Privacy Policy
Summary: iToezichtProtocol processes only personal data strictly necessary for the platform. All data is stored on EU servers and is never shared for commercial purposes.
1. Who are we?
iToezichtProtocol is a product of Arcadis Nederland B.V., based in Amsterdam (Chamber of Commerce 09036504). Technical management is handled by Django Web Studio. Arcadis acts as the data controller. Contact: privacy@itoezichtprotocol.com
2. What data do we process?
- Account data: name, email address, organisation name, job title
- Usage data: login moments, actions within the application, device type
- Inspection data: project information, locations, findings and photos
- Communication data: messages sent via the support portal
3. Legal bases
- Performance of contract — for the delivery of the platform to your organisation
- Legal obligation — where arising from the Environment Act or other legislation
- Legitimate interest — for security monitoring and service improvement
4. Retention periods
Account data is retained for 2 years after termination of the agreement. Inspection data may be kept longer where required by law (generally 7 years under the Archives Act).
5. Sharing with third parties
Your data is not sold or shared for commercial purposes. We work with Django Web Studio (technical management) and an EU-based hosting partner, both bound by a data processing agreement.
6. Security
We apply TLS encryption, encryption of stored data (at rest), role-based access control and regular security audits in accordance with the BIO (Government Information Security Baseline).
7. Your rights
You have the right to access, rectification, erasure, restriction, portability and objection. Submit your request to privacy@itoezichtprotocol.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
8. Cookies
We use only functionally necessary cookies. See our Cookie policy for more information.