Privacy policy

This privacy policy applies to the personal data that is collected or used by
Octiva Group B.V. or its affiliates or subsidiaries (“Octiva”, “we”, “us” or “our”).

Veldsteen 46
4815PK Breda
Netherlands

Scope

This privacy policy explains how Octiva handles personal data relating to:

  • (potential) customers of Octiva
  • visitors to the Octiva websites on which this privacy policy is published
  • recipients of newsletters and commercial emails sent by Octiva
  • all other persons who contact Octiva or whose personal data Octiva processes

Types of personal data, purposes and legal basis

Octiva may process personal data that you provide, depending on the context and the services used.

Contact details and service-related personal data

Octiva may use contact details and other relevant personal data to provide products and services,
to invoice these products and services, and to authorize authenticated users in related web and
mobile applications. For display purposes, Octiva may use the display name provided by its identity provider.

These data are processed on the basis of a legal obligation, the performance of a contract,
or a legitimate interest such as security.

Information shared during events and meetings

Business card information, contact details and other personal data shared during events,
seminars and meetings may be used to send invitations, newsletters, updates and other relevant
or requested information.

These data are processed on the basis of consent or a legitimate interest.

Data submitted through forms

Contact details and other personal data submitted through contact forms or other web forms
may be used to provide requested information or to respond to questions.

These data are processed on the basis of consent or a legitimate interest.

Data from public registers

Octiva may obtain personal data from the trade register of the chamber of commerce,
for example to determine who it enters into an agreement with and who is authorized to sign.

These data are processed on the basis of a legal obligation, pre-contractual steps,
or the performance of a contract.

Website, newsletter and email usage data

Octiva may process data collected through its websites, newsletters, commercial emails,
or related technologies. This may include your IP address, browsing behaviour, whether you open
a newsletter or commercial email, the duration of visits, visited sections and click behaviour.

Octiva uses this information mainly to improve its websites, newsletters and commercial emails,
and to carry out and analyse customer satisfaction surveys.

Where required, Octiva asks for prior consent. In other cases, these data may be processed on the
basis of a legitimate interest. For more information about cookies, Octiva refers to its cookie policy.

Processing on the basis of consent

If the processing of personal data is based on consent, you have the right to withdraw that consent
at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Processors

Octiva may engage service providers to process personal data on its behalf. These processors may only
process personal data based on Octiva’s instructions.

Octiva states that it concludes data processing agreements with such processors in accordance with
the requirements of the General Data Protection Regulation.

Examples include providers of infrastructure, hosting, IT support, and third-party services for sending
newsletters and commercial emails.

Third parties

Octiva may share personal data with third parties, including governmental bodies and supervisory authorities,
where this is considered necessary to comply with legal obligations, respond to claims or legal process,
protect rights, property or safety, or investigate or remedy possible violations of terms and policies.

Personal data may also be shared in the context of a partnership, reorganization, merger,
or sale of all or part of the business.

Transfer outside the European Economic Area

Depending on the circumstances, Octiva may transfer personal data to parties located outside the
European Economic Area.

Where necessary, Octiva says it puts appropriate safeguards in place, such as EU Standard Contractual Clauses.

How long do we retain personal data?

Octiva states that personal data is not retained longer than necessary for the purposes for which
it is processed, unless a longer retention period is required by law.

As an example, financial records may be retained for seven years because of tax retention obligations.

Rights regarding your personal data

You have the right to access, correct and remove your personal data. You may also object to the use
of your personal data or request a restriction of processing.

In certain cases, you may request your personal data and transfer them to another party.

Complaints

You have the right to lodge a complaint with the Data Protection Authority regarding the processing
of your personal data by Octiva.

Changes

Octiva may change this privacy policy from time to time and advises visitors to review it regularly.
According to the page, substantial changes will be communicated through the website.