Privacy Statement InControlRating B.V.
InControlRating B.V., based in the Netherlands, is responsible for processing personal data as described in this privacy statement.
InControlRating B.V. considers the careful handling of personal data to be of the utmost importance. Personal data is processed and secured with care. In processing such data, we comply with the requirements of the General Data Protection Regulation (the "GDPR"). This Privacy Statement explains how we collect and use your data in accordance with the GDPR.
In this Privacy Statement, we explain what personal data we collect and use, and for what purpose we do so. We encourage you to read this Privacy Statement carefully. It applies to our website, https://routeicr.com, and related websites and services.
This Privacy Statement was last updated on September 17, 2024.
Use of Personal Data
When you use the websites and related services offered by InControlRating B.V., you may share personal data with us. We collect and use personal data that you, or your company, provide directly to us. We will not use the personal data for purposes other than those described in this statement, unless you have given prior consent.
Types of Data Collected
When you use our services, we may collect the following data:
First and last name
Address details
Phone number
Email address
IP address
Other personal data you actively provide, such as creating a profile on this website, corresponding via email, or calling us
Information about your activities on our website
Information about your browsing behavior across different websites (for example, if the company is part of an advertising network)
Internet browser and device type
IBAN (bank account number)
Legal Grounds for Processing
We generally process your personal data for the following purposes:
Processing your payment
Sending newsletters, mailings, and/or notifications
Being able to call or email you if necessary to provide our services
Informing you about changes to our services and products
Analyzing your behavior on our website to improve the website and tailor our products and services to your preferences
InControlRating B.V. also processes personal data when we are legally required to do so, such as information needed for our tax returns
We collect your personal data based on legitimate interests or your consent, which you can withdraw at any time.
Retention of Personal Data
We will retain your personal data for as long as necessary to fulfill the purposes of this Privacy Statement. In general, we do not keep the personal data of our website visitors for longer than three months. For a subscription of the ICR software, we retain data for up to three years after you cancel your subscription.
Your Rights
You have the right to access the information we process about you. If you wish to do so, you can contact us directly. We will provide you with a copy of the data we process about you. We may need to verify your identity to fulfill your request. If you believe that the information we hold about you is incorrect, you can contact us to update your details. You also have the right to object to the processing of your data. If you want us to delete your information, you can inform us at any time. You can contact us at any time regarding these requests, and we will respond in a timely manner, in accordance with the GDPR. If you are not satisfied with our response, you can submit a complaint to the relevant supervisory authority.
Sharing with Others
We will not share your information with others without your consent, unless it is necessary for the performance of the contract you, or your organization, have entered into with us, or unless we are legally required to do so.
Transfer of Personal Data
To achieve the purposes described in this Privacy Statement, we may transfer your data outside the European Economic Area (EEA). When this occurs, we will take appropriate measures to ensure that personal data is adequately protected. For transfers to the United States, we ensure that such an American party complies with the Privacy Shield. For other transfers, we may transfer your data to a country recognized by the European Commission as providing an adequate level of protection for personal data.
Analytics
The data you provide may be used for statistical analysis. These statistics are used to optimize our services. This allows us to see how visitors use our website and improve it accordingly. Where possible, we will pseudonymize this data.
Cookies
We want to offer you relevant and personalized information in a user-friendly way. For this reason, we use different types of cookies on our websites. For example, we place cookies that are necessary for the functioning of the site, such as for the ability to comment, spam filtering, video playback, and caching to speed up the website. We also use analytical cookies that do not infringe on your privacy.
In general, cookies are stored for the duration of the (browser) session. Additionally, your IP address may be stored in the log files of our web server when you use our services. This is necessary to properly manage and secure our services. We do not use your IP address to track or register your online behavior. In most cases, we are unable to link your IP address to your name, address, or other identifying information unless you provide such information and continue to use the same IP address.
You can opt out of cookies by adjusting your internet browser settings so that it no longer stores cookies. Additionally, you can delete all previously stored information through your browser settings.
Security
We ensure that your personal data is protected against loss or unlawful processing. We have implemented the following technical and organizational measures:
Logical access control, using passwords and possibly a second factor
Data encryption
Pseudonymization of data
The use of Virtual Private Servers (VPN) accessible with an SSH key
Transfers only over SSL
Purpose-bound access restrictions
Authorization checks