Privacy Policy

General

You can visit this website without us knowing who you are. When you fill in a form, of course, we will know who you are. We only use this information to answer your questions.

Privacy Policy / GDPR ChallengeBase version: 1.0

Background GDPR

The General Data Protection Regulation (GDPR) replaced the existing privacy legislation as of May 25, 2018. The GDPR contains rules for the (automatic) processing of personal data. This new European privacy law requires us to take more actions and measures when recording information about customers, employees, or other individuals. It is therefore important that we are well-prepared for and aware of this legislation.

Personal data

There are many types of personal data. The most obvious are a person’s name, address, and place of residence. But phone numbers and postal codes with house numbers are also personal data. Sensitive data, such as a person’s race, religion, or health, are called special categories of personal data. These are given extra protection by law.

What do we record within ChallengeBase?

We record many matters, both online and offline, that are subject to the GDPR:

• Meeting reports in Office365 (accessible via computer and mobile app);
• Evaluation meetings (both offline and in Office365);
• Contact details via the ChallengeBase website (challengebase.nl) + forms for newsletters or contact forms;
• Project proposals, business plans, business cards (both offline and in Office365).

ChallengeBase processes personal data because you use our services and/or because you provide this data to us yourself. We record this in our CRM system. Personal data recorded here includes: name and address, job title, telephone number, and email.

What security measures do we take?

• Software is secured with a username and password;
• Computers and mobile phones are secured with a code and/or fingerprint;
• Network folders (Office365) are accessible only to users who have the appropriate rights;
• Our website uses a secure connection (https://);
• We draw up a confidentiality agreement when granting access to our data;
• We regularly inform and train our employees about privacy and handling sensitive information.

User rights

Under the GDPR, you have the right to:

• Request access to the personal data we process about you;
• Request correction or deletion of your personal data;
• Object to the processing of your personal data;
• Restrict the processing of your personal data;
• Transfer your data (data portability);
• File a complaint with the supervisory authority.
  

Retention period

We do not retain your personal data longer than is strictly necessary to achieve the purposes for which your data is collected.

Sharing with third parties

ChallengeBase shares your personal data with third parties only if this is necessary to perform an agreement with you, or to comply with a legal obligation.

Automated decision-making

ChallengeBase does not make decisions based on automated processing that could have (significant) consequences for individuals.

Changes to the privacy policy

ChallengeBase reserves the right to make changes to this privacy policy. Changes will be published on our website.

Contact  Iformation

For questions about this privacy statement and our policy, or if you wish to file a complaint, please contact us at info@challengebase.nl.

Filing a complaint

If you disagree with the way we handle your personal data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).