1. Introduction

This document outlines the General Data Protection Regulation (GDPR) regulations that apply to ReportRight B.V., a registered organization under the Netherlands Chamber of Commerce (KVK) with the number 89258266. The GDPR is a comprehensive data protection law that sets the guidelines and requirements for the processing of personal data within the European Union (EU) and the European Economic Area (EEA). It aims to protect the fundamental rights and freedoms of individuals regarding the processing of their personal data.

2. Data Controller and Data Protection Officer

ReportRight B.V. acts as the data controller for the personal data it processes. As the data controller, ReportRight B.V. has the responsibility for determining the purposes and means of the processing of personal data.

For any questions regarding the GDPR, please contact info@reportright.nl.

3. Lawfulness, Fairness, and Transparency

ReportRight B.V. acknowledges the principles of lawfulness, fairness, and transparency in its data processing activities. Personal data is processed only when there is a lawful basis for processing, such as consent, the performance of a contract, compliance with a legal obligation, protection of vital interests, the performance of a task carried out in the public interest or in the exercise of official authority, or legitimate interests pursued by the data controller or a third party.

The organization ensures that individuals are provided with clear and concise information about the processing of their personal data through transparent privacy notices and policies.

4. Purpose Limitation

ReportRight B.V. collects and processes personal data for specific and legitimate purposes. The organization clearly defines these purposes and ensures that personal data is not processed in a manner that is incompatible with these purposes. Personal data is retained for no longer than necessary to fulfill the specified purposes or as required by applicable laws.

5. Data Minimization

ReportRight B.V. adopts the principle of data minimization by collecting and processing only the personal data that is necessary for the intended purposes. The organization ensures that personal data is adequate, relevant, and limited to what is necessary for the specified purposes.

6. Accuracy

ReportRight B.V. takes reasonable steps to ensure the accuracy of the personal data it processes. The organization implements appropriate measures to keep personal data up to date and correct any inaccuracies promptly.

7. Storage Limitation

ReportRight B.V. stores personal data only for the duration necessary to fulfill the purposes for which it was collected or as required by legal obligations. The organization implements appropriate retention policies and procedures to ensure that personal data is securely and permanently deleted when no longer needed.

8. Security

ReportRight B.V. maintains appropriate technical and organizational measures to ensure the security of personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. The organization regularly assesses and updates its security measures to address emerging risks and protect the confidentiality, integrity, and availability of personal data.

9. Data Subject Rights

ReportRight B.V. respects the rights of data subjects as provided under the GDPR. Individuals have the right to access their personal data, rectify inaccuracies, erase personal data (in certain circumstances), restrict processing, object to processing, and the right to data portability. The organization has implemented procedures to facilitate the exercise of these rights and responds to data subject requests in a timely manner.

10. International Data Transfers

If ReportRight B.V. transfers personal data to countries outside the EU/EEA, the organization ensures that appropriate safeguards are in place to protect the personal data, such as the use of standard contractual clauses, binding corporate rules, or adherence to an approved code of conduct or certification mechanism.

11. Breach Notification

ReportRight B.V. has established procedures for promptly detecting, assessing, and reporting personal data breaches to the appropriate supervisory authority and, when necessary, to affected data subjects. The organization maintains records of all personal data breaches, including their impact and the remedial actions taken.

12. Conclusion

ReportRight B.V. is committed to complying with the GDPR regulations to ensure the protection of personal data. This document provides an overview of the organization’s approach to data protection, but it is not exhaustive. Further details can be found in ReportRight B.V.’s privacy policies and procedures, which are available upon request or on the organization’s website.

By adhering to the GDPR regulations, ReportRight B.V. aims to foster trust, transparency, and accountability in its data processing activities and maintain the privacy rights of individuals.