GDPR

Effective Date: 18/10/2023

1. Introduction

This Data Protection Statement explains how Pchee Slack Bot ("the Bot") processes personal data and complies with the General Data Protection Regulation (GDPR). It outlines the data protection principles, your rights as a data subject, and our obligations as a data controller. By using the Bot, you acknowledge and agree to the practices outlined in this statement.

2. Data Processing and Controller Information

Pchee acts as the data controller for personal data processed through the Bot. You can contact us regarding data protection matters at:

2/11 York St, Sydney, 2000 NSW, Australia hello@pchee.io

3. Data Collected and Purposes of Processing

The Bot collects and processes the following categories of personal data:

3.1. User Profile Information

Slack username
Email address

3.2. User-generated Content

Messages and interactions within the Slack platform

3.3. OpenAI Data

Data necessary for the Bot's interaction with OpenAI technology, including text inputs, outputs, and API usage data.

The data collected serves the following purposes:

To provide and improve the Bot's functionality.
To enable interactions and generate responses within the Slack platform.
To enhance the user experience by utilising OpenAI technology.
To address user inquiries and provide support.

4. Legal Basis for Processing

The Bot processes personal data on the basis of the following legal grounds:

Consent: Where you have given explicit consent to process your personal data.
Legitimate Interests: Where processing is necessary for the legitimate interests pursued by Pchee or a third party.

5. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, or contractual obligations. Data will be securely deleted or anonymised when it is no longer required.

6. Data Subject Rights

As a data subject, you have the following rights under GDPR:

6.1. Right of Access: You have the right to obtain confirmation that your data is being processed and to access your personal data.

6.2. Right to Rectification: You may request the correction of inaccurate or incomplete data.

6.3. Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent, provided there are no overriding legitimate interests.

6.4. Right to Restriction of Processing: You can request the restriction of processing when data accuracy is contested, processing is unlawful, or you have objected to processing.

6.5. Right to Data Portability: You may request the transfer of your personal data to another data controller in a structured, commonly used, and machine-readable format.

6.6. Right to Object: You can object to processing based on legitimate interests.

6.7. Right to Withdraw Consent: Where processing relies on your consent, you have the right to withdraw that consent at any time.

7. Data Security

Pchee is committed to protecting your personal data and implementing appropriate technical and organisational measures to ensure data security. We use encryption and access controls to safeguard your information.

8. Data Transfers

The Bot may involve the transfer of personal data to locations outside the European Economic Area (EEA). In such cases, we will ensure that adequate data protection measures are in place to protect your data.

9. Contact Information

If you have questions, concerns, or requests related to this GDPR Data Protection Statement, please contact us at the following address: