CerQlar – Privacy Statement
This privacy statement was last updated on 18 July, 2023 and applies to the processing activities of CerQlar B.V. (“CerQlar“, “we“, “our“, “us“), established in the Netherlands. In processing your personal data, CerQlar qualifies as the “controller” within the meaning of the General Data Protection Regulation (GDPR).
In this privacy statement, we explain what we do with the personal data we obtain about you via https://www.cerqlar.com. We recommend you carefully read this statement. In the course of our processing activities with personal data we comply with the requirements of the applicable privacy legislation. That means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your data protection rights, including the right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us via the contact details included at the bottom of this privacy statement.
1. Purpose, data and retention period
The situations in which we will process your personal data are listed below. The personal data we collect is largely provided to us by yourself, by submitting the information on the website, or by corresponding with us. We will only process your personal data when we have a legal ground to do so. Thus, we will only process your data when this is necessary for the performance of the contract or to pursue our legitimate interests (but always on the condition that your interests and fundamental rights do not outweigh our legitimate interests).
If we cannot base the processing on one of the aforementioned legal grounds, we will always ask for your prior consent to such processing (and only if this is possible and allowed under the GDPR). You can withdraw your consent at any time, either in the same way you consented or by contacting us via the contact details included at the bottom of this privacy statement. Upon withdrawal of your consent, we will stop processing that data. The withdrawal of your consent does not affect the lawfulness of the processing operations that we carried out before the withdrawal.
The situations in which we use your personal data are listed more specifically below: (click to expand)
1.1 Contact – Through phone, mail, email and/or webforms
1.1 Contact – Through phone, mail, email and/or webforms
For this purpose we use the following data:
- Contact details (such as your name, company name, address, telephone number and e-mail address); and
- Other personal data that you share with us.
The basis on which we process these data is:
Necessary for the performance of our contract with you where applicable, necessary for our legitimate interests (e.g. managing our relationship with you and keeping adequate administration), or on the basis of your consent.
Retention period
Where we process your personal data in relation to the performance of our contract with you, we retain this data until the relevant service is terminated or, otherwise, for a period of 2 years after the termination of the contract with you.
If your personal information is processed on the basis of consent, your data is retained until you withdraw your consent. Consent can be withdrawn at any time, by using the contact details listed in this privacy statement.
1.2 Cookies – To measure and improve interest in our website
1.2 Cookies – To measure and improve interest in our website
For this purpose we use the following data:
- Data about your device and browser type; and
- Data regarding your use of the website, web pages viewed, hyperlinks you clicked on and websites you visited before coming to our website.
The basis on which we process these data is:
Necessary for our legitimate interests (to keep the website up-to-date and relevant) and/or based on your consent to the placement of cookies.
Retention period
For the duration of the cookie with a maximum period of 6 months or, if the processing is based on your consent, until the moment you withdraw your consent (whichever comes first).
1.3 To manage our website and identify problems, to protect our business, to solve problems and to prevent potentially prohibited or illegal activities.
1.3 To manage our website and identify problems, to protect our business, to solve problems and to prevent potentially prohibited or illegal activities.
For this purpose we use the following data:
- Account information, including e-mail address and password; and
- Data about your device and browser type.
The basis on which we process these data is:
Necessary for our legitimate interests (for running our business, providing IT services, ensuring network security and to prevent fraud and other prohibited activities) or necessary for performing our obligations under the contract with you.
Retention period
We retain the data until the relevant service is terminated or, otherwise, for a period of 2 years after termination of the contract with you. Where the personal data is collected through cookies, we retain the personal data for a maximum duration of 6 months.
1.4 To notify you about promotions and special offers, as well as the services we offer that may be of interest to you.
1.4 To notify you about promotions and special offers, as well as the services we offer that may be of interest to you.
For this purpose we use the following data:
- Contact details (such as your name, company name, address, telephone number and e-mail address);
- Your marketing preferences; and
- Other personal data that you share with us.
The basis on which we process these data is:
Necessary for our legitimate interests (i.e. to be able to carry out marketing-related activities) or your consent for receiving marketing messages.
Retention period
Where we process this information for our legitimate interest, we retain this data until the service is terminated and for a period of 2 years after termination of the contract with you.
If your personal information is processed on the basis of consent, your data is retained until you withdraw your consent.
2. Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
3. Sharing your data
We share your data with external service providers, such as IT providers. If necessary, we will enter into a data processing agreement with these external service providers.
We may also share your personal data with:
- Competent supervisors or authorities in order to comply with requests or orders; with judicial authorities and other parties concerned in the context of legal proceedings; with other third parties in order to establish or exercise our legal rights or in the context of the settlement or institution of complaints or proceedings,
- Third parties that we need to involve in order to investigate, prevent or detect (suspected) fraudulent or other unlawful activities,
- Or other affiliated companies, with whom we have an engagement of outsourced shared services .
4. International transfer
Cerqlar does not, in principle, provide personal data to third parties except those sub-processor explicitly engaged for the purpose of providing services to or through CerQlar; or as required by a investigating party or supervisory authorities (if and to the extent) when CerQlar considers this appropriate in the context of (possible) sanctions, (potential) claims or legal proceedings. Furthermore, CerQlar ensures that any processing of personal data will take place within the European Economic Area (EEA) or to/from countries and organisations that ensure an adequate level of protection in accordance with the GDPR. CerQlar has also taken appropriate protective measures for transfers by concluding Standard Contractual Clauses when outside the EEA and provided the country concerned has an equivalent level of data protection.
5. Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
6. Third-party websites
This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
7. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you of any material changes we will make to the privacy statement.
8. Accessing and modifying your data
If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the contact details at the bottom of this privacy statement.
You have the following rights:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access your personal data that is known to us.
- Right to rectification: you have the right to supplement and correct your personal data whenever you wish.
- Right to erasure: you have the right to ask us to delete your personal data, for example if your personal data is no longer necessary for the purposes for which we collected it.
- Right to restrict processing: you have the right to request restriction of processing, for example where the processing is unlawful or if we no longer need the personal data.
- Right to withdraw consent: if you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted. The withdrawal of your consent does not affect the lawfulness of the processing we carried out before the withdrawal.
- Right to data portability: you have the right to request all your personal data from us and/or to transmit it to another controller.
- Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
9. Submitting a complaint
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Dutch Data Protection Authority or, if you reside in the European Union, to the competent supervisory authority for privacy in your jurisdiction.
10. Contact details
CerQlar B.V., Strawinskylaan 3127, 1077 ZX Amsterdam, The Netherlands
Website: https://www.cerqlar.com
Email: [email protected]