Privacy Statement
Scope
This privacy statement applies to data processing directly related to our website and phone calls.
Please, check the privacy policies of social media platforms and other third party websites on which we may be present and/or active.
Purpose, type and retention period
Website
The purpose and type of processing and the retention period of (persistent) cookies of the website are described for each category of cookies. Please, click ‘Cookie settings’ on any page footer to read those descriptions.
We process website traffic data (with and without cookies) to:
- avoid or limit spam and security risks (including threats from malicious activities from hackers) and
- anonymously research & develop business via statistical data analyses.
Data submitted via forms on this website may be used occasionally also for (direct) marketing purposes, unless the data subject explicitly mentions in the submitted data to not consent with this purpose.
Phone calls
We may record and archive our in- and/ or outbound phone calls, so we can review business transactions verbally agreed during those phone calls and to complement our administration (also of possible fiscal relevance). The purpose of this data processing is to improve the quality of our services (e.g. by training) and safeguard our legal and/ or contractual interests. The retention period of the recordings is 7 years after the recording or (whichever is longer) after the end date of the contract with the recorded party.
Data we process
Website
We monitor, store, analyse and/or otherwise proces only non sensitive/ non special personal data. This data is:
- generated by users trafficking this website (including IP-numbers, http headers and other ‘fingerprint‘ data) and
- explicitly submitted by users via:
- (login, account registration and contact) forms on this website and
- emails (i.e. incl. their attachments).
Phone calls
We monitor, store, analyse and/or otherwise proces only: date and time of phone calls, the applicable international phone numbers of recorded parties and the bi-directional audio signal of phone calls.
Who has access
Website
Parties who have full or partial access to the data:
- from our organisation, only the webmaster of this website,
- the external hoster and
- an external threat detection service (of which the name can not be disclosed on this public website for security reasons) and
- third parties, whenever this is legally obligatory.
Phone calls
Parties who have full or partial access to the data: the owner of the recording device and/ or of the (backup) storage of the recording data.
Fundamental rights of data subjects
Users can at any time exercise these privacy rights, concerning the processing of their personal data. Only data we are obliged to keep (for legal or security purposes) can not be deleted before the legal retention period. Please, contact us via our contact form, if you would like to exercise your privacy rights concerning the processing of your personal data.
Data security
As we take data privacy seriously, we have taken various organisational and technical measures to secure the data we process and regurly access the (possible/ near) privacy and security risks.
Data breach procedure
1) Please, asap call our Data Protection Officer (via the phone number mentioned on our contact page) to report a (possible and/or near) data breach. 2) Instantly report the breach via the form on the aforementioned page and include a secure reference to a) a copy of your ID without readable citizens service number and b) as much details about the breach as possible. 3) In a separate message, provide us with the login credentials to access aforementioned privacy sensitive data. 4) Check your reception of our confirmation mail.