General provisions
INVIDII has a Data Protection Officer (“FG”). The DPO monitors INVIDII's data processing internally. If you have complaints or questions that cannot be handled by Service & Support, you can contact the DPO. This can be done by post to INVIDII attn. the Data Protection Officer, Twekkeler Es 24, 7547 SM, Enschede, or by e-mail via support@invidii.com.
In this statement we explain our general policy with regard to the processing of personal data. We describe which personal data we process, how we guarantee privacy and what rights you have.
Your privacy is important
As of May 25, 2018, the General Data Protection Regulation (hereinafter “GDPR”) is in force. INVIDII handles your personal data carefully, securely and confidentially. INVIDII complies in all cases with applicable laws and regulations, including the GDPR. This means that we at least:
-
Clearly state the purposes for which we process personal data;
-
Process your personal data in accordance with the purpose for which it was provided; these goals and type of personal data are described in this Privacy Statement;
-
Processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
-
Ask for your explicit consent if we need it for the processing of your personal data;
-
Have taken appropriate technical and organizational measures to ensure the security of your personal data;
-
Do not pass on personal data to other parties, unless this is necessary for the purposes for which they were provided;
-
Audited annually in the context of the standards for Information Security, ISO 27001 and NEN 7510, with the aim of certification and offering these certificates and their scope for inspection;
-
To be aware of your rights regarding your personal data, to point this out to you and to respect them.
Certification
-
Dekra certified (ISO/IEC 27001 and NEN 7510)
-
Certificate ISO/IEC 27001: 2013