Privacy Statement ConsentAudit™

ConsentAudit Privacy Statement
This is ConsentAudit’s privacy statement. Here you can find out which data we process about you, why we do it, how we collect it and what rights you have when we process your personal data.

Datacontroller

ConsentAudit is part of Kolossos software development. Kolossos is the controller and is located at Munthof 31, 2215 VG in Voorhout. If you would like to get in touch, you can do so at privacy@consentaudit.com.

Below we describe for what purpose we process your personal data, which personal data these are and what our basis is for processing your data.

[Purpose]
To be able to contact you to make an appointment, to give a demo or to make a proposal.

This can be data sent to us by you via a contact form on our site or via a telephone conversation. In addition, we can obtain this data via social channels, for example via your LinkedIn profile.

[Data]
Contact information, including
First name
Last name
Email
Phone

[Legal basis]
We ask you permission (consent) to use this information. You can withdraw consent at any time.

[Purpose]
To enter into an agreement whereby you purchase a service and/or product.

This concerns the data required to draw up and invoice a contract. In addition, we create an account where correspondence, the agreement and the invoices will be placed.

[Data]
Contact details, including
First name
Last name
Email
Telephone
number Correspondence

[Legal basis]
On the basis of the execution of the agreement (contract) we may process this data.

[Purpose]
To be able to provide our services and/or products.
This is data that we need to be able to configure and deliver our reports as part of our SAAS solution.

[Data]
Contact details, including
First name
Last name
Email
Telephone

number

[Legal basis]
On the basis of the execution of the agreement (contract) we may process this data.

[Purpose]
To be able to answer your questions or to offer you support.
This concerns the processing of data in order to be able to answer a question, directly over the telephone or at a later time. This may be without you having an agreement with us, also known as a pre-sales inquiry. For example, you send us a question via one of our channels and leave your details.
Or you already have an agreement (you are a customer) with us and ask to be helped with support regarding our services and/or products.

[Data]
Contact details, including
First name
Last name
Email
Telephone
number Correspondence

[Legal Basis]
On the basis of legitimate interest and the execution of the agreement (contract), we may process this data to help you as well as possible.

[Purpose]
To be able to contact you when there are updates or other service messages regarding our software.

[Data]
Contact information, including
First name
Last name
Email
Telephone
number Correspondence

[Legal Basis]
Under the agreement (contract) we may process this data to offer you product and or service-related service.

How do we protect your data?

We take both technical and organizational measures to secure the personal data that we process.
It is important that we apply data minimization as much as possible. We do not collect more data from you than necessary. This is also reflected in the table above. We do not apply automatic profiling.
We process your contact details in our secure environment.
Our reports only contain data that is public. In other words, anyone could figure that out. We understand that it is desirable to properly protect our reports, which contain a complete overview. That is why we also do this in our secure environment, which unauthorized persons cannot access.
We use various technical measures, including security that meets the applicable legal requirements and guidelines. An example of a technical measure is that your data is sent via a secure connection if you use an online form on the website. Your data is also encrypted during transmission. This means that your data will be unreadable should it fall into the wrong hands.
We use servers located in Europe.

How long do we keep your data?
We do not store your personal data for longer than is necessary for the purpose for which we process your data.
When we have had contact with you, but it is clear that no agreement follows, we will delete your personal data within 4 weeks. We do keep the company name available in our administration, so that we know who we have already had contact with and we will not contact you again.
After termination of the agreement, we will delete your personal data within 4 weeks. With the exception of personal data that are legally obliged to keep. For example, data that is necessary for the tax authorities. For companies and the self-employed, a legal retention obligation of 7 to 10 years applies.

Do we share your data with third parties?
No, unless we have expressly requested this and you have consented to it.

Cookies
When you visit our website, cookies are used to ensure that the website works properly. These are functional cookies and are strictly necessary for the website to function and to provide you with a good experience. We have also consciously chosen not to use analytical tools to collect website statistics, such as Google Analytics. We therefore do not process data that can be traced back to you as a person. Because we do not use cookies for which you have to give consent, we do not use a cookie consent banner. Read our cookie statement here.

What are your rights?
You have a number of privacy rights.

For example, you can ask us which personal data we process about you.
And if the data is not correct, have it corrected.
In some cases you can also ask us to delete your data
To transfer
Or to restrict the processing of your data.
Finally, you can object to the processing of your data.

You can exercise your rights by sending an email to nara privacy@consentaudit.com.
After contacting us, do you disagree with how we process your data or do you have another complaint? Then you have the right to submit a formal complaint to the Data Protection Authority.