Last updated: September 23, 2024

In this privacy statement, we would like to inform you about how we handle your personal data. Of course, we handle it with care, process no more data than necessary, and fully comply with the rules of the GDPR when processing your personal data.

We process the following personal data

We process personal data that you have provided us with or have given consent for. Therefore, you know exactly which personal data we are referring to.

To execute our agreement and to be able to provide our products and/or services to you, it is necessary for us to receive some personal data from you. Without this data, we unfortunately cannot deliver. Therefore, it is necessary for you to provide us with this data in a timely manner and to have verified that it is correct. It is therefore a necessary processing of your personal data.

The data we store depends on your role and the services you use. Use the arrows to expand:

• Next platform account and user-friendliness
• Data donation software service
• Benchmark (challenge) software service

Your personal data may also be used to create a profile of you. This allows us to better understand who you are, what you need, and how we can best assist you.

This is how we handle your personal data

We may only process your personal data if it is necessary to achieve a legitimate purpose and if we have a valid legal basis for doing so.

We process your personal data for one or more of the following purposes:

When you contact us, it would be helpful if we can respond and therefore have some personal information. We have processed this data in our legitimate interest and will delete it within two years after our last contact moment.

To comply with the agreement to provide services or products to you, we need certain information. We will process this information for the duration of the agreement and for a maximum of five years thereafter.

You have an account with us that you can partially manage yourself. This is usually to fulfill an agreement or with your consent, or it is in our legitimate interest to process your personal data for this purpose. Some data in your account can be managed by you. If you delete this data, we will no longer process it for your account. Furthermore, we will process your personal data in your account for a maximum of five years after the end of the agreement for which the account was necessary, or five years after the deletion of the account, whichever is later.

It is necessary for us to secure our website and prevent hacks, attacks, and unauthorized access to accounts or restricted areas of our website. Sometimes, it is necessary for us to process personal data, such as IP addresses, for this purpose. This is in our legitimate interest, and we will retain the personal data for a maximum of one year.

Permission

For some of these purposes, we first ask for your explicit consent. You also have the right to withdraw your consent at any time. You can do this by sending us an email to [email protected]. The processing of your personal data remains valid until you have sent us this email.

Legitimate interest

Often we have a legitimate interest in processing your personal data. This means that we have considered both your privacy interest and our own interests and interests related to science. Therefore, we only process your personal data if it is necessary to protect our interest. We make this assessment for each purpose, always according to the interpretation of the Dutch Data Protection Authority.