Privacy notice: Ordertaking app

1. What personal data do we process?

The type of data processing is:

Category	Data items
Identifying data	First name, last name, email address, phone number, language preference.

2. For what purpose do we process your data and the legal basis

The purpose of data processing is:

Purpose	Data category
Management of the contractual relationship	Identifying data: first name, last name, email address, phone number, language preference.
Direct marketing	Identifying data: first name, last name, email address, language preference.

The legal basis for the processing is:

Purpose	Legal basis	Reason for processing
Providing the service (performance of the contract and technical assistance)	6(1)(b) Contractual	It is mandatory to provide the information for the provision of the service; otherwise the service cannot be provided.
Direct marketing	6(1)(a) Consent	Provision of the consent for direct marketing is not mandatory, based on preferences in receiving marketing-related content.

3. Are you obliged to provide us with your personal data?

It is mandatory to provide your data for the purpose indicated, except for direct marketing, which is optional. Failure to provide such data will result in the inability for the Company to provide the service and the inability for the Company to inform you about updates and new services.

4. Who can we transfer your data to?

Data could be made accessible or communicated to:

Our employees and/or collaborators in any capacity, adequately trained and authorised for processing;
Our processors such as hosting providers, suppliers of IT services and application software, etc.
Public or private bodies to whom we are obliged by the law to disclose the data.

5. How long do we keep your data?

Data is retained for the following time periods:

Purpose	Data retention
Provision of the service	Duration of the contract
Audit trail	6 months
Backups	12 months

6. Where is your data processed?

Your data is stored in the Netherlands.

Some suppliers (IT services, Email service provider, Video conferencing and communications service) operate outside of the European Union. In this case, we inform you that the data transfer will take place only in the presence of adequate safeguards provided for by the applicable law. In particular, where an Adequacy Decision is not applicable, we rely on the Standard Contractual Clauses provided by the European Commission (art. 46 GDPR). For further information about the data transfer, you can contact us at the email address indicated below.

7. How do we support you in dealing with data subject rights?

Consistently with the applicable law, you can: access, correct, obtain the erasure of your personal data. You also have the right to restrict the processing of your personal data.

Where the processing is based on your consent, you may withdraw your consent at any time.

Moreover, you can receive your personal data in a structured, commonly used and machine-readable format and ask Us to transmit those data to another controller, where technically feasible.

You can object to the processing of your personal data when the processing is based on a legitimate interest and if your personal information is used for direct marketing purposes.

You can lodge a complaint with the supervisory authority of your country in case you think that your rights have been breached.

If you wish to exercise one of these rights, you can send an email at [email protected]