Effective Date: 11 September 2024

Privacy Notice for Awesome Compliance Technology

At Awesome Compliance Technology BV (ACT), your privacy is a top priority, and we are fully committed to protecting your personal data. This Privacy Notice outlines how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. What Personal Data We Collect and For What Purpose

We process personal data for various purposes, in accordance with the principles of lawfulness, fairness, and transparency. The table below outlines the types of personal data we collect, the purposes of collection, the legal basis for processing, and how long we store your data:

Purpose

Personal Data Collected

Legal Basis

Data Retention Period

Sales & Marketing (via LinkedIn, email, and enrichment tools)

Name, email, job title, LinkedIn profile, company details

Legitimate interest or consent

Until you opt-out, withdraw your consent or unsubscribe

Account information (when you become a client)

Name, email, payment details, company information

Contractual necessity, legal obligation

7 years after account termination (for compliance purposes)

Applicant information (when applying for a job)

CV, contact information, references

Consent/Legitimate interest

3 months until the vacancy has been fulfilled and 1 year after the hiring process ends when consent has been given

Account creation & authentication

Name, email, login credentials

Contractual necessity

As long as you hold an account

Providing ACT services

Usage data, account information

Contractual necessity

As long as your account is active

Responding to inquiries & offering support

Name, email, inquiry details

Legitimate interest

Until the inquiry is resolved plus 1 year

Enabling user-to-user communications

Contact details, user identifiers

Contractual necessity

Until you deactivate the communication option

Requesting feedback

Name, email, feedback

Legitimate interest

2 years after the feedback is provided

Protecting ACT & fraud monitoring

IP address, device information, account information

Legitimate interest, legal obligation

As long as necessary to ensure security

Identifying usage trends

Usage data, IP address, device information

Consent, Legitimate interest

Max 14 months and thereafter aggregated data

Marketing & promotional campaign effectiveness

Email engagement metrics, campaign responses

Consent, Legitimate interest

Until the campaign ends plus 2 years

2. How We Collect Your Personal Data

We use different methods to collect data from and about you including through:

2.1 Direct Interactions:

You may provide us with personal information such as Contact Details, Identifiers, Financial Data, and other categories when you:

Apply for our products or services.
Create an account with us.
Subscribe to publications.
Request marketing materials.
Provide feedback or contact us through forms, post, phone, email, our website, or other means.

2.2 Automated Technologies or Interactions:

As you use our website and services, we may automatically collect Technical, Profile, and Usage Data, such as details about your device, browsing behavior, and usage patterns.

2.3 Third Parties or Publicly Available Sources:

Online recruitment platforms or professional networks (e.g., work-related information).
Publicly available sources providing Identity and Contact Data.
We might receive personal data about you from various third parties or publicly available sources like the ones set below.

3. Who Has Access to Your Data?

Your personal data is accessed by authorized personnel at ACT and, where necessary, trusted third-party service providers who assist us in fulfilling the purposes mentioned above. These third parties may include marketing platforms, payment processors, IT service providers, and others, all of whom operate under strict confidentiality agreements.

We may also share your personal data:

If required by law, regulation, or legal process;
To protect our legal rights, prevent fraud, or comply with lawful requests;
In connection with a merger, acquisition, or sale of all or a portion of our assets or in case of bankruptcy.

We ensure that access to your data is granted only on a need-to-know basis and is fully controlled and monitored.

Third Party

Encryption

Country

Digital Ocean