Privacy policy

Digital Bean privacy policy

https://digitalbean.nl/

This is an English translation of the Dutch privacy policy of Digital Bean. The Dutch version is leading; in the event of any discrepancy between the two versions, the Dutch version prevails. This processing takes place under the GDPR (AVG) and Dutch law.

About our privacy policy
Digital Bean cares a great deal about your privacy. We therefore only process data that we need for (improving) our
services, and we handle the information we have collected about you and your use of our services with care. We
never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the services made available on it by Digital Bean. This
policy took effect on 15 July 2020; publishing a new version ends the validity of all previous versions. This privacy
policy describes which data about you we collect, what this data is used for, and with whom and under what
conditions this data may be shared with third parties. We also explain how we store your data, how we protect your
data against misuse, and what rights you have in respect of the personal data you have provided to us.
If you have any questions about our privacy policy, you can contact our privacy contact; you'll find the contact
details at the end of this privacy policy.

About data processing
Below you can read how we process your data, where we (have it) stored, which security techniques we use, and
who has access to the data.

Website software
WordPress
Our website is built using WordPress software. Personal data you make available to us for our services is shared
with this party. WordPress has access to your data in order to provide us with (technical) support; it will never use
your data for any other purpose. Under the agreement we have with them, WordPress is required to take
appropriate security measures. WordPress uses cookies to collect technical information about your use of the
software; no personal data is collected and/or stored.

Web hosting
TransIP
TransIP: We use web hosting and email services from TransIP. TransIP processes personal data on our behalf and
does not use your data for its own purposes. This party may collect metadata about the use of the services; this is
not personal data. TransIP has taken appropriate technical and organisational measures to prevent loss and
unauthorised use of your personal data. Under our agreement, TransIP is bound by confidentiality.

Email and mailing lists
MailChimp
We send our email newsletters using MailChimp. MailChimp will never use your name and email address for its own
purposes. At the bottom of every automated email sent via our website you'll find an 'unsubscribe' link, after which
you'll no longer receive our newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies
and other internet technologies that show whether emails are opened and read. MailChimp reserves the right to use
your data to further improve its services and, in that context, to share information with third parties.

TransIP
We use TransIP's services for our regular business email traffic. This party has taken appropriate technical and
organisational measures to prevent misuse, loss and corruption of your and our data as far as possible. TransIP
does not have access to our mailbox, and we treat all our email traffic as confidential.

Invoicing and bookkeeping
AFAS
AFAS: We use AFAS's services to keep our records and accounts. We share your name, address and city details, and
details relating to your order. This data is used to administer sales invoices. Your personal data is transmitted and
stored securely. AFAS is bound by confidentiality and will treat your data as confidential. AFAS does not use your
personal data for any purpose other than described above.

Boon Administraties
Our bookkeeping is handled by Boon Administraties. They are likewise bound by confidentiality regarding your personal data and will therefore handle your data carefully. 

Purpose of the data processing

General purpose of the processing
We use your data solely for our services. This means the purpose of the processing is always directly related to
the assignment you give us. We do not use your data for (targeted) marketing. If you share data with us and we use
this data to contact you at a later time other than at your request, we will ask your explicit consent for this. Your
data is not shared with third parties, other than to meet accounting and other administrative obligations. All these
third parties are bound by confidentiality, whether under their agreement with us, an oath, or a statutory obligation.

Automatically collected data
Data automatically collected by our website is processed with the aim of further improving our services. This data
(for example, your IP address, web browser and operating system) is not personal data.

Cooperation with tax and criminal investigations
In some cases, Digital Bean may be legally required to share your data in connection with a tax or criminal
investigation by the government. In such a case, we are obliged to share your data, but we will resist this to the
extent the law allows.

Retention periods
We retain your data for as long as you are a client of ours. This means we keep your customer profile until you
indicate that you no longer wish to use our services. If you tell us this, we will also treat it as a request to be
forgotten. Under applicable administrative obligations, we must keep invoices containing your (personal) data, so
we will retain this data for as long as the applicable statutory period runs. However, staff no longer have access to
your customer profile or to documents we produced in connection with your assignment.

Your rights
Under applicable Dutch and European law, you have certain rights as a data subject in respect of the personal data
processed by or on behalf of us. Below we explain what these rights are and how you can exercise them. To prevent
misuse, we generally send transcripts and copies of your data only to the email address we already have on file for
you. If you wish to receive the data at a different email address, or by post for example, we will ask you to verify
your identity. We keep a record of handled requests; in the case of a request to be forgotten, we keep anonymised
records. You will receive all transcripts and copies of data in the machine-readable data format we use within our
systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit
Persoonsgegevens) if you suspect that we are using your personal data incorrectly.

Right of access
You always have the right to inspect the data we process (or have processed) that relates to you or is traceable to
you. You can submit a request to that effect to our privacy contact. You will receive a response to your request
within 30 days. If your request is granted, we will send a copy of all data to the email address we have on file for
you, together with an overview of the processors holding this data, stating the category under which we have
stored it.

Right to rectification
You always have the right to have the data we process (or have processed) that relates to you or is traceable to you
corrected. You can submit a request to that effect to our privacy contact. You will receive a response to your
request within 30 days. If your request is granted, we will send a confirmation to the email address we have on file
for you that the data has been amended.

Right to restriction of processing
You always have the right to have the data we process (or have processed) that relates to you or is traceable to you
restricted. You can submit a request to that effect to our privacy contact. You will receive a response to your
request within 30 days. If your request is granted, we will send a confirmation to the email address we have on file
for you that the data will no longer be processed until you lift the restriction.

Right to data portability
You always have the right to have the data we process (or have processed) that relates to you or is traceable to you
carried out by another party. You can submit a request to that effect to our privacy contact. You will receive a
response to your request within 30 days. If your request is granted, we will send transcripts or copies to the email
address we have on file for you of all data about you that we have processed, or that has been processed on our
instructions by other processors or third parties. In such a case, we will most likely no longer be able to continue
providing our services, because the secure linking of data files can then no longer be guaranteed.

Right to object and other rights
In applicable cases, you have the right to object to the processing of your personal data by or on behalf of Digital
Bean. If you object, we will immediately stop processing your data pending the handling of your objection. If your
objection is well-founded, we will provide you with transcripts and/or copies of the data we process (or have
processed), and then permanently stop the processing. You also have the right not to be subject to automated
individual decision-making or profiling. We do not process your data in a way that this right applies. If you believe
otherwise, please contact our privacy contact.

Cookies
Google Analytics
Our website places cookies from the American company Google, as part of its “Analytics” service. We use this
service to track and get reports on how visitors use the website. This processor may be required, under applicable
law and regulation, to grant access to this data. We collect information about your browsing behaviour and share
this data with Google. Google may interpret this information together with other datasets and in this way track
your movements on the internet. Google uses this information to offer, among other things, targeted advertising
(AdWords) and other Google services and products.

Third-party cookies
Where software solutions from third parties use cookies, this is stated in this privacy notice.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, you will always find the most recent
version on this page. If the new privacy policy affects the way we process data about you that we have already
collected, we will notify you of this by email.

Contact details
Digital Bean
1e Industriestraat 8, 1401 VL Bussum, the Netherlands
T +31 6 38 00 34 67
E info@digitalbean.nl
Privacy contact
Matthijs Boon