Privacy Statement
Twoinamillion, located at Pieter Braaijweg 203-2, 114 AJ Amsterdam, is responsible for the processing of personal data as outlined in this privacy statement.
Contact Information:
Twoinamillion
Pieter Braaijweg 203-2, 114 AJ Amsterdam
+31 641679733
www.twoinamillion.nl
Istra Hutschemaekers is the Data Protection Officer (DPO) at Twoinamillion. She can be reached via email at contact@twoinamillion.nl.
Personal Data We Process:
Twoinamillion processes your personal data because you use our services and/or because you provide this data to us directly. Below is an overview of the personal data we process:
- Company name
- First and last name
- Gender
- Address details
- Phone number
- Email address
- VAT number
- Chamber of Commerce (KvK) number
- Bank account number
- Website URL
Special and/or Sensitive Personal Data We Process:
Our website and/or services do not intend to collect data about website visitors under the age of 16 unless they have parental or guardian consent. However, we cannot verify the age of visitors. We encourage parents to be involved in their children's online activities to prevent the collection of data without parental consent. If you believe we have collected personal information about a minor without such consent, please contact us at contact@twoinamillion.nl, and we will delete the information.
Purpose and Legal Basis for Processing Personal Data:
Twoinamillion processes your personal data for the following purposes:
- To process your payment
- To contact you by phone or email if necessary to carry out our services
- To deliver goods and services to you
- To comply with legal obligations, such as data required for tax filings
Automated Decision-Making:
Twoinamillion does not make decisions based solely on automated processing that could have significant consequences for individuals. This refers to decisions made by computer programs or systems without human involvement (e.g., a Twoinamillion employee).
Data Retention:
Twoinamillion does not retain your personal data longer than necessary to fulfill the purposes for which your data was collected. We apply the following retention periods for the following categories of personal data:
- Company name
- First and last name
- Gender
- Address details
- Phone number
- Email address
- VAT number
- Chamber of Commerce (KvK) number
- Bank account number
- Website URL
Retention period: As long as the individual maintains a business relationship with us and/or as legally required.
Data Storage and Processing:
We store your data on our internal systems and securely through external services such as Google Cloud. You can find their Privacy Policy and Data Processing Agreement here.
We also use Dropbox for secure data storage. Their Data Processing Agreement can be found here.
For contact form submissions and email processing, our service provider Xenolabs.Europe may theoretically access the data. You can find their Data Processing Agreement here.
Additionally, our accountant may access your data when preparing our financial statements. You can find their Privacy Policy and Data Processing Agreement here.
There is no further external storage or processing of personal data.
Sharing Personal Data with Third Parties:
Twoinamillion will only share your data with third parties if this is necessary to perform our agreement with you or to comply with legal obligations.
Cookies or Similar Technologies:
Twoinamillion uses only technical, functional, and analytical cookies that do not infringe on your privacy. A cookie is a small text file stored on your computer, tablet, or smartphone when you first visit this website. The cookies we use are necessary for the website's technical operation and your convenience. They help the website function properly and remember your preferred settings. We also use them to optimize our website. You can opt-out of cookies by adjusting your internet browser settings to no longer store cookies. Additionally, you can delete all previously stored information via your browser settings.
Access, Correction, or Deletion of Data:
You have the right to access, correct, or delete your personal data. You also have the right to withdraw your consent for data processing or object to the processing of your personal data by Twoinamillion. Additionally, you have the right to data portability, meaning you can request that we send the personal data we have on you in a computer file to you or another organization you specify.
You can send a request for access, correction, deletion, data transfer, withdrawal of consent, or objection to the processing of your personal data to contact@twoinamillion.nl.
To verify that the request was made by you, we ask that you send a copy of your identification along with the request. Please black out your photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and citizen service number (BSN) to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.
Twoinamillion also wants to inform you that you have the right to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which you can contact via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.
How We Protect Personal Data:
Twoinamillion takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you believe that your data is not properly secured or there are indications of misuse, please contact us at contact@twoinamillion.nl.
