Hakagile Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how Noratek SRL processes personal data in connection with the Hakagile website and web application.

1. Data controller

The data controller is:

Noratek SRL
Rue Noire Fontaine 14
4624 Fléron
Belgium
VAT: BE0470043093
Email: privacy@noratek.srl

For any privacy-related question or request, contact privacy@noratek.srl.

2. Scope

This Policy applies to:

the Hakagile marketing website;
access requests;
Hakagile user accounts;
the Hakagile web application;
support and security communications relating to Hakagile.

Hakagile is intended for professional and adult users. It is not designed for children.

3. Data we process

Depending on how you use Hakagile, we may process the following categories of data.

3.1 Account and identity data

This may include:

your name;
your email address;
your profile information;
authentication identifiers;
account status and access history.

3.2 Access-request and communication data

When you request access or contact us, we may process:

the information submitted with your request;
your messages and correspondence;
information needed to review, approve or refuse access;
support requests and our responses.

3.3 User Content

“User Content” means information that you create, enter, upload or organise in Hakagile, including, where applicable:

projects and boards;
work items, subtasks and attachments;
meeting and ceremony records;
notes, comments and decisions;
impediments;
labels, estimates and project metadata.

User Content may contain personal data relating to you or to third parties. You are responsible for ensuring that you are authorised to enter and process that information in Hakagile.

3.4 Technical and security data

We may process technical information needed to operate and secure the service, such as:

IP address;
browser and device information;
date and time of access;
authentication and security events;
application errors and diagnostic information;
logs relating to suspected abuse or unauthorised access.

Noratek does not use User Content for advertising and does not sell personal data or User Content.

4. Purposes and legal bases

We process personal data only where a legal basis applies.

Purpose	Main data concerned	Legal basis
Reviewing access requests and managing accounts	Identity, access-request and account data	Steps taken at your request before entering into a contract and performance of the contract
Providing, maintaining and backing up Hakagile	Account data, User Content and technical data	Performance of the contract
Authenticating users and protecting accounts	Account, authentication and security data	Performance of the contract and our legitimate interest in securing the service
Responding to support requests	Account, communication and relevant User Content	Performance of the contract and our legitimate interest in providing support
Detecting fraud, abuse, unlawful activity or security incidents	Technical, security, account and relevant User Content	Our legitimate interest in protecting Hakagile, its users, Noratek and third parties
Establishing, exercising or defending legal claims	Relevant account, technical, communication and User Content	Our legitimate interest and, where applicable, compliance with a legal obligation
Complying with binding legal requests	Data identified in the applicable request	Compliance with a legal obligation

Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations.

5. User Content and your rights in it

You retain all rights that you hold in your User Content.

You decide what information you enter into Hakagile and may modify or delete it through the functions made available by the service. Noratek receives only the limited rights necessary to host, process, back up and display User Content for the purpose of providing Hakagile.

Your control over User Content does not remove any legal, contractual, professional or confidentiality obligations that apply to it.

6. Access to User Content by Noratek

Noratek does not routinely read or review User Content and does not use it for advertising, profiling or resale.

Access may occur only where reasonably necessary to:

provide support that you have requested;
maintain, secure, troubleshoot or restore the service;
investigate suspected fraud, abuse, unlawful activity or a security incident;
enforce the Hakagile Terms of Use;
establish, exercise or defend legal claims;
comply with applicable law or a binding request from a competent judicial or administrative authority.

Any access is limited to what is reasonably necessary for the relevant purpose.

7. Hosting and service providers

Hakagile uses Google Firebase and related Google Cloud infrastructure for functions such as authentication, database storage, file storage, hosting and technical operation.

Google acts as a service provider and, for Customer Data covered by the applicable terms, as a processor or subprocessor under its Firebase or Google Cloud data-processing terms.

7.1 Cloud Firestore location

The primary Cloud Firestore database used by Hakagile is configured in the European multi-region eur3:

read-write region: europe-west1 — Belgium;
read-write region: europe-west4 — Netherlands;
witness region: europe-north1 — Finland.

The database is configured with:

delete protection enabled;
point-in-time recovery enabled;
a version-retention period of 604,800 seconds, equivalent to seven days.

These safeguards support resilience and recovery. They do not replace the user’s responsibility to retain any exports or copies required for professional, contractual or regulatory purposes.

7.2 Other Firebase and Google service data

The eur3 setting describes the location of the Cloud Firestore database. Other Firebase or Google services may process account metadata, service data, logs, support data or security information according to their own service configuration and contractual terms.

Where personal data is transferred outside the European Economic Area, Noratek relies on an applicable lawful transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with any supplementary safeguards required by law.

Noratek does not sell, rent or trade personal data or User Content.

We may disclose data only:

to service providers that help us operate, host, secure or support Hakagile;
when you ask or authorise us to do so;
where reasonably necessary to investigate misuse or protect Hakagile, Noratek, users or third parties;
where required by applicable law, a binding court order or a valid request from a competent authority;
in connection with the establishment, exercise or defence of legal claims;
as part of a corporate restructuring, merger, acquisition or transfer of assets, subject to applicable confidentiality and data-protection requirements.

Service providers may process data only for the purposes for which they have been engaged and under the applicable contractual safeguards.

9. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

In general:

account data is retained while your account remains active;
User Content is retained until you delete it or delete your account;
access requests and support correspondence may be retained for a reasonable period to manage the relationship and document our responses;
authentication, security and technical logs may be retained for a limited period appropriate to security, troubleshooting and abuse prevention;
data needed to comply with a legal obligation or to establish, exercise or defend legal claims may be retained for the applicable statutory or limitation period.

Because point-in-time recovery and backups are enabled, deleted data may remain temporarily in protected recovery copies until those copies expire or rotate. Such copies are not used for ordinary product operations and are deleted or overwritten according to the applicable retention cycle.

10. Account and data deletion

You may delete individual content using the functions available in Hakagile.

You may also request or initiate deletion of your account and associated User Content. Following deletion:

active account access is disabled;
active User Content is deleted or made inaccessible;
residual copies may remain temporarily in backups, point-in-time recovery systems, security logs or legally required records;
data that must be retained by law or for legal claims may be isolated and retained only for that purpose.

For assistance, contact privacy@noratek.srl.

11. Your data-protection rights

Subject to applicable law, you may have the right to:

obtain information about how your personal data is processed;
access your personal data;
correct inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a structured, commonly used and machine-readable format;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent supervisory authority.

To exercise a right, email privacy@noratek.srl. We may ask for information reasonably necessary to verify your identity and protect your account.

We normally respond within one month, subject to any extension permitted by the GDPR for complex or numerous requests.

12. Complaints

You may contact the Belgian Data Protection Authority:

Data Protection Authority / Autorité de protection des données
Rue de la Presse 35
1000 Brussels
Belgium
https://www.autoriteprotectiondonnees.be/

You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

We encourage you to contact us first at privacy@noratek.srl so that we can try to address your concern.

13. Security

Noratek applies reasonable technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include access controls and the resilience and recovery settings described above. However, no online service can guarantee absolute security or uninterrupted availability.

You are responsible for protecting access to your email account and any sign-in code sent to it, using Hakagile from appropriately secured devices and reporting suspected unauthorised access without delay.

14. Third-party data, client information and confidentiality

Hakagile may allow you to enter information relating to clients, employers, colleagues, meeting participants or other third parties.

You are responsible for ensuring that:

you have a lawful basis and any required authorisation to process that information;
using Hakagile complies with your employer’s or client’s policies;
you do not breach an NDA, professional secrecy, contractual confidentiality obligation or legal restriction;
you provide any notice required to the persons concerned;
you do not enter information that your organisation prohibits from being stored in an external service.

Depending on the circumstances, you or your organisation may act as controller of personal data entered in User Content, while Noratek may act as processor for the limited purpose of providing Hakagile. If your use requires a separate data-processing agreement, contact privacy@noratek.srl before entering the relevant data.

15. Cookies and similar technologies

Hakagile may use cookies, browser storage or similar technologies that are strictly necessary for authentication, security, session continuity and operation of the website or application.

The website also stores one preference cookie, hakagile_theme, when you choose the light or dark appearance. It records only that choice, lasts one year, and is set solely as a result of your action: if you never use the appearance control, it is never written. It contains no identifier and is not used to recognise or track you.

Noratek uses no analytics, advertising or other tracking technologies. If any are introduced, this Policy and the applicable consent mechanism will be updated before they are used, where consent is legally required.

16. Changes to this Policy

We may update this Policy to reflect changes to Hakagile, our service providers or applicable law.

The updated version will be published with a revised “Last updated” date. Where a change materially affects your rights or how your data is used, we will provide an appropriate additional notice where required.

17. Contact