Privacy Statement
General
This privacy statement applies to the processing of personal data by Open Track Trace® B.V., located at the Netherlands, Chamber of Commerce 861619390 (hereinafter referred to as OTT):
By means of this privacy statement we want to provide you with insight into how and for what purposes we process your personal data.
OTT is the controller or controller for the processing of personal data, as described in this privacy statement.
The processing of personal data is subject to the Personal Data Protection Act (Wbp), respectively, as of 25 May 2018, the General Data Protection Regulation (GDPR).
Controller
(art 1, sub d Wbp / art 4, paragraph 7 GDPR)
The (processing) controller is the natural or legal person who, alone or together with others, determines the purpose and means of the processing of personal data.
You can contact OTT with complaints or questions.
Personal data
(art 1, sub a Wbp / art 4, paragraph 1 GDPR)
Personal data is data relating to an identified or identifiable natural person. This means that the data about a person must be able to be traced back to an individual person, in other words it must be clear on the basis of the data which person is involved.
We process – if known to us - the following personal data from you:
- First Name/Initials
- Last name
- Address
- Postal code
- City
- Country
- Phone number
- Email address
- Gender
- IBAN number
- Wallet address
Processing of personal data
(art 1, sub b Wbp / art 4, paragraph 2 GDPR)
A processing of personal data is an operation or set of operations relating to personal data or a set of personal data, whether or not carried out by automated processes, such as the collection, recording, disclosure and destruction of personal data.
Purpose processing personal data
(Art 8, sub b Wbp / Art 6, sub 1, sub b GDPR)
We process your personal data to perform the agreement we have concluded with you.
We will not process your personal data for other purposes without your permission.
Third parties
(art 1, sub g Wbp / art 4, paragraph 10 GDPR)
We do not provide your data to third parties, unless provision is necessary for the execution of the agreement or we are obliged to do so on the basis of a court order or a legal obligation. Depending on the agreement concluded with you, we may be forced to make the data available to:
- Governments
- Legal institutions
Security Measures
(art 13-14 Wbp / art 32 GDPR)
We have taken various appropriate technical and organizational measures to protect your personal data, including measures against unauthorized access, unauthorized use, unauthorized modification, unlawful and accidental destruction and accidental loss.
Your personal data will only be consulted or processed by employees who, in view of their position, must have access to it. Our employees have a duty of confidentiality.
We have also taken measures with regard to third parties. For example, we have concluded a processor agreement (Wbp) / processor agreement (AVG) with every third party that processes your data. This sets out the purpose of the processing and agreements are also made about the level of technical and organizational measures.
Data retention period
(Art 10 Wbp / Art 5(1)(e) GDPR)
We do not store your personal data for longer than is necessary for the purpose for which it was processed. For the retention period of the data, we have assumed the retention period for the tax authorities, namely 7 years.
Your rights
You have a number of rights when we record your personal data. These rights are laid down in the Personal Data Protection Act (Wbp), respectively, as of 25 May 2018, the General Data Protection Regulation (GDPR).
You can view, correct, block or delete your personal data at any time.
If you want to exercise your rights, please contact OTT.