Data processing agreement

This agreement applies between the customer (controller) and Van Dijk Solutions and Wodan Digital (processor) as soon as the customer creates an account.

Subject

The processor processes personal data of visitors of the customer's website, only to provide the modules the customer uses, and only on the customer's instructions.

Categories

Contact details and messages that visitors type in themselves; with Visitor insight and Company recognition also page views and company data, never raw IP addresses. With the Configurator also the designs visitors make and the photos they upload for them. A design that is not in a cart expires after 30 days, a design in a cart after 90 days; we then delete the photos of the expired design. Ordered designs are kept for as long as the order requires.

Security

Encrypted connections, encrypted storage of secrets, access only for those who need it.

Sub-processors

Netcup (hosting), Cloudflare, Mollie, our mail provider and Sentry. For the Company recognition module also Snitcher B.V. (Netherlands), for recognising companies from the IP address. For the Company check module also the Dutch Chamber of Commerce (KVK API, Netherlands), which receives the company name or KVK number a visitor enters, to look up company details, and the European Commission (VIES), which receives the VAT numbers a visitor enters, for validation. We inform the customer before adding a sub-processor.

Data breaches

We report a data breach within 48 hours of discovering it.

End

After the account ends we delete the data within 30 days.