certain information from that Storefront Account to prevent that Member from opening a new Storefront Account in the future.
• We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, Storefront may keep some of your information for tax, legal reporting and auditing obligations.
• Information you have shared with others (e.g., Reviews, forum postings) may continue to be publicly visible on the Storefront Platform, even after your Storefront Account is cancelled. However, attribution of such information to you will be removed. Additionally, some copies of your information (e.g., log records) may remain in our database, but are disassociated from personal identifiers.
• Because we maintain the Storefront Platform to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

6.5 Withdrawing Consent and Restriction of Processing.

Where you have provided your consent to the processing of your personal information by Storefront you may withdraw your consent at any time by sending a communication to Storefront specifying which consent you are withdrawing.  This may necessarily result in the closure of your account. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing pursuant to Section 6.6 and pending the verification whether the legitimate grounds of Storefront override your own.

6.6 Objection to Processing.

In some jurisdictions, applicable law may entitle you to require Storefront not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing Storefront will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.

Where your personal information is processed for direct marketing purposes, you may, at any time ask Storefront to cease processing your data for these direct marketing purposes by sending an e-mail to privacy@thestorefront.com.

6.7 Lodging Complaints.

You have the right to lodge complaints about the data processing activities carried out by Storefront before the competent data protection authorities. If you reside in the European Economic Area (EEA), you have the right to file a complaint with Storefront’s lead supervisory authority, National Commission on Informatics and Liberty (Commission Nationale de l'Informatique et des Libertés) (CNIL).

7. OPERATING GLOBALLY

To facilitate our global operations Storefront may transfer, store, and process your information within our family of companies or with service providers based in Europe, India, Asia Pacific and North America. Laws in these countries may differ from the laws applicable to your Country of Residence. For example, information collected within the EEA may be transferred, stored, and processed outside of the EEA for the purposes described in this Privacy Policy. Where we transfer store, and process your personal information outside of the EEA we have ensured that appropriate safeguards are in place to ensure an adequate level of data protection.

If your information is shared with corporate affiliates or third party service providers outside the EEA, we have – prior to sharing your information with such corporate affiliate or third party service provider – established the necessary means to ensure an adequate level of data protection. This may be an adequacy decision of the European Commission confirming an adequate level of data protection in the respective non-EEA country or an agreement on the basis of the EU Model Clauses (a set of clauses issued by the European Commission). We will provide further information on the means to ensure an adequate level of data protection on request.

7.1 California & Vermont Residents.

Storefront will not share information it collects about you with its affiliates or third parties (both financial and non-financial), except as required or permitted by your state’s law.

7.2 California Privacy Rights.

California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties. See the “Contact” section for where to send such requests. Storefront does not share personal information with third parties for their own direct marketing purposes without your prior consent. Accordingly, you can prevent disclosure of your personal information to third parties for their direct marketing purposes by withholding consent.

8. SECURITY

We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Some of the safeguards we use to protect your information are firewalls and data encryption, and information access controls. If you know or have reason to believe that your Storefront Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your Storefront Account, please contact us following the instructions in the Contact Us section below.

9. CHANGES TO THIS PRIVACY POLICY

Storefront reserves the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the Storefront Platform and update the “Last Updated” date at the top of this Privacy Policy. We will also provide you with notice of the modification by email at least thirty (30) days before the date they become effective. If you disagree with the revised Privacy Policy, you may cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Storefront Platform will be subject to the revised Privacy Policy.

10. CONTACT US

If you have any questions or complaints about this Privacy Policy or Storefront’s information handling practices, please email us at privacy@thestorefront.com.